last executing test programs: 55.082275029s ago: executing program 3 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 53.588250102s ago: executing program 3 (id=704): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getpid() openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) 52.013366303s ago: executing program 3 (id=706): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000000)={0x283}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000001a80)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 49.987616559s ago: executing program 3 (id=708): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) 48.565204913s ago: executing program 3 (id=710): socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) 41.253072434s ago: executing program 3 (id=722): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000200)='./control\x00', 0xc014, &(0x7f0000000140)=ANY=[], 0x11, 0x6a2, &(0x7f0000002f80)="$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") prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8001, 0x9, 0x2, 0x1000, 0x2, 0x1, 0x50f, 0x7ff, 0x0, 0x6c, 0x7, 0x2, 0x1, 0x0, 0x2, 0x3, 0x0, 0x1de, 0x1, 0x2, 0x1, 0x5, 0x9, 0x3, 0x0, 0x400000000000000}) 25.543982045s ago: executing program 0 (id=748): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xd8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x5, 0xd00, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x2, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r2 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x15) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x114, 0x0, &(0x7f0000000700), &(0x7f0000000340)) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000780), 0x2, 0x2) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000600)=""/24, 0x18}], 0x1) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 22.230451566s ago: executing program 0 (id=754): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000780), 0xff, 0x46d, &(0x7f0000001bc0)="$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") r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000280)='./control\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r6, 0x4}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_IFALIASn={0x4}]}, 0x28}}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) inotify_init1(0x80000) close(r0) inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x4000088) rmdir(&(0x7f0000000080)='./control\x00') syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0038cecbad8dce0a24359e05a65a4ab28df7afe07fb47d7e2b67b9a0ea16c9d97278ebd7fec38ad0526fba402ecf"], 0x1, 0x516, &(0x7f0000000600)="$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") unlink(&(0x7f0000000000)='./file0/file0\x00') 19.494584434s ago: executing program 1 (id=757): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002c80)={{{@in=@private, @in6=@dev}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000002d80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003100)={{{@in6=@private2, @in6=@private2}}, {{@in6=@empty}, 0x0, @in=@dev}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000900)="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", 0x2000, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) 19.104773795s ago: executing program 5 (id=758): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000000002010400000000000000000200000030e196802c00018014000300050000000000000000000000000000000a000400000000000000000000000000000000000400038004000180403f1a47e50c5e5100974dd0af1e98f357331de02ed327a0b94cc29a4cb255b59522c0c2a5c968533cfe9f90caabc92e3f333d338249763301ea8fc5386632ba420af31eda076122d39236e84bcc0d75"], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x20, 0x3, 0x10, 0xb483, 0x8e8189e6de8dedf8, 0xffffffffffffffff, 0x1, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5, 0x200, 0x0, @value, @void, @value}, 0x48) socket$kcm(0x29, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="74b61dd9a00d1ab3", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 18.850159428s ago: executing program 0 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(0x0, 0x7) syz_read_part_table(0x5fd, &(0x7f0000001a40)="$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") capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) readahead(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=cp936,dm00000000000230,\x00'/47], 0x1, 0x14d3, &(0x7f00000015c0)="$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") 15.86050895s ago: executing program 2 (id=761): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000280)={'batadv0\x00', 0x2}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)="d01d4881040cc19a2d2902fdf1d9752173744eebf9f976c207090ab9fc54e1fb15e5ffa4c7270a3d53d0f32cc6327d256ad8a00d8e75f29964d103fdc71b9908bc4ab7d37ecfbbbf3bc0b0c479e116d2218b3925993d746023936cea5863e7848744fd9d5c6edbb2c1d983acf3c2306c2836e49c43ff2c73fd63e5053796d286fbc5668bd46a24b6bade7fd81722cdd380d6", 0x92}], 0x1}}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 15.332756147s ago: executing program 1 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fstat(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e9488820a629fbf61482e779fe677d802f4fdfb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f2409000000005e9299d7a3ffff531126f8c5b59b3e9a83964da1c7aeb1e1", @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r2, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7f9e33730333759efdf030756e8bf8962e6fcf3b8c519c233fff4bda5ca", @ANYRESOCT], 0x2, 0x1eb, &(0x7f0000000900)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000001c0)=0x3, 0x2) fadvise64(r4, 0x0, 0x0, 0x3) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f0000000c00)=""/136, 0x88}], 0x3}}], 0x1, 0x0, 0x0) 15.304452317s ago: executing program 5 (id=764): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() r5 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffb}) 11.6808943s ago: executing program 5 (id=765): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0x0, 0xffff7fff, 0x0, 0x0, 0x0, "518aba4d000000000000000000000000002000"}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x101c}}, 0x1006) 11.679935967s ago: executing program 0 (id=776): pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket(0x2a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) socket(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r2}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0) 11.679133653s ago: executing program 2 (id=766): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) gettid() r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 10.842477437s ago: executing program 2 (id=768): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000580)={"6159685b7355d1dea71ffb680d9acb7f1054fa3ebffba80cfc333b615d1b", 0x0, 0x0, 0x8, [0x0, 0x4, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x80, 0x7f80000, 0x400, 0x401, 0x0, 0x2, 0x8, 0x7, 0x8, 0x8, 0x1ff]}) recvmmsg(r1, &(0x7f0000000a40), 0x0, 0x2000, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = io_uring_setup(0xc8e, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000380)={0x60, 0x1, 0x0, 0x0, 0x0}, 0x20) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28}, 0x28) 10.818070535s ago: executing program 4 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x280008a, &(0x7f0000000b00)={[{@shortname_mixed}, {@fat=@nfs}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@rodir}, {@shortname_winnt}, {@fat=@discard}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@fat=@tz_utc}, {@utf8no}, {@shortname_winnt}]}, 0x97, 0x2a9, &(0x7f0000002300)="$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") sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.660810301s ago: executing program 5 (id=770): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x3}, 0x20) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5e}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x72d57cb5528fe5f3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001439) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x2000000b) close(r3) close(r4) 9.639913149s ago: executing program 4 (id=771): r0 = openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000100)={0x9, 0x0, [{0x1, 0x3, 0x5, [0x7fff, 0x9, 0xffffffff, 0x9, 0x5, 0x6, 0x7d, 0xffff1cde]}, {0x0, 0x4, 0x3, [0xc398, 0x8001, 0x0, 0xfffffff7, 0x40, 0x6, 0x6]}, {0x7703, 0x9452, 0x866, [0x3, 0x1, 0x1ff, 0x3f, 0xfb8b26e, 0x1, 0x9, 0x20]}, {0x0, 0x7, 0x28000000, [0x9, 0x1bc, 0x973, 0x7, 0x4, 0x7ff, 0x0, 0x5]}, {0x6, 0x6, 0x5ce, [0x3, 0x4b2, 0x6ea, 0x1f, 0x2, 0x9, 0x13, 0x80000001]}, {0x8, 0x0, 0xffffffff, [0x2, 0x4, 0x2e8, 0x9c0, 0x8, 0x145, 0x40, 0x3f]}, {0x10001, 0x9, 0x400, [0x7c1, 0x4, 0x0, 0x6, 0xfffffffa, 0xe8, 0x2, 0x7fffffff]}, {0x40, 0x2, 0x9, [0xbf, 0x9, 0x1, 0x0, 0x0, 0x7fffffff, 0x65, 0x2]}, {0x1f, 0x7, 0x10000, [0x10001, 0x86, 0x9, 0x1ff, 0x7fff, 0x9, 0x8000, 0x200]}]}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7}) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe609d", 0x20, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b0, &(0x7f0000001100)={0x0}) 9.475233102s ago: executing program 1 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000a40)=[{r4}], 0x1, 0x0, 0x0, 0x0) 7.163569187s ago: executing program 1 (id=773): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x816, &(0x7f0000000340)={[{@rodir}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@fat=@discard}, {@utf8no}, {@fat=@nfs}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0x0, 0x2aa, &(0x7f0000000d00)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407e, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$eJzs3MtvG8UfAPDv2nHS5y/5lfJoaCFQEBGPpEkf9MAFBBIHkJC4FHEKSVqFpg1qgkSrCAKHcESVuCOOSPwFnOCCgBMSV7ijShXKpYWT0dq7qZvYaZw4del+PtLGM96xZr67O/bsjJ0ACmso/ZNE7IuI3yOiv569vcBQ/eHmyuLk3yuLk0lUq2//ldTK3VhZnMyL5q/bW89Uq1m+r0m9y+9GTMzOTl/K8qMLFz4Ynb985YWZCxPnps9NXxw/ffrE8SO9p8ZPdiTONK4bgx/PHT70+jtX35w8c/W9n79N27sv298YR6cM1Y9uU09XOl1bd+1vSCc9XWwIbSlHRHq6KrX+3x/l2L26rz9e+6yrjQN2VLVarTb7fM4sVYH7WBLdbgHQHfkHfXr/m293aehxT7j+cv0GKI37ZrbV9/REKStTWXN/20lDEXFm6Z+v0i12aB4CAKDR9+n45/lm479SPNRQ7n/ZGspARPw/Ig5ExAMRcTAiHoyolX04Ih5ps/61KyTrxz+la1sKbJPS8d9L2drW7eO/fPQXA+Ust78WfyU5OzM7fSw7JsNR6UvzYxvU8cOrv33Ral/j+C/d0vrzsWDWjms9aybopiYWJrYTc6Prn0YM9jSLP4l8GSeJiEMRMbjFOmae/eZwq313jn8DHVhnqn4d8Uz9/C/FmvhzScv1ybEXT42fHN0Vs9PHRvOrYr1ffl1+q1X924q/A9Lzv6fp9b8a/0CyK2L+8pXztfXa+fbrWP7j85b3NFu7/mdWG9ebPX40sbBwaSyiN3lj/fPjt16b5/PyafzDR5v3/wNx60g8GhHpRXwkIh6LiMeztj8REU9GxNEN4v/plafebz/+DWblOyiNf+pO5z8az3/7ifL5H79rP/5cev5P1FLD2TObef/bbAO3c+wAAADgv6JU+w58UhpZTZdKIyP17/AfjD1LMTe/8NzZuQ8vTtW/Kz8QlVI+09XfMB86ls0N5/nxNfnj2bzxl+XdtfzI5NzsVLeDh4Lb26L/p/4sd7t1wI7zey0oLv0fikv/h+LS/6G49H8ormb9/5MutAO4+3z+Q3Hp/1Bc+j8Ul/4PhdTyt/Glbf3kf7uJpBuVSrSTiNI90Yz7P9Gz6X9mscVEX9Nd3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ix/AwAA//+UFuN0") get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) mkdir(&(0x7f0000000440)='./control\x00', 0x0) 7.038584704s ago: executing program 2 (id=774): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f041}) setsockopt(0xffffffffffffffff, 0xff, 0x0, &(0x7f0000000100), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioperm(0x0, 0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000240)={@link_local={0x3}, @dev, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@end, @lsrr={0x83, 0x3}, @rr={0x7, 0xf, 0x0, [@local, @rand_addr=0x64010102, @loopback]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x9c) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 7.038035796s ago: executing program 4 (id=775): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) socket(0x1, 0x803, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x300, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r1], 0x40}}, 0x0) 6.876504266s ago: executing program 0 (id=777): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x1f0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3}, @sadb_x_sec_ctx={0x1}]}, 0xc8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x9, 0x5, 0x77, 0x4}, {0x1, 0xfa, 0x0, 0x1000}, {0x2, 0x5, 0x2, 0x7}, {0x7, 0x9, 0x1, 0xf}]}) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0x70000}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) lchown(&(0x7f0000000100)='./file0\x00', 0x0, r6) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffb) 6.656180101s ago: executing program 2 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x10) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r4}, 0x20) 6.624704868s ago: executing program 5 (id=779): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rt_sigqueueinfo(0x0, 0x3f, &(0x7f0000000180)={0x1e, 0x4, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46100) fallocate(r1, 0x0, 0x0, 0x1000) 6.505387704s ago: executing program 4 (id=780): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r4, 0x0, 0x0, 0x0) 3.650528315s ago: executing program 2 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x4000000, {0x2, 0x1}, {0x2, 0x4, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x8000}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) r2 = dup(0xffffffffffffffff) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 3.002279055s ago: executing program 4 (id=782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xe) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r5 = dup(r4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) r7 = dup(r6) sendfile(r7, r5, 0x0, 0x89ffc) 2.980401205s ago: executing program 5 (id=783): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x0, &(0x7f0000000280)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x80, 0x3, 0x5}]}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b2c, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x1200, 0x0, 0xdab3) 2.892768919s ago: executing program 1 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x280008a, &(0x7f0000000b00)={[{@shortname_mixed}, {@fat=@nfs}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@rodir}, {@shortname_winnt}, {@fat=@discard}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@fat=@tz_utc}, {@utf8no}, {@shortname_winnt}]}, 0x97, 0x2a9, &(0x7f0000002300)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.533661587s ago: executing program 0 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 1.252768845s ago: executing program 4 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x1000f0000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], &(0x7f0000000240)=""/171, 0x42, 0xab, 0x3, 0x0, 0x0, @void, @value}, 0x20) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) getsockopt$ax25_int(r2, 0x101, 0x6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 1 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100202078050000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffe603f86000000000b703000000000000850000002d00000085000000500000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa5e6c85000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}, @ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r3}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) kernel console output (not intermixed with test programs): devsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.221102][ T8422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.453736][ T8560] veth0_vlan: entered promiscuous mode [ 580.496772][ T8560] veth1_vlan: entered promiscuous mode [ 580.521815][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.547011][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.660942][ T8617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.688669][ T5488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.706691][ T5488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.709829][ T8560] veth0_macvtap: entered promiscuous mode [ 580.764525][ T8560] veth1_macvtap: entered promiscuous mode [ 580.886123][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.948576][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.996893][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.029820][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.046811][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.371639][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.032456][ T8771] loop5: detected capacity change from 0 to 16 [ 582.743829][ T8771] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xd17243cd, 0x02d6543f expected [ 582.803179][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.864066][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.921558][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.021627][ T8774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.484'. [ 583.328560][ T8780] loop0: detected capacity change from 0 to 1024 [ 584.093957][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.152591][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.201825][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.244418][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.301156][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.315665][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.333374][ T8560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.361753][ T8560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.619147][ T8560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.290681][ T8782] loop5: detected capacity change from 0 to 4096 [ 585.335204][ T8560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.438089][ T8560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.740785][ T8560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.766279][ T8793] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 585.793207][ T8560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.789367][ T8617] veth0_vlan: entered promiscuous mode [ 588.137074][ T8617] veth1_vlan: entered promiscuous mode [ 588.634869][ T8821] loop0: detected capacity change from 0 to 8 [ 589.163809][ T8821] SQUASHFS error: zlib decompression failed, data probably corrupt [ 589.254114][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.282255][ T8821] SQUASHFS error: Failed to read block 0x9b: -5 [ 589.428014][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.438577][ T8821] SQUASHFS error: Unable to read metadata cache entry [99] [ 589.445958][ T8821] SQUASHFS error: Unable to read inode 0x127 [ 589.449539][ T8617] veth0_macvtap: entered promiscuous mode [ 589.600493][ T8617] veth1_macvtap: entered promiscuous mode [ 590.900355][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.983603][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.015679][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.042761][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.062335][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.208094][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.373483][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.384136][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.394324][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.405189][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.415935][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.536050][ T8848] syz.2.493[8848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.536245][ T8848] syz.2.493[8848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.596553][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.684357][ T8617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.869791][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.965468][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.965495][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.965517][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.965533][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.008793][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.018728][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.030550][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.044065][ T8617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.044093][ T8617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.046458][ T8617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.051341][ T8617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.051386][ T8617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.051425][ T8617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.051462][ T8617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.122443][ T5512] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 595.663860][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 595.839972][ T8861] vlan2: entered promiscuous mode [ 595.840004][ T8861] team0: entered promiscuous mode [ 595.840022][ T8861] team_slave_0: entered promiscuous mode [ 595.840542][ T8861] team_slave_1: entered promiscuous mode [ 595.841023][ T8861] vlan2: entered allmulticast mode [ 595.841042][ T8861] team0: entered allmulticast mode [ 595.841059][ T8861] team_slave_0: entered allmulticast mode [ 595.841078][ T8861] team_slave_1: entered allmulticast mode [ 596.295155][ T8861] team0: left allmulticast mode [ 596.295193][ T8861] team_slave_0: left allmulticast mode [ 596.295216][ T8861] team_slave_1: left allmulticast mode [ 596.295253][ T8861] team0: left promiscuous mode [ 596.295271][ T8861] team_slave_0: left promiscuous mode [ 596.295563][ T8861] team_slave_1: left promiscuous mode [ 596.915462][ T1165] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 596.970045][ T5497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.027711][ T5497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.152415][ T1165] usb 1-1: Using ep0 maxpacket: 8 [ 597.170613][ T8901] netlink: 104 bytes leftover after parsing attributes in process `syz.4.501'. [ 597.191066][ T1165] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=94.07 [ 597.209523][ T1165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.243591][ T1165] usb 1-1: Product: syz [ 597.247935][ T1165] usb 1-1: Manufacturer: syz [ 597.284214][ T1165] usb 1-1: SerialNumber: syz [ 597.341847][ T1165] usb 1-1: config 0 descriptor?? [ 597.373985][ T5497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.443992][ T5497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.479549][ T1165] comedi comedi0: Wrong number of endpoints [ 597.497270][ T1165] dt9812 1-1:0.0: driver 'dt9812' failed to auto-configure device. [ 598.252536][ T5298] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 599.385075][ T5298] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 599.410936][ T5298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.526942][ T5298] usb 4-1: config 0 descriptor?? [ 599.566292][ T8922] loop5: detected capacity change from 0 to 512 [ 599.906574][ T8922] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.505: bad orphan inode 4 [ 600.305767][ T29] audit: type=1326 audit(1725920782.262:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.4.507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17e8f7def9 code=0x0 [ 600.825396][ T8928] loop2: detected capacity change from 0 to 8 [ 600.834841][ T8922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.857745][ T29] audit: type=1800 audit(1725920783.042:80): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.379" name="/" dev="fuse" ino=1 res=0 errno=0 [ 601.528194][ T8940] SQUASHFS error: Failed to read block 0x8f: -5 [ 601.536030][ T8940] SQUASHFS error: Failed to read block 0xc00090: -5 [ 601.542912][ T8940] SQUASHFS error: Failed to read block 0x8f: -5 [ 601.553074][ T8940] SQUASHFS error: Failed to read block 0x8f: -5 [ 601.559557][ T8940] SQUASHFS error: Failed to read block 0x8f: -5 [ 601.565989][ T8940] SQUASHFS error: Failed to read block 0x8f: -5 [ 601.572593][ T8940] SQUASHFS error: Failed to read block 0x8f: -5 [ 601.589510][ T8934] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 3: invalid block bitmap [ 602.454161][ T29] audit: type=1800 audit(1725920783.842:81): pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.508" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 602.893564][ T5298] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 602.916399][ T5298] asix 4-1:0.0: probe with driver asix failed with error -71 [ 602.985084][ T5298] usb 4-1: USB disconnect, device number 3 [ 603.000693][ T7764] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.462143][ T8969] loop1: detected capacity change from 0 to 1024 [ 605.411095][ T8951] block device autoloading is deprecated and will be removed. [ 607.918556][ T8983] loop4: detected capacity change from 0 to 1024 [ 608.203514][ T8983] hfsplus: unable to parse mount options [ 608.859013][ T8999] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 609.282653][ T9001] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 612.292306][ T5413] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 612.341137][ T9026] loop3: detected capacity change from 0 to 512 [ 612.391339][ T9026] ext4: Unknown parameter 'smackfsdef' [ 612.481188][ T5252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 612.493376][ T5252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.502075][ T5252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.511691][ T5252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.523289][ T5252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 612.530769][ T5252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.554346][ T5413] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 612.981980][ T9039] trusted_key: encrypted_key: key user:syz not found [ 614.206574][ T5413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.395544][ T9043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.417766][ T5413] usb 5-1: config 0 descriptor?? [ 614.634450][ T5244] Bluetooth: hci3: command tx timeout [ 616.557030][ T5413] usb 5-1: can't set config #0, error -71 [ 616.564838][ T5413] usb 5-1: USB disconnect, device number 4 [ 616.713996][ T5244] Bluetooth: hci3: command tx timeout [ 617.762484][ T5413] IPVS: starting estimator thread 0... [ 617.790130][ T5512] usb 1-1: USB disconnect, device number 8 [ 617.877949][ T9053] IPVS: using max 19 ests per chain, 45600 per kthread [ 619.080772][ T5244] Bluetooth: hci3: command tx timeout [ 621.507949][ T5244] Bluetooth: hci3: command tx timeout [ 625.389451][ T5480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.590356][ T9105] loop2: detected capacity change from 0 to 64 [ 625.648118][ T9109] loop1: detected capacity change from 0 to 128 [ 625.754148][ T9109] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 625.816372][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 628.049557][ T5480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.460603][ T9133] loop2: detected capacity change from 0 to 256 [ 628.585027][ T9133] vfat: Bad value for 'codepage' [ 629.382286][ T5413] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 629.745991][ T5480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.894022][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.900782][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.144096][ T5413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.219147][ T9032] chnl_net:caif_netlink_parms(): no params data found [ 630.260769][ T5413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.356680][ T5413] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 630.439071][ T5413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.535554][ T5413] usb 3-1: config 0 descriptor?? [ 630.550374][ T9146] loop5: detected capacity change from 0 to 2048 [ 631.066367][ T9146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 631.700216][ T5480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.966254][ T5413] hid-led 0003:27B8:01ED.0001: unknown main item tag 0x0 [ 632.981323][ T5413] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -71 [ 632.995887][ T5413] usb 3-1: USB disconnect, device number 6 [ 633.246428][ T9170] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 633.246428][ T9170] The task syz.1.558 (9170) triggered the difference, watch for misbehavior. [ 633.726516][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.735937][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.745714][ T9032] bridge_slave_0: entered allmulticast mode [ 634.039000][ T9032] bridge_slave_0: entered promiscuous mode [ 635.101957][ T9182] netlink: 47 bytes leftover after parsing attributes in process `syz.2.561'. [ 635.271063][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.452490][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.459968][ T9032] bridge_slave_1: entered allmulticast mode [ 636.103816][ T9032] bridge_slave_1: entered promiscuous mode [ 637.555100][ T29] audit: type=1326 audit(1725920819.802:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.5.567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fa057def9 code=0x0 [ 637.627860][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.686217][ T5480] bridge_slave_1: left allmulticast mode [ 637.691932][ T5480] bridge_slave_1: left promiscuous mode [ 637.728748][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.889127][ T5480] bridge_slave_0: left allmulticast mode [ 637.901186][ T5480] bridge_slave_0: left promiscuous mode [ 637.935331][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.212254][ T29] audit: type=1326 audit(1725920821.472:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.1.571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02aa37def9 code=0x0 [ 640.977724][ T9268] syz.1.576 uses obsolete (PF_INET,SOCK_PACKET) [ 641.713568][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.990371][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.952734][ T5244] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 642.963854][ T5244] Bluetooth: hci1: Injecting HCI hardware error event [ 642.979823][ T5244] Bluetooth: hci1: hardware error 0x00 [ 643.193900][ T5480] bond0 (unregistering): Released all slaves [ 643.256265][ T9295] loop4: detected capacity change from 0 to 128 [ 643.271385][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.341046][ T9295] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 643.430224][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 643.469652][ T9298] loop2: detected capacity change from 0 to 512 [ 643.485580][ T9298] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 643.531272][ T9298] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.579: iget: bad i_size value: -67835469387268086 [ 644.076966][ T9298] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.579: couldn't read orphan inode 15 (err -117) [ 644.152780][ T9298] EXT4-fs (loop2): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.165226][ T9298] ext2 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.029209][ T9032] team0: Port device team_slave_0 added [ 645.091147][ T7754] EXT4-fs (loop2): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 645.317466][ T5244] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 646.788168][ T9330] UBIFS error (pid: 9330): cannot open "./file0", error -22 [ 647.597098][ T9331] loop2: detected capacity change from 0 to 512 [ 647.627860][ T9324] loop4: detected capacity change from 0 to 2048 [ 647.645534][ T9321] loop3: detected capacity change from 0 to 8 [ 647.685880][ T9032] team0: Port device team_slave_1 added [ 647.840396][ T9324] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 647.892000][ T9324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.183544][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.360872][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.553174][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.585189][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.585773][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 649.659235][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.777518][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.892376][ T9348] loop3: detected capacity change from 0 to 4096 [ 650.271787][ T9348] ntfs3: loop3: ino=21, The size of extended attributes must not exceed 64KiB [ 650.305290][ T9356] ntfs3: loop3: ino=21, The size of extended attributes must not exceed 64KiB [ 651.721082][ T9032] hsr_slave_0: entered promiscuous mode [ 651.738795][ T9032] hsr_slave_1: entered promiscuous mode [ 652.739591][ T5480] hsr_slave_0: left promiscuous mode [ 652.785661][ T5480] hsr_slave_1: left promiscuous mode [ 652.843914][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.874005][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.921769][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.995493][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.159763][ T5480] veth1_macvtap: left promiscuous mode [ 653.195630][ T5480] veth0_macvtap: left promiscuous mode [ 653.245232][ T5480] veth1_vlan: left promiscuous mode [ 653.260688][ T5480] veth0_vlan: left promiscuous mode [ 653.829509][ T9382] syz.1.596: attempt to access beyond end of device [ 653.829509][ T9382] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 653.844216][ T9382] qnx4: unable to read the superblock [ 655.409608][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 655.864996][ T8] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 655.873656][ T47] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 655.890538][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 655.901023][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 655.912578][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 655.936721][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 655.956372][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 655.971474][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.021171][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 656.031586][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 656.125069][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.132282][ T47] usb 6-1: config 0 has no interfaces? [ 656.133476][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 656.137770][ T47] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 656.137803][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.146911][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 656.175072][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.193673][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 656.202738][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 656.216407][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.226154][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 656.298904][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 656.337718][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.343503][ T47] usb 6-1: config 0 descriptor?? [ 656.376072][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 656.392837][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 656.420678][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.429267][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 656.441712][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 656.462361][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 656.524837][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 656.542612][ T8] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 656.551648][ T8] usb 5-1: Product: syz [ 656.568665][ T8] usb 5-1: Manufacturer: syz [ 656.667912][ T8] usb 5-1: SerialNumber: syz [ 656.801848][ T8] usb 5-1: config 0 descriptor?? [ 656.817731][ T8] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 656.842321][ T9383] loop5: detected capacity change from 0 to 256 [ 656.972806][ T25] usb 6-1: USB disconnect, device number 3 [ 657.394631][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 657.406026][ C0] usb 5-1: yurex_control_callback - control failed: -2 [ 657.479826][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 658.481733][ T47] usb 5-1: USB disconnect, device number 5 [ 658.684690][ T47] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 659.208888][ T9407] loop5: detected capacity change from 0 to 512 [ 659.253912][ T9407] EXT4-fs: quotafile must be on filesystem root [ 659.383708][ T9410] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 660.075891][ T9366] vlan2: entered promiscuous mode [ 660.776424][ T9420] UBIFS error (pid: 9420): cannot open "./file0", error -22 [ 661.681258][ T5252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 661.725235][ T5252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 661.742429][ T5252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.750988][ T9419] binder: 9414:9419 ioctl 4018620d 0 returned -22 [ 661.765262][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.774511][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 661.783270][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.046319][ T9427] loop4: detected capacity change from 0 to 512 [ 662.330844][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.015736][ T9427] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.609: invalid block [ 663.068043][ T9427] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.609: couldn't read orphan inode 11 (err -117) [ 663.212977][ T9427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.316404][ T5252] Bluetooth: hci0: command tx timeout [ 664.355061][ T7758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.212431][ T5298] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 665.404066][ T5298] usb 6-1: device descriptor read/64, error -71 [ 665.705002][ T5298] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 665.922402][ T5298] usb 6-1: device descriptor read/64, error -71 [ 666.055727][ T5298] usb usb6-port1: attempt power cycle [ 666.179098][ T5480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.382698][ T5252] Bluetooth: hci0: command tx timeout [ 666.872343][ T5298] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 666.959977][ T5298] usb 6-1: device descriptor read/8, error -71 [ 667.262453][ T5298] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 667.385274][ T5298] usb 6-1: device descriptor read/8, error -71 [ 667.466394][ T5480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.542671][ T5298] usb usb6-port1: unable to enumerate USB device [ 668.472902][ T5252] Bluetooth: hci0: command tx timeout [ 669.200688][ T9480] netlink: 112 bytes leftover after parsing attributes in process `syz.5.617'. [ 670.493509][ T5480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.573219][ T5252] Bluetooth: hci0: command tx timeout [ 670.895901][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 670.925663][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 670.936740][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 670.952470][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 670.960623][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 670.973930][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 671.053468][ T9473] loop4: detected capacity change from 0 to 4096 [ 672.028228][ T9491] loop2: detected capacity change from 0 to 2048 [ 672.173695][ T9491] EXT4-fs: Ignoring removed mblk_io_submit option [ 672.293946][ T5252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 672.310861][ T5480] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.321536][ T5252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 672.343523][ T5252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 672.354513][ T5252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 672.366700][ T9491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.391871][ T5252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 672.498350][ T5252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 672.702478][ T9421] chnl_net:caif_netlink_parms(): no params data found [ 672.733717][ T9491] EXT4-fs (loop2): shut down requested (0) [ 673.183504][ T5244] Bluetooth: hci2: command tx timeout [ 673.387455][ T9506] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.620: bg 0: block 234: padding at end of block bitmap is not set [ 673.572396][ T9506] EXT4-fs (loop2): Remounting filesystem read-only [ 673.745904][ T9511] loop4: detected capacity change from 0 to 512 [ 673.890440][ T9511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.904472][ T7754] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.934225][ T9511] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.248588][ T9526] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.624: path /82/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 674.518573][ T9530] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.624: Directory hole found for htree leaf block 0 [ 674.563192][ T9526] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz.4.624: path /82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 674.608136][ T9526] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.624: path /82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 674.639237][ T9526] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz.4.624: path /82/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 674.674897][ T9421] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.682624][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.690020][ T9421] bridge_slave_0: entered allmulticast mode [ 674.699432][ T9421] bridge_slave_0: entered promiscuous mode [ 674.712717][ T5244] Bluetooth: hci4: command tx timeout [ 674.752570][ T5480] bridge_slave_1: left allmulticast mode [ 674.763950][ T5480] bridge_slave_1: left promiscuous mode [ 674.781751][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.831921][ T5480] bridge_slave_0: left allmulticast mode [ 674.853448][ T7758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.865152][ T5480] bridge_slave_0: left promiscuous mode [ 674.870983][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.245935][ T9537] Bluetooth: MGMT ver 1.23 [ 675.264320][ T5244] Bluetooth: hci2: command tx timeout [ 676.484638][ T9549] loop4: detected capacity change from 0 to 1024 [ 676.786624][ T5244] Bluetooth: hci4: command tx timeout [ 676.882299][ T6709] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 677.000882][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 677.067017][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.087368][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.100242][ T5480] bond0 (unregistering): Released all slaves [ 677.121579][ T9421] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.129556][ T6709] usb 6-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=fa.f1 [ 677.132516][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.140260][ T6709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.152802][ T9421] bridge_slave_1: entered allmulticast mode [ 677.163045][ T6709] usb 6-1: Product: syz [ 677.165964][ T9421] bridge_slave_1: entered promiscuous mode [ 677.175010][ T6709] usb 6-1: Manufacturer: syz [ 677.179651][ T6709] usb 6-1: SerialNumber: syz [ 677.206147][ T6709] usb 6-1: config 0 descriptor?? [ 677.210833][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 677.220703][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 56, changing to 9 [ 677.241102][ T6709] usb 6-1: Found UVC 0.00 device syz (0408:4030) [ 677.246769][ T8] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59300, setting to 1024 [ 677.261306][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 677.280291][ T6709] usb 6-1: No valid video chain found. [ 677.296574][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.343019][ T5244] Bluetooth: hci2: command tx timeout [ 677.406476][ T9549] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 677.426406][ T8] hub 5-1:4.0: USB hub found [ 677.638888][ T8] hub 5-1:4.0: 2 ports detected [ 677.655486][ T8] hub 5-1:4.0: insufficient power available to use all downstream ports [ 677.776065][ T9421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.805153][ T9421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.855931][ T8] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 677.891915][ T8] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 677.960061][ T8] usb 5-1: USB disconnect, device number 6 [ 678.103213][ T9421] team0: Port device team_slave_0 added [ 678.148756][ T5480] hsr_slave_0: left promiscuous mode [ 678.160499][ T5480] hsr_slave_1: left promiscuous mode [ 678.171601][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.190321][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.204681][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.217259][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.266192][ T5480] veth1_macvtap: left promiscuous mode [ 678.273588][ T5480] veth0_macvtap: left promiscuous mode [ 678.279547][ T5480] veth1_vlan: left promiscuous mode [ 678.291236][ T5480] veth0_vlan: left promiscuous mode [ 678.862420][ T5244] Bluetooth: hci4: command tx timeout [ 679.296911][ T9570] loop4: detected capacity change from 0 to 2048 [ 679.404176][ T5298] usb 6-1: USB disconnect, device number 8 [ 679.418399][ T9570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.430964][ T5244] Bluetooth: hci2: command tx timeout [ 679.505337][ T29] audit: type=1800 audit(1725920861.772:84): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.632" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 679.831048][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 680.031481][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 680.049899][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 680.061917][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 680.096148][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 680.107628][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 680.120716][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.129867][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.149508][ T8] usb 5-1: config 0 descriptor?? [ 680.163173][ T9570] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 680.186513][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 680.615185][ T8] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 680.705354][ T8] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 680.952441][ T5244] Bluetooth: hci4: command tx timeout [ 680.954183][ T9574] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 681.023670][ T29] audit: type=1326 audit(1725920863.272:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9568 comm="syz.4.632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17e8f7def9 code=0x0 [ 681.110751][ T8] usb 5-1: USB disconnect, device number 7 [ 681.445095][ T9421] team0: Port device team_slave_1 added [ 681.639614][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.646825][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.674423][ T9421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.689112][ T9421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.698010][ T9421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.724815][ T9421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.858331][ T9482] chnl_net:caif_netlink_parms(): no params data found [ 681.958065][ T9494] chnl_net:caif_netlink_parms(): no params data found [ 682.090302][ T9421] hsr_slave_0: entered promiscuous mode [ 682.123849][ T9421] hsr_slave_1: entered promiscuous mode [ 682.130639][ T9421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.140290][ T9421] Cannot create hsr debugfs directory [ 682.335351][ T7758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.776012][ T9482] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.796957][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.813752][ T9482] bridge_slave_0: entered allmulticast mode [ 683.837172][ T9482] bridge_slave_0: entered promiscuous mode [ 683.877046][ T5480] IPVS: stop unused estimator thread 0... [ 685.183174][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.222370][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.268740][ T9494] bridge_slave_0: entered allmulticast mode [ 685.304455][ T9494] bridge_slave_0: entered promiscuous mode [ 685.372414][ T9482] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.386799][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.420054][ T9482] bridge_slave_1: entered allmulticast mode [ 685.483194][ T9482] bridge_slave_1: entered promiscuous mode [ 685.551608][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.572366][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.579896][ T9494] bridge_slave_1: entered allmulticast mode [ 685.597178][ T9494] bridge_slave_1: entered promiscuous mode [ 685.869894][ T9482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.021471][ T9623] netlink: 160 bytes leftover after parsing attributes in process `syz.4.638'. [ 686.034499][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.041039][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.059496][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.098467][ T9623] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 686.183035][ T9623] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 686.380296][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.395978][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.415233][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.432837][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.451053][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.465162][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.482845][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.493520][ T9623] wg0 speed is unknown, defaulting to 1000 [ 686.630223][ T29] audit: type=1800 