last executing test programs: 12m33.336911411s ago: executing program 3 (id=96): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quot']) r7 = openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x2c020400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 12m24.91551929s ago: executing program 3 (id=107): syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x40040) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0xfb2, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 12m19.630051007s ago: executing program 3 (id=114): syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x40040) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0xfb2, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, 0x0, 0x20000004) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 12m14.638463838s ago: executing program 3 (id=122): syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x40040) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0xfb2, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 12m7.962737222s ago: executing program 3 (id=130): syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x40040) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0xfb2, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 12m2.963078486s ago: executing program 3 (id=137): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x3f0, &(0x7f00000008c0)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XTWu9PZSQDHVikiXo6IkYg4FxFT+fY0D/F+K2T7bW9tLP29tbGURKPx2p9JJPm24rOS/PVU/gEzaUT6URKP9yh3/dbtG+VarbqWp+fqK2/Nrd+6/ezySvl69Xr15sJz5y9cvPjCpYXnB3asmyvJJ099c/m3zz6ufP7TH99PZ/U9ned1HseglKLU/k52uzTowobsREc8GR1iRQAA2FOaX/uPNq//p2Ikdi7epuLTH4daOQAAAGAgGo3iFQAAADi6Evf+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW0/0zu26/neQSpFxKsnrixkIQ7pOWwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys9ed/ZI74xO/Ps9lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xfwEcvqz/T+7d/s11ctvr9a7vv4zv/rryc7+8e7d/7/P/eHK1WcHxfNs75Xp9bT5iPLncvd2/prbi+yi+r6z9Z57s/ftfXP8l+W//mY71offjlffOXu2Xp/8PV9b+lX31//1H3px8dKZf+ffX/y80K1N8iOu/e7vfBhp2PQEAAAAAAAAYjLQ5ty9JZ9vxNJ2dbc3z/X9MprXV9foz11bfvllpzQGcjrG0mP851TEfdL71GHk7vbArfT4izkbEF1Mnm+nZpdVaZdgHDwAAAMfEqT73/5nfD/KwBwAAAPBwmh52BQAAAIBD5/4fAAAAjrQHWde/Vl0r/kTQAd8uIiLycEaGfGICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOOb+CQAA///yfL+b") ioperm(0x284, 0x7f, 0xe3) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_INPUT(r2, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) 11m46.873348723s ago: executing program 32 (id=137): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x3f0, &(0x7f00000008c0)="$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") ioperm(0x284, 0x7f, 0xe3) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) ioctl$LOOP_CLR_FD(r1, 0x4c01) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_INPUT(r2, &(0x7f00000006c0)={0x8, {"dddd616b8b957b454e65df79751681e0f08426c1d5a0a3784cc4d01ae39db3a2ec0ca78e222b6a01a68929011f7775534bd8441d1a3879be4d511da5f51aecb89e1c430fff5b4fb4276883bd909890773a237ea9e22dfdb8aced13ff6e18b8142fce8297e386abb24465df0a452f2d6835b3b04e9f5546db864ccbcdd6f23555a814a148a19c5a5828227abf94b7ab5844554de2d118c111b090f2ccc1733291dd51afeb75f46e889c73ee3d5b270389d5639536c0f838bf5af8308140c8bad9cfd5d627f6c1545764e300e21bc475a34719b7327dbfd0f0afd51c442d0a4cf1113c63464d8b357cb88fac829bf8eebb3613f97bc0ed70aa3d1dcbb83da76134906be95d7c39cf7707bcd6b96ca0202084711bec46cca2ea11021da0c6c1575dea5049fc71bac29b3d0227e360c3aa4cb31f4edf056d4280959c4690d232449eb4b84e4d836acb4c877c9d4cfba4868fb8084cf6937a4ffdfe418c7a3597ff4a73fb314ef5afbf57b76bec1fd0113f695d7393bcc8e8449688fa63f22964f0a26065e0b16e6c3647caf23378bdaf979eab647ae1450ff2e69b692565e7aa647b8d6cf72b0c5fb38c54973359aa0a641abe837934e2d9f3d60321f55bd4c1c3270571f6a5a1e00aa43c97946e0ce6bff601b588c7238eab389fbd8ecf52f50735e8d17ca8de92dcf9a8d69c279a18fbfc286e031dc5872cafef6762aa9764b68a4bb1563e6678cb87f1cd8bdc490d876100700b757ab73c62689d5f72f8d9f366b6fab16f4a6184a9dd5c82b5134b18696d235e2c9bbc1d8bcfa48c9d8a425d0581b9cb7ee2aa1267f97b8653402e63cb42809e88b8ae877e8bbdcb6ed7a41b636d1a74d88c0fc09e62ddba0191b778f0ce99bd06ef98280b1b8786d0bc84b42c760501b5e732eaea20b1fb83699fb73c7aa482faeae72a8398e8972892aa6836baee73793c94c41a4f1e27b6fd78219f9f0c15d95909185f7a6797a271631f93e9401a5cbb8d8b383be22b3a8a012af8dbb5bf96fae8bc90f108656b60413b670ba2fd2a637de7d35b197d2286fe4d4b8b35b44ec0a0a48d899aa25e9bcdaad84dd85a78123310c823dda5bed29bee8cede0e817369e372680224ecba504e65637d6980137cf0fa145687f7b376d7d3a7f6e2d2e2f1a52347ef9a1afc0603c29a6d06aacb8d039d51a7b26279579fd94187a358c6c53545084c434c4faa163f3362bde1ac287268e3a6277370ef7c49fd58907baa52ef9d1a0807e81c2e814634018962ec0b133650e426ae79366d0674bc5e5072329b380866741ceb5ae3d6bf5c9f10665b533b100363593cc183a213e07e507f48c91c25cdb995d4dfdc3959ad05b0b881861cfcb678668b4b1cd7d067cfce345ff2413329fd4559e7ba38a5ebb672d03302f87832480221af8dfe6cb868442395664823d807f65cdeb7adbb88260c0ae742cf824bdf44c69ffe7685bc70d3c52060a13e91839797f95c2f3fde4858af8404274be15905ab264fbe70cc09dbb90e208ae5fd338d2703ea3650cfb160bc10b14fb0a1b213bc8bc5d6498a9ee3033e480283d7c26bd8c4c0349466fb99b0437db461d0fa17ed18103646441a158d2ffea8e2b9ad46f11025d7b9a87f8511c2ad7d62d223692ccdb5181869f4532ebdd3c020a9adff429f16c51201744c8b13691adfb0dba82fc19797fec9352a9b5ec34be6fcba50c37e77ca73bb3df7116b42bf4a016dc2a14c6ed922e57d64aa3b1247c56513743ec68de43820832e41530e944c52e223ef456b81e2ee0b651152eb4c86f1b4c13cd832e9ad53fffc0d7fd70b3a164367dddef8a19e8ce5bb9cac6d4a760bc5f66af8892d0a97624c8cadd3e46f51553c47baa8e9ea9bd7b8072b4d1337c2380f19cedcc068a09ea013977b663c8ddf6bfd1bd892e9ac049d7ac65989d95ac7abc087294aa3cf322006343ada306e23bf9597bd9f1292e86ef393c5d5b696bdb4782b8d83b3afc43d828e1a12ff7ab150bdd8f3cdce9c8b5276c6e5e56d0cfd2f6f30805f752f14cfe0324b3567e30c2756e278585cc56a3b01b058615722fd1b423600db0abcbad1431db7b6f20e703b403fb875230426d859f1085cb751f979f1228292eaac58697fbd71732bfc139caaabcd02a09670f550ec9b070ab06fcd8ed32