last executing test programs: 6m44.946145043s ago: executing program 32 (id=327): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m33.361478655s ago: executing program 33 (id=351): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 4m55.109881994s ago: executing program 34 (id=553): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x1a3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x129502, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000300)={0xc, r2, 0x0, 0x0, 0x1, 0x7}) 3m47.964364393s ago: executing program 35 (id=631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x400000a0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 3m12.132836343s ago: executing program 36 (id=688): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x20000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3m11.631806425s ago: executing program 37 (id=717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x409}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24014004) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a3000000000380003"], 0xe4}}, 0x0) 3m1.468808363s ago: executing program 7 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x23d}], 0x1}}], 0x1, 0x4000000) ptrace(0x10, 0x1) 3m0.36389771s ago: executing program 7 (id=744): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140), 0x0) socket(0x2, 0x80805, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m53.860040356s ago: executing program 7 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4/file7\x00', 0x0, 0x50) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 2m52.635722305s ago: executing program 7 (id=755): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) 2m49.865640689s ago: executing program 7 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000680), 0x2, r3}, 0x38) 2m47.514353671s ago: executing program 7 (id=764): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000001380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) 2m46.261891864s ago: executing program 38 (id=764): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000001380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0) 2m41.258954568s ago: executing program 0 (id=779): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) 2m40.14915853s ago: executing program 0 (id=781): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2m39.800564146s ago: executing program 0 (id=783): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xec, 0x48e, &(0x7f0000000e00)="$eJzs3EtsVFUfAPD/vX0BH3ytiA8QtIpG4qOl5SELNxpNXGhioguMq9oWRAo1tCZCGkVjcGlI3BuXJu5NXOHGqAtj4lb3hoSYbkRXY87MvWVoZ0qHPqY4v18y03Pm3Jtz/vfcM3PvOdMJoGMNpqcsYntE/BYR/VmDDQZrf67Pz43/PT83nkWl8tqfWdot/pqfGy83LXf9Xy1TqUT0pWRfg3ovvRkxNjU1ea7ID8+eeXd45vyFp0+dGTs5eXLy7OixY4cP7es9OnpkVfHlxd/+1NY9H0zv3f3SG5dfGT9++a0fv06vby/K6+O4LSnaRQZrR3exh9LTY6uqbFP5OT3tqHsh626+8dAGNIiV64qI1F091fHfH12xdaGsP178uK2NA9ZVpVKpNPp8LlysAP9hWbS4Q3fxtgHc4coP+nT/Wz426NJjU7j2XO0GKMV9fX5u/JO3y5LuhbmDdG/Uu071D0bE8Yv/fJEesRbzEAAAt3AlXf881ej6L49767b7f7GGMhARd0XEzoi4OyJ2RcQ9EdVt74uI+1usf/EKydLrn/zqbQW2Qun679libat8FPWWmwx0Fbkd1fh7shOnpiYPFsfkQPT0pfzIMnV898Kvn5XpLYvK6q//0iPVX14LFu242r1ogm5ibHZstXGXrn0Usac7xX/jGNRKsiiXcbKI2B0Re26zjlNPfLW3WdnN8V+JpfEvY5l1ppWqfBnxeK3/L8ZN8d/oqqzp+uTIM0dHjwxvianJg8PlWbHUT79cerVZ/bfu//WV+n9bw/N/YSF4INsSMXP+wunqeu1M63Vc+v3TujF98wLzYET+TUTL539v9no1Xd6XvT82O3tuJKI3e3np66M39i3z5fYp/gP7G4//nXUtfiAi0km8LyIeLBZxU989HBGPRMT+ZeL/4flH32lW1rz/l5mVX0Mp/olb9X/U93/ria7T33/bevyl1P+Hq6kDxSsref9baQNXc+wAAADgTpFXvwOf5UML6TwfGqp9h39XbMunpmdmnzwx/d7Zidp35QeiJy9nuvrr5kNHirnhMj+6KH+omDf+vGtrNT80Pj010e7gocOlcb59oJauH//JH11NdlqDeXdgkzCeoXMZ/9C5jH/oXMY/dC7jHzpXo/H/YRvaAWw8n//QuYx/6FzGP3Qu4x86UtP/jc9b+5f/WMXvA6x9ovzthM3SnjYltq5nFZG3P8DmifJX7DdLe1aR6F7v07ivYVEb35QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW0L8BAAD//1iv1zQ=") setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 2m38.381470121s ago: executing program 0 (id=785): prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x100008f}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) 2m38.20000423s ago: executing program 0 (id=786): setresuid(0xee00, 0xee01, 0x0) setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) 2m36.900846575s ago: executing program 0 (id=789): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sync() write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2410}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 2m21.691885646s ago: executing program 39 (id=789): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) sync() write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x2410}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 2m2.626959218s ago: executing program 9 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) unshare(0x2040400) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m0.187855916s ago: executing program 9 (id=843): mkdirat(0xffffffffffffff9c, 0x0, 0x63) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m59.567273365s ago: executing program 9 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x96) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2049c1, 0x40) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r4, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0xfdfe, 0x100000000000000}]) 1m55.782480503s ago: executing program 9 (id=849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m54.659151755s ago: executing program 40 (id=849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m23.386142595s ago: executing program 3 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) 1m22.277089324s ago: executing program 3 (id=911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)=0xa4) 1m20.086922339s ago: executing program 3 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x8004550f, 0xffffffffffffffff) 1m18.836833381s ago: executing program 3 (id=918): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x523, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x2, 0x9}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x7, 0x7, 0x0, 0x70bf2a, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x2, 0x4, 0x9, 0xd6}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}]}, 0x38}, 0x1, 0x7}, 0x4004080) 1m17.603826432s ago: executing program 3 (id=921): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0xa0) mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0) 1m14.259477333s ago: executing program 3 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0xa5c0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x18c6) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10) 1m12.118699742s ago: executing program 41 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0xa5c0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x18c6) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10) 37.152485926s ago: executing program 1 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)='*', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58a190f0", "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) 35.88883411s ago: executing program 1 (id=992): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0xcdf, &(0x7f00000005c0)={0x0, 0x5883, 0x0, 0x0, 0x85}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 33.385581155s ago: executing program 1 (id=995): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xb}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {0x20000}, {0x0, 0x75}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 30.38045409s ago: executing program 1 (id=998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) 23.924227043s ago: executing program 1 (id=1009): syz_open_dev$usbmon(0x0, 0x9000000000000000, 0x1199c3) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) 22.222500624s ago: executing program 8 (id=809): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x9e, 0x0, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd, 0x80000000000006, &(0x7f0000000380)}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) 22.220015484s ago: executing program 1 (id=1013): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x0, 0x1f9}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x40080) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x1c3e00, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21.086565132s ago: executing program 2 (id=1000): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r2, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 17.529466637s ago: executing program 4 (id=1004): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r0 = fsopen(&(0x7f0000000280)='rpc_pipefs\x00', 0x1) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) timerfd_settime(r2, 0x2, &(0x7f0000000180)={{0x0, 0x3938700}, {r3, r4+10000000}}, 0x0) timerfd_gettime(r1, 0x0) timerfd_settime(r2, 0x2, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x4) 16.956775426s ago: executing program 4 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x87}) syz_open_dev$vim2m(0x0, 0x800, 0x2) 15.927380315s ago: executing program 4 (id=1007): socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd_index=0x7fffffd, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 15.698732647s ago: executing program 4 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 12.1407809s ago: executing program 4 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455cb, 0x400000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0x1018084, &(0x7f000000cfc0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f696e6c696e655f646174612c6261636b67726f756e645f67633d6f6e2c6661756c745f747970653d30303030303030303030303030303030303030362c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6e6f696e6c696e655f78617474722c6a71666d743d7666736f6c642c6e6f61636c2c00a1a75ac439087a5b11ab7891dd39dd9bc0d7"], 0x1, 0x5509, &(0x7f00000079c0)="$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") read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x8, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) 11.94670238s ago: executing program 8 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 11.43334727s ago: executing program 6 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 11.406304295s ago: executing program 2 (id=1018): r0 = getpid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f0000000f00)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x850}}], 0x2, 0x10) r3 = syz_pidfd_open(r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="09000000010001", 0x7) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7, 0x9) setns(r3, 0x8020000) openat$cgroup_devices(r5, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) 9.373976173s ago: executing program 8 (id=1019): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.070345395s ago: executing program 6 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020601030000000000000000070000000900020073797a30000000000500010006000000050005000000000005000400000000000c00078008000840000000b60d000300686173683a6d616300"], 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x488d0}, 0x44004) 8.941654163s ago: executing program 2 (id=1021): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/netlink\x00') pread64(r3, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 8.940963505s ago: executing program 5 (id=1022): pipe(&(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c0001800600060065580000100002800c001780080001800400", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 8.873473258s ago: executing program 4 (id=1023): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c", 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) io_setup(0xf, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) readv(r3, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) 7.810081876s ago: executing program 6 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x1, 0x8, 0x4932, 0x82, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x20000}, 0x6e) 7.630986521s ago: executing program 8 (id=1025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000240)={0x32, @local, 0x4e21, 0x4, 'lc\x00', 0x11, 0xe, 0x8}, 0x2c) 5.801063274s ago: executing program 42 (id=1013): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x0, 0x1f9}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x40080) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x1c3e00, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.767507525s ago: executing program 8 (id=1027): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)="ed98"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 5.766494106s ago: executing program 2 (id=1028): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rename(0x0, &(0x7f00000001c0)='./file0/file1\x00') open(0x0, 0x80042, 0x43) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 5.765406987s ago: executing program 5 (id=1029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.978763s ago: executing program 6 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000300)=""/146, &(0x7f0000000100)=0x92) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) r4 = open(0x0, 0xc00, 0x48) getdents(r4, 0x0, 0x0) 3.434459563s ago: executing program 8 (id=1031): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) io_setup(0xea, &(0x7f00000000c0)) io_submit(0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0]) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x9}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 3.432555043s ago: executing program 5 (id=1032): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x810) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) 3.255335574s ago: executing program 2 (id=1033): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="bd", 0xf4240}], 0x1}}], 0x1, 0x41) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002400)={0x2020}, 0xfffffeef) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xe1, 0x9, 0x40, 0x244b, 0x6, 0x4}) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x4) 3.126363589s ago: executing program 6 (id=1034): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x0, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0xffa6, 0x880}, 0x0) 3.074913239s ago: executing program 5 (id=1035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r4, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) 1.859478204s ago: executing program 5 (id=1036): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x8) 257.688575ms ago: executing program 6 (id=1037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) 256.982893ms ago: executing program 5 (id=1038): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) dup(0xffffffffffffffff) io_uring_enter(r2, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 0s ago: executing program 2 (id=1039): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x28, 0x803, 0x0) syz_open_dev$video(0x0, 0xc000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) kernel console output (not intermixed with test programs): lave_0 added [ 328.915715][ T5952] cdc_wdm 3-1:1.0: Unknown control protocol [ 329.010936][ T30] audit: type=1326 audit(1757626272.888:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aef8eba9 code=0x7ffc0000 [ 329.011975][ T5952] usb 3-1: USB disconnect, device number 2 [ 329.102089][ T30] audit: type=1326 audit(1757626272.888:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aef8eba9 code=0x7ffc0000 [ 329.139799][ T30] audit: type=1326 audit(1757626272.888:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97aef8eba9 code=0x7ffc0000 [ 329.215487][ T30] audit: type=1326 audit(1757626272.888:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aef8eba9 code=0x7ffc0000 [ 329.239144][ T30] audit: type=1326 audit(1757626272.888:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97aef8eba9 code=0x7ffc0000 [ 329.261602][ T30] audit: type=1326 audit(1757626272.888:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aef8eba9 code=0x7ffc0000 [ 329.312183][ T30] audit: type=1326 