audit(1725920868.222:86): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.638" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 686.815695][ T5252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 686.829133][ T5252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 686.842534][ T5252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.857568][ T5252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.866306][ T5252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 686.874550][ T5252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 687.125533][ T5480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.313330][ T5252] Bluetooth: Fragment is too long (len 16, expected 2) [ 687.327088][ T9494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.444950][ T9482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.601070][ T9642] 9pnet_virtio: no channels available for device [ 688.385264][ T9494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.533485][ T5480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.643874][ T9482] team0: Port device team_slave_0 added [ 688.945519][ T5252] Bluetooth: hci3: command tx timeout [ 689.358758][ T9494] team0: Port device team_slave_0 added [ 689.527172][ T9633] loop5: detected capacity change from 0 to 32768 [ 689.535402][ T5480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.552710][ T9633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.640 (9633) [ 689.594997][ T9482] team0: Port device team_slave_1 added [ 689.617446][ T9633] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 689.649935][ T9633] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 689.660738][ T9633] BTRFS info (device loop5): using free-space-tree [ 689.796473][ T9494] team0: Port device team_slave_1 added [ 689.849731][ T5480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.151723][ T9625] wg0 speed is unknown, defaulting to 1000 [ 690.340380][ T9672] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 690.530119][ T7764] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 690.600857][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.618553][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.683297][ T9482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.053091][ T5252] Bluetooth: hci3: command tx timeout [ 691.267976][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.275375][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.141452][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.329794][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.442534][ T9494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.465393][ T9482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.476991][ T9482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.512442][ T9482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.538351][ T9681] netlink: 68 bytes leftover after parsing attributes in process `syz.5.645'. [ 693.134846][ T5252] Bluetooth: hci3: command tx timeout [ 693.221130][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.230143][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.261271][ T9494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.352533][ T5296] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 693.420262][ T9482] hsr_slave_0: entered promiscuous mode [ 693.427737][ T9482] hsr_slave_1: entered promiscuous mode [ 693.445073][ T9482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.453510][ T9482] Cannot create hsr debugfs directory [ 693.533956][ T5296] usb 5-1: Using ep0 maxpacket: 8 [ 693.558125][ T5296] usb 5-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 693.567983][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.591739][ T5296] usb 5-1: config 0 descriptor?? [ 693.879560][ T47] usb 5-1: USB disconnect, device number 8 [ 693.910476][ T9681] infiniband syz0: set active [ 693.918642][ T9681] infiniband syz0: added bond_slave_0 [ 693.925752][ T9681] syz0: rxe_create_cq: returned err = -12 [ 693.937137][ T9681] infiniband syz0: Couldn't create ib_mad CQ [ 693.943958][ T9681] infiniband syz0: Couldn't open port 1 [ 694.016423][ T9494] hsr_slave_0: entered promiscuous mode [ 694.026365][ T9681] RDS/IB: syz0: added [ 694.038351][ T9494] hsr_slave_1: entered promiscuous mode [ 694.047095][ T9681] smc: adding ib device syz0 with port count 1 [ 694.055999][ T9681] smc: ib device syz0 port 1 has pnetid [ 694.061991][ T9494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.078325][ T9494] Cannot create hsr debugfs directory [ 694.135833][ T5480] bridge_slave_1: left allmulticast mode [ 694.141687][ T5480] bridge_slave_1: left promiscuous mode [ 694.153360][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.183695][ T5480] bridge_slave_0: left allmulticast mode [ 694.189381][ T5480] bridge_slave_0: left promiscuous mode [ 694.282500][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.316700][ T5480] bridge_slave_1: left allmulticast mode [ 694.323066][ T5480] bridge_slave_1: left promiscuous mode [ 694.333260][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.355609][ T5480] bridge_slave_0: left allmulticast mode [ 694.361335][ T5480] bridge_slave_0: left promiscuous mode [ 694.372541][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.207888][ T5252] Bluetooth: hci3: command tx timeout [ 695.840430][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.870064][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.896996][ T5480] bond0 (unregistering): Released all slaves [ 696.221853][ T9709] loop4: detected capacity change from 0 to 1024 [ 696.367210][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.381142][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.398340][ T5480] bond0 (unregistering): Released all slaves [ 696.526903][ T9709] netem: incorrect gi model size [ 696.543090][ T9709] netem: change failed [ 697.142191][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 697.848572][ T9625] chnl_net:caif_netlink_parms(): no params data found [ 698.085233][ T9421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 698.951192][ T9421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 699.157992][ T9421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 699.413197][ T9421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 699.761065][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.793556][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.801623][ T9625] bridge_slave_0: entered allmulticast mode [ 699.855101][ T9625] bridge_slave_0: entered promiscuous mode [ 699.887290][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.912321][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.919851][ T9625] bridge_slave_1: entered allmulticast mode [ 699.944415][ T9625] bridge_slave_1: entered promiscuous mode [ 700.334583][ T9739] ipt_REJECT: ECHOREPLY no longer supported. [ 700.874820][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.106357][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.603009][ T9625] team0: Port device team_slave_0 added [ 702.568794][ T9625] team0: Port device team_slave_1 added [ 702.583665][ T9750] loop4: detected capacity change from 0 to 2048 [ 702.694130][ T9750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.792484][ T9750] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 702.916878][ T9750] Bluetooth: MGMT ver 1.23 [ 702.919793][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.952842][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.032692][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.035703][ T7758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.148688][ T9494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 703.223802][ T9494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 703.269973][ T9494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 703.321421][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 703.335477][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 703.344984][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 703.363864][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 703.371085][ T29] audit: type=1326 audit(1725920885.632:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9761 comm="syz.4.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17e8f7def9 code=0x0 [ 703.403024][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 703.410690][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 703.487127][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.495562][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.533744][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.564590][ T9494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 703.816135][ T9421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.184243][ T9625] hsr_slave_0: entered promiscuous mode [ 704.225210][ T9625] hsr_slave_1: entered promiscuous mode [ 704.247619][ T9625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 704.283947][ T9625] Cannot create hsr debugfs directory [ 704.407892][ T9421] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.622600][ T5252] Bluetooth: hci6: command tx timeout [ 705.805078][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.812388][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.138210][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.145499][ T5491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.525636][ T9482] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.663678][ T5252] Bluetooth: hci6: command tx timeout [ 707.748268][ T9482] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.838415][ T9759] wg0 speed is unknown, defaulting to 1000 [ 707.970094][ T9482] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 708.386794][ T9625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.622372][ T9482] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.856553][ T47] IPVS: starting estimator thread 0... [ 708.959717][ T9816] IPVS: using max 16 ests per chain, 38400 per kthread [ 709.025206][ T9822] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 709.146117][ T9625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.704239][ T9625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.743673][ T5252] Bluetooth: hci6: command tx timeout [ 709.818907][ T9494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.879559][ T5480] hsr_slave_0: left promiscuous mode [ 709.886358][ T5480] hsr_slave_1: left promiscuous mode [ 709.893862][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.901975][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.929342][ T5480] hsr_slave_0: left promiscuous mode [ 709.937835][ T5480] hsr_slave_1: left promiscuous mode [ 709.962744][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.971828][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.984745][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.994900][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.056838][ T5480] veth1_macvtap: left promiscuous mode [ 710.062647][ T5480] veth0_macvtap: left promiscuous mode [ 710.069011][ T5480] veth1_vlan: left promiscuous mode [ 710.074957][ T5480] veth0_vlan: left promiscuous mode [ 710.729564][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 710.793636][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 711.823574][ T5252] Bluetooth: hci6: command tx timeout [ 712.790245][ T9841] loop4: detected capacity change from 0 to 2048 [ 712.817043][ T9841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.190707][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 713.638436][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 714.095911][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.607953][ T9848] syz.4.670: attempt to access beyond end of device [ 714.607953][ T9848] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 714.623926][ T9848] SQUASHFS error: Failed to read block 0x0: -5 [ 714.630215][ T9848] unable to read squashfs_super_block [ 715.909017][ T9625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.817066][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.121115][ T9494] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.375297][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.375428][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.607862][ T5488] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.615207][ T5488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.744193][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 717.844090][ T9625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 718.051200][ T9625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 718.188039][ T9625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 718.229233][ T9625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 718.381177][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.393806][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.412598][ T9759] bridge_slave_0: entered allmulticast mode [ 718.421294][ T9759] bridge_slave_0: entered promiscuous mode [ 718.440303][ T9421] veth0_vlan: entered promiscuous mode [ 718.557034][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.573134][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.580610][ T9759] bridge_slave_1: entered allmulticast mode [ 718.608683][ T9759] bridge_slave_1: entered promiscuous mode [ 718.626515][ T9868] loop4: detected capacity change from 0 to 512 [ 718.653195][ T9868] EXT4-fs: Ignoring removed nobh option [ 718.691949][ T9868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.732373][ T9868] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.769412][ T9421] veth1_vlan: entered promiscuous mode [ 718.897426][ T9482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.971380][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.014908][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.301264][ T9875] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.674: bg 0: block 224: padding at end of block bitmap is not set [ 719.380246][ T9875] EXT4-fs (loop4): Remounting filesystem read-only [ 719.915098][ T9759] team0: Port device team_slave_0 added [ 719.946917][ T9759] team0: Port device team_slave_1 added [ 719.947181][ T7758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.982283][ T5503] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 720.032807][ T5503] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 720.069544][ T5503] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 720.128652][ T9482] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.132361][ T5503] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 720.196632][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.204080][ T9100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.255388][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.262715][ T9100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.335141][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.372233][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.449952][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.473903][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.480869][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.552169][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 721.580316][ T5480] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.694617][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 721.708315][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 721.732501][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 721.745107][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 721.754662][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 721.768213][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 721.918149][ T9887] loop4: detected capacity change from 0 to 512 [ 721.992554][ T9887] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 722.039320][ T9887] EXT4-fs (loop4): 1 truncate cleaned up [ 722.046910][ T9887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.084552][ T5480] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.115283][ T9759] hsr_slave_0: entered promiscuous mode [ 722.123612][ T9759] hsr_slave_1: entered promiscuous mode [ 722.198001][ T9494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.271574][ T5480] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.389358][ T9883] wg0 speed is unknown, defaulting to 1000 [ 722.512593][ T5480] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.656804][ T7758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.797555][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.374493][ T9898] loop4: detected capacity change from 0 to 1024 [ 723.423823][ T9898] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 723.435193][ T9898] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 723.464447][ T9898] jbd2_journal_init_inode: Cannot locate journal superblock [ 723.471876][ T9898] EXT4-fs (loop4): Could not load journal inode [ 723.822488][ T5252] Bluetooth: hci0: command tx timeout [ 724.249744][ T9482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.343036][ T9494] veth0_vlan: entered promiscuous mode [ 724.403276][ T9625] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.428259][ T9482] veth0_vlan: entered promiscuous mode [ 724.490702][ T5480] bridge_slave_1: left allmulticast mode [ 724.514087][ T5480] bridge_slave_1: left promiscuous mode [ 724.519993][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.566918][ T5480] bridge_slave_0: left allmulticast mode [ 724.578241][ T5480] bridge_slave_0: left promiscuous mode [ 724.591497][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.882640][ T1165] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 725.113233][ T1165] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.132345][ T1165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 725.148140][ T1165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 725.184103][ T1165] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 725.202178][ T1165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.223755][ T1165] usb 5-1: config 0 descriptor?? [ 725.248121][ T1165] gspca_main: spca561-2.14.0 probing abcd:cdee [ 725.597028][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.616319][ T5480] infiniband syz0: set down [ 725.630490][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.649635][ T5480] bond0 (unregistering): Released all slaves [ 725.784442][ T1165] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 725.807597][ T1165] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.825021][ T1165] usb 5-1: MIDIStreaming interface descriptor not found [ 725.909029][ T5252] Bluetooth: hci0: command tx timeout [ 725.926725][ T1165] usb 5-1: USB disconnect, device number 9 [ 726.013631][ T8930] udevd[8930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 726.152680][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.159827][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.186219][ T9482] veth1_vlan: entered promiscuous mode [ 726.277610][ T9494] veth1_vlan: entered promiscuous mode [ 726.361152][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.368433][ T5491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.196113][ T5244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 727.207783][ T5480] hsr_slave_0: left promiscuous mode [ 727.216538][ T5244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 727.225924][ T5480] hsr_slave_1: left promiscuous mode [ 727.231970][ T5244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 727.253946][ T5244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 727.261271][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.273076][ T5244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 727.280832][ T5244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 727.302652][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.316505][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.324555][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.352216][ T5480] veth1_macvtap: left promiscuous mode [ 727.358105][ T5480] veth0_macvtap: left promiscuous mode [ 727.365064][ T5480] veth1_vlan: left promiscuous mode [ 727.370454][ T5480] veth0_vlan: left promiscuous mode [ 727.984182][ T5252] Bluetooth: hci0: command tx timeout [ 728.333704][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 728.343840][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 728.371443][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 728.422209][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 728.457559][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 728.465842][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 728.468093][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 728.600528][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 728.800168][ T2559] smc: removing ib device syz0 [ 729.344162][ T5252] Bluetooth: hci7: command tx timeout [ 730.062485][ T5252] Bluetooth: hci0: command tx timeout [ 730.623116][ T5252] Bluetooth: hci2: command tx timeout [ 731.422889][ T5252] Bluetooth: hci7: command tx timeout [ 731.935891][ T9759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 732.050715][ T9928] wg0 speed is unknown, defaulting to 1000 [ 732.080028][ T9883] chnl_net:caif_netlink_parms(): no params data found [ 732.087903][ T9937] Bluetooth: MGMT ver 1.23 [ 732.153137][ T9759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 732.228287][ T9925] wg0 speed is unknown, defaulting to 1000 [ 732.507746][ T9759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 732.541213][ T9759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 732.717014][ T5252] Bluetooth: hci2: command tx timeout [ 733.519377][ T5252] Bluetooth: hci7: command tx timeout [ 734.021641][ T5480] IPVS: stop unused estimator thread 0... [ 734.092968][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.106876][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.115909][ T9883] bridge_slave_0: entered allmulticast mode [ 734.352938][ T9883] bridge_slave_0: entered promiscuous mode [ 734.788928][ T5244] Bluetooth: hci2: command tx timeout [ 734.837075][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.862040][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.870410][ T9883] bridge_slave_1: entered allmulticast mode [ 734.912796][ T9883] bridge_slave_1: entered promiscuous mode [ 735.060384][ T9883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.191481][ T9883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.229658][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.584651][ T5252] Bluetooth: hci7: command tx timeout [ 736.254040][ T9883] team0: Port device team_slave_0 added [ 736.301386][ T9883] team0: Port device team_slave_1 added [ 736.675326][ T9925] chnl_net:caif_netlink_parms(): no params data found [ 736.805580][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.814358][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.868129][ T5252] Bluetooth: hci2: command tx timeout [ 736.945735][ T29] audit: type=1107 audit(1725920919.202:88): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 737.058406][ T9883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.310145][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.533046][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.588363][ T9883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.671182][ T9625] veth0_vlan: entered promiscuous mode [ 737.756580][ T9928] chnl_net:caif_netlink_parms(): no params data found [ 737.813211][T10000] loop4: detected capacity change from 0 to 1024 [ 737.839802][ T9625] veth1_vlan: entered promiscuous mode [ 738.761799][ T9883] hsr_slave_0: entered promiscuous mode [ 738.792578][ T9883] hsr_slave_1: entered promiscuous mode [ 738.820411][ T9883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.850139][ T9883] Cannot create hsr debugfs directory [ 738.990556][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.142434][ T6709] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 739.261707][ T9925] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.277891][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.286721][ T9925] bridge_slave_0: entered allmulticast mode [ 739.295562][ T9925] bridge_slave_0: entered promiscuous mode [ 739.342798][ T6709] usb 5-1: Using ep0 maxpacket: 16 [ 739.359244][ T6709] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 739.369687][ T6709] usb 5-1: config 0 has no interface number 0 [ 739.389531][ T6709] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 739.411115][ T6709] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 739.433378][ T6709] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 739.452313][ T6709] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 739.461055][ T6709] usb 5-1: Product: syz [ 739.467496][ T9925] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.474800][ T6709] usb 5-1: SerialNumber: syz [ 739.480678][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.489628][ T6709] usb 5-1: config 0 descriptor?? [ 739.498543][ T9925] bridge_slave_1: entered allmulticast mode [ 739.509234][ T6709] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 739.518029][ T9925] bridge_slave_1: entered promiscuous mode [ 739.530300][ T6709] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6 [ 739.559105][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.589909][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.617996][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.628337][ T9928] bridge_slave_0: entered allmulticast mode [ 739.651580][ T9928] bridge_slave_0: entered promiscuous mode [ 739.671131][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.678807][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.692942][ T9928] bridge_slave_1: entered allmulticast mode [ 739.701011][ T9928] bridge_slave_1: entered promiscuous mode [ 739.828020][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.835265][ T5503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.925848][ T9925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.969844][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.977118][ T5503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.076178][ T9928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.112630][ T9925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.254312][ T9928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.356940][ T9625] veth0_macvtap: entered promiscuous mode [ 740.463089][ T9925] team0: Port device team_slave_0 added [ 740.636291][ T9928] team0: Port device team_slave_0 added [ 740.666888][ T9925] team0: Port device team_slave_1 added [ 740.688659][T10004] loop4: detected capacity change from 0 to 32768 [ 740.828496][T10004] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 740.939255][ T9625] veth1_macvtap: entered promiscuous mode [ 740.973013][T10004] XFS (loop4): Ending clean mount [ 740.992923][ T9928] team0: Port device team_slave_1 added [ 741.055400][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.072916][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.106475][ T9925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.157105][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 741.157450][ T9] usb 5-1: USB disconnect, device number 10 [ 741.164299][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 741.205854][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 741.325957][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.335326][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.365279][ T9928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.403048][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.413227][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.440318][ T9925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.508467][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.521329][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.549157][ T9928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.718484][T10004] syz.4.689 (10004) used greatest stack depth: 17840 bytes left [ 741.771748][ T9925] hsr_slave_0: entered promiscuous mode [ 741.788714][ T9925] hsr_slave_1: entered promiscuous mode [ 741.801872][ T9925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.817395][ T7758] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 741.822217][ T9925] Cannot create hsr debugfs directory [ 741.845849][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.856507][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.867147][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.888075][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.914683][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.981929][ T9759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.118351][ T9928] hsr_slave_0: entered promiscuous mode [ 742.140573][ T9928] hsr_slave_1: entered promiscuous mode [ 742.165940][ T9928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.183016][ T9928] Cannot create hsr debugfs directory [ 743.132036][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.151394][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.161707][ T9625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.173023][ T9625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.188286][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.203482][ T5480] bridge_slave_1: left allmulticast mode [ 743.209191][ T5480] bridge_slave_1: left promiscuous mode [ 743.244033][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.275141][ T5480] bridge_slave_0: left allmulticast mode [ 743.280854][ T5480] bridge_slave_0: left promiscuous mode [ 743.287173][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.313221][ T5480] bridge_slave_1: left allmulticast mode [ 743.318942][ T5480] bridge_slave_1: left promiscuous mode [ 743.329887][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.350285][ T5480] bridge_slave_0: left allmulticast mode [ 743.356696][ T5480] bridge_slave_0: left promiscuous mode [ 743.364301][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.393039][ T5480] bridge_slave_1: left allmulticast mode [ 743.398751][ T5480] bridge_slave_1: left promiscuous mode [ 743.406637][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.438433][ T5480] bridge_slave_0: left allmulticast mode [ 743.444357][ T5480] bridge_slave_0: left promiscuous mode [ 743.452254][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.321996][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 749.334350][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 749.361980][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 749.371022][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 749.381334][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 749.389970][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 749.692988][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.717678][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.747112][ T5480] bond0 (unregistering): Released all slaves [ 749.970695][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.010751][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.030370][ T5480] bond0 (unregistering): Released all slaves [ 750.310392][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.335492][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.366493][ T5480] bond0 (unregistering): Released all slaves [ 751.184420][ T5480] hsr_slave_0: left promiscuous mode [ 751.273200][ T5480] hsr_slave_1: left promiscuous mode [ 751.287695][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.318972][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.453572][ T5480] hsr_slave_0: left promiscuous mode [ 751.502918][ T5244] Bluetooth: hci4: command tx timeout [ 751.564942][ T5480] hsr_slave_1: left promiscuous mode [ 751.581905][T10068] loop4: detected capacity change from 0 to 512 [ 751.624241][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.656978][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.674306][T10068] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.695: casefold flag without casefold feature [ 751.689243][T10068] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.695: couldn't read orphan inode 15 (err -117) [ 751.713758][T10068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.739850][ T5480] hsr_slave_0: left promiscuous mode [ 751.766605][ T5480] hsr_slave_1: left promiscuous mode [ 752.043588][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.200143][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.538705][ T7758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.586741][ T5480] veth1_vlan: left promiscuous mode [ 752.598410][ T5480] veth0_vlan: left promiscuous mode [ 752.638067][ T5480] veth1_vlan: left promiscuous mode [ 752.659349][ T5480] veth0_vlan: left promiscuous mode [ 752.692886][ T5480] veth1_vlan: left promiscuous mode [ 752.698257][ T5480] veth0_vlan: left promiscuous mode [ 