c2ade820e61b0748e0b5fea4ae192b07a46ca2ba46f44d68c0cc8e3ac2847aa08425ea43d9e4d12b959f0ee72413187d05994da6596ac8eef171e5ca6af23f1e34ec5911eb7eb1a13c5457fd469be97bd4978c0e4c24579dfaf4e34742c3aa4b9941b1fb81f74bd95dbd5a8af9e3bcf0dbf0724a2f74076e5697bc3f5bba8e1b6fd6d5afb87f307cb01b70f9c68dac7d9fe4fbd8b8d3bb308f00022f7d854980f448d800d3773280696872f20a9ab2506d9ea140217fe3834df1d3a5ee4fc27171cbf485f1a8e8f64ca32513ada33626c471f24d237f131b6aa709f45615b6617721d9289489af77e7b3eeabb2647b63aab0cef0f7717538da21cd9eb663bb160ef1414d2fc08ba076ab7d6589f9f267b1af413ac99c083b074f80a4b0e500a8afdf20822b5da8795d61e36b64d64a6832b37cc08d7c95f6a7ecf1452a107cf6c088a27f8b6f9ab232b69f08095f49f83d63cc106300ac6569ab6fa410131e1816a9d78ccf2321c7519b591ac41fb3356581100cb54bbe2080bd79baf0a96c4fc185679612fa5246b44cac0f03d7641dba1894502f2a3402af2d3ff0eb627b788329eee6d9f14b719357ddf9ef4f43d3af8f0922d880dccb1eff15ecae130d47fbaa91c34185c3902753d30e9e47cb9b629bfa7b752be44652b50f015b305b0f62ff6e35254c60b44a62521f0034a4f33d61e98f5000f80dcdb782c0a2a56c805bfca11aeefa96298f59529014248b419bdb47e5fd4bc611b6e8da4f1aac59ff175d7aee4efb7783aa28368458b4e188fadf228d07cb6e2e44d2807b0a76ff7396dd7803588954ad2867ad2a10d4cc4c21caefb1d599384a22debd9ce1f6910ba62583b32c6b498c1a68501dbd3c1bc285b8631e801c8ce194e0d51b9e3fc0375a4fc4e9f1877653bf8ea49dcd082672e80e2bc100dbe843b79a16170243f5990a132a7fcfe0cb7056072b858bd5de4f1010383a0a318f4565779f20bc999adc15618a8a192359398979890fd06b03e9386df4c13848f31928e3932fc92d633a72384bb2faa6a79562c2aed68f07adfbf45dd82608e17cf0b54d92d0a549b5993c1561bd068381617640aa8d5b54f6da1efc3cc299d17ee31a62fe40dfd695fc0d9061388de64112b5dbfc88f251d31d7109aa9e6d6116e22ab41c8d9a0f1558aad408b617b64255e2327e32df85daa92364cd7075cec22ecef506638dcbebdb3e62171f726039aff5a0434695d35d43bbe75f4c4f34a650db9b0c0103bee4caa2a53b8f7b2895ea42774b3af1e8a7f3ead7105266877d1e3fb1d4cfad4affe7fb8a8eb6309a8d1bf956a320764b3b33fcd6248e807b46351cc6ac3b98a9edf5f8e79c075e2cf8e0e0bf91644070cf005d256d40d5d843d9f7023379b93dbac46e9f0307bb8b8ea866d5f397062e4a1d5206897bdd2ea857c2a1b39a390b803125e344b11854530f479346811fe81d64284538393de24ea0608c2c58a0689cf184afc07d475c62a637ee709d88aa72f897070cd763712c93c7c4dd57b84d61351ddf3ed0eace1661447cd31dc13f0253b9936358b710c40f0d65f320d84c0635a5c47ebc6a0bf8518721851a88180c87b78548156a3972f097d0f05ef2efd275a035d5ad48c7b75178122065b5e547dfaac532425ae957dabcc3f256b0f05b3dd163da69dcba34a686eddbe4a47a9720b1ea3c635069e5b0f9b6f385160857e1597f8a50f9c907619d6ce46a78b46c72ae5c051d23ea0e8cc0b6da2fa300a8294f220e5fc74c2b03689c9f0182dfafa3d3996004e2a4ce45427cecf6dbfcc754317d86585ba99eff5fee263e70175a91415d1e4ee3a799b987e7b3031bbac532c5b3d0525d971cd719ea9cfdc4a452d45f7971f9c63b768a8acb1e3acaebe4e530e2ba067d0b078e56769b6c5f66495593f50647b166becbafd64d786776d93e691b516adb39713a4fb7f24e75cf262432e287188de9ef12b3866265f11d141a1718bed5fbac4c28cb9359e2afc60d447e4ad3430f5eaae20595a0bb74cb3df1b4b27b4af89c3e390d3bf6d1db8a9a7ea29fd34f379ee9039b8c5069b08f56d582c90aafc48a18db513dfd8858744b12c8b8ccda849f1ae3fdaa6de8295d7f0f17e9eb8146b9d450040cf1cc174bf493005f7574e6446b6bb43d6b4d4b81c7aa2e6150919f6fbfc89ce69d63411730c32b550b06d3a2debbc60b29bfe85e0d5379de647c7bdb887a78184bf373eaba235733f3a62aa17014da4c64553a7e69c07363802c8454e3dd5f7e622468150937ebba5d97352662ca2f0911d477e0986e39d8a71e9c0476065ff5576d6184db0183a1558f4c2ad9d2c77c1093b711c0abd4f260cf75f09026012423ea106416ac2124ef2247274014eda9eb113010fc2a23bd1abe1226c0ee5fd9b361fb771ef785170b335abcac4c9e015bcf1ee2c04043215b3e5b2fef712421a6d981bd170d5bcbde74e9377aafab419bf0772beaeb479e6614a23cf193f61e0f23cd703d29d44a2b466b9d949114f762a1bd7388c5f6dac9522f1aeaf158902110c8e2a179956bc5a0fa841fb97f8f6bb46b98f98943b6a604d0db047c27aa76a27355d0bbb07efb8867896849315247eff41c130a466693baf255a5d9b07a4ee635ea213c59d46762d1539a265a4c743e212f6a3ab57212b941d425c1b8554881ecd271dacb57278ac635bdfdee12f9732726b6a1b554f3b2266902f3bd637ad43709e6202445ec260aec7a1af11f5eeed6f549478fdc2a6d2d4fb5968a88164b787966901f2a05cb24d1f16fc5ac521ad8d4b58713d682e66dccf7fc03914fd09e4406f222cb39e9284a42a3f7868798f696d72e2519a0d921355f464305244ab6846f69351be176734c1ff62996d984ef0b62f1dc509524e2aad6a2cd0bc93e2c57f22b64ca2a00f0181e867da9f9d29f1eb82442a01a892b125f70f67c18c428b7abc24210912ba4eabe012695939ffff264e8a59b0041413cda6d55221e5f3ae8af146abbdb79ff5ec059161cc89968fc95509eaa6506d2911b370cf7b0b55551f39590c079e55c208febcde11531dff926eab82fd3a2664fb0351539066c5de24a0dd5a9fa1d54977ddc4021b9b453a1ca5a83a472707aeec9da985444c603e02d3401ed7460938f19e5a09c5c8e2c10e89f68c649a1d09bd851641d19b49eb3d539296866ce11479fbf79132407e25fefdbe5829aaed9b87043c71b7197fc0d43f952153be80161494cef2f17545bb3af932650daf49c333b7ed0dcf7d4fb0e03e709e784f0e18ff675a328dae720ed97354cbf088530e08a42a824827b8fb72b13ef201404c1a6c20bb2916c8fef13a2f360a9243367957db51f36b860103c1c3933d0e16bdfd6ceee64b8c4dbd2c3ada5ef330e0a94ea5018ea382c907c09762bbb644b608bf14a9ac778ab1c4e4eda374c36c549c1619cb79643838886b0b5d669b4b73a2bce98e2885d29fa8971ec90736863ec72f9702d578e08ee9f75de232eeb0744c3151423260c9265f66d1be2a713a6b535b851d13ae91e48609deab3f68f5110d78d99c6635d9041db54558b8d1c1b8c37133a5c23f3e85c11c87f1421d1a8a59a53d26263260a488d4554d2d57d", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0xc0384707, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) 9m21.773972015s ago: executing program 4 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m18.207457639s ago: executing program 4 (id=356): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4a0b645b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000008c0)=ANY=[], 0x5b) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 9m15.160476126s ago: executing program 4 (id=360): socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102400, 0x19000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000080, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000240), 0x800000000, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0xff, 0xe, 0x7fff, 