audit(1757626272.888:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97aef8eba9 code=0x7ffc0000 [ 329.385389][ T30] audit: type=1326 audit(1757626272.888:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8004 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f97aef8eba9 code=0x7ffc0000 [ 329.399125][ T7739] team0: Port device team_slave_1 added [ 329.736443][ T5952] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 329.924605][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 329.947231][ T5952] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.992023][ T5952] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 330.022818][ T5952] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 330.052603][ T7739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.076934][ T7739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.103877][ T5952] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 330.139945][ T5952] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 330.275229][ T5866] Bluetooth: hci2: command tx timeout [ 330.290016][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.337619][ T7739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.370160][ T5952] usb 3-1: can't set config #1, error -71 [ 330.450852][ T7739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.478365][ T5952] usb 3-1: USB disconnect, device number 3 [ 330.534403][ T7739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.653752][ T7739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.708021][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.726634][ T7815] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.763746][ T7815] bridge_slave_0: entered allmulticast mode [ 330.805538][ T7815] bridge_slave_0: entered promiscuous mode [ 330.826084][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.834472][ T7815] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.842250][ T7815] bridge_slave_1: entered allmulticast mode [ 330.860788][ T7815] bridge_slave_1: entered promiscuous mode [ 332.150776][ T7815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.355156][ T5866] Bluetooth: hci2: command tx timeout [ 332.545569][ T7815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.440828][ T7739] hsr_slave_0: entered promiscuous mode [ 333.455255][ T7739] hsr_slave_1: entered promiscuous mode [ 333.461385][ T7739] debugfs: 'hsr0' already exists in 'hsr' [ 333.479446][ T7739] Cannot create hsr debugfs directory [ 333.826917][ T7815] team0: Port device team_slave_0 added [ 333.935537][ T7815] team0: Port device team_slave_1 added [ 334.444645][ T5866] Bluetooth: hci2: command tx timeout [ 335.656174][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.701469][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.765403][ T7815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.515278][ T5866] Bluetooth: hci2: command tx timeout [ 336.598526][ T7815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.618246][ T7815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.684037][ T7815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.960901][ T7815] hsr_slave_0: entered promiscuous mode [ 337.983425][ T7815] hsr_slave_1: entered promiscuous mode [ 338.000359][ T7815] debugfs: 'hsr0' already exists in 'hsr' [ 338.014435][ T7815] Cannot create hsr debugfs directory [ 338.160381][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 338.727668][ T8097] loop2: detected capacity change from 0 to 256 [ 338.793665][ T8097] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 339.320836][ T8104] loop3: detected capacity change from 0 to 256 [ 339.360868][ T8104] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 340.237217][ T8104] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 340.639776][ T8104] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 341.462165][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.471848][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.481425][ T7990] bridge_slave_0: entered allmulticast mode [ 341.491624][ T7990] bridge_slave_0: entered promiscuous mode [ 341.635054][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.662180][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.702228][ T7990] bridge_slave_1: entered allmulticast mode [ 341.721902][ T7990] bridge_slave_1: entered promiscuous mode [ 342.827915][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.882714][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.230969][ T8141] loop2: detected capacity change from 0 to 1764 [ 344.143276][ T5879] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.161192][ T5879] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.170873][ T5879] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.179300][ T5879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.187314][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.259252][ T7990] team0: Port device team_slave_0 added [ 344.288137][ T7990] team0: Port device team_slave_1 added [ 344.949579][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.067106][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.141633][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.200662][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 345.225077][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 345.236535][ T8166] ceph: No mds server is up or the cluster is laggy [ 345.370174][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.407483][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.478615][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.521094][ T5973] libceph: connect (1)[c::]:6789 error -101 [ 345.550939][ T5973] libceph: mon0 (1)[c::]:6789 connect error [ 345.589352][ T8169] loop2: detected capacity change from 0 to 2048 [ 345.720832][ T7739] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.886955][ T8169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.180352][ T5884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.204145][ T7449] bridge_slave_1: left allmulticast mode [ 346.212538][ T7449] bridge_slave_1: left promiscuous mode [ 346.220305][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.255079][ T7449] bridge_slave_0: left allmulticast mode [ 346.260782][ T7449] bridge_slave_0: left promiscuous mode [ 346.275443][ T5866] Bluetooth: hci0: command tx timeout [ 346.315316][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.376945][ T7449] bridge_slave_1: left allmulticast mode [ 346.382626][ T7449] bridge_slave_1: left promiscuous mode [ 346.447971][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.476364][ T7449] bridge_slave_0: left allmulticast mode [ 346.482127][ T7449] bridge_slave_0: left promiscuous mode [ 346.497051][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.514748][ T7449] bridge_slave_1: left allmulticast mode [ 346.522367][ T7449] bridge_slave_1: left promiscuous mode [ 346.528824][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.551524][ T7449] bridge_slave_0: left allmulticast mode [ 346.557865][ T7449] bridge_slave_0: left promiscuous mode [ 346.563664][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.434893][ T7449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.452843][ T7449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.505941][ T7449] bond0 (unregistering): Released all slaves [ 348.262661][ T7449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.316955][ T7449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.329599][ T7449] bond0 (unregistering): Released all slaves [ 348.354755][ T5866] Bluetooth: hci0: command tx timeout [ 349.534866][ T7449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.558527][ T7449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.590007][ T7449] bond0 (unregistering): Released all slaves [ 349.625937][ T7739] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.651398][ T7739] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.816294][ T7990] hsr_slave_0: entered promiscuous mode [ 349.833228][ T7990] hsr_slave_1: entered promiscuous mode [ 349.856364][ T7990] debugfs: 'hsr0' already exists in 'hsr' [ 349.979255][ T7990] Cannot create hsr debugfs directory [ 350.003941][ T7739] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.214466][ T7449] hsr_slave_0: left promiscuous mode [ 350.245807][ T7449] hsr_slave_1: left promiscuous mode [ 350.267321][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.316689][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.352152][ T7449] hsr_slave_0: left promiscuous mode [ 350.363276][ T7449] hsr_slave_1: left promiscuous mode [ 350.464725][ T5866] Bluetooth: hci0: command tx timeout [ 350.475898][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.516473][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.614374][ T7449] hsr_slave_0: left promiscuous mode [ 350.644303][ T7449] hsr_slave_1: left promiscuous mode [ 350.650792][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.671645][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.544518][ T5879] Bluetooth: hci0: command tx timeout [ 352.616064][ T7449] team0 (unregistering): Port device team_slave_1 removed [ 352.735533][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 352.735555][ T30] audit: type=1326 audit(1757626296.828:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6ef8eba9 code=0x7ffc0000 [ 352.766284][ T7449] team0 (unregistering): Port device team_slave_0 removed [ 352.796722][ T30] audit: type=1326 audit(1757626296.868:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6ef8eba9 code=0x7ffc0000 [ 353.041956][ T30] audit: type=1326 audit(1757626296.868:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fbd6ef8eba9 code=0x7ffc0000 [ 353.066734][ T30] audit: type=1326 audit(1757626296.868:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6ef8eba9 code=0x7ffc0000 [ 353.105142][ T30] audit: type=1326 audit(1757626296.868:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6ef8eba9 code=0x7ffc0000 [ 353.121389][ T8225] loop2: detected capacity change from 0 to 128 [ 353.127996][ T30] audit: type=1326 audit(1757626296.868:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd6ef8eba9 code=0x7ffc0000 [ 353.243412][ T8225] EXT4-fs (loop2): Test dummy encryption mode enabled [ 353.609352][ T8225] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.749805][ T8225] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.772115][ T30] audit: type=1326 audit(1757626296.868:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6ef8eba9 code=0x7ffc0000 [ 353.864879][ T30] audit: type=1326 audit(1757626296.888:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.2.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6ef8eba9 code=0x7ffc0000 [ 353.916886][ T8225] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 354.039800][ T5884] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.512869][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.524755][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.532586][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.541235][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.554919][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.659559][ T7449] team0 (unregistering): Port device team_slave_1 removed [ 355.768253][ T7449] team0 (unregistering): Port device team_slave_0 removed [ 356.602928][ T7449] team0 (unregistering): Port device team_slave_1 removed [ 356.633180][ T7449] team0 (unregistering): Port device team_slave_0 removed [ 356.847456][ T7739] kthread_run failed with err -4 [ 357.635271][ T5866] Bluetooth: hci4: command tx timeout [ 358.559979][ T8263] Bluetooth: MGMT ver 1.23 [ 358.987723][ T7815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 359.035959][ T8146] chnl_net:caif_netlink_parms(): no params data found [ 359.144639][ T7815] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 359.714394][ T5866] Bluetooth: hci4: command tx timeout [ 359.956030][ T7815] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 360.027482][ T7815] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 361.121964][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.130581][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.139979][ T8146] bridge_slave_0: entered allmulticast mode [ 361.159373][ T8146] bridge_slave_0: entered promiscuous mode [ 361.222695][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.236102][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.243397][ T8146] bridge_slave_1: entered allmulticast mode [ 361.278412][ T8146] bridge_slave_1: entered promiscuous mode [ 361.343991][ T8239] chnl_net:caif_netlink_parms(): no params data found [ 361.805079][ T5866] Bluetooth: hci4: command tx timeout [ 362.100637][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.180666][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.021520][ T5866] Bluetooth: hci4: command tx timeout [ 364.029222][ T8146] team0: Port device team_slave_0 added [ 364.078528][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.108461][ T7815] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.337214][ T8146] team0: Port device team_slave_1 added [ 364.894950][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.902160][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.994984][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.017536][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.030974][ T8239] bridge_slave_0: entered allmulticast mode [ 365.050274][ T8239] bridge_slave_0: entered promiscuous mode [ 365.062892][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.084708][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.093844][ T8239] bridge_slave_1: entered allmulticast mode [ 365.111899][ T8239] bridge_slave_1: entered promiscuous mode [ 365.139050][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.165521][ T8351] loop2: detected capacity change from 0 to 1024 [ 365.177692][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.312674][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.976991][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.983968][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.044382][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.129407][ T7990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.202843][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.210023][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.872548][ T7990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.938455][ T7990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 370.049475][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.058975][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.069553][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.082977][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.094596][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.097012][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.140225][ T7990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 370.209305][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.293083][ T8239] team0: Port device team_slave_0 added [ 371.628993][ T8239] team0: Port device team_slave_1 added [ 371.872690][ T8146] hsr_slave_0: entered promiscuous mode [ 371.980349][ T8146] hsr_slave_1: entered promiscuous mode [ 372.076470][ T8146] debugfs: 'hsr0' already exists in 'hsr' [ 372.153355][ T8146] Cannot create hsr debugfs directory [ 372.195809][ T5879] Bluetooth: hci1: command tx timeout [ 372.487952][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.504721][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.538439][ T8239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.793959][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.802217][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.873814][ T8239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.727648][ T8239] hsr_slave_0: entered promiscuous mode [ 373.735159][ T8239] hsr_slave_1: entered promiscuous mode [ 373.741515][ T8239] debugfs: 'hsr0' already exists in 'hsr' [ 373.747676][ T8239] Cannot create hsr debugfs directory [ 373.933995][ T7449] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.084931][ T7449] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.215176][ T7449] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.275078][ T5879] Bluetooth: hci1: command tx timeout [ 374.399784][ T7449] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.623637][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.639042][ T8376] chnl_net:caif_netlink_parms(): no params data found [ 374.741883][ T8146] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 374.868520][ T8146] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 374.972329][ T8146] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 374.993475][ T8146] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 375.118302][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.125830][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.132967][ T8376] bridge_slave_0: entered allmulticast mode [ 375.142489][ T8376] bridge_slave_0: entered promiscuous mode [ 375.181310][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.188808][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.196514][ T8376] bridge_slave_1: entered allmulticast mode [ 375.204040][ T8376] bridge_slave_1: entered promiscuous mode [ 375.216230][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.223517][ T7449] bridge_slave_1: left allmulticast mode [ 375.229766][ T7449] bridge_slave_1: left promiscuous mode [ 375.236237][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.248029][ T7449] bridge_slave_0: left allmulticast mode [ 375.254223][ T7449] bridge_slave_0: left promiscuous mode [ 375.260230][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.272635][ T7449] bridge_slave_1: left allmulticast mode [ 375.278525][ T7449] bridge_slave_1: left promiscuous mode [ 375.284314][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.294547][ T7449] bridge_slave_0: left allmulticast mode [ 375.300212][ T7449] bridge_slave_0: left promiscuous mode [ 375.306581][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.490848][ T7449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.506790][ T7449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.518185][ T7449] bond0 (unregistering): Released all slaves [ 375.810243][ T7449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.819232][ T7449] bond_slave_0: left allmulticast mode [ 375.830137][ T7449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.839502][ T7449] bond_slave_1: left allmulticast mode [ 375.846526][ T7449] bond0 (unregistering): Released all slaves [ 375.926058][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.933223][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.019133][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.026319][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.080339][ T8376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.093680][ T8376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.210082][ T8376] team0: Port device team_slave_0 added [ 376.298362][ T8376] team0: Port device team_slave_1 added [ 376.358956][ T5879] Bluetooth: hci1: command tx timeout [ 376.410988][ T7449] hsr_slave_0: left promiscuous mode [ 376.423642][ T7449] hsr_slave_1: left promiscuous mode [ 376.431471][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.446765][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.467126][ T7449] hsr_slave_0: left promiscuous mode [ 376.473250][ T7449] hsr_slave_1: left promiscuous mode [ 376.493902][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.504108][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.520244][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.530474][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.570111][ T7449] veth1_macvtap: left promiscuous mode [ 376.576859][ T7449] veth0_macvtap: left allmulticast mode [ 376.583136][ T7449] veth0_macvtap: left promiscuous mode [ 376.589094][ T7449] veth1_vlan: left promiscuous mode [ 376.595224][ T7449] veth0_vlan: left promiscuous mode [ 377.028617][ T7449] team0 (unregistering): Port device team_slave_1 removed [ 377.059822][ T7449] team0 (unregistering): Port device team_slave_0 removed [ 377.623732][ T7449] team0 (unregistering): Port device team_slave_1 removed [ 377.667364][ T7449] team0 (unregistering): Port device team_slave_0 removed [ 377.960560][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.978791][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.147811][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.156868][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.183181][ T8376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.201655][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.208695][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.235821][ T8376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.343008][ T8239] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 378.387025][ T8239] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 378.402595][ T8376] hsr_slave_0: entered promiscuous mode [ 378.419748][ T8376] hsr_slave_1: entered promiscuous mode [ 378.433277][ T8376] debugfs: 'hsr0' already exists in 'hsr' [ 378.441084][ T5879] Bluetooth: hci1: command tx timeout [ 378.442529][ T8376] Cannot create hsr debugfs directory [ 378.459713][ T8239] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 378.475486][ T8239] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.696591][ T8146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.838934][ T8146] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.935925][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.943086][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.016386][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.023547][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.181668][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.220600][ T7449] IPVS: stop unused estimator thread 0... [ 379.661595][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.723001][ T8239] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.783529][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.790717][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.840429][ T36] bridge_slave_1: left allmulticast mode [ 379.852836][ T36] bridge_slave_1: left promiscuous mode [ 379.875175][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.912484][ T36] bridge_slave_0: left allmulticast mode [ 379.929849][ T36] bridge_slave_0: left promiscuous mode [ 379.942175][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.499732][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.512090][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.529624][ T36] bond0 (unregistering): Released all slaves [ 380.551978][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.559163][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.685678][ T36] hsr_slave_0: left promiscuous mode [ 380.691753][ T36] hsr_slave_1: left promiscuous mode [ 380.698412][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.707215][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.062907][ T36] team0 (unregistering): Port device team_slave_1 removed [ 381.123603][ T36] team0 (unregistering): Port device team_slave_0 removed [ 381.658949][ T8146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.722150][ T8239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.755300][ T8239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.786291][ T8376] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 381.873416][ T8376] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 381.891597][ T8376] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 381.920842][ T7990] veth0_vlan: entered promiscuous mode [ 381.956417][ T8376] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 382.030295][ T7990] veth1_vlan: entered promiscuous mode [ 382.253411][ T7990] veth0_macvtap: entered promiscuous mode [ 382.328895][ T7990] veth1_macvtap: entered promiscuous mode [ 382.403257][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.451784][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.500567][ T1002] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.552753][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.564033][ T1002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.582770][ T1002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.630239][ T1002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.703285][ T8146] veth0_vlan: entered promiscuous mode [ 382.730395][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.802800][ T8146] veth1_vlan: entered promiscuous mode [ 382.923366][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.948717][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.967011][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.999004][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.006165][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.027903][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.035083][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.071305][ T8146] veth0_macvtap: entered promiscuous mode [ 383.104459][ T7444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.113544][ T7444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.147781][ T8146] veth1_macvtap: entered promiscuous mode [ 383.443617][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.456342][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.498543][ T8376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.096944][ T2975] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.223540][ T2975] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.233884][ T2975] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.351879][ T2975] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.742488][ T8239] veth0_vlan: entered promiscuous mode [ 385.858597][ T7449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.858622][ T7449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.788731][ T8239] veth1_vlan: entered promiscuous mode [ 388.012868][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.026493][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.202243][ T8239] veth0_macvtap: entered promiscuous mode [ 388.436591][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.151356][ T8239] veth1_macvtap: entered promiscuous mode [ 389.398306][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.488212][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.697017][ T7283] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.770690][ T7283] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.925273][ T3478] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.038015][ T7444] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.068932][ T8631] loop6: detected capacity change from 0 to 2560 [ 392.116363][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.204444][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.212402][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.352461][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.435732][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.443797][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.525721][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.533688][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.551910][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.753937][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.778753][ T8631] ldm_validate_partition_table(): Disk read failed. [ 392.829109][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.626911][ T8631] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.694792][ T8631] Dev loop6: unable to read RDB block 0 [ 393.700996][ T8631] loop6: unable to read partition table [ 393.780314][ T8631] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 393.840005][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.904338][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.225341][ T8376] veth0_vlan: entered promiscuous mode [ 394.284022][ T8376] veth1_vlan: entered promiscuous mode [ 394.591310][ T8376] veth0_macvtap: entered promiscuous mode [ 395.595910][ T8376] veth1_macvtap: entered promiscuous mode [ 396.217314][ T8680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.632'. [ 396.952168][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.592002][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.414500][ T7449] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.728344][ T5879] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 400.895293][ T7444] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.961169][ T7444] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.170314][ T7444] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.448110][ T7455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.475628][ T7455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.856151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.864011][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.697885][ T8716] syzkaller0: entered promiscuous mode [ 403.729494][ T8716] syzkaller0: entered allmulticast mode [ 416.085376][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 416.101175][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 416.111470][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 416.137035][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 416.154597][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 418.408524][ T5879] Bluetooth: hci6: command tx timeout [ 420.871776][ T5879] Bluetooth: hci6: command tx timeout [ 423.242562][ T5879] Bluetooth: hci6: command tx timeout [ 425.519974][ T5879] Bluetooth: hci6: command tx timeout [ 425.624824][ T2975] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.297467][ T973] IPVS: starting estimator thread 0... [ 428.921971][ T2975] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.974371][ T8910] IPVS: using max 24 ests per chain, 57600 per kthread [ 431.862542][ T2975] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.916664][ T8945] loop2: detected capacity change from 0 to 512 [ 433.250859][ T2975] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.314501][ T8945] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 433.322634][ T8945] System zones: 0-7 [ 433.338027][ T8834] chnl_net:caif_netlink_parms(): no params data found [ 433.573163][ T8945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.989082][ T5884] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.222094][ T8834] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.231029][ T8970] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 436.780273][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.794005][ T8834] bridge_slave_0: entered allmulticast mode [ 436.805010][ T8834] bridge_slave_0: entered promiscuous mode [ 436.856222][ T8834] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.891667][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.929536][ T8834] bridge_slave_1: entered allmulticast mode [ 436.961902][ T8834] bridge_slave_1: entered promiscuous mode [ 437.339329][ T8978] netfs: Couldn't get user pages (rc=-14) [ 437.399256][ T8834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.461871][ T8834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.716848][ T2975] bridge_slave_1: left allmulticast mode [ 437.748338][ T2975] bridge_slave_1: left promiscuous mode [ 437.761970][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.792167][ T2975] bridge_slave_0: left allmulticast mode [ 437.832685][ T2975] bridge_slave_0: left promiscuous mode [ 437.853900][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.595101][ T8983] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 