752.706278][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.713042][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.845113][T10081] vivid-004: ================= START STATUS ================= [ 752.871299][T10081] vivid-004: Radio HW Seek Mode: Bounded [ 752.879618][T10081] vivid-004: Radio Programmable HW Seek: false [ 752.888590][T10081] vivid-004: RDS Rx I/O Mode: Block I/O [ 752.903439][T10081] vivid-004: Generate RBDS Instead of RDS: false [ 752.919903][T10081] vivid-004: RDS Reception: true [ 752.926918][T10081] vivid-004: RDS Program Type: 0 inactive [ 752.940351][T10081] vivid-004: RDS PS Name: inactive [ 752.948569][T10081] vivid-004: RDS Radio Text: inactive [ 752.960974][T10081] vivid-004: RDS Traffic Announcement: false inactive [ 752.969785][T10081] vivid-004: RDS Traffic Program: false inactive [ 752.985341][T10081] vivid-004: RDS Music: false inactive [ 752.990997][T10081] vivid-004: ================== END STATUS ================== [ 753.582866][ T5244] Bluetooth: hci4: command tx timeout [ 755.662352][ T5244] Bluetooth: hci4: command tx timeout [ 756.140711][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 756.192272][ T29] audit: type=1326 audit(1725920938.442:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10090 comm="syz.4.699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17e8f7def9 code=0x0 [ 756.266424][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 757.820335][ T5244] Bluetooth: hci4: command tx timeout [ 758.554766][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 758.643315][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 760.840888][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 760.939351][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 761.968283][T10051] wg0 speed is unknown, defaulting to 1000 [ 762.044053][ T5252] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.071782][ T5252] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.081577][ T5252] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.102617][ T5252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 762.122495][ T5252] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 762.131051][ T5252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 762.382872][ T9883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 762.444821][ T9883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 762.603016][ T9883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 762.821482][ T9883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 762.850093][T10102] wg0 speed is unknown, defaulting to 1000 [ 763.721042][ T9883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.941880][T10051] chnl_net:caif_netlink_parms(): no params data found [ 764.154048][ T9928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 764.207788][ T9928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.223020][ T5252] Bluetooth: hci3: command tx timeout [ 764.374028][ T9928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 764.443365][ T9928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 764.511220][ T9883] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.573500][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.580759][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.590556][T10051] bridge_slave_0: entered allmulticast mode [ 764.605525][T10051] bridge_slave_0: entered promiscuous mode [ 764.619877][T10051] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.630271][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.645928][T10051] bridge_slave_1: entered allmulticast mode [ 764.655819][T10051] bridge_slave_1: entered promiscuous mode [ 764.665599][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.672797][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.689071][T10102] chnl_net:caif_netlink_parms(): no params data found [ 764.744823][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.751992][ T5491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.873556][T10051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.016619][T10051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.261987][T10051] team0: Port device team_slave_0 added [ 765.350222][T10102] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.368611][T10102] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.382839][T10102] bridge_slave_0: entered allmulticast mode [ 765.390680][T10102] bridge_slave_0: entered promiscuous mode [ 765.421285][T10051] team0: Port device team_slave_1 added [ 765.471364][T10102] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.478874][T10102] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.487869][T10102] bridge_slave_1: entered allmulticast mode [ 765.497983][T10102] bridge_slave_1: entered promiscuous mode [ 765.568597][T10051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.576764][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.603563][T10051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.754074][T10051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.761156][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.788724][T10051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.903285][T10102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.918677][T10102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.105761][ T9925] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 766.156041][T10102] team0: Port device team_slave_0 added [ 766.170714][T10102] team0: Port device team_slave_1 added [ 766.198339][ T9928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.209506][ T9925] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 766.248719][T10051] hsr_slave_0: entered promiscuous mode [ 766.257177][T10051] hsr_slave_1: entered promiscuous mode [ 766.267534][T10051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.276147][T10051] Cannot create hsr debugfs directory [ 766.313078][ T5252] Bluetooth: hci3: command tx timeout [ 766.321785][ T9925] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 766.418275][T10102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.429160][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.456244][T10102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.478043][ T9925] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 766.491962][ T9883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.516673][T10102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.524119][T10102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.554538][T10102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.736706][T10102] hsr_slave_0: entered promiscuous mode [ 766.744849][T10102] hsr_slave_1: entered promiscuous mode [ 766.751443][T10102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.759490][T10102] Cannot create hsr debugfs directory [ 766.820885][ T9928] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.989126][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.996373][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.161174][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.168465][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.417910][ T9883] veth0_vlan: entered promiscuous mode [ 767.527058][ T9925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.537091][ T9883] veth1_vlan: entered promiscuous mode [ 767.619319][ T9925] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.678048][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.685329][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.738641][ T5491] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.746034][ T5491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.805281][ T5480] bridge_slave_1: left allmulticast mode [ 767.810994][ T5480] bridge_slave_1: left promiscuous mode [ 767.823598][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.841069][ T5480] bridge_slave_0: left allmulticast mode [ 767.852474][ T5480] bridge_slave_0: left promiscuous mode [ 767.858315][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.878957][ T5480] bridge_slave_1: left allmulticast mode [ 767.885525][ T5480] bridge_slave_1: left promiscuous mode [ 767.891275][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.914685][ T5480] bridge_slave_0: left allmulticast mode [ 767.920360][ T5480] bridge_slave_0: left promiscuous mode [ 767.935884][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.399385][ T5252] Bluetooth: hci3: command tx timeout [ 768.914278][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.928234][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.941296][ T5480] bond0 (unregistering): Released all slaves [ 769.236052][ T5480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.255457][ T5480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.269894][ T5480] bond0 (unregistering): Released all slaves [ 769.361777][ T9883] veth0_macvtap: entered promiscuous mode [ 769.497054][ T9883] veth1_macvtap: entered promiscuous mode [ 769.718358][ T5480] hsr_slave_0: left promiscuous mode [ 769.733170][ T5480] hsr_slave_1: left promiscuous mode [ 769.756284][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.774997][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.798237][ T5480] hsr_slave_0: left promiscuous mode [ 769.814629][ T5480] hsr_slave_1: left promiscuous mode [ 769.821653][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.845528][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.860937][ T5480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.871893][ T5480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.947575][ T5480] veth1_macvtap: left promiscuous mode [ 769.962469][ T5480] veth0_macvtap: left promiscuous mode [ 769.968174][ T5480] veth1_vlan: left promiscuous mode [ 769.992450][ T5480] veth0_vlan: left promiscuous mode [ 770.472795][ T5252] Bluetooth: hci3: command tx timeout [ 770.531799][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 770.594105][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 771.616116][ T5480] team0 (unregistering): Port device team_slave_1 removed [ 771.690153][ T5480] team0 (unregistering): Port device team_slave_0 removed [ 772.338975][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.363077][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.374215][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.385271][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.398023][ T9883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.466128][ T9928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.507257][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.528569][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.539509][ T9883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.563950][ T9883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.576992][ T9883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.620920][ T9883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.630681][ T9883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.640230][ T9883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.650916][ T9883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.138978][ T9928] veth0_vlan: entered promiscuous mode [ 773.267997][ T9928] veth1_vlan: entered promiscuous mode [ 773.321190][T10051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 773.400305][ T2559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.427890][ T2559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.446946][T10051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 773.527740][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.543259][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.603306][T10051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 773.635583][T10051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 773.706622][ T9925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.874710][T10192] loop4: detected capacity change from 0 to 16 [ 773.909074][ T9928] veth0_macvtap: entered promiscuous mode [ 773.945169][T10192] erofs: (device loop4): mounted with root inode @ nid 36. [ 773.987406][ T9928] veth1_macvtap: entered promiscuous mode [ 774.925529][T10102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 774.981812][T10102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 775.111907][ T9928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.157608][ T9928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.176222][ T9928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.191624][ T9928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.343378][ T9928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.354175][ T9928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.555074][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.494856][T10102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 776.567551][T10102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 776.606112][ T9925] veth0_vlan: entered promiscuous mode [ 776.647668][ T9928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.684413][T10218] loop3: detected capacity change from 0 to 128 [ 776.690783][ T9928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.716672][ T9928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.756066][ T9928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.793084][ T9928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 776.832271][ T9928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.856074][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.366104][T10225] loop4: detected capacity change from 0 to 32768 [ 777.460553][T10225] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.705 (10225) [ 777.690746][ T9928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.740033][ T9928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.777247][ T9928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.802062][ T9928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.965026][ T9925] veth1_vlan: entered promiscuous mode [ 778.061703][T10225] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 778.072183][T10225] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 778.080917][T10225] BTRFS info (device loop4): using free-space-tree [ 779.603357][ T9925] veth0_macvtap: entered promiscuous mode [ 779.621114][T10051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.675464][ T7758] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 779.697545][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.742551][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.845317][ T9925] veth1_macvtap: entered promiscuous mode [ 780.094881][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.140966][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.179951][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.222956][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.242794][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.262658][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.292249][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 780.352146][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.400505][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.453992][T10051] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.512362][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.526256][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.478768][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.563299][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.592327][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.609031][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.621282][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.632533][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.654994][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.672504][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.701093][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.720673][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.727924][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.774486][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.781719][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.846166][ T9925] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.866430][ T9925] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.881947][ T9925] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.891294][ T9925] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.252171][T10102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.208249][T10102] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.382945][ T5491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.409071][ T5491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.611788][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.619196][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.785905][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.793171][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.892036][ T5480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.927440][ T5480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.450939][T10317] loop4: detected capacity change from 0 to 512 [ 784.468254][T10051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.514386][T10317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.542520][T10320] loop0: detected capacity change from 0 to 512 [ 784.603277][T10320] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.711: casefold flag without casefold feature [ 784.678166][T10320] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.711: couldn't read orphan inode 15 (err -117) [ 784.754546][T10320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.440825][T10051] veth0_vlan: entered promiscuous mode [ 785.570312][ T9928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.588833][T10051] veth1_vlan: entered promiscuous mode [ 785.607319][ T7758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.730066][T10102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.343641][T10051] veth0_macvtap: entered promiscuous mode [ 787.416077][T10051] veth1_macvtap: entered promiscuous mode [ 787.490265][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.510058][T10345] loop4: detected capacity change from 0 to 2048 [ 787.536191][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.574530][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.620561][T10345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.650622][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.708812][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.719518][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.729759][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.750666][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.760717][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.776171][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.829768][T10051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.907525][T10351] sd 0:0:1:0: device reset [ 788.700365][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.778661][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.885770][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.929690][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.980567][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.015148][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.038960][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.056510][T10361] loop3: detected capacity change from 0 to 1024 [ 789.070056][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.082342][T10051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.100646][T10051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.175844][T10051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.225319][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 789.555405][T10051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.575373][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 789.602744][ T25] usb 1-1: config 7 has an invalid interface number: 122 but max is 1 [ 789.628791][T10051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.638541][ T25] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 789.695128][ T25] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 789.727631][T10051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.767202][ T25] usb 1-1: config 7 has no interface number 0 [ 789.832812][T10051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.850952][ T25] usb 1-1: config 7 interface 122 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 789.901718][ T25] usb 1-1: config 7 interface 122 has no altsetting 0 [ 789.956506][ T25] usb 1-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=65.13 [ 789.992365][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.034625][ T25] usb 1-1: Product: syz [ 790.047000][ T25] usb 1-1: Manufacturer: syz [ 790.069946][T10367] Process accounting resumed [ 790.082275][ T25] usb 1-1: SerialNumber: syz [ 790.369874][T10102] veth0_vlan: entered promiscuous mode [ 790.492245][ T5405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.560383][ T5405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.655661][T10102] veth1_vlan: entered promiscuous mode [ 792.351198][T10378] loop4: detected capacity change from 0 to 256 [ 792.412389][ T5488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.420243][ T5488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.442274][ T25] usb 1-1: USB disconnect, device number 9 [ 793.419517][T10102] veth0_macvtap: entered promiscuous mode [ 793.599322][T10349] delete_channel: no stack [ 793.700770][T10102] veth1_macvtap: entered promiscuous mode [ 793.860551][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.929892][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.002411][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.038432][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.080428][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.134385][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.143700][ T25] libceph: connect (1)[c::]:6789 error -101 [ 794.194278][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 794.242681][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.276611][T10389] ceph: No mds server is up or the cluster is laggy [ 794.312688][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.337487][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.351662][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.370083][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.389604][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.417405][T10102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.504717][ T1846] libceph: connect (1)[c::]:6789 error -101 [ 794.541434][ T1846] libceph: mon0 (1)[c::]:6789 connect error [ 794.553031][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.675323][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.722225][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.764651][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.795043][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.830962][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.873489][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.639826][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.653296][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.077619][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.984465][T10102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.062319][ T29] audit: type=1326 audit(1725920981.322:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 799.337638][T10102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.352071][T10102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.380580][T10102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.392721][T10102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.223036][ T29] audit: type=1326 audit(1725920981.362:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 800.244173][T10102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.279913][T10102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.376671][ T29] audit: type=1326 audit(1725920981.362:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5c96b7c9df code=0x7ffc0000 [ 800.556879][ T29] audit: type=1326 audit(1725920981.362:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 800.694227][ T29] audit: type=1326 audit(1725920981.362:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 801.852247][ T5252] Bluetooth: hci0: command tx timeout [ 801.904323][ T29] audit: type=1326 audit(1725920981.372:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 802.043578][ T5491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.051471][ T5491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.084384][ T29] audit: type=1326 audit(1725920981.372:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 802.106595][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.252067][ T29] audit: type=1326 audit(1725920981.372:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 802.274527][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.354338][ T29] audit: type=1326 audit(1725920981.382:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 802.358800][T10446] bridge0: port 3(vlan2) entered blocking state [ 802.444059][ T29] audit: type=1326 audit(1725920981.382:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96b7def9 code=0x7ffc0000 [ 802.522727][T10446] bridge0: port 3(vlan2) entered disabled state [ 802.547690][T10446] vlan2: entered allmulticast mode [ 802.638818][T10446] vlan2: left allmulticast mode [ 802.722910][T10451] loop0: detected capacity change from 0 to 512 [ 802.760229][T10451] EXT4-fs: Ignoring removed mblk_io_submit option [ 802.780775][ T5407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.806739][ T5407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.851188][T10451] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 802.939954][T10451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 802.992509][T10451] System zones: 1-12 [ 803.042271][T10451] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.743: corrupted in-inode xattr: e_value size too large [ 803.063540][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 803.073850][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 803.083003][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 803.091757][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 803.100124][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 803.108043][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 803.165940][T10454] wg0 speed is unknown, defaulting to 1000 [ 803.227992][T10451] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.743: couldn't read orphan inode 15 (err -117) [ 803.285777][T10451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.413182][T10458] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 803.787324][T10465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.253230][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.568385][ T9928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.693360][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 805.672402][ T5252] Bluetooth: hci6: command tx timeout [ 805.768704][T10479] vivid-001: ================= START STATUS ================= [ 805.802262][T10479] vivid-001: Radio HW Seek Mode: Bounded [ 805.808191][T10479] vivid-001: Radio Programmable HW Seek: false [ 805.828089][T10479] vivid-001: RDS Rx I/O Mode: Block I/O [ 805.835525][T10479] vivid-001: Generate RBDS Instead of RDS: false [ 805.855092][T10479] vivid-001: RDS Reception: true [ 805.860499][T10479] vivid-001: RDS Program Type: 0 inactive [ 805.867094][T10479] vivid-001: RDS PS Name: inactive [ 805.873000][T10479] vivid-001: RDS Radio Text: inactive [ 805.908694][T10479] vivid-001: RDS Traffic Announcement: false inactive [ 805.922677][T10479] vivid-001: RDS Traffic Program: false inactive [ 806.056268][ T5503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.074581][T10479] vivid-001: RDS Music: false inactive [ 806.080124][T10479] vivid-001: ================== END STATUS ================== [ 807.775461][ T5252] Bluetooth: hci6: command tx timeout [ 807.875058][ T5503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.081598][T10499] loop0: detected capacity change from 0 to 512 [ 809.240167][T10499] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #12: comm syz.0.754: corrupted in-inode xattr: invalid ea_ino [ 809.256096][T10499] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.754: couldn't read orphan inode 12 (err -117) [ 809.275921][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031711000: rx timeout, send abort [ 809.288961][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031711000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 809.580046][T10499] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.789840][ T5503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.835722][ T5252] Bluetooth: hci6: command tx timeout [ 810.621852][T10499] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.754: Directory hole found for htree leaf block 0 [ 810.732661][ T5503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.047180][T10454] chnl_net:caif_netlink_parms(): no params data found [ 811.225985][ T9928] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 813.857725][ T5252] Bluetooth: hci6: command tx timeout [ 814.152810][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.159153][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.981875][T10536] loop0: detected capacity change from 0 to 2048 [ 815.432930][T10537] loop0: p1 < > p4 [ 815.452393][T10537] loop0: p4 size 8388608 extends beyond EOD, truncated [ 815.522511][T10454] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.541790][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.564243][T10536] loop0: p1 < > p4 [ 815.571374][T10536] loop0: p4 size 8388608 extends beyond EOD, truncated [ 815.624767][T10454] bridge_slave_0: entered allmulticast mode [ 815.663119][T10541] loop4: detected capacity change from 0 to 8 [ 815.664134][T10454] bridge_slave_0: entered promiscuous mode [ 815.787554][T10547] loop5: detected capacity change from 0 to 512 [ 816.004776][T10055] udevd[10055]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 816.051583][T10049] udevd[10049]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 816.112803][ T5503] bridge_slave_1: left allmulticast mode [ 816.118502][ T5503] bridge_slave_1: left promiscuous mode [ 816.763723][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.816471][ T5503] bridge_slave_0: left allmulticast mode [ 817.064977][ T5503] bridge_slave_0: left promiscuous mode [ 817.065055][ T5252] Bluetooth: hci2: command tx timeout [ 817.070799][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.106053][T10055] udevd[10055]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 817.120343][T10547] EXT4-fs (loop5): Test dummy encryption mode enabled [ 817.142042][T10532] udevd[10532]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 817.169672][T10547] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #12: comm syz.5.764: corrupted in-inode xattr: invalid ea_ino [ 817.197463][T10547] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.764: couldn't read orphan inode 12 (err -117) [ 817.214810][T10547] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.395012][T10102] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 819.266785][ T5503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.328540][ T5503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.364594][T10578] loop4: detected capacity change from 0 to 256 [ 819.393014][ T5503] bond0 (unregistering): Released all slaves [ 819.715705][T10580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 820.464448][T10454] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.538198][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.603001][T10454] bridge_slave_1: entered allmulticast mode [ 820.635667][T10454] bridge_slave_1: entered promiscuous mode [ 823.198597][T10603] vivid-004: disconnect [ 823.240779][T10598] vivid-004: reconnect [ 823.328740][T10454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.380791][T10454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.431060][T10606] loop0: detected capacity change from 0 to 512 [ 823.456344][T10606] EXT4-fs: Ignoring removed mblk_io_submit option [ 823.489798][T10606] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 823.525018][T10606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 823.553616][T10606] System zones: 1-12 [ 823.686768][T10606] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.777: corrupted in-inode xattr: e_value size too large [ 826.682655][T10606] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.777: couldn't read orphan inode 15 (err -117) [ 827.002775][T10606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.559080][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 828.559104][ T29] audit: type=1326 audit(1725921010.822:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.5.783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165257def9 code=0x0 [ 829.582794][T10639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.743912][ T9928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.104574][ T29] audit: type=1326 audit(1725921012.372:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10632 comm="syz.5.783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165257def9 code=0x0 [ 830.149917][ T30] INFO: task syz-executor:7754 blocked for more than 143 seconds. [ 830.279490][ T30] Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 830.326351][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 830.429260][ T30] task:syz-executor state:D stack:20304 pid:7754 tgid:7754 ppid:1 flags:0x00004006 [ 830.997546][ T30] Call Trace: [ 831.010283][ T30] [ 831.018031][ T30] __schedule+0x1800/0x4a60 [ 831.022940][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.029316][ T30] ? __pfx___schedule+0x10/0x10 [ 831.034500][ T30] ? __pfx_lock_release+0x10/0x10 [ 831.040585][ T30] ? schedule+0x90/0x320 [ 831.044955][ T30] schedule+0x14b/0x320 [ 831.049169][ T30] schedule_timeout+0xb0/0x310 [ 831.054256][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 831.059689][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 831.067169][ T30] ? wait_for_completion+0x2fe/0x620 [ 831.073978][ T30] ? wait_for_completion+0x2fe/0x620 [ 831.081486][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 831.088983][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.095770][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 831.101067][ T30] ? wait_for_completion+0x2fe/0x620 [ 831.108904][ T30] wait_for_completion+0x355/0x620 [ 831.114665][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.120619][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 831.127246][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.150689][ T30] ? kthread_unpark+0x17b/0x210 [ 831.166199][ T30] kthread_stop+0x19e/0x640 [ 831.176952][ T30] ext4_stop_mmpd+0x47/0xb0 [ 831.193832][ T30] ext4_put_super+0x753/0xd50 [ 831.204694][ T30] ? __pfx_ext4_put_super+0x10/0x10 [ 831.217377][ T30] generic_shutdown_super+0x138/0x2d0 [ 831.226031][ T30] kill_block_super+0x44/0x90 [ 831.232524][ T30] ext4_kill_sb+0x68/0xa0 [ 831.237245][ T30] deactivate_locked_super+0xc6/0x130 [ 831.247417][ T30] cleanup_mnt+0x41f/0x4b0 [ 831.258269][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 831.270395][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 831.282183][ T30] task_work_run+0x251/0x310 [ 831.291386][ T30] ? __pfx_task_work_run+0x10/0x10 [ 831.305228][ T30] ? __x64_sys_umount+0x123/0x170 [ 831.311322][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 831.323714][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 831.329487][ T30] do_syscall_64+0x100/0x230 [ 831.342796][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.350215][ T30] RIP: 0033:0x7f558477f227 [ 831.362606][ T30] RSP: 002b:00007ffcea617c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 831.381930][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f558477f227 [ 831.405682][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcea617cc0 [ 831.420178][ T30] RBP: 00007ffcea617cc0 R08: 0000000000000000 R09: 0000000000000000 [ 831.434571][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcea618d40 [ 831.450459][ T30] R13: 00007f55847f0894 R14: 00000000000a3dc5 R15: 00007ffcea618d80 [ 831.462969][ T30] [ 831.536226][T10454] team0: Port device team_slave_0 added [ 831.545339][ T30] INFO: task kmmpd-loop2:9495 blocked for more than 144 seconds. [ 831.656657][ T30] Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 831.809704][T10454] team0: Port device team_slave_1 added [ 832.192552][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.232455][ T30] task:kmmpd-loop2 state:D stack:27472 pid:9495 tgid:9495 ppid:2 flags:0x00024000 [ 832.262263][ T30] Call Trace: [ 832.265623][ T30] [ 832.268583][ T30] __schedule+0x1800/0x4a60 [ 832.289427][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.300755][ T30] ? __pfx___schedule+0x10/0x10 [ 832.318336][ T30] ? __pfx_lock_release+0x10/0x10 [ 832.325828][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 832.331871][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 832.345233][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.351032][ T30] ? schedule+0x90/0x320 [ 832.361020][ T30] schedule+0x14b/0x320 [ 832.365463][ T30] ? percpu_rwsem_wait+0x34c/0x450 [ 832.370637][ T30] percpu_rwsem_wait+0x3c2/0x450 [ 832.386493][ T30] ? __pfx_percpu_rwsem_wait+0x10/0x10 [ 832.392051][ T30] ? __pfx_percpu_rwsem_wake_function+0x10/0x10 [ 832.411586][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.420245][ T30] ? rcu_is_watching+0x15/0xb0 [ 832.430697][ T30] __percpu_down_read+0xee/0x130 [ 832.435892][ T30] ? kmmpd+0x26d/0xaa0 [ 832.440007][ T30] write_mmp_block+0x2f2/0x3a0 [ 832.452199][ T30] kmmpd+0x26d/0xaa0 [ 832.456157][ T30] ? __pfx_kmmpd+0x10/0x10 [ 832.460611][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 832.477041][ T30] ? __kthread_parkme+0x169/0x1d0 [ 832.485657][ T30] ? __pfx_kmmpd+0x10/0x10 [ 832.490125][ T30] kthread+0x2f2/0x390 [ 832.494493][ T30] ? __pfx_kmmpd+0x10/0x10 [ 832.498949][ T30] ? __pfx_kthread+0x10/0x10 [ 832.521270][ T30] ret_from_fork+0x4d/0x80 [ 832.532172][ T30] ? __pfx_kthread+0x10/0x10 [ 832.536801][ T30] ret_from_fork_asm+0x1a/0x30 [ 832.541624][ T30] [ 832.555970][ T30] [ 832.555970][ T30] Showing all locks held in the system: [ 832.572127][ T30] 1 lock held by khungtaskd/30: [ 832.577001][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 832.600380][ T30] 2 locks held by getty/4983: [ 832.639123][ T30] #0: ffff8880309730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 832.658437][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 832.672166][ T30] 3 locks held by kworker/u8:11/5405: [ 832.677557][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 832.712421][ T30] #1: ffffc90004cffd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 832.732472][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 832.751941][ T30] 4 locks held by kworker/u8:24/5503: [ 832.757507][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 832.779049][ T30] #1: ffffc90003ef7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 832.797951][ T30] #2: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 832.808910][ T30] #3: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x236/0xb00 [ 832.818414][ T30] 1 lock held by syz-executor/7754: [ 832.824502][ T30] #0: ffff888062ad80e0 (&type->s_umount_key#33){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 832.835986][ T30] 1 lock held by kmmpd-loop2/9495: [ 832.841096][ T30] #0: ffff888062ad8420 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x26d/0xaa0 [ 832.849731][ T30] 2 locks held by syz-executor/10454: [ 832.855193][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 832.864753][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 832.876009][ T30] 2 locks held by syz.2.781/10629: [ 832.881210][ T30] #0: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 832.891346][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 832.901729][ T30] 1 lock held by syz.5.783/10638: [ 832.906948][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0x106/0x640 [ 832.916719][ T30] 2 locks held by syz.4.786/10643: [ 832.922930][ T30] #0: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 832.932526][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 832.944879][ T30] [ 832.963295][T10629] wg0 speed is unknown, defaulting to 1000 [ 832.984288][ T30] ============================================= [ 832.984288][ T30] [ 832.994791][ T30] NMI backtrace for cpu 1 [ 832.999141][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 833.009654][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 833.019711][ T30] Call Trace: [ 833.022989][ T30] [ 833.025920][ T30] dump_stack_lvl+0x241/0x360 [ 833.030615][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.035822][ T30] ? __pfx__printk+0x10/0x10 [ 833.040415][ T30] ? vprintk_emit+0x667/0x7c0 [ 833.045111][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 833.050145][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 833.055101][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 833.060567][ T30] ? _printk+0xd5/0x120 [ 833.064724][ T30] ? __pfx__printk+0x10/0x10 [ 833.069313][ T30] ? __wake_up_klogd+0xcc/0x110 [ 833.074170][ T30] ? __pfx__printk+0x10/0x10 [ 833.078770][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.084416][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 833.089459][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 833.095454][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 833.101483][ T30] watchdog+0xff4/0x1040 [ 833.105746][ T30] ? watchdog+0x1ea/0x1040 [ 833.110181][ T30] ? __pfx_watchdog+0x10/0x10 [ 833.114869][ T30] kthread+0x2f2/0x390 [ 833.118942][ T30] ? __pfx_watchdog+0x10/0x10 [ 833.123628][ T30] ? __pfx_kthread+0x10/0x10 [ 833.128223][ T30] ret_from_fork+0x4d/0x80 [ 833.132666][ T30] ? __pfx_kthread+0x10/0x10 [ 833.137286][ T30] ret_from_fork_asm+0x1a/0x30 [ 833.142081][ T30] [ 833.146919][ T30] Sending NMI from CPU 1 to CPUs 0: [ 833.152651][ C0] NMI backtrace for cpu 0 [ 833.152668][ C0] CPU: 0 UID: 0 PID: 5477 Comm: kworker/u8:16 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 833.152694][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 833.152714][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 833.152755][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 833.152789][ C0] Code: 00 00 00 48 8b 3d 6c 76 96 0c 48 89 de 5b e9 43 9a 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 40 4a 70 7e 81 e2 [ 833.152809][ C0] RSP: 0018:ffffc90004c8ef98 EFLAGS: 00000246 [ 833.152827][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802d259e00 [ 833.152843][ C0] RDX: ffff88802d259e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 833.152858][ C0] RBP: ffffc90004c8f190 R08: ffffffff8b07e782 R09: ffffc90004c8f040 [ 833.152875][ C0] R10: dffffc0000000000 R11: fffff52000991e20 R12: ffffc90004c8f580 [ 833.152893][ C0] R13: dffffc0000000000 R14: ffffc90004c8f5c0 R15: ffffc90004c8f040 [ 833.152913][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 833.152933][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 833.152948][ C0] CR2: 0000561fbbab8f08 CR3: 0000000028f5c000 CR4: 0000000000350ef0 [ 833.152967][ C0] Call Trace: [ 833.152976][ C0] [ 833.152985][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 833.153017][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 833.153054][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 833.153084][ C0] ? nmi_handle+0x2a/0x5a0 [ 833.153121][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 833.153152][ C0] ? nmi_handle+0x151/0x5a0 [ 833.153174][ C0] ? nmi_handle+0x2a/0x5a0 [ 833.153198][ C0] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 833.153228][ C0] ? default_do_nmi+0x63/0x160 [ 833.153261][ C0] ? exc_nmi+0x123/0x1f0 [ 833.153290][ C0] ? end_repeat_nmi+0xf/0x53 [ 833.153328][ C0] ? cfg80211_inform_single_bss_data+0x172/0x2030 [ 833.153359][ C0] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 833.153391][ C0] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 833.153425][ C0] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 833.153457][ C0] [ 833.153465][ C0] [ 833.153472][ C0] cfg80211_inform_single_bss_data+0x1a7/0x2030 [ 833.153499][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.153535][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 833.153571][ C0] ? deref_stack_reg+0x1c7/0x260 [ 833.153610][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.153642][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 833.153679][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 833.153726][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 833.153760][ C0] ? __kernel_text_address+0xd/0x40 [ 833.153784][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 833.153818][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 833.153849][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 833.153897][ C0] ? __pfx_validate_chain+0x10/0x10 [ 833.153944][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 833.153977][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.154010][ C0] ? mark_lock+0x9a/0x350 [ 833.154046][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.154079][ C0] ? __lock_acquire+0x137a/0x2040 [ 833.154136][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 833.154168][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 833.154209][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 833.154245][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 833.154281][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 833.154322][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 833.154358][ C0] ? __pfx_lock_release+0x10/0x10 [ 833.154388][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.154429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.154468][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 833.154518][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 833.154553][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 833.154591][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.154627][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.154660][ C0] ? mark_lock+0x9a/0x350 [ 833.154697][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.154737][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 833.154772][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 833.154805][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.154837][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 833.154878][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 833.154924][ C0] cfg80211_wiphy_work+0x2dd/0x490 [ 833.154959][ C0] ? process_scheduled_works+0x945/0x1830 [ 833.154991][ C0] process_scheduled_works+0xa2e/0x1830 [ 833.155045][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 833.155084][ C0] ? assign_work+0x364/0x3d0 [ 833.155118][ C0] worker_thread+0x86d/0xd10 [ 833.155168][ C0] ? __kthread_parkme+0x169/0x1d0 [ 833.155204][ C0] ? __pfx_worker_thread+0x10/0x10 [ 833.155235][ C0] kthread+0x2f2/0x390 [ 833.155255][ C0] ? __pfx_worker_thread+0x10/0x10 [ 833.155286][ C0] ? __pfx_kthread+0x10/0x10 [ 833.155307][ C0] ret_from_fork+0x4d/0x80 [ 833.155339][ C0] ? __pfx_kthread+0x10/0x10 [ 833.155360][ C0] ret_from_fork_asm+0x1a/0x30 [ 833.155405][ C0] [ 833.213961][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 833.213986][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 833.214015][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 833.214033][ T30] Call Trace: [ 833.214045][ T30] [ 833.214057][ T30] dump_stack_lvl+0x241/0x360 [ 833.214099][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.214128][ T30] ? __pfx__printk+0x10/0x10 [ 833.214152][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 833.214201][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.214240][ T30] ? vscnprintf+0x5d/0x90 [ 833.214277][ T30] panic+0x349/0x860 [ 833.214302][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.214341][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 833.214379][ T30] ? __pfx_panic+0x10/0x10 [ 833.214402][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 833.214434][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.214471][ T30] ? __irq_work_queue_local+0x137/0x410 [ 833.214512][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.214549][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 833.214579][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 833.214613][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 833.214651][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 833.214689][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 833.214733][ T30] watchdog+0x1033/0x1040 [ 833.214774][ T30] ? watchdog+0x1ea/0x1040 [ 833.214819][ T30] ? __pfx_watchdog+0x10/0x10 [ 833.214858][ T30] kthread+0x2f2/0x390 [ 833.214884][ T30] ? __pfx_watchdog+0x10/0x10 [ 833.214921][ T30] ? __pfx_kthread+0x10/0x10 [ 833.214948][ T30] ret_from_fork+0x4d/0x80 [ 833.214986][ T30] ? __pfx_kthread+0x10/0x10 [ 833.215015][ T30] ret_from_fork_asm+0x1a/0x30 [ 833.215071][ T30] [ 833.219535][ T30] Kernel Offset: disabled [ 833.849204][ T30] Rebooting in 86400 seconds..