0x2}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 9m11.484163734s ago: executing program 4 (id=365): socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x12c, 0x24, 0x100, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xf, 0xffff}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xe3, 0x8, 0x0, 0x3, 0xa536, 0x5, 0x4}}, {0xc, 0x2, [0xe6c, 0x1, 0x1, 0x1]}}, {{0x1c, 0x1, {0x6, 0xc, 0x8, 0x2, 0x1, 0x2, 0x10, 0x2}}, {0x8, 0x2, [0xfffa, 0x3ff]}}, {{0x1c, 0x1, {0x3, 0x0, 0x9, 0x4, 0x0, 0xee62, 0x1, 0x6}}, {0x10, 0x2, [0x0, 0x800, 0x90, 0x1e00, 0x9, 0xfff]}}]}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x70, 0x2, {{0x7, [0x7, 0x1, 0xf, 0x1, 0x7, 0x4, 0xf, 0x8, 0xb, 0x1, 0xe, 0xfe, 0xf, 0xf, 0x7, 0xb], 0x1, [0xfffe, 0x8001, 0x8001, 0x8, 0x5, 0xc0fd, 0x6, 0x100, 0x5, 0xfff9, 0x4, 0x2, 0x101, 0x1, 0x7, 0x8], [0xfae, 0x8, 0x9, 0x1, 0x6, 0x0, 0xfff, 0x1, 0x0, 0x2, 0x6, 0x80, 0x401, 0x1, 0xd, 0xfab8]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_MAX_RATE64={0x4}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004890) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) fsopen(&(0x7f0000000080)='squashfs\x00', 0x0) 9m3.292549805s ago: executing program 4 (id=375): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x4a0b645b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000008c0)=ANY=[], 0x5b) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) 8m58.765834839s ago: executing program 4 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 8m43.445220467s ago: executing program 33 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 1m46.698254473s ago: executing program 7 (id=933): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x210042, &(0x7f0000000200)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@discard_size={'discard', 0x3d, 0x1000aff9}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@quota}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@usrquota}, {@discard}]}, 0x24, 0x6270, &(0x7f00000089c0)="$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") acct(&(0x7f0000000000)='./file1\x00') 1m41.285106357s ago: executing program 7 (id=944): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1c5, &(0x7f00000002c0)="$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") 1m40.452213672s ago: executing program 1 (id=947): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m40.238692429s ago: executing program 7 (id=950): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000100)=@hat={'changehat ', 0x4, 0x5e, ['/proc/thread-self/attr/current\x00', 'changeprofile \xe1M\xa5R%i\xf0\xc8Z\xf0O\x1bI\x92\x81k2N\xd5\xef\a\x86j@\xa4\xb7\x95\xf5S\xb2\xb2\x10\xd9\x00'/61, '&\x00', '\xb2\x00']}, 0x7d) 1m37.718111505s ago: executing program 7 (id=956): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") socket$tipc(0x1e, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) ftruncate(r0, 0x9) 1m37.222544791s ago: executing program 1 (id=958): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 1m36.833029691s ago: executing program 1 (id=961): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1m35.809642304s ago: executing program 7 (id=962): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000b00)={0x0, 0x785651959ee536bd, 0x1000, 0x0, 0x3e}, 0x20) 1m34.642820909s ago: executing program 7 (id=970): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1m32.340989879s ago: executing program 1 (id=974): creat(&(0x7f0000000100)='./bus\x00', 0x0) 1m29.473013487s ago: executing program 5 (id=977): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xf6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m29.292241532s ago: executing program 1 (id=979): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) 1m26.429145549s ago: executing program 1 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) r2 = gettid() socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m23.806088811s ago: executing program 5 (id=985): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf2fe, 0x100, 0x1, 0x250}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10102, 0x1}) io_uring_enter(r0, 0x305, 0x0, 0x4, 0x0, 0x0) 1m18.203353311s ago: executing program 34 (id=970): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1m18.190941554s ago: executing program 5 (id=992): r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000600)=0xc) 1m17.784969262s ago: executing program 5 (id=994): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) 1m17.353542481s ago: executing program 5 (id=998): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) 1m15.740696499s ago: executing program 5 (id=1001): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e04000013170902120001000000000904000000ef01"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071183e00000000c29500000000000000b99ec7c8097d0a536fa8f9f77196bc9c8aa9d627902903bf14dd590c52f9c4f66d754988ec5196"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000003c0)='syz0\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r1}, 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0xfffc]}}}}]}, 0x88}}, 0x20000000) 1m10.277772241s ago: executing program 35 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) r2 = gettid() socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 59.623809788s ago: executing program 36 (id=1001): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e04000013170902120001000000000904000000ef01"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071183e00000000c29500000000000000b99ec7c8097d0a536fa8f9f77196bc9c8aa9d627902903bf14dd590c52f9c4f66d754988ec5196"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000003c0)='syz0\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={r1}, 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x101040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000480), &(0x7f00000004c0)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0xfffc]}}}}]}, 