439.404557][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.410903][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.873075][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.639932][ T9005] loop2: detected capacity change from 0 to 512 [ 441.677408][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.782063][ T9005] EXT4-fs: Ignoring removed oldalloc option [ 441.798833][ T9005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 441.846410][ T2975] bond0 (unregistering): Released all slaves [ 441.980510][ T9005] EXT4-fs (loop2): 1 truncate cleaned up [ 442.046359][ T9005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.388357][ T9005] loop2: detected capacity change from 512 to 64 [ 442.423916][ T8834] team0: Port device team_slave_0 added [ 442.465954][ T30] audit: type=1800 audit(1757626642.565:34): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.708" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 442.641798][ T5884] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 442.704958][ T5884] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 442.751470][ T8834] team0: Port device team_slave_1 added [ 442.997673][ T8365] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.752294][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.772348][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.852507][ T8834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.693414][ T8834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.710688][ T8834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.757233][ T8834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.097799][ T2975] hsr_slave_0: left promiscuous mode [ 446.132755][ T2975] hsr_slave_1: left promiscuous mode [ 446.145409][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.152811][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.194876][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.224782][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.369411][ T2975] veth1_macvtap: left promiscuous mode [ 446.401547][ T2975] veth0_macvtap: left promiscuous mode [ 446.451184][ T9030] loop7: detected capacity change from 0 to 2048 [ 446.458039][ T2975] veth1_vlan: left promiscuous mode [ 446.463372][ T2975] veth0_vlan: left promiscuous mode [ 446.555930][ T9030] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051 [ 447.804030][ T9030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.096376][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.108546][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.117885][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.126793][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.134664][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.852939][ T9056] TCP: TCP_TX_DELAY enabled [ 451.234644][ T5879] Bluetooth: hci0: command tx timeout [ 451.354739][ T5886] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.364628][ T5886] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.372509][ T5886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.381578][ T5886] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.398711][ T5886] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.678395][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 453.339534][ T5866] Bluetooth: hci0: command tx timeout [ 453.496281][ T5866] Bluetooth: hci5: command tx timeout [ 455.018369][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 455.086106][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 455.395553][ T5866] Bluetooth: hci0: command tx timeout [ 455.575271][ T5866] Bluetooth: hci5: command tx timeout [ 455.976987][ T8834] hsr_slave_0: entered promiscuous mode [ 455.989085][ T8834] hsr_slave_1: entered promiscuous mode [ 455.996064][ T8834] debugfs: 'hsr0' already exists in 'hsr' [ 456.002072][ T8834] Cannot create hsr debugfs directory [ 456.025163][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.7.735'. [ 457.004508][ T9109] ptrace attach of "./syz-executor exec"[8376] was attempted by "   jC*p\x1bŖ 3Hej$x2e|yOkYxMxOB B͒GMP%OޜtĎ\x0dT[g]LJ;2$|gP\x22̏R׾{Vd,ru\x0da1i-6M+\x07}T#a5Zd0ƌ{w$)i%L>Q,oQeꮰHrʏ.ҿɷ0JVw^{'ǁo_8v:7>LpF,Z3R<\x07}A\x07B{ g`g/3`0=\x1bJ-^0eyJq -ʹ\x0bL\x0c [ 457.492251][ T5866] Bluetooth: hci0: command tx timeout [ 457.644455][ T5866] Bluetooth: hci5: command tx timeout [ 459.724337][ T5866] Bluetooth: hci5: command tx timeout [ 463.169075][ T9149] sctp: [Deprecated]: syz.5.750 (pid 9149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.169075][ T9149] Use struct sctp_sack_info instead [ 463.271953][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 463.816899][ T2975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.222876][ T8834] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 464.278276][ T9060] chnl_net:caif_netlink_parms(): no params data found [ 466.225625][ T9170] loop7: detected capacity change from 0 to 512 [ 466.247060][ T2975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.487870][ T9170] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 466.506045][ T8834] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 467.210508][ T9170] EXT4-fs (loop7): invalid journal inode [ 467.224556][ T9170] EXT4-fs (loop7): can't get journal size [ 467.283224][ T9170] EXT4-fs (loop7): 1 truncate cleaned up [ 467.340249][ T9170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.382091][ T8834] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 467.460513][ T8834] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 467.517416][ T9170] loop7: detected capacity change from 512 to 0 [ 467.518384][ C0] I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 2 [ 467.533644][ C0] I/O error, dev loop7, sector 26 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 467.543345][ C0] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 467.554906][ T9183] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4984: inode #32: block 12: comm syz.7.755: unable to read itable block [ 467.611473][ C0] I/O error, dev loop7, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 467.621656][ T9184] EXT4-fs error (device loop7): __ext4_find_entry:1615: inode #2: comm syz.7.755: reading directory lblock 0 [ 467.681760][ T2975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.693762][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 467.703328][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 467.713183][ C0] buffer_io_error: 11 callbacks suppressed [ 467.713207][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 467.727746][ T9184] EXT4-fs (loop7): previous I/O error to superblock detected [ 467.754159][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 467.763798][ C0] I/O error, dev loop7, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 467.773265][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 467.790478][ T9184] EXT4-fs (loop7): I/O error while writing superblock [ 467.819206][ T9183] EXT4-fs (loop7): I/O error while writing superblock [ 467.930946][ C0] I/O error, dev loop7, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 467.941105][ T8376] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 467.972471][ C1] I/O error, dev loop7, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 468.008559][ T8376] EXT4-fs error (device loop7): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 468.722543][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 468.766014][ T8376] EXT4-fs (loop7): I/O error while writing superblock [ 468.772826][ T8376] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: IO failure [ 468.818681][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 468.834912][ T8376] EXT4-fs (loop7): I/O error while writing superblock [ 468.868557][ T8376] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 468.884399][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 468.899801][ T8376] EXT4-fs (loop7): I/O error while writing superblock [ 469.011294][ T1002] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:5: unable to read itable block [ 469.577324][ T2975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.609358][ C0] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 469.618877][ T1002] EXT4-fs (loop7): I/O error while writing superblock [ 469.626733][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.635266][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.642742][ T9045] bridge_slave_0: entered allmulticast mode [ 469.657823][ T9045] bridge_slave_0: entered promiscuous mode [ 469.658505][ T8376] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.708470][ C1] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 469.719968][ T8376] EXT4-fs (loop7): I/O error while writing superblock [ 469.761770][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.785415][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.883473][ T9045] bridge_slave_1: entered allmulticast mode [ 469.906622][ T9045] bridge_slave_1: entered promiscuous mode [ 469.931872][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.940621][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.954844][ T9060] bridge_slave_0: entered allmulticast mode [ 469.970903][ T9060] bridge_slave_0: entered promiscuous mode [ 469.983248][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.004539][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.011859][ T9060] bridge_slave_1: entered allmulticast mode [ 470.033699][ T9060] bridge_slave_1: entered promiscuous mode [ 471.229191][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.593252][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.671910][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 471.682027][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.692767][ T9060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.703758][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.719133][ T9060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.734432][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.746106][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.235159][ T9045] team0: Port device team_slave_0 added [ 472.350553][ T9060] team0: Port device team_slave_0 added [ 472.411205][ T9060] team0: Port device team_slave_1 added [ 472.443966][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 472.459755][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 472.468462][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 472.476592][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 472.498426][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 472.652147][ T9045] team0: Port device team_slave_1 added [ 472.875409][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.882477][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.928270][ T9060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.979272][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.994333][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.005119][ T9227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.768'. [ 473.020937][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.122819][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.136813][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.174916][ T9060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.198028][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.211284][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.267724][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.290455][ T2975] bridge_slave_1: left allmulticast mode [ 473.296555][ T2975] bridge_slave_1: left promiscuous mode [ 473.302883][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.319361][ T2975] bridge_slave_0: left allmulticast mode [ 473.333041][ T2975] bridge_slave_0: left promiscuous mode [ 473.346712][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.956252][ T5879] Bluetooth: hci1: command tx timeout [ 474.597305][ T5866] Bluetooth: hci6: command tx timeout [ 474.655673][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.670141][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.682507][ T2975] bond0 (unregistering): Released all slaves [ 474.702628][ T2975] bond1 (unregistering): (slave veth3): Releasing backup interface [ 474.712463][ T2975] bond1 (unregistering): Released all slaves [ 475.121646][ T9045] hsr_slave_0: entered promiscuous mode [ 475.138576][ T9045] hsr_slave_1: entered promiscuous mode [ 475.153280][ T9045] debugfs: 'hsr0' already exists in 'hsr' [ 475.160423][ T9045] Cannot create hsr debugfs directory [ 475.178099][ T9060] hsr_slave_0: entered promiscuous mode [ 475.188024][ T9060] hsr_slave_1: entered promiscuous mode [ 475.197536][ T9060] debugfs: 'hsr0' already exists in 'hsr' [ 475.203577][ T9060] Cannot create hsr debugfs directory [ 476.034923][ T5866] Bluetooth: hci1: command tx timeout [ 476.481794][ T2975] hsr_slave_0: left promiscuous mode [ 476.499515][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.514669][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.539782][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.557669][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.599035][ T2975] veth1_macvtap: left promiscuous mode [ 476.648241][ T2975] veth0_macvtap: left promiscuous mode [ 476.654028][ T2975] veth1_vlan: left promiscuous mode [ 476.659692][ T2975] veth0_vlan: left promiscuous mode [ 476.727203][ T5866] Bluetooth: hci6: command tx timeout [ 478.160029][ T9270] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 478.187051][ T9270] CIFS mount error: No usable UNC path provided in device string! [ 478.187051][ T9270] [ 478.198501][ T9270] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 478.234074][ T5866] Bluetooth: hci1: command tx timeout [ 478.754708][ T5866] Bluetooth: hci6: command tx timeout [ 479.540323][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 479.739555][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 480.424401][ T5866] Bluetooth: hci1: command tx timeout [ 480.834329][ T5866] Bluetooth: hci6: command tx timeout [ 482.760529][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 484.902560][ T2975] IPVS: stop unused estimator thread 0... [ 484.930924][ T9220] chnl_net:caif_netlink_parms(): no params data found [ 485.732962][ T9215] chnl_net:caif_netlink_parms(): no params data found [ 486.118084][ T9220] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.127380][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.144056][ T9220] bridge_slave_0: entered allmulticast mode [ 486.154110][ T9220] bridge_slave_0: entered promiscuous mode [ 486.216970][ T9220] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.224647][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.231926][ T9220] bridge_slave_1: entered allmulticast mode [ 486.240049][ T9220] bridge_slave_1: entered promiscuous mode [ 486.271944][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.291423][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.301335][ T9215] bridge_slave_0: entered allmulticast mode [ 486.328275][ T9215] bridge_slave_0: entered promiscuous mode [ 486.385734][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.399203][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.406929][ T9215] bridge_slave_1: entered allmulticast mode [ 486.414934][ T9215] bridge_slave_1: entered promiscuous mode [ 486.425671][ T9220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.471733][ T9220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.557470][ T9220] team0: Port device team_slave_0 added [ 486.569354][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.588998][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.600459][ T9220] team0: Port device team_slave_1 added [ 486.821618][ T9215] team0: Port device team_slave_0 added [ 486.831552][ T9215] team0: Port device team_slave_1 added [ 486.859141][ T9220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.868964][ T9220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.895461][ T9220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.908302][ T9220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.915822][ T9220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.941924][ T9220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.002958][ T9045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.080148][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.088813][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.116560][ T9215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.129870][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.136896][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.162884][ T9215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.176809][ T9045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.190960][ T9045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.269717][ T2975] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.297412][ T9045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.353532][ T9220] hsr_slave_0: entered promiscuous mode [ 487.360890][ T9220] hsr_slave_1: entered promiscuous mode [ 487.393170][ T2975] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.494416][ T9215] hsr_slave_0: entered promiscuous mode [ 487.500929][ T9215] hsr_slave_1: entered promiscuous mode [ 487.514157][ T9215] debugfs: 'hsr0' already exists in 'hsr' [ 487.520335][ T9215] Cannot create hsr debugfs directory [ 487.548773][ T2975] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.760986][ T2975] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.228608][ T9060] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.252931][ T2975] bridge_slave_1: left allmulticast mode [ 488.258728][ T2975] bridge_slave_1: left promiscuous mode [ 488.266009][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.278136][ T2975] bridge_slave_0: left allmulticast mode [ 488.283782][ T2975] bridge_slave_0: left promiscuous mode [ 488.289724][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.304030][ T2975] bridge_slave_1: left allmulticast mode [ 488.310057][ T2975] bridge_slave_1: left promiscuous mode [ 488.316058][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.330008][ T2975] bridge_slave_0: left allmulticast mode [ 488.340573][ T2975] bridge_slave_0: left promiscuous mode [ 488.346626][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.532105][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.546583][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.559276][ T2975] bond0 (unregistering): Released all slaves [ 489.632130][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.658674][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.676517][ T2975] bond0 (unregistering): Released all slaves [ 489.700214][ T9060] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.792502][ T9060] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.833688][ T9060] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 490.556778][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.711109][ T2975] hsr_slave_0: left promiscuous mode [ 490.755968][ T2975] hsr_slave_1: left promiscuous mode [ 490.777922][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.787174][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.854539][ T2975] hsr_slave_0: left promiscuous mode [ 490.874855][ T2975] hsr_slave_1: left promiscuous mode [ 490.881045][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.902394][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.910674][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.924472][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.999077][ T2975] veth1_macvtap: left promiscuous mode [ 491.004728][ T2975] veth0_macvtap: left promiscuous mode [ 491.010387][ T2975] veth1_vlan: left promiscuous mode [ 491.018129][ T2975] veth0_vlan: left promiscuous mode [ 491.580039][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 491.628272][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 492.312737][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 492.352679][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 492.848749][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.983746][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.990971][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.041609][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.071283][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.078461][ T7455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.256634][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.370394][ T9220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 493.400255][ T5886] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 493.431211][ T9220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 493.470707][ T9220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 493.526300][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.533507][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.630020][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.637397][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.667276][ T9220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 494.882318][ T9060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.100871][ T9220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.501533][ T9220] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.169590][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.176919][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.243246][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.250454][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.288000][ T9215] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 497.310422][ T9424] overlayfs: failed to clone upperpath [ 497.336613][ T9424] overlayfs: failed to clone upperpath [ 497.353401][ T9215] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 497.385835][ T9215] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 497.419578][ T9215] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 497.462872][ T9060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.476679][ T5886] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 497.485914][ T5886] Bluetooth: hci2: Injecting HCI hardware error event [ 497.504627][ T5886] Bluetooth: hci2: hardware error 0x00 [ 497.688348][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.816888][ T5879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 497.828566][ T5879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 497.838697][ T5879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 497.856218][ T5879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 497.866788][ T5879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 498.813734][ T9060] veth0_vlan: entered promiscuous mode [ 498.928801][ T9060] veth1_vlan: entered promiscuous mode [ 499.192082][ T9215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.565267][ T5886] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 499.974547][ T5886] Bluetooth: hci7: command tx timeout [ 500.046481][ T9060] veth0_macvtap: entered promiscuous mode [ 500.056123][ T9469] overlayfs: failed to clone upperpath [ 500.087694][ T9215] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.181172][ T9060] veth1_macvtap: entered promiscuous mode [ 500.288310][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.295640][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.341180][ T9220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.410104][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.417325][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.473330][ T9439] chnl_net:caif_netlink_parms(): no params data found [ 500.578006][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.680042][ T9045] veth0_vlan: entered promiscuous mode [ 500.723582][ T9060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.852445][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.862604][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.942614][ T7283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.957981][ T7283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.021894][ T9045] veth1_vlan: entered promiscuous mode [ 501.067648][ T7283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.101936][ T7283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.931518][ T9220] veth0_vlan: entered promiscuous mode [ 501.977102][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.985418][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.992654][ T9439] bridge_slave_0: entered allmulticast mode [ 502.002808][ T9439] bridge_slave_0: entered promiscuous mode [ 502.015284][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.023426][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.031374][ T9439] bridge_slave_1: entered allmulticast mode [ 502.034785][ T5886] Bluetooth: hci7: command tx timeout [ 502.049764][ T9439] bridge_slave_1: entered promiscuous mode [ 502.080095][ T9045] veth0_macvtap: entered promiscuous mode [ 502.090396][ T9045] veth1_macvtap: entered promiscuous mode [ 502.182654][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.201194][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.368175][ T9220] veth1_vlan: entered promiscuous mode [ 502.388176][ T7283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.400487][ T7283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.608049][ T9439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.641850][ T7283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.665756][ T7449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.703488][ T9439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.028945][ T9439] team0: Port device team_slave_0 added [ 503.058795][ T9215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.117656][ T7444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.125631][ T7444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.190302][ T9439] team0: Port device team_slave_1 added [ 503.400878][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.427016][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.457891][ T9439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.483352][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.492857][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.524266][ T9439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.570624][ T7449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.627604][ T7449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.652885][ T9220] veth0_macvtap: entered promiscuous mode [ 504.116671][ T5886] Bluetooth: hci7: command tx timeout [ 504.593406][ T9220] veth1_macvtap: entered promiscuous mode [ 504.630218][ T7283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.638378][ T7283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.693831][ T9439] hsr_slave_0: entered promiscuous mode [ 504.703652][ T9439] hsr_slave_1: entered promiscuous mode [ 504.721775][ T9439] debugfs: 'hsr0' already exists in 'hsr' [ 504.865838][ T9439] Cannot create hsr debugfs directory [ 504.903182][ T9220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.913985][ T9220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.927349][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.944430][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.301707][ T3478] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.625978][ T3478] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.637825][ T3478] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.721308][ T3478] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.849344][ T5876] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 506.020165][ T30] audit: type=1326 audit(1757626706.005:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.1.820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ad058eba9 code=0x0 [ 506.195136][ T5886] Bluetooth: hci7: command tx timeout [ 506.326251][ T9215] veth0_vlan: entered promiscuous mode [ 506.340849][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.380757][ T5876] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 506.452523][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.542048][ T5876] usb 5-1: config 0 descriptor?? [ 506.715967][ T9215] veth1_vlan: entered promiscuous mode [ 507.439912][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.451151][ T5876] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 507.497340][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.534651][ T5876] usb 5-1: USB disconnect, device number 2 [ 507.655126][ T9215] veth0_macvtap: entered promiscuous mode [ 507.677531][ T9215] veth1_macvtap: entered promiscuous mode [ 507.809431][ T9552] overlayfs: failed to clone upperpath [ 507.831417][ T9549] fido_id[9549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 507.919388][ T7283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.942900][ T7283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.027653][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.299056][ T9215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.814512][ T3451] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.165747][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.695265][ T9586] loop4: detected capacity change from 0 to 2048 [ 510.703040][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.722140][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.800432][ T9586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.951604][ T30] audit: type=1800 audit(1757626711.055:36): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.829" name="file1" dev="loop4" ino=1335 res=0 errno=0 [ 512.214613][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.222471][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.361051][ T30] audit: type=1800 audit(1757626712.455:37): pid=9598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.829" name="file1" dev="loop4" ino=1335 res=0 errno=0 [ 513.378329][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.414969][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.444886][ T9439] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 513.488135][ T9439] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 513.690324][ T9439] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 513.732130][ T9439] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 514.810724][ T9620] loop3: detected capacity change from 0 to 32768 [ 514.931953][ T9620] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 515.983589][ T9620] XFS (loop3): Ending clean mount [ 515.995175][ T9620] XFS (loop3): Quotacheck needed: Please wait. [ 516.113165][ T9620] XFS (loop3): Quotacheck: Done. [ 516.926644][ T9647] netlink: 496 bytes leftover after parsing attributes in process `syz.3.837'. [ 517.676926][ T9220] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 517.728010][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.881732][ T9658] loop9: detected capacity change from 0 to 2048 [ 517.913584][ T9439] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.956161][ T9658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 518.062972][ T9658] overlayfs: upper fs needs to support d_type. [ 518.073116][ T9658] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 518.080190][ T9658] overlayfs: failed to set xattr on upper [ 518.086027][ T9658] overlayfs: ...falling back to redirect_dir=nofollow. [ 518.092856][ T9658] overlayfs: ...falling back to index=off. [ 518.100333][ T9658] overlayfs: ...falling back to uuid=null. [ 518.178163][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.185360][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.206822][ T30] audit: type=1800 audit(1757626718.245:38): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.843" name="file0" dev="overlay" ino=1313 res=0 errno=0 [ 