0x88}}, 0x20000000) 16.798240116s ago: executing program 2 (id=1100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000080)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) 14.800846318s ago: executing program 2 (id=1101): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @bt={0x8, 0xfffff6d4, 0x1, 0x4, 0x5, 0x0, 0x12, 0xc}}) 14.248886731s ago: executing program 2 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000880), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) 12.721038493s ago: executing program 2 (id=1108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 11.69080948s ago: executing program 0 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000080)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) 9.813556514s ago: executing program 0 (id=1112): nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000810001180090001006c617374000000004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c00028008000180fffffffe140000001000010000000000000000000084000a513f622eb1343b9464939e3a304205547da88e0f6985bfd7083cb68e644507013be6fc6a26682306bd13bb25dd45fb13bb78d4079dd6994c0638c254878f32839e07a11fa18217219b0afe568aaa69e0a364ea6e52153b94ce5f1d0e9071d6e7d1521bc850f283aba2ee85673ca97cee6737d39c33d7689845271971af20e740acd87810c5cf2eae5edfc357dd7c4a504d815f98d1a9d376e3c488fab3b59fe97b6f3b457e057b226d1712de4285993e960ce36b27383f96bb84a8d86b61c12562a20b7d9683b490f63c26fb200ae50ae09d77ea6736a03f6eae4a375c7634e5eeb7a726218d000000000000000000000000000000553b136082c8b5996c3a67ff9e1a2f6c76dc6f5dd1782a0649ff0d2401e99828ab5f7405a8cfbb03c2b447f67f1f659a55d887334a831c79843f17d93c5f883a150eca95f3"], 0xf0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000280)=""/2, 0x2, 0x0, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xcd, &(0x7f0000000d80)=""/205, 0x0, 0x3b, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="9788503c8c0bc5eed073a09b91f5346be0092da5379edf1559204499ac1ed2d1bdca50a5cd29634f166b9633a6d65e5a3fe5c54df4e6473fbabfffa2156ee1679ad7eda9968621"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000240)='./file1\x00', 0x818000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f00000006c0)=ANY=[], 0x1, 0x1506, &(0x7f0000004000)="$eJzs3QnYj9XWMPC19t43D0n/JPNee938k2GTJBmSZEiSJEkyJSRJjiQkHjIlIQmZk8whmUIyz1PmJDmSJAkJSfZ3PXXOcc7b+d7e853zft73POt3Xfd173Xte+177//ifw/Xcz3PNx0HV61frVJdZoZ/Cv66SwWAFADoBwDXAEAEAKWylcqW1p9JY+o/dxLxr/XQtCs9A3ElSf3TN6l/+ib1T9+k/umb1D99k/qnb1L/9E3qL0R6tm167mtlS7/bP//+P+XXnbz//19Irv/pm9T/382ZTP/I0VL/fyeXQgj/WIbUP32T+qdvUv/0Teqfvkn90zepvxDp2ZV+/yzbld2u9L8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDpw/lwmQGAtH10pSclhBBCCCGEEEKIf6mQ8UrPQAghhBBCCCGEEP/9EBRoMBBBBsgIKZAJMsNVkAWuhqxwDSTgWsgG10F2uB5yQE7IBbkhD+SFfGCBwAFDDPmhACThBigIN0IhKAxFoCh4KAbF4SYoATdDSbgFSsGtUBpugzJQFspBebgdKsAdUBHuhEpwF1SGKlAVqsHdUB3ugRpwL9SE+6AW3A+14QGoAw9CXXgI6sHDUB8egQbwKDSERtAYmkDT/6f8F6ArvAjdoDukQg/oCS9BL+gNfaAv9IOXoT+8AgPgVRgIg2AwvAZD4HUYCm/AMBgOI+BNGAmjYDSMgbEwDsbDWzAB3oaJ8A5MgskwBabCNJgOM+BdmAmzYDa8B3PgfZgL82A+LICF8AEsgsWwBD6EpfARLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg49hO+yAnbALdsMe2AufwD74FPbDZ3AAPv8H88/9h/xOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwByYC3NhHsyD+TAfEhIyMubH/JjEJBbEglgIC2ERLIIePRbH4lgCb8aSWBJLYSksjaWxDJbFslgey2MFrIAVsSJWwkpYGStjVayKd+PdeA/WwBpYE2tiLayFtbE21sE6WBfrYj2sh/WxPjbABtgQG2JjbIxNsSk2w2bYHJtjS2yJrbAVtsbW2AbbYFtsi+2wHbbH9tgBO2BH7IidsDN2xhfwBXwRX8TuWFn1wJ7YE3thL+yDfbEvvoz98RV8BV/FgTgIB+Nr+Bq+jkPxLA7D4TgCR2AFNQpH4xhkNQ7H43icgBNwIk7ESTgZJ+NUnIbTcQbOwJk4C2fhezgH38f3cR7OwwW4EBfiIlyMS3AJLsVzuAyX4wpciatwNa7CtbgO1+IG3IgbcDNuxq24FT/Gj3EH7sBduAv34B78BD/BT/FTHIgH8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7EU3gaT+EZPINn8Ryex/N4AS/gRbyIl/BS2n9+lcYoozKoDCpFpajMKrPKorKorCqrSqiEyqayqewqu8qhcqhcKpfKo/KofCqfIkWKVazyq/wqqZKqoCqoCqlCqogqorzyqrgqrkqoEqqkKqlKqVtVaXWbKqPKqha+vCqvKqiWvqK6U1VSlVRlVUVVVdVUNVVdVVc1VA1VU9VUtVQtVVs9oOqoHtgHH1JplamvBmEDNRgbqkaqsWqiXsfHVDM1FJurFqqlekINx2HYWjXzbdTTqq0aje3UH9QYfFZ1UOOwo3pedVKdVRf1guqqmvtuqruahD1UTzUVe6neqo/qq2ZiFZVWsarqVTVQDVKD1WtqAb6uhqo31DA1XI1Qb6qRapQarcaosWqcGq/eUhPU22qiekdNUpPVFDVVTVPT1Yy0r1Y1S81W76k56n01V81T89UCtVB9oBapxWqJ+lAtVR+pZWq5WqFWqlVqtVqj1qp1ar3aoDaqTRGoLWqr2qY+VtvVDrVT7VK71R61V32i9qlP1X71mTqgPlcH1R/VIfWFOqy+VEfUV+qo+lodU9+o4+pbdUJ9p06qU+q0+l6dUT+os+qcOq9+VBfUT+qi+lldUkGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36kK6sC6ii2qvi+ni+iZdQt+sS+pbdCl9qy6tb9NldFldTpfXt+sK+g5dUd+pK+m7dGVdRVfV1fTdurq+R9fQ9+qa+j5dS9+va+sHdB39oK6rH9L19MO6vn5EN9CP6oa6kW6sm+im+jHdTD+um+sWuqV+QrfST+rW+indRj+t2+pndDv9B91eP6s76Od0R/287qQ76y76Z31JB91Nd9epuofuqV/SvXRv3Uf31f30y7q/fkUP0K/qgXqQHqxf00P063qofkMP08P1CP2mHqlH6dF6jB6rx+nx+i09Qb+tJ+p39CQ9WU/RU/U0PV33+dNIs/8L+W//nfwBv5x9q96mP9bb9Q69U+/Su/UevVfv1fv0Pr1f79cH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/QJfVKf0j/q7/UZ/YM+q8/pc/pHfUFf0Bf/9BmAQaOMNsZEJoPJaFJMJpPZXGWymKtNVnONSZhrTTZznclurjc5TE6Ty+Q2eUxek89YQ8YZNrHJbwqYpLnBFDQ3mkKmsCliihpvipni5qZ/Ov/35tfUNDXNTDPT3DQ3LU1L08q0Mq1Na9PGtDFtTVvTzrQz7U1708F0MB1NR9PJdDJdTBfT1XQ1AQBSTarpaV4yvUxv08f0Nf3My6a/6W8GmAFmoBloBpvBZogZYoaaoWaYGWZGmBFmpBlpRpvRZqwZa8ab8WaCmWAmmolmkplkppgpZpqZZmaYGWammWlmm9lmjplj5pq5Zr6ZbxaahWaRWWSWmCVmqVlqlpnlZrlZaVaa1Wa1WWvWmvVmvdloNprNZrNZZv78A5o7zU6z2+w2e81es8/sM/vNfnPAHDAHzUFzyBwyh81hc8QcMUfNUXPMHDPHzXFzwpwwJ81Jc9qcNmfMGXPWnDXnzXlzwVwwF81Fc8lcSrvti1SkIhOZKEOUIUqJUqLMUeYoS5QlyhpljRJRIsoWZYuyR9dHOaKcUa4od5Qnyhvli2xEkYs4iqP8UYEoGd0QFYxujApFhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv5Lxw/hbM7HfTfb3abaHranfcn2sr1tH9vX9rMv2/72FTvAvmoH2kF2sH3NDrGv26H2DTvMDrcj7Jt2pB1lR9sxdqwdZ8fbt+wE+7adaN+xk+xkO8VOtdPsdDvDvmtn2ll2tn3PzrHv27l2np1vF9iF9gO7yC62S+yHdqn9yC6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9Vusx/b7XaH3Wl32d12j91rP7H77Kd2v/3MHrCf24P2j/aQ/cIetl/aI/Yre9R+bY/Zb+xx+609Yb+zJ+0pe9p+b8/YH+xZe86etz/aC/Yne9H+bC/ZkHZzn3Z5J0OGMlAGSqEUykyZKQtloayUlRKUoGyUjbJTdspBOSgX5aI8lIfyUT5Kw8SUn/JTkpJUkApSISpERagIefJUnIpTCSpBJakklaJSVJpKUxkqQ+Uo7aJ5O91Bd9CddCfdRXdRFapC1agaVafqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUgBpQQ2pIjakxNaWm1IyaUXNqTi2pJbWiVtSaWlMbakNtqS21o3bUntpTB+pAHakjdaJO1IW6UFfqSt2oG6VSKvWkntSLelEf6kP9qB/1p/40gAbQQBpIg2kwDaEhNJSG0jAaTiPoTRpJo2g0jaGxNI7G03iaQBNoIk2kSTSJptAUmkbTaAbNoJk0k2bTbJpDc2guzaX5NJ8W0kJaRItoCS2hpbSUltEyWkEraBWtojW0htbROtpAG2gTbaIttIW20TbaTttpJ+2k3bSb9tJe2kf7aD/tpwN0gA7SQTpEh+gwHaYjdISO0lE6RsfoOB2nE3SCTtJJPE2n6QydobN0ls7TebpAP9FF+pkuUaAUl8lldle5LO5ql9Vd41Jcpu4A8Jc4l8vt8ri8Lp+zLofL+TcxOecKucKuiCvqvCvmirubfhOX6VHWlXPl3e2ugrvDVXRl3N/G1d09roa719V097lq7u6/iWu5+11t94ir4x51dV0jV881cfXdI66Be9Q1dI1cY9fEtXJPutbuKdfGPe3aumd+Ey9yi906t95tcBvdPvepO+9+dMfcN+6C+8l1c91dP/ey6+9ecQPcq26gG/SbeIR70410o9xoN8aNdeN+E09xU900N93NcO+6mW7Wb+KF7gM3xy1xc908N98t+CVOm9MS96Fb6j5yy9xyt8KtdKvcarfGrf3LXFe6zW6L2+r2uk/cdrfD7XS73G6355c4bR373WfugPvcHXVfu0PuC3fYHXdH3Fe/xGnrO+6+dSfcd+6kO+VOu+/dGfeDO+vO/bL+tLV/7352l1xwwMiKNRuOOANn5BTOxJn5Ks7CV3NWvoYTfC1n4+s4O1/POTgn5+LcnIfzcj62TOyYOeb8XICTfAMX5Bu5EBfmIlyUPRfj4nwTl+CbuSTfwqX4Vi7Nt3EZLsvluDzfzhX4Dq7Id3IlvosrcxWuytX4bq7O93ANvpdr8n1ci+/n2vwA1+EHuS4/xPX4Ya7Pj3ADfpQbciNuzE24KT/Gzfhxbs4tuCU/wa34SW7NT3Ebfprb8jPcjv/A7flZ7sDPcUd+njtxZ+7CL3BXfpG7cXdO5R7ck1/iXtyb+3Bf7scvc39+hQfwqzyQB/Fgfo2H8Os8lN/gYTycR/CbPJJH8Wgew2N5HI/nt3gCv80T+R2exJN5Ck/laTydZ/C7PJNn8Wx+j+fw+zyX5/F8XsAL+QNexIt5CX/IS/kjXsbLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexh/zdt7BO3kX7+Y9vJc/4X38Ke/nz/gAf84H+Y98iL/gw/wlH+Gv+Ch/zcf4Gz7O3/IJ/o5P8ik+zd/zGf6Bz/I5Ps8/8gX+iS/yz3yJA0OMsYp1bOIozhBnjFPiTHHm+Ko4S3x1nDW+Jk7E18bZ4uvi7PH1cY44Z5wrzh3nifPG+WIbU+xijuM4f1wgTsY3xAXjG+NCceG4SFw09nGxuHh8U1wivjkuGd8Sl4pvjUvHt8Vl4rJxubh8fHtcIb4jrhjfGVeK74orx1XiqnG1+O64enxPXCO+N64Z3xeXjO+Pa8cPxHXiB+O68UNxvfjhuH78SNwgfjRuGDeKG8dN4qbxY3Gz+PG4edwibhk/EbeKn4xbx0/FbeKn47bxM7/bnxr3iHvGL8UvxSHcq+cnFyQXJj9ILkouTi5JfphcmvwouSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObkluTUZQrWM4NErr73xkc/gM/oUn8ln9lf5LP5qn9Vf4xP+Wp/NX+ez++t9Dp/T5/K5fR6f1+fz1pN3nn3s8/sCPulv8AX9jb6QL+yL+KLe+2K+uG/im/qmvpl/3Df3LXxL/4R/wj/pn/RP+af8076tf8a385Bo75/1Hfxz/jn/vO/kO/su/gXf1b/ou/nuPtWn+p6+p+/le/k+vo/v5/v5/r6/H+AH+IF+oB/sB/shfogf6of6YX6YH+FH+JF+pB/tR/uxfqwf78f7CX6Cn+gn+kl+kp/ip/hpfpqf4Wf4mX6mn+1n+zl+jp/r5/r5fr5f6Bf6RX6RX+KX+KV+qV/ml/kVfoVf5Vf5NX6NX+fX+Q1+g9/kN/ktfovf5rf57X673+l3+t1+t9/r9/p9fp/f7/f7A/6AP+gP+kP+kD/sv/RH/Ff+qP/aH/Pf+OP+W3/Cf+dP+lP+tP/en/E/+LP+nD/vf/QX/E/+ov/ZX/LBj0+8lZiQeDsxMfFOYlJicmJKYmpiWmJ6Ykbi3cTMxKzE7MR7iTmJ9xNzE/MS8xMLEgsTHyQWJRYnliQ+TCxNfJRYllieWJFYmViVWJ0IIe/2OOQPBUIy3BAKhhtDoVA4FAlFgw/FQvFwUygRbg4lwy2hVLg1lA63hTKhbCgXHg0NQ6PQODQJTcNjoVl4PDQPLULL8ERoFZ4MrcNToU14OrQNz4R24Q+hfXg2dAjPhY7h+dApdA5dwguha3gxdAvdQ2roEXqGl0Kv0Dv0CX1Dv/By6B9eCQPCq2FgGBQGh9fCkPB6GBreCMPC8DAivBlGhlFhdBgTxoZxYXx4K0wIb4eJ4Z0wKUwOU8LUMC1MDzPCu2FmmBVmh/fCnPB+mBvmhflhQVgYPgiLwuKwJHwYloaPwrKwPKwIK8OqsDqsCWvDurA+bAgbw6awOWwJW8O28HHYHnaEnWFX2B32hL3hk7AvfBr2h8/CgfB5OBj+GA6FL8Lh8GU4Er4KR8PX4Vj4JhwP34YT4btwMpwKp8P34Uz4IZwN58L58GO4EH4KF8PP4VII4Uq/SRdCCCGE+N9A/05/j/9LjvpTuycAXL0j95H/2L8px6/t3hnztEoAwNPdOz70561y5dTU1D8du0xDVGAeACQu52eAy/FyaAlPQhtoASX+0p/yV+fqrTpf4P9sfIAoeStA5r/KScv/c3x5/Jv/7vp7q1Fz/tPxNUTJeQCFClzOyQSX48vjl/y746eqnM1+Z/xMX4wHaP5XOVngcnx5/OLwODwDbf7mSCGEEEIIIYQQ4le9Vbn2v/d8m/Z8nsdczskIl+O/93wuhBBCCCGEEEKI/1me7dzlqcfatGnRXhr/HY0UAAjX/PpR/0+YjzSk8V9sXOlvJiGEEEIIIcS/2uWb/is9EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIv36//HrxP58rt/7W4NCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHEv6v/EwAA//8oYjL2") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001180)=ANY=[@ANYBLOB="1d000000040000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000000000000000000200001900000000000000000000282298e9d27b4782f3a9042739783cab0ff022d2396376f3591dde2a1b78e5318ccb5cee818b409078a7e2e705bde516db968c77b9b2afe54869a6de3b35682f196c7d64b4d26b9fb7aad057c9b9fec53e0579f6ec69dde32e39551799bd9950612c08cddbfb8e0a4da728bac7c4b0480881862eb72dd5148fae6278768951a204b21d8045e2a20c8229768d6231a9e135ab8652b9d0d8520b3faf575b"], 0x50) 9.630539335s ago: executing program 2 (id=1113): getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002240)={0x0, 0xd}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x5, 0x448, {0x2, 0x8, 0x5, 0x401}, 0x0, 0x0}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x5452, &(0x7f0000000100)={'lo\x00', 0x8}) bind$tipc(r5, 0x0, 0x0) unshare(0x62040200) 5.476483604s ago: executing program 0 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) vmsplice(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 5.356960157s ago: executing program 6 (id=1118): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = msgget(0x0, 0x2c4) msgsnd(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x2000, 0x0) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000006c0)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x36314247}}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000600)=0xc) msgctl$IPC_RMID(r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, 0x0, 0x0) getpid() getsockopt(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) socket$alg(0x26, 0x5, 0x0) 3.663757609s ago: executing program 6 (id=1119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='htcp\x00', 0x5) shutdown(r0, 0x1) 3.410719283s ago: executing program 6 (id=1120): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000301000/0x4000)=nil, 0x4000, 0x1000007, 0x10, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.776671077s ago: executing program 0 (id=1121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000080)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) unshare(0x22020600) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) 1.653063304s ago: executing program 6 (id=1122): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xf6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 820.240644ms ago: executing program 6 (id=1123): r0 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) 753.721276ms ago: executing program 0 (id=1124): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 543.245773ms