518.378310][ T9215] UDF-fs: error (device loop9): udf_read_inode: (ino 1317) failed !bh [ 518.388406][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.395614][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.504086][ T9215] UDF-fs: error (device loop9): udf_read_inode: (ino 1317) failed !bh [ 518.548762][ T9439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 518.675187][ T9439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.205605][ T7283] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.369051][ T9439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.671568][ T7283] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.086141][ T7283] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.172803][ T9712] netlink: 64 bytes leftover after parsing attributes in process `syz.1.852'. [ 528.526898][ T7283] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.928627][ T7283] bridge_slave_1: left allmulticast mode [ 529.943959][ T7283] bridge_slave_1: left promiscuous mode [ 529.983786][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 529.994359][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 530.003073][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 530.033445][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 530.044430][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.062315][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.179811][ T7283] bridge_slave_0: left allmulticast mode [ 530.208828][ T7283] bridge_slave_0: left promiscuous mode [ 530.253915][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.258423][ T5886] Bluetooth: hci1: command tx timeout [ 532.602675][ T9763] netlink: 'syz.4.866': attribute type 28 has an invalid length. [ 534.087262][ T9780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'. [ 534.274461][ T5886] Bluetooth: hci1: command tx timeout [ 536.354405][ T5886] Bluetooth: hci1: command tx timeout [ 537.900817][ T7283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.976602][ T7283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.000915][ T7283] bond0 (unregistering): Released all slaves [ 538.196889][ T9797] loop4: detected capacity change from 0 to 32768 [ 538.256428][ T9797] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 538.289184][ T30] audit: type=1800 audit(1757626738.385:39): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.876" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 538.437287][ T5886] Bluetooth: hci1: command tx timeout [ 540.241708][ T9045] ocfs2: Unmounting device (7,4) on (node local) [ 540.375013][ T9439] veth0_vlan: entered promiscuous mode [ 540.471794][ T9814] tipc: Failed to remove unknown binding: 66,1,1/0:612827134/612827136 [ 540.532117][ T9814] tipc: Failed to remove unknown binding: 66,1,1/0:612827134/612827136 [ 540.550391][ T9439] veth1_vlan: entered promiscuous mode [ 540.593406][ T9814] tipc: Failed to remove unknown binding: 66,1,1/0:612827134/612827136 [ 543.416090][ T7283] hsr_slave_0: left promiscuous mode [ 543.461031][ T7283] hsr_slave_1: left promiscuous mode [ 543.510758][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.530904][ T7283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.615453][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.636912][ T7283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.711542][ T7283] veth1_macvtap: left promiscuous mode [ 543.734507][ T7283] veth0_macvtap: left promiscuous mode [ 543.751055][ T7283] veth1_vlan: left promiscuous mode [ 543.759939][ T9843] loop3: detected capacity change from 0 to 1024 [ 543.764717][ T7283] veth0_vlan: left promiscuous mode [ 543.795846][ T9843] EXT4-fs: Ignoring removed orlov option [ 543.886806][ T9843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.091129][ T30] audit: type=1800 audit(1757626744.175:40): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.888" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 545.026262][ T9220] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.557298][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 550.550194][ T9895] binder: BINDER_SET_CONTEXT_MGR already set [ 550.724902][ T9895] binder: 9894:9895 ioctl 4018620d 200000004a80 returned -16 [ 551.768712][ T9895] binder: 9894:9895 ioctl c0306201 200000000180 returned -14 [ 551.990202][ T5951] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 552.097414][ T9905] loop3: detected capacity change from 0 to 8 [ 552.324368][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 552.336688][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 552.349045][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 552.377139][ T5951] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 553.074537][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.082592][ T5951] usb 5-1: Product: syz [ 553.093489][ T5951] usb 5-1: Manufacturer: syz [ 553.098381][ T5951] usb 5-1: SerialNumber: syz [ 553.140654][ T5951] usb 5-1: config 0 descriptor?? [ 553.204554][ T5951] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 553.224276][ T5951] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 553.547304][ T9914] tipc: Can't bind to reserved service type 0 [ 554.477446][ T5951] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 554.491312][ T5951] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 555.842218][ T5951] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 555.892024][ T5951] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 557.623726][ T7283] team0 (unregistering): Port device team_slave_1 removed [ 557.670867][ T5951] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 557.718442][ T5951] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 557.752851][ T5951] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 557.785144][ T5951] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 557.834466][ T5951] usb 5-1: USB disconnect, device number 3 [ 558.966508][ T7283] team0 (unregistering): Port device team_slave_0 removed [ 559.066313][ T9957] loop3: detected capacity change from 0 to 164 [ 560.323050][ T5866] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 560.424639][ T5866] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 560.465841][ T5866] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 560.487526][ T5866] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 560.504709][ T5866] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 562.450578][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.467810][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.580710][ T9976] netlink: 'syz.5.923': attribute type 5 has an invalid length. [ 562.594329][ T5866] Bluetooth: hci8: command tx timeout [ 564.935805][ T5866] Bluetooth: hci8: command tx timeout [ 566.867848][ T9746] chnl_net:caif_netlink_parms(): no params data found [ 566.994444][ T5866] Bluetooth: hci8: command tx timeout [ 569.074654][ T5866] Bluetooth: hci8: command tx timeout [ 569.083823][ T5879] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 569.216388][ T5879] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 569.243964][ T5879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 569.258284][ T5879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 569.266591][ T5879] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 570.062885][ T30] audit: type=1326 audit(1757626770.155:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.137162][ T30] audit: type=1326 audit(1757626770.155:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.261810][ T30] audit: type=1326 audit(1757626770.195:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.348117][ T30] audit: type=1326 audit(1757626770.195:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.374607][ T30] audit: type=1326 audit(1757626770.195:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.397877][ T30] audit: type=1326 audit(1757626770.195:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.422442][ T30] audit: type=1326 audit(1757626770.195:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.477004][ T9969] chnl_net:caif_netlink_parms(): no params data found [ 570.560225][ T30] audit: type=1326 audit(1757626770.195:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.663766][ T9746] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.680649][ T30] audit: type=1326 audit(1757626770.195:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.689756][ T9746] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.798341][ T30] audit: type=1326 audit(1757626770.195:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad058eba9 code=0x7ffc0000 [ 570.821696][ T9746] bridge_slave_0: entered allmulticast mode [ 570.890971][ T9746] bridge_slave_0: entered promiscuous mode [ 570.946661][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.965546][ T9746] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.984475][ T9746] bridge_slave_1: entered allmulticast mode [ 570.992607][ T9746] bridge_slave_1: entered promiscuous mode [ 571.324638][ T5886] Bluetooth: hci6: command tx timeout [ 572.388725][T10053] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 572.667452][ T9746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.808870][ T9746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.127723][ T9746] team0: Port device team_slave_0 added [ 573.437103][T10019] Bluetooth: hci6: command tx timeout [ 573.842399][ T9746] team0: Port device team_slave_1 added [ 573.910098][ T9969] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.925802][ T9969] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.944866][ T9969] bridge_slave_0: entered allmulticast mode [ 573.954529][ T9969] bridge_slave_0: entered promiscuous mode [ 573.963819][ T9969] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.972463][ T9969] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.981801][ T9969] bridge_slave_1: entered allmulticast mode [ 573.989800][ T9969] bridge_slave_1: entered promiscuous mode [ 574.602022][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.618006][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.667961][ T9746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.755880][T10019] Bluetooth: hci5: command 0x0406 tx timeout [ 574.784715][ T24] IPVS: starting estimator thread 0... [ 574.834931][ T5879] Bluetooth: hci0: command 0x0406 tx timeout [ 574.844608][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.883315][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.922979][T10098] IPVS: using max 28 ests per chain, 67200 per kthread [ 574.962990][ T9746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.017981][ T9969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.088430][ T9969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.484963][ T5879] Bluetooth: hci6: command tx timeout [ 575.625471][ T3491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.150417][ T9969] team0: Port device team_slave_0 added [ 577.179786][ T9969] team0: Port device team_slave_1 added [ 577.340082][ T3491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.586361][ T5879] Bluetooth: hci6: command tx timeout [ 578.088747][ T9746] hsr_slave_0: entered promiscuous mode [ 578.118388][ T9746] hsr_slave_1: entered promiscuous mode [ 578.134294][ T9537] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 578.195354][ T9746] debugfs: 'hsr0' already exists in 'hsr' [ 578.201133][ T9746] Cannot create hsr debugfs directory [ 578.375852][ T9537] usb 5-1: Using ep0 maxpacket: 8 [ 578.400060][ T9537] usb 5-1: unable to get BOS descriptor or descriptor too short [ 578.536828][ T9537] usb 5-1: config 246 has an invalid interface number: 233 but max is 0 [ 578.565753][ T9537] usb 5-1: config 246 has no interface number 0 [ 578.647120][ T9537] usb 5-1: config 246 interface 233 has no altsetting 0 [ 578.943068][ T9537] usb 5-1: New USB device found, idVendor=0b05, idProduct=18f0, bcdDevice=af.9c [ 578.965358][ T9537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.986461][ T9537] usb 5-1: Product: syz [ 578.990655][ T9537] usb 5-1: Manufacturer: ࠌ [ 579.008945][ T3491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.024402][ T9537] usb 5-1: SerialNumber: syz [ 579.139527][ T9969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.152834][ T9969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.199419][ T9969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.241694][ T9969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.259685][ T9969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.299988][ T9969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.459370][ T9537] usb 5-1: USB disconnect, device number 4 [ 579.490214][ T3491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.383342][T10017] chnl_net:caif_netlink_parms(): no params data found [ 583.076568][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 583.076589][ T30] audit: type=1326 audit(1757626783.175:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.5.962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a6b98eba9 code=0x0 [ 583.117049][ T9969] hsr_slave_0: entered promiscuous mode [ 583.126722][ T9969] hsr_slave_1: entered promiscuous mode [ 583.133382][ T9969] debugfs: 'hsr0' already exists in 'hsr' [ 583.139400][ T9969] Cannot create hsr debugfs directory [ 583.180702][ T30] audit: type=1326 audit(1757626783.275:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 583.232207][ T30] audit: type=1326 audit(1757626783.275:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 583.299429][ T30] audit: type=1326 audit(1757626783.275:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 583.422730][ T30] audit: type=1326 audit(1757626783.275:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 583.531180][ T30] audit: type=1326 audit(1757626783.275:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 583.651579][ T30] audit: type=1326 audit(1757626783.275:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 583.824298][ T30] audit: type=1326 audit(1757626783.305:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 583.970883][ T30] audit: type=1326 audit(1757626783.305:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 584.007444][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.037352][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.055804][ T30] audit: type=1326 audit(1757626783.305:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.4.