ago: executing program 6 (id=1125): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfa, 0xb3, 0x28, 0x8, 0x424, 0xc001, 0xa2b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x12, 0x0, 0x0, 0x2c, 0x71, 0x31}}]}}]}}, 0x0) 12.358147ms ago: executing program 0 (id=1126): nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000810001180090001006c617374000000004c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c00028008000180fffffffe140000001000010000000000000000000084000a513f622eb1343b9464939e3a304205547da88e0f6985bfd7083cb68e644507013be6fc6a26682306bd13bb25dd45fb13bb78d4079dd6994c0638c254878f32839e07a11fa18217219b0afe568aaa69e0a364ea6e52153b94ce5f1d0e9071d6e7d1521bc850f283aba2ee85673ca97cee6737d39c33d7689845271971af20e740acd87810c5cf2eae5edfc357dd7c4a504d815f98d1a9d376e3c488fab3b59fe97b6f3b457e057b226d1712de4285993e960ce36b27383f96bb84a8d86b61c12562a20b7d9683b490f63c26fb200ae50ae09d77ea6736a03f6eae4a375c7634e5eeb7a726218d000000000000000000000000000000553b136082c8b5996c3a67ff9e1a2f6c76dc6f5dd1782a0649ff0d2401e99828ab5f7405a8cfbb03c2b447f67f1f659a55d887334a831c79843f17d93c5f883a150eca95f3"], 0xf0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000280)=""/2, 0x2, 0x0, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xcd, &(0x7f0000000d80)=""/205, 0x0, 0x3b, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="9788503c8c0bc5eed073a09b91f5346be0092da5379edf1559204499ac1ed2d1bdca50a5cd29634f166b9633a6d65e5a3fe5c54df4e6473fbabfffa2156ee1679ad7eda9968621"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000240)='./file1\x00', 0x818000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f00000006c0)=ANY=[], 0x1, 0x1506, &(0x7f0000004000)="$eJzs3QnYj9XWMPC19t43D0n/JPNee938k2GTJBmSZEiSJEkyJSRJjiQkHjIlIQmZk8whmUIyz1PmJDmSJAkJSfZ3PXXOcc7b+d7e853zft73POt3Xfd173Xte+177//ifw/Xcz3PNx0HV61frVJdZoZ/Cv66SwWAFADoBwDXAEAEAKWylcqW1p9JY+o/dxLxr/XQtCs9A3ElSf3TN6l/+ib1T9+k/umb1D99k/qnb1L/9E3qL0R6tm167mtlS7/bP//+P+XXnbz//19Irv/pm9T/382ZTP/I0VL/fyeXQgj/WIbUP32T+qdvUv/0Teqfvkn90zepvxDp2ZV+/yzbld2u9L8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDpw/lwmQGAtH10pSclhBBCCCGEEEKIf6mQ8UrPQAghhBBCCCGEEP/9EBRoMBBBBsgIKZAJMsNVkAWuhqxwDSTgWsgG10F2uB5yQE7IBbkhD+SFfGCBwAFDDPmhACThBigIN0IhKAxFoCh4KAbF4SYoATdDSbgFSsGtUBpugzJQFspBebgdKsAdUBHuhEpwF1SGKlAVqsHdUB3ugRpwL9SE+6AW3A+14QGoAw9CXXgI6sHDUB8egQbwKDSERtAYmkDT/6f8F6ArvAjdoDukQg/oCS9BL+gNfaAv9IOXoT+8AgPgVRgIg2AwvAZD4HUYCm/AMBgOI+BNGAmjYDSMgbEwDsbDWzAB3oaJ8A5MgskwBabCNJgOM+BdmAmzYDa8B3PgfZgL82A+LICF8AEsgsWwBD6EpfARLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg49hO+yAnbALdsMe2AufwD74FPbDZ3AAPv8H88/9h/xOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwByYC3NhHsyD+TAfEhIyMubH/JjEJBbEglgIC2ERLIIePRbH4lgCb8aSWBJLYSksjaWxDJbFslgey2MFrIAVsSJWwkpYGStjVayKd+PdeA/WwBpYE2tiLayFtbE21sE6WBfrYj2sh/WxPjbABtgQG2JjbIxNsSk2w2bYHJtjS2yJrbAVtsbW2AbbYFtsi+2wHbbH9tgBO2BH7IidsDN2xhfwBXwRX8TuWFn1wJ7YE3thL+yDfbEvvoz98RV8BV/FgTgIB+Nr+Bq+jkPxLA7D4TgCR2AFNQpH4xhkNQ7H43icgBNwIk7ESTgZJ+NUnIbTcQbOwJk4C2fhezgH38f3cR7OwwW4EBfiIlyMS3AJLsVzuAyX4wpciatwNa7CtbgO1+IG3IgbcDNuxq24FT/Gj3EH7sBduAv34B78BD/BT/FTHIgH8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7EU3gaT+EZPINn8Ryex/N4AS/gRbyIl/BS2n9+lcYoozKoDCpFpajMKrPKorKorCqrSqiEyqayqewqu8qhcqhcKpfKo/KofCqfIkWKVazyq/wqqZKqoCqoCqlCqogqorzyqrgqrkqoEqqkKqlKqVtVaXWbKqPKqha+vCqvKqiWvqK6U1VSlVRlVUVVVdVUNVVdVVc1VA1VU9VUtVQtVVs9oOqoHtgHH1JplamvBmEDNRgbqkaqsWqiXsfHVDM1FJurFqqlekINx2HYWjXzbdTTqq0aje3UH9QYfFZ1UOOwo3pedVKdVRf1guqqmvtuqruahD1UTzUVe6neqo/qq2ZiFZVWsarqVTVQDVKD1WtqAb6uhqo31DA1XI1Qb6qRapQarcaosWqcGq/eUhPU22qiekdNUpPVFDVVTVPT1Yy0r1Y1S81W76k56n01V81T89UCtVB9oBapxWqJ+lAtVR+pZWq5WqFWqlVqtVqj1qp1ar3aoDaqTRGoLWqr2qY+VtvVDrVT7VK71R61V32i9qlP1X71mTqgPlcH1R/VIfWFOqy+VEfUV+qo+lodU9+o4+pbdUJ9p06qU+q0+l6dUT+os+qcOq9+VBfUT+qi+lldUkGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36kK6sC6ii2qvi+ni+iZdQt+sS+pbdCl9qy6tb9NldFldTpfXt+sK+g5dUd+pK+m7dGVdRVfV1fTdurq+R9fQ9+qa+j5dS9+va+sHdB39oK6rH9L19MO6vn5EN9CP6oa6kW6sm+im+jHdTD+um+sWuqV+QrfST+rW+indRj+t2+pndDv9B91eP6s76Od0R/287qQ76y76Z31JB91Nd9epuofuqV/SvXRv3Uf31f30y7q/fkUP0K/qgXqQHqxf00P063qofkMP08P1CP2mHqlH6dF6jB6rx+nx+i09Qb+tJ+p39CQ9WU/RU/U0PV33+dNIs/8L+W//nfwBv5x9q96mP9bb9Q69U+/Su/UevVfv1fv0Pr1f79cH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/QJfVKf0j/q7/UZ/YM+q8/pc/pHfUFf0Bf/9BmAQaOMNsZEJoPJaFJMJpPZXGWymKtNVnONSZhrTTZznclurjc5TE6Ty+Q2eUxek89YQ8YZNrHJbwqYpLnBFDQ3mkKmsCliihpvipni5qZ/Ov/35tfUNDXNTDPT3DQ3LU1L08q0Mq1Na9PGtDFtTVvTzrQz7U1708F0MB1NR9PJdDJdTBfT1XQ1AQBSTarpaV4yvUxv08f0Nf3My6a/6W8GmAFmoBloBpvBZogZYoaaoWaYGWZGmBFmpBlpRpvRZqwZa8ab8WaCmWAmmolmkplkppgpZpqZZmaYGWammWlmm9lmjplj5pq5Zr6ZbxaahWaRWWSWmCVmqVlqlpnlZrlZaVaa1Wa1WWvWmvVmvdloNprNZrNZZv78A5o7zU6z2+w2e81es8/sM/vNfnPAHDAHzUFzyBwyh81hc8QcMUfNUXPMHDPHzXFzwpwwJ81Jc9qcNmfMGXPWnDXnzXlzwVwwF81Fc8lcSrvti1SkIhOZKEOUIUqJUqLMUeYoS5QlyhpljRJRIsoWZYuyR9dHOaKcUa4od5Qnyhvli2xEkYs4iqP8UYEoGd0QFYxujApFhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv5Lxw/hbM7HfTfb3abaHranfcn2sr1tH9vX9rMv2/72FTvAvmoH2kF2sH3NDrGv26H2DTvMDrcj7Jt2pB1lR9sxdqwdZ8fbt+wE+7adaN+xk+xkO8VOtdPsdDvDvmtn2ll2tn3PzrHv27l2np1vF9iF9gO7yC62S+yHdqn9yC6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9Vusx/b7XaH3Wl32d12j91rP7H77Kd2v/3MHrCf24P2j/aQ/cIetl/aI/Yre9R+bY/Zb+xx+609Yb+zJ+0pe9p+b8/YH+xZe86etz/aC/Yne9H+bC/ZkHZzn3Z5J0OGMlAGSqEUykyZKQtloayUlRKUoGyUjbJTdspBOSgX5aI8lIfyUT5Kw8SUn/JTkpJUkApSISpERagIefJUnIpTCSpBJakklaJSVJpKUxkqQ+Uo7aJ5O91Bd9CddCfdRXdRFapC1agaVafqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUgBpQQ2pIjakxNaWm1IyaUXNqTi2pJbWiVtSaWlMbakNtqS21o3bUntpTB+pAHakjdaJO1IW6UFfqSt2oG6VSKvWkntSLelEf6kP9qB/1p/40gAbQQBpIg2kwDaEhNJSG0jAaTiPoTRpJo2g0jaGxNI7G03iaQBNoIk2kSTSJptAUmkbTaAbNoJk0k2bTbJpDc2guzaX5NJ8W0kJaRItoCS2hpbSUltEyWkEraBWtojW0htbROtpAG2gTbaIttIW20TbaTttpJ+2k3bSb9tJe2kf7aD/tpwN0gA7SQTpEh+gwHaYjdISO0lE6RsfoOB2nE3SCTtJJPE2n6QydobN0ls7TebpAP9FF+pkuUaAUl8lldle5LO5ql9Vd41Jcpu4A8Jc4l8vt8ri8Lp+zLofL+TcxOecKucKuiCvqvCvmirubfhOX6VHWlXPl3e2ugrvDVXRl3N/G1d09roa719