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97b98eba9 code=0x7ffc0000 [ 584.092063][T10017] bridge_slave_0: entered allmulticast mode [ 584.281536][T10017] bridge_slave_0: entered promiscuous mode [ 584.290864][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.298380][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.306995][T10017] bridge_slave_1: entered allmulticast mode [ 584.335802][T10017] bridge_slave_1: entered promiscuous mode [ 586.359906][T10017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.533879][ T5886] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 586.550360][ T5886] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 586.559427][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 586.567919][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 586.578616][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.586867][T10017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.640489][ T3491] bridge_slave_1: left allmulticast mode [ 586.654844][ T3491] bridge_slave_1: left promiscuous mode [ 586.660746][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.673557][ T3491] bridge_slave_0: left allmulticast mode [ 586.680224][ T3491] bridge_slave_0: left promiscuous mode [ 586.686588][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.704770][ T3491] bridge_slave_1: left allmulticast mode [ 586.722827][ T3491] bridge_slave_1: left promiscuous mode [ 586.729303][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.793921][ T3491] bridge_slave_0: left allmulticast mode [ 586.802482][ T3491] bridge_slave_0: left promiscuous mode [ 586.812196][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.481847][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.497559][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.514472][ T3491] bond0 (unregistering): Released all slaves [ 588.674653][ T5886] Bluetooth: hci1: command tx timeout [ 590.073622][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.113788][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.146518][ T3491] bond0 (unregistering): Released all slaves [ 590.764310][ T5886] Bluetooth: hci1: command tx timeout [ 590.967891][T10207] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.975769][T10207] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.406471][T10207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.442397][T10207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.935928][T10017] team0: Port device team_slave_0 added [ 593.043952][T10254] overlayfs: failed to clone upperpath [ 593.051801][ T5886] Bluetooth: hci1: command tx timeout [ 593.095186][ T3535] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.113791][ T3535] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.235229][ T3535] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.274674][ T3535] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.529853][T10017] team0: Port device team_slave_1 added [ 594.204676][T10266] loop4: detected capacity change from 0 to 128 [ 594.246311][T10266] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 594.294355][T10266] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 594.748192][T10017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.791057][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.894593][T10017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.956218][T10017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.963189][T10017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.076278][ T9045] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 595.085566][ T5879] Bluetooth: hci1: command tx timeout [ 595.103990][T10017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.603805][ T3491] hsr_slave_0: left promiscuous mode [ 595.624553][ T3491] hsr_slave_1: left promiscuous mode [ 595.652169][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.985907][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.147316][ T3491] hsr_slave_0: left promiscuous mode [ 596.174462][ T3491] hsr_slave_1: left promiscuous mode [ 596.415728][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.426180][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.514475][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.534555][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.729910][ T3491] veth1_vlan: left promiscuous mode [ 596.750096][ T3491] veth0_vlan: left promiscuous mode [ 596.794585][ T3491] veth1_macvtap: left promiscuous mode [ 596.800181][ T3491] veth0_macvtap: left promiscuous mode [ 596.864413][ T3491] veth1_vlan: left promiscuous mode [ 596.872745][ T3491] veth0_vlan: left promiscuous mode [ 597.004716][T10292] netlink: 40 bytes leftover after parsing attributes in process `syz.1.983'. [ 599.809303][T10318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.180050][T10325] loop4: detected capacity change from 0 to 32768 [ 601.261176][T10325] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 601.270179][T10325] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 601.340134][T10325] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 601.362242][ T9537] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 601.445396][ T9537] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 601.840055][ T9537] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 394ms [ 601.874434][ T9537] gfs2: fsid=syz:syz.0: jid=0: Done [ 601.891001][T10325] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 602.725329][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 602.981924][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 606.714130][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 606.773112][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 608.533939][T10017] hsr_slave_0: entered promiscuous mode [ 608.552515][T10017] hsr_slave_1: entered promiscuous mode [ 609.020223][ T9969] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 609.074989][ T9969] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 609.106251][ T9969] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 609.143860][ T9969] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 609.513261][T10203] chnl_net:caif_netlink_parms(): no params data found [ 609.622445][ T3491] bridge_slave_1: left allmulticast mode [ 609.629748][ T3491] bridge_slave_1: left promiscuous mode [ 609.646767][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.665466][ T3491] bridge_slave_0: left allmulticast mode [ 609.671140][ T3491] bridge_slave_0: left promiscuous mode [ 609.677640][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.846093][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.864850][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.876271][ T3491] bond0 (unregistering): Released all slaves [ 610.057972][ T3491] hsr_slave_0: left promiscuous mode [ 610.064065][ T3491] hsr_slave_1: left promiscuous mode [ 610.078565][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.086846][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.367449][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 610.433194][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 610.875689][T10203] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.882864][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.890785][T10203] bridge_slave_0: entered allmulticast mode [ 610.899844][T10203] bridge_slave_0: entered promiscuous mode [ 610.949137][T10203] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.956863][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.964143][T10203] bridge_slave_1: entered allmulticast mode [ 610.973011][T10203] bridge_slave_1: entered promiscuous mode [ 611.070538][T10203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.091589][ T9969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.101595][T10203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.142293][T10017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 611.173942][T10203] team0: Port device team_slave_0 added [ 611.183857][T10203] team0: Port device team_slave_1 added [ 611.190031][T10017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 611.207968][T10017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 611.262258][T10017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 611.283780][T10203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.292142][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.319672][T10203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.337079][ T9969] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.354079][T10203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.361159][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.390368][T10203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.424944][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.432082][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.481072][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.488305][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.515771][T10203] hsr_slave_0: entered promiscuous mode [ 611.522324][T10203] hsr_slave_1: entered promiscuous mode [ 611.533884][T10203] debugfs: 'hsr0' already exists in 'hsr' [ 611.540744][T10203] Cannot create hsr debugfs directory [ 611.810092][T10203] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.891626][T10017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.948671][T10203] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.992746][T10017] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.032478][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.039652][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.068277][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.075491][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.113136][T10203] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.213038][T10203] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.261234][ T9969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.526941][T10203] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 612.566246][T10203] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 612.588493][T10203] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 612.622611][T10203] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 612.743385][T10017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.919024][T10017] veth0_vlan: entered promiscuous mode [ 612.943417][T10203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.959992][T10017] veth1_vlan: entered promiscuous mode [ 613.030091][T10203] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.075735][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.082885][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.097249][ T9969] veth0_vlan: entered promiscuous mode [ 613.104012][T10017] veth0_macvtap: entered promiscuous mode [ 613.120205][T10017] veth1_macvtap: entered promiscuous mode [ 613.144117][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.151329][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.180127][T10017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.203501][ T9969] veth1_vlan: entered promiscuous mode [ 613.229534][T10017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.280496][ T3478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.290009][ T3535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.318047][ T3535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.329187][ T3535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.369006][ T9969] veth0_macvtap: entered promiscuous mode [ 613.380419][ T9969] veth1_macvtap: entered promiscuous mode [ 613.517956][ T9969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.559605][ T9969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.583543][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.620252][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.631911][ T7457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.653119][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.663076][ T7457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.691867][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.807289][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.819294][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.939241][T10203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.964381][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.972256][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.396276][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.424643][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.698022][T10468] loop4: detected capacity change from 0 to 128 [ 615.738011][T10468] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 615.877053][T10468] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 616.454546][T10488] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 616.791411][T10468] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 618.130341][T10203] veth0_vlan: entered promiscuous mode [ 619.112498][T10203] veth1_vlan: entered promiscuous mode [ 619.368127][T10203] veth0_macvtap: entered promiscuous mode [ 619.402561][T10203] veth1_macvtap: entered promiscuous mode [ 620.156685][T10203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.171140][T10203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.641647][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.712970][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.752164][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.994237][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.971377][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.094517][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.279131][T10516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.446479][T10544] loop4: detected capacity change from 0 to 512 [ 622.486099][T10516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.305931][T10544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 624.304795][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.312112][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.336868][T10544] EXT4-fs (loop4): orphan cleanup on readonly fs [ 625.335303][T10544] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1008: bg 0: block 248: padding at end of block bitmap is not set [ 625.353289][T10544] __quota_error: 12 callbacks suppressed [ 625.353320][T10544] Quota error (device loop4): write_blk: dquota write failed [ 625.366722][T10544] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 625.376687][T10544] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1008: Failed to acquire dquot type 1 [ 625.395728][T10544] EXT4-fs (loop4): 1 truncate cleaned up [ 625.407094][T10544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 625.862002][ T9045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.260407][T10550] loop4: detected capacity change from 0 to 40427 [ 626.292783][T10550] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 626.301581][T10550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 626.325595][T10550] F2FS-fs (loop4): build fault injection type: 0x6 [ 626.395038][T10550] F2FS-fs (loop4): invalid crc value [ 626.478855][T10550] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 626.493932][T10550] F2FS-fs (loop4): Start checkpoint disabled! [ 626.537298][T10550] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 626.546137][T10550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 629.959676][T10582] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 629.967852][T10582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.177230][ T13] kworker/u8:1: attempt to access beyond end of device [ 630.177230][ T13] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 631.184313][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 631.184349][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 631.184366][ T13] Workqueue: writeback wb_workfn (flush-7:4) [ 631.184403][ T13] Call Trace: [ 631.184413][ T13] [ 631.184423][ T13] dump_stack_lvl+0x189/0x250 [ 631.184460][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.184490][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 631.184515][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 631.184560][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 631.184613][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 631.184662][ T13] f2fs_write_end_io+0x886/0xb60 [ 631.184709][ T13] __submit_merged_bio+0x27a/0x6a0 [ 631.184756][ T13] __submit_merged_write_cond+0x255/0x530 [ 631.184802][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 631.184867][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 631.184889][ T13] ? __local_bh_enable_ip+0x12d/0x1c0 [ 631.184930][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.184958][ T13] ? rcu_is_watching+0x15/0xb0 [ 631.185025][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.185101][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.185127][ T13] ? unwind_next_frame+0x19ae/0x2390 [ 631.185159][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 631.185185][ T13] do_writepages+0x32e/0x550 [ 631.185225][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.185251][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 631.185276][ T13] ? writeback_sb_inodes+0x384/0x1010 [ 631.185319][ T13] __writeback_single_inode+0x145/0xff0 [ 631.185352][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.185378][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 631.185415][ T13] writeback_sb_inodes+0x6c7/0x1010 [ 631.185479][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 631.185562][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.185590][ T13] ? rcu_is_watching+0x15/0xb0 [ 631.185614][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.185656][ T13] wb_writeback+0x43b/0xaf0 [ 631.185698][ T13] ? queue_io+0x351/0x590 [ 631.185734][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 631.185776][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 631.185821][ T13] wb_workfn+0x409/0xef0 [ 631.185866][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 631.185897][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.185924][ T13] ? __lock_acquire+0xab9/0xd20 [ 631.185973][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.186003][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.186035][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 631.186071][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 631.186094][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 631.186120][ T13] process_scheduled_works+0xae1/0x17b0 [ 631.186180][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 631.186214][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.186252][ T13] worker_thread+0x8a0/0xda0 [ 631.186308][ T13] kthread+0x711/0x8a0 [ 631.186343][ T13] ? __pfx_worker_thread+0x10/0x10 [ 631.186368][ T13] ? __pfx_kthread+0x10/0x10 [ 631.186395][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.186428][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 631.186465][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.186492][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 631.186515][ T13] ? __pfx_kthread+0x10/0x10 [ 631.186556][ T13] ret_from_fork+0x439/0x7d0 [ 631.186586][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 631.186620][ T13] ? __switch_to_asm+0x39/0x70 [ 631.186651][ T13] ? __switch_to_asm+0x33/0x70 [ 631.186682][ T13] ? __pfx_kthread+0x10/0x10 [ 631.186714][ T13] ret_from_fork_asm+0x1a/0x30 [ 631.186766][ T13] [ 631.234443][ T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 634.625770][T10612] IPVS: Scheduler module ip_vs_sip not found [ 634.634519][T10614] IPVS: length: 146 != 8 [ 634.771221][T10626] loop6: detected capacity change from 0 to 512 [ 634.856479][T10621] loop2: detected capacity change from 0 to 512 [ 634.863900][T10626] EXT4-fs: Ignoring removed nobh option [ 634.900732][T10621] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1033: iget: bad extended attribute block 1 [ 634.930482][T10626] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1034: iget: bad i_size value: 38620345925642 [ 634.961257][T10621] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1033: couldn't read orphan inode 15 (err -117) [ 634.965665][T10626] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1034: couldn't read orphan inode 15 (err -117) [ 635.213196][T10626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.811192][T10621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.081128][ T5886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 636.091439][ T5886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 636.100268][ T5886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 636.307580][T10642] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 636.328568][ T5886] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 636.338449][ T5886] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 636.911512][T10630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 637.366555][T10630] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 637.437652][T10203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.795301][ T31] INFO: task syz.0.789:9290 blocked for more than 143 seconds. [ 637.811639][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 637.963915][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 638.103336][ T31] task:syz.0.789 state:D stack:28328 pid:9290 tgid:9289 ppid:5869 task_flags:0x400040 flags:0x00004006 [ 638.372783][ T31] Call Trace: [ 638.393825][ T31] [ 638.406065][ T31] __schedule+0x1798/0x4cc0 [ 638.420938][T10017] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.615449][ T31] ? __pfx___schedule+0x10/0x10 [ 638.620375][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.627828][ T31] ? schedule+0x91/0x360 [ 638.632269][ T31] schedule+0x165/0x360 [ 638.636612][ T31] schedule_preempt_disabled+0x13/0x30 [ 638.644363][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 638.649938][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 639.358314][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 639.384260][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.389946][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.436708][ T5879] Bluetooth: hci7: command tx timeout [ 639.525746][ T31] down_read+0x98/0x2e0 [ 639.529959][ T31] super_lock+0x2a9/0x3b0 [ 639.624232][ T31] ? __pfx_super_lock+0x10/0x10 [ 639.629140][ T31] ? do_raw_spin_lock+0x121/0x290 [ 639.768740][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.824313][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.840025][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 639.893006][ T31] __iterate_supers+0x126/0x290 [ 639.924468][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 639.930062][ T31] ksys_sync+0x94/0x150 [ 639.971526][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 639.984277][ T31] ? rcu_is_watching+0x15/0xb0 [ 640.000551][ T31] ? do_syscall_64+0xbe/0x3b0 [ 640.044217][ T31] __ia32_sys_sync+0xe/0x20 [ 640.060550][ T31] do_syscall_64+0xfa/0x3b0 [ 640.084438][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.089792][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.117971][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 640.123638][ T31] ? exc_page_fault+0x9f/0xf0 [ 640.172330][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.178628][ T31] RIP: 0033:0x7f967fd8eba9 [ 640.183041][ T31] RSP: 002b:00007f9680c56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 640.240566][ T31] RAX: ffffffffffffffda RBX: 00007f967ffd5fa0 RCX: 00007f967fd8eba9 [ 640.274459][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.282485][ T31] RBP: 00007f967ffd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 640.307333][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.330992][ T31] R13: 00007f967ffd6038 R14: 00007f967ffd5fa0 R15: 00007ffcceee1fe8 [ 640.355148][ T31] [ 640.358584][ T31] [ 640.358584][ T31] Showing all locks held in the system: [ 640.399661][ T31] 1 lock held by khungtaskd/31: [ 640.428684][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 640.464420][ T31] 2 locks held by kworker/1:2/973: [ 640.470862][ T31] #0: ffff88801a478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 640.531164][ T31] #1: ffffc9000385fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 640.604519][ T31] 2 locks held by getty/5625: [ 640.609243][ T31] #0: ffff8880334710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 640.674601][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 640.724335][ T31] 1 lock held by syz-executor/8239: [ 640.729574][ T31] #0: ffff8880336020e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 640.804200][ T31] 1 lock held by syz.0.789/9290: [ 640.809182][ T31] #0: ffff8880336020e0 (&type->s_umount_key#52){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 640.884526][ T31] 3 locks held by kworker/0:6/9537: [ 640.889793][ T31] 1 lock held by syz-executor/10203: [ 640.950531][ T31] 3 locks held by iou-wrk-10474/10487: [ 640.978980][ T31] #0: ffff88806cfe4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 641.020164][ T31] #1: ffff88806cfe40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 641.064385][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 641.104437][ T31] 1 lock held by dhcpcd-run-hook/10664: [ 641.110027][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 641.174264][ T31] 2 locks held by rm/10675: [ 641.178877][ T31] [ 641.181197][ T31] ============================================= [ 641.181197][ T31] [ 641.274459][ T31] NMI backtrace for cpu 0 [ 641.274481][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 641.274526][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.274569][ T31] Call Trace: [ 641.274580][ T31] [ 641.274590][ T31] dump_stack_lvl+0x189/0x250 [ 641.274629][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.274658][ T31] ? __pfx__printk+0x10/0x10 [ 641.274712][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 641.274754][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 641.274793][ T31] ? __pfx__printk+0x10/0x10 [ 641.274826][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.274859][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 641.274901][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 641.274940][ T31] watchdog+0xf93/0xfe0 [ 641.274981][ T31] ? watchdog+0x1de/0xfe0 [ 641.275022][ T31] kthread+0x711/0x8a0 [ 641.275057][ T31] ? __pfx_watchdog+0x10/0x10 [ 641.275090][ T31] ? __pfx_kthread+0x10/0x10 [ 641.275117][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.275149][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.275186][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.275213][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.275235][ T31] ? __pfx_kthread+0x10/0x10 [ 641.275266][ T31] ret_from_fork+0x439/0x7d0 [ 641.275293][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 641.275325][ T31] ? __switch_to_asm+0x39/0x70 [ 641.275356][ T31] ? __switch_to_asm+0x33/0x70 [ 641.275386][ T31] ? __pfx_kthread+0x10/0x10 [ 641.275418][ T31] ret_from_fork_asm+0x1a/0x30 [ 641.275468][ T31] [ 641.275477][ T31] Sending NMI from CPU 0 to CPUs 1: [ 641.440473][ C1] NMI backtrace for cpu 1 [ 641.440491][ C1] CPU: 1 UID: 0 PID: 10651 Comm: syz.4.1023 Not tainted syzkaller #0 PREEMPT(full) [ 641.440515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.440529][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 641.440563][ C1] Code: 8b 3d f4 65 fe 0b 48 89 de 5b e9 23 a1 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 b0 a0 92 65 8b 15 18 f1 e0 10 81 e2 00 01 ff 00 [ 641.440581][ C1] RSP: 0018:ffffc900046df378 EFLAGS: 00000202 [ 641.440600][ C1] RAX: ffffffff822e5cc3 RBX: 800000004bf2e007 RCX: ffff888031060000 [ 641.440617][ C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 641.440630][ C1] RBP: ffffc900046df601 R08: ffffea00012fcb87 R09: 1ffffd400025f970 [ 641.440646][ C1] R10: dffffc0000000000 R11: fffff9400025f971 R12: ffffea00012fcb98 [ 641.440662][ C1] R13: 1ffffd400025f973 R14: 0000000000000005 R15: 0000000000000000 [ 641.440679][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 641.440696][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.440711][ C1] CR2: 00007f4e15a41fe8 CR3: 000000000df36000 CR4: 0000000000350ef0 [ 641.440727][ C1] Call Trace: [ 641.440735][ C1] [ 641.440743][ C1] __page_table_check_pte_clear+0x43/0x70 [ 641.440777][ C1] unmap_page_range+0x3445/0x4370 [ 641.440819][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.440858][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 641.440884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.440908][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.440933][ C1] ? unmap_vmas+0x144/0x580 [ 641.440957][ C1] unmap_vmas+0x399/0x580 [ 641.440977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.441007][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 641.441047][ C1] exit_mmap+0x248/0xb50 [ 641.441076][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.441103][ C1] ? exit_aio+0x31a/0x3b0 [ 641.441134][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 641.441173][ C1] ? __pfx_exit_aio+0x10/0x10 [ 641.441211][ C1] ? uprobe_clear_state+0x274/0x290 [ 641.441236][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.441265][ C1] __mmput+0x118/0x430 [ 641.441288][ C1] exit_mm+0x1da/0x2c0 [ 641.441322][ C1] ? __pfx_exit_mm+0x10/0x10 [ 641.441351][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.441375][ C1] ? rcu_is_watching+0x15/0xb0 [ 641.441399][ C1] do_exit+0x648/0x2300 [ 641.441430][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.441454][ C1] ? do_raw_spin_lock+0x121/0x290 [ 641.441483][ C1] ? __pfx_do_exit+0x10/0x10 [ 641.441522][ C1] do_group_exit+0x21c/0x2d0 [ 641.441550][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.441574][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.441599][ C1] get_signal+0x1286/0x1340 [ 641.441634][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 641.441672][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 641.441717][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 641.441752][ C1] exit_to_user_mode_loop+0x75/0x110 [ 641.441783][ C1] do_syscall_64+0x2bd/0x3b0 [ 641.441806][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.441827][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.441847][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.441871][ C1] ? exc_page_fault+0x9f/0xf0 [ 641.441896][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.441924][ C1] RIP: 0033:0x7ff97b98eba9 [ 641.441941][ C1] Code: Unable to access opcode bytes at 0x7ff97b98eb7f. [ 641.441952][ C1] RSP: 002b:00007ff97c8c40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 641.441973][ C1] RAX: fffffffffffffe00 RBX: 00007ff97bbd5fa8 RCX: 00007ff97b98eba9 [ 641.441989][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff97bbd5fa8 [ 641.442002][ C1] RBP: 00007ff97bbd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 641.442016][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.442029][ C1] R13: 00007ff97bbd6038 R14: 00007fff0d5819b0 R15: 00007fff0d581a98 [ 641.442056][ C1] [ 641.974332][ T5879] Bluetooth: hci7: command tx timeout [ 642.022781][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 642.029716][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 642.038832][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 642.048878][ T31] Call Trace: [ 642.052147][ T31] [ 642.055061][ T31] dump_stack_lvl+0x99/0x250 [ 642.059655][ T31] ? __asan_memcpy+0x40/0x70 [ 642.064229][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.069416][ T31] ? __pfx__printk+0x10/0x10 [ 642.074022][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.079653][ T31] vpanic+0x281/0x750 [ 642.083644][ T31] ? __pfx_vpanic+0x10/0x10 [ 642.088135][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 642.093673][ T31] ? preempt_schedule+0xae/0xc0 [ 642.098510][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.104134][ T31] ? preempt_schedule_common+0x83/0xd0 [ 642.109599][ T31] panic+0xb9/0xc0 [ 642.113322][ T31] ? __pfx_panic+0x10/0x10 [ 642.117730][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.123349][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 642.128725][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.134359][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 642.140510][ T31] watchdog+0xfd2/0xfe0 [ 642.144669][ T31] ? watchdog+0x1de/0xfe0 [ 642.148996][ T31] kthread+0x711/0x8a0 [ 642.153056][ T31] ? __pfx_watchdog+0x10/0x10 [ 642.157991][ T31] ? __pfx_kthread+0x10/0x10 [ 642.162578][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.168209][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 642.173407][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.179034][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.184232][ T31] ? __pfx_kthread+0x10/0x10 [ 642.188814][ T31] ret_from_fork+0x439/0x7d0 [ 642.193389][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 642.198489][ T31] ? __switch_to_asm+0x39/0x70 [ 642.203243][ T31] ? __switch_to_asm+0x33/0x70 [ 642.208000][ T31] ? __pfx_kthread+0x10/0x10 [ 642.212601][ T31] ret_from_fork_asm+0x1a/0x30 [ 642.217372][ T31] [ 642.220634][ T31] Kernel Offset: disabled [ 642.224949][ T31] Rebooting in 86400 seconds..