V097lq7u6/iWu5+11t94ir4x51dV0jV881cfXdI66Be9Q1dI1cY9fEtXJPutbuKdfGPe3aumd+Ey9yi906t95tcBvdPvepO+9+dMfcN+6C+8l1c91dP/ey6+9ecQPcq26gG/SbeIR70410o9xoN8aNdeN+E09xU900N93NcO+6mW7Wb+KF7gM3xy1xc908N98t+CVOm9MS96Fb6j5yy9xyt8KtdKvcarfGrf3LXFe6zW6L2+r2uk/cdrfD7XS73G6355c4bR373WfugPvcHXVfu0PuC3fYHXdH3Fe/xGnrO+6+dSfcd+6kO+VOu+/dGfeDO+vO/bL+tLV/7352l1xwwMiKNRuOOANn5BTOxJn5Ks7CV3NWvoYTfC1n4+s4O1/POTgn5+LcnIfzcj62TOyYOeb8XICTfAMX5Bu5EBfmIlyUPRfj4nwTl+CbuSTfwqX4Vi7Nt3EZLsvluDzfzhX4Dq7Id3IlvosrcxWuytX4bq7O93ANvpdr8n1ci+/n2vwA1+EHuS4/xPX4Ya7Pj3ADfpQbciNuzE24KT/Gzfhxbs4tuCU/wa34SW7NT3Ebfprb8jPcjv/A7flZ7sDPcUd+njtxZ+7CL3BXfpG7cXdO5R7ck1/iXtyb+3Bf7scvc39+hQfwqzyQB/Fgfo2H8Os8lN/gYTycR/CbPJJH8Wgew2N5HI/nt3gCv80T+R2exJN5Ck/laTydZ/C7PJNn8Wx+j+fw+zyX5/F8XsAL+QNexIt5CX/IS/kjXsbLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexh/zdt7BO3kX7+Y9vJc/4X38Ke/nz/gAf84H+Y98iL/gw/wlH+Gv+Ch/zcf4Gz7O3/IJ/o5P8ik+zd/zGf6Bz/I5Ps8/8gX+iS/yz3yJA0OMsYp1bOIozhBnjFPiTHHm+Ko4S3x1nDW+Jk7E18bZ4uvi7PH1cY44Z5wrzh3nifPG+WIbU+xijuM4f1wgTsY3xAXjG+NCceG4SFw09nGxuHh8U1wivjkuGd8Sl4pvjUvHt8Vl4rJxubh8fHtcIb4jrhjfGVeK74orx1XiqnG1+O64enxPXCO+N64Z3xeXjO+Pa8cPxHXiB+O68UNxvfjhuH78SNwgfjRuGDeKG8dN4qbxY3Gz+PG4edwibhk/EbeKn4xbx0/FbeKn47bxM7/bnxr3iHvGL8UvxSHcq+cnFyQXJj9ILkouTi5JfphcmvwouSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObkluTUZQrWM4NErr73xkc/gM/oUn8ln9lf5LP5qn9Vf4xP+Wp/NX+ez++t9Dp/T5/K5fR6f1+fz1pN3nn3s8/sCPulv8AX9jb6QL+yL+KLe+2K+uG/im/qmvpl/3Df3LXxL/4R/wj/pn/RP+af8076tf8a385Bo75/1Hfxz/jn/vO/kO/su/gXf1b/ou/nuPtWn+p6+p+/le/k+vo/v5/v5/r6/H+AH+IF+oB/sB/shfogf6of6YX6YH+FH+JF+pB/tR/uxfqwf78f7CX6Cn+gn+kl+kp/ip/hpfpqf4Wf4mX6mn+1n+zl+jp/r5/r5fr5f6Bf6RX6RX+KX+KV+qV/ml/kVfoVf5Vf5NX6NX+fX+Q1+g9/kN/ktfovf5rf57X673+l3+t1+t9/r9/p9fp/f7/f7A/6AP+gP+kP+kD/sv/RH/Ff+qP/aH/Pf+OP+W3/Cf+dP+lP+tP/en/E/+LP+nD/vf/QX/E/+ov/ZX/LBj0+8lZiQeDsxMfFOYlJicmJKYmpiWmJ6Ykbi3cTMxKzE7MR7iTmJ9xNzE/MS8xMLEgsTHyQWJRYnliQ+TCxNfJRYllieWJFYmViVWJ0IIe/2OOQPBUIy3BAKhhtDoVA4FAlFgw/FQvFwUygRbg4lwy2hVLg1lA63hTKhbCgXHg0NQ6PQODQJTcNjoVl4PDQPLULL8ERoFZ4MrcNToU14OrQNz4R24Q+hfXg2dAjPhY7h+dApdA5dwguha3gxdAvdQ2roEXqGl0Kv0Dv0CX1Dv/By6B9eCQPCq2FgGBQGh9fCkPB6GBreCMPC8DAivBlGhlFhdBgTxoZxYXx4K0wIb4eJ4Z0wKUwOU8LUMC1MDzPCu2FmmBVmh/fCnPB+mBvmhflhQVgYPgiLwuKwJHwYloaPwrKwPKwIK8OqsDqsCWvDurA+bAgbw6awOWwJW8O28HHYHnaEnWFX2B32hL3hk7AvfBr2h8/CgfB5OBj+GA6FL8Lh8GU4Er4KR8PX4Vj4JhwP34YT4btwMpwKp8P34Uz4IZwN58L58GO4EH4KF8PP4VII4Uq/SRdCCCGE+N9A/05/j/9LjvpTuycAXL0j95H/2L8px6/t3hnztEoAwNPdOz70561y5dTU1D8du0xDVGAeACQu52eAy/FyaAlPQhtoASX+0p/yV+fqrTpf4P9sfIAoeStA5r/KScv/c3x5/Jv/7vp7q1Fz/tPxNUTJeQCFClzOyQSX48vjl/y746eqnM1+Z/xMX4wHaP5XOVngcnx5/OLwODwDbf7mSCGEEEIIIYQQ4le9Vbn2v/d8m/Z8nsdczskIl+O/93wuhBBCCCGEEEKI/1me7dzlqcfatGnRXhr/HY0UAAjX/PpR/0+YjzSk8V9sXOlvJiGEEEIIIcS/2uWb/is9EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIv36//HrxP58rt/7W4NCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHEv6v/EwAA//8oYjL2") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001180)=ANY=[@ANYBLOB="1d000000040000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000000000000000000200001900000000000000000000282298e9d27b4782f3a9042739783cab0ff022d2396376f3591dde2a1b78e5318ccb5cee818b409078a7e2e705bde516db968c77b9b2afe54869a6de3b35682f196c7d64b4d26b9fb7aad057c9b9fec53e0579f6ec69dde32e39551799bd9950612c08cddbfb8e0a4da728bac7c4b0480881862eb72dd5148fae6278768951a204b21d8045e2a20c8229768d6231a9e135ab8652b9d0d8520b3faf575b"], 0x50) 0s ago: executing program 2 (id=1127): nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000280)=""/2, 0x2, 0x0, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791096000000000061000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605e46e00ded1acb26f8fa9c2702a8aac94fcbbdd2fbbba184bc337d5cb0c04a788fd76b402d5229125c274b171290fdfb32d00504a2a4f797a0103b19a04911e2ab1f208858be1873ee684e45ce2dd5de070f1aabdaa2de7edcbd27f403caffe57995b4e2d914a3c5b9bcf7ba242d1ed391d564b18b3de9c1db2b9232c5e"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xcd, &(0x7f0000000d80)=""/205, 0x0, 0x3b, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000180)) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="9788503c8c0bc5eed073a09b91f5346be0092da5379edf1559204499ac1ed2d1bdca50a5cd29634f166b9633a6d65e5a3fe5c54df4e6473fbabfffa2156ee1679ad7eda9968621"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000240)='./file1\x00', 0x818000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f00000006c0)=ANY=[], 0x1, 0x1506, &(0x7f0000004000)="$eJzs3QnYj9XWMPC19t43D0n/JPNee938k2GTJBmSZEiSJEkyJSRJjiQkHjIlIQmZk8whmUIyz1PmJDmSJAkJSfZ3PXXOcc7b+d7e853zft73POt3Xfd173Xte+177//ifw/Xcz3PNx0HV61frVJdZoZ/Cv66SwWAFADoBwDXAEAEAKWylcqW1p9JY+o/dxLxr/XQtCs9A3ElSf3TN6l/+ib1T9+k/umb1D99k/qnb1L/9E3qL0R6tm167mtlS7/bP//+P+XXnbz//19Irv/pm9T/382ZTP/I0VL/fyeXQgj/WIbUP32T+qdvUv/0Teqfvkn90zepvxDp2ZV+/yzbld2u9L8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDpw/lwmQGAtH10pSclhBBCCCGEEEKIf6mQ8UrPQAghhBBCCCGEEP/9EBRoMBBBBsgIKZAJMsNVkAWuhqxwDSTgWsgG10F2uB5yQE7IBbkhD+SFfGCBwAFDDPmhACThBigIN0IhKAxFoCh4KAbF4SYoATdDSbgFSsGtUBpugzJQFspBebgdKsAdUBHuhEpwF1SGKlAVqsHdUB3ugRpwL9SE+6AW3A+14QGoAw9CXXgI6sHDUB8egQbwKDSERtAYmkDT/6f8F6ArvAjdoDukQg/oCS9BL+gNfaAv9IOXoT+8AgPgVRgIg2AwvAZD4HUYCm/AMBgOI+BNGAmjYDSMgbEwDsbDWzAB3oaJ8A5MgskwBabCNJgOM+BdmAmzYDa8B3PgfZgL82A+LICF8AEsgsWwBD6EpfARLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg49hO+yAnbALdsMe2AufwD74FPbDZ3AAPv8H88/9h/xOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwByYC3NhHsyD+TAfEhIyMubH/JjEJBbEglgIC2ERLIIePRbH4lgCb8aSWBJLYSksjaWxDJbFslgey2MFrIAVsSJWwkpYGStjVayKd+PdeA/WwBpYE2tiLayFtbE21sE6WBfrYj2sh/WxPjbABtgQG2JjbIxNsSk2w2bYHJtjS2yJrbAVtsbW2AbbYFtsi+2wHbbH9tgBO2BH7IidsDN2xhfwBXwRX8TuWFn1wJ7YE3thL+yDfbEvvoz98RV8BV/FgTgIB+Nr+Bq+jkPxLA7D4TgCR2AFNQpH4xhkNQ7H43icgBNwIk7ESTgZJ+NUnIbTcQbOwJk4C2fhezgH38f3cR7OwwW4EBfiIlyMS3AJLsVzuAyX4wpciatwNa7CtbgO1+IG3IgbcDNuxq24FT/Gj3EH7sBduAv34B78BD/BT/FTHIgH8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7EU3gaT+EZPINn8Ryex/N4AS/gRbyIl/BS2n9+lcYoozKoDCpFpajMKrPKorKorCqrSqiEyqayqewqu8qhcqhcKpfKo/KofCqfIkWKVazyq/wqqZKqoCqoCqlCqogqorzyqrgqrkqoEqqkKqlKqVtVaXWbKqPKqha+vCqvKqiWvqK6U1VSlVRlVUVVVdVUNVVdVVc1VA1VU9VUtVQtVVs9oOqoHtgHH1JplamvBmEDNRgbqkaqsWqiXsfHVDM1FJurFqqlekINx2HYWjXzbdTTqq0aje3UH9QYfFZ1UOOwo3pedVKdVRf1guqqmvtuqruahD1UTzUVe6neqo/qq2ZiFZVWsarqVTVQDVKD1WtqAb6uhqo31DA1XI1Qb6qRapQarcaosWqcGq/eUhPU22qiekdNUpPVFDVVTVPT1Yy0r1Y1S81W76k56n01V81T89UCtVB9oBapxWqJ+lAtVR+pZWq5WqFWqlVqtVqj1qp1ar3aoDaqTRGoLWqr2qY+VtvVDrVT7VK71R61V32i9qlP1X71mTqgPlcH1R/VIfWFOqy+VEfUV+qo+lodU9+o4+pbdUJ9p06qU+q0+l6dUT+os+qcOq9+VBfUT+qi+lldUkGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36kK6sC6ii2qvi+ni+iZdQt+sS+pbdCl9qy6tb9NldFldTpfXt+sK+g5dUd+pK+m7dGVdRVfV1fTdurq+R9fQ9+qa+j5dS9+va+sHdB39oK6rH9L19MO6vn5EN9CP6oa6kW6sm+im+jHdTD+um+sWuqV+QrfST+rW+indRj+t2+pndDv9B91eP6s76Od0R/287qQ76y76Z31JB91Nd9epuofuqV/SvXRv3Uf31f30y7q/fkUP0K/qgXqQHqxf00P063qofkMP08P1CP2mHqlH6dF6jB6rx+nx+i09Qb+tJ+p39CQ9WU/RU/U0PV33+dNIs/8L+W//nfwBv5x9q96mP9bb9Q69U+/Su/UevVfv1fv0Pr1f79cH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/QJfVKf0j/q7/UZ/YM+q8/pc/pHfUFf0Bf/9BmAQaOMNsZEJoPJaFJMJpPZXGWymKtNVnONSZhrTTZznclurjc5TE6Ty+Q2eUxek89YQ8YZNrHJbwqYpLnBFDQ3mkKmsCliihpvipni5qZ/Ov/35tfUNDXNTDPT3DQ3LU1L08q0Mq1Na9PGtDFtTVvTzrQz7U1708F0MB1NR9PJdDJdTBfT1XQ1AQBSTarpaV4yvUxv08f0Nf3My6a/6W8GmAFmoBloBpvBZogZYoaaoWaYGWZGmBFmpBlpRpvRZqwZa8ab8WaCmWAmmolmkplkppgpZpqZZmaYGWammWlmm9lmjplj5pq5Zr6ZbxaahWaRWWSWmCVmqVlqlpnlZrlZaVaa1Wa1WWvWmvVmvdloNprNZrNZZv78A5o7zU6z2+w2e81es8/sM/vNfnPAHDAHzUFzyBwyh81hc8QcMUfNUXPMHDPHzXFzwpwwJ81Jc9qcNmfMGXPWnDXnzXlzwVwwF81Fc8lcSrvti1SkIhOZKEOUIUqJUqLMUeYoS5QlyhpljRJRIsoWZYuyR9dHOaKcUa4od5Qnyhvli2xEkYs4iqP8UYEoGd0QFYxujApFhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv5Lxw/hbM7HfTfb3abaHranfcn2sr1tH9vX9rMv2/72FTvAvmoH2kF2sH3NDrGv26H2DTvMDrcj7Jt2pB1lR9sxdqwdZ8fbt+wE+7adaN+xk+xkO8VOtdPsdDvDvmtn2ll2tn3PzrHv27l2np1vF9iF9gO7yC62S+yHdqn9yC6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9Vusx/b7XaH3Wl32d12j91rP7H77Kd2v/3MHrCf24P2j/aQ/cIetl/aI/Yre9R+bY/Zb+xx+609Yb+zJ+0pe9p+b8/YH+xZe86etz/aC/Yne9H+bC/ZkHZzn3Z5J0OGMlAGSqEUykyZKQtloayUlRKUoGyUjbJTdspBOSgX5aI8lIfyUT5Kw8SUn/JTkpJUkApSISpERagIefJUnIpTCSpBJakklaJSVJpKUxkqQ+Uo7aJ5O91Bd9CddCfdRXdRFapC1agaVafqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUgBpQQ2pIjakxNaWm1IyaUXNqTi2pJbWiVtSaWlMbakNtqS21o3bUntpTB+pAHakjdaJO1IW6UFfqSt2oG6VSKvWkntSLelEf6kP9qB/1p/40gAbQQBpIg2kwDaEhNJSG0jAaTiPoTRpJo2g0jaGxNI7G03iaQBNoIk2kSTSJptAUmkbTaAbNoJk0k2bTbJpDc2guzaX5NJ8W0kJaRItoCS2hpbSUltEyWkEraBWtojW0htbROtpAG2gTbaIttIW20TbaTttpJ+2k3bSb9tJe2kf7aD/tpwN0gA7SQTpEh+gwHaYjdISO0lE6RsfoOB2nE3SCTtJJPE2n6QydobN0ls7TebpAP9FF+pkuUaAUl8lldle5LO5ql9Vd41Jcpu4A8Jc4l8vt8ri8Lp+zLofL+TcxOecKucKuiCvqvCvmirubfhOX6VHWlXPl3e2ugrvDVXRl3N/G1d09roa719V097lq7u6/iWu5+11t94ir4x51dV0jV881cfXdI66Be9Q1dI1cY9fEtXJPutbuKdfGPe3aumd+Ey9yi906t95tcBvdPvepO+9+dMfcN+6C+8l1c91dP/ey6+9ecQPcq26gG/SbeIR70410o9xoN8aNdeN+E09xU900N93NcO+6mW7Wb+KF7gM3xy1xc908N98t+CVOm9MS96Fb6j5yy9xyt8KtdKvcarfGrf3LXFe6zW6L2+r2uk/cdrfD7XS73G6355c4bR373WfugPvcHXVfu0PuC3fYHXdH3Fe/xGnrO+6+dSfcd+6kO+VOu+/dGfeDO+vO/bL+tLV/7352l1xwwMiKNRuOOANn5BTOxJn5Ks7CV3NWvoYTfC1n4+s4O1/POTgn5+LcnIfzcj62TOyYOeb8XICTfAMX5Bu5EBfmIlyUPRfj4nwTl+CbuSTfwqX4Vi7Nt3EZLsvluDzfzhX4Dq7Id3IlvosrcxWuytX4bq7O93ANvpdr8n1ci+/n2vwA1+EHuS4/xPX4Ya7Pj3ADfpQbciNuzE24KT/Gzfhxbs4tuCU/wa34SW7NT3Ebfprb8jPcjv/A7flZ7sDPcUd+njtxZ+7CL3BXfpG7cXdO5R7ck1/iXtyb+3Bf7scvc39+hQfwqzyQB/Fgfo2H8Os8lN/gYTycR/CbPJJH8Wgew2N5HI/nt3gCv80T+R2exJN5Ck/laTydZ/C7PJNn8Wx+j+fw+zyX5/F8XsAL+QNexIt5CX/IS/kjXsbLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexh/zdt7BO3kX7+Y9vJc/4X38Ke/nz/gAf84H+Y98iL/gw/wlH+Gv+Ch/zcf4Gz7O3/IJ/o5P8ik+zd/zGf6Bz/I5Ps8/8gX+iS/yz3yJA0OMsYp1bOIozhBnjFPiTHHm+Ko4S3x1nDW+Jk7E18bZ4uvi7PH1cY44Z5wrzh3nifPG+WIbU+xijuM4f1wgTsY3xAXjG+NCceG4SFw09nGxuHh8U1wivjkuGd8Sl4pvjUvHt8Vl4rJxubh8fHtcIb4jrhjfGVeK74orx1XiqnG1+O64enxPXCO+N64Z3xeXjO+Pa8cPxHXiB+O68UNxvfjhuH78SNwgfjRuGDeKG8dN4qbxY3Gz+PG4edwibhk/EbeKn4xbx0/FbeKn47bxM7/bnxr3iHvGL8UvxSHcq+cnFyQXJj9ILkouTi5JfphcmvwouSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObkluTUZQrWM4NErr73xkc/gM/oUn8ln9lf5LP5qn9Vf4xP+Wp/NX+ez++t9Dp/T5/K5fR6f1+fz1pN3nn3s8/sCPulv8AX9jb6QL+yL+KLe+2K+uG/im/qmvpl/3Df3LXxL/4R/wj/pn/RP+af8076tf8a385Bo75/1Hfxz/jn/vO/kO/su/gXf1b/ou/nuPtWn+p6+p+/le/k+vo/v5/v5/r6/H+AH+IF+oB/sB/shfogf6of6YX6YH+FH+JF+pB/tR/uxfqwf78f7CX6Cn+gn+kl+kp/ip/hpfpqf4Wf4mX6mn+1n+zl+jp/r5/r5fr5f6Bf6RX6RX+KX+KV+qV/ml/kVfoVf5Vf5NX6NX+fX+Q1+g9/kN/ktfovf5rf57X673+l3+t1+t9/r9/p9fp/f7/f7A/6AP+gP+kP+kD/sv/RH/Ff+qP/aH/Pf+OP+W3/Cf+dP+lP+tP/en/E/+LP+nD/vf/QX/E/+ov/ZX/LBj0+8lZiQeDsxMfFOYlJicmJKYmpiWmJ6Ykbi3cTMxKzE7MR7iTmJ9xNzE/MS8xMLEgsTHyQWJRYnliQ+TCxNfJRYllieWJFYmViVWJ0IIe/2OOQPBUIy3BAKhhtDoVA4FAlFgw/FQvFwUygRbg4lwy2hVLg1lA63hTKhbCgXHg0NQ6PQODQJTcNjoVl4PDQPLULL8ERoFZ4MrcNToU14OrQNz4R24Q+hfXg2dAjPhY7h+dApdA5dwguha3gxdAvdQ2roEXqGl0Kv0Dv0CX1Dv/By6B9eCQPCq2FgGBQGh9fCkPB6GBreCMPC8DAivBlGhlFhdBgTxoZxYXx4K0wIb4eJ4Z0wKUwOU8LUMC1MDzPCu2FmmBVmh/fCnPB+mBvmhflhQVgYPgiLwuKwJHwYloaPwrKwPKwIK8OqsDqsCWvDurA+bAgbw6awOWwJW8O28HHYHnaEnWFX2B32hL3hk7AvfBr2h8/CgfB5OBj+GA6FL8Lh8GU4Er4KR8PX4Vj4JhwP34YT4btwMpwKp8P34Uz4IZwN58L58GO4EH4KF8PP4VII4Uq/SRdCCCGE+N9A/05/j/9LjvpTuycAXL0j95H/2L8px6/t3hnztEoAwNPdOz70561y5dTU1D8du0xDVGAeACQu52eAy/FyaAlPQhtoASX+0p/yV+fqrTpf4P9sfIAoeStA5r/KScv/c3x5/Jv/7vp7q1Fz/tPxNUTJeQCFClzOyQSX48vjl/y746eqnM1+Z/xMX4wHaP5XOVngcnx5/OLwODwDbf7mSCGEEEIIIYQQ4le9Vbn2v/d8m/Z8nsdczskIl+O/93wuhBBCCCGEEEKI/1me7dzlqcfatGnRXhr/HY0UAAjX/PpR/0+YjzSk8V9sXOlvJiGEEEIIIcS/2uWb/is9EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIv36//HrxP58rt/7W4NCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHEv6v/EwAA//8oYjL2") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001180)=ANY=[@ANYBLOB="1d000000040000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000000000000000000200001900000000000000000000282298e9d27b4782f3a9042739783cab0ff022d2396376f3591dde2a1b78e5318ccb5cee818b409078a7e2e705bde516db968c77b9b2afe54869a6de3b35682f196c7d64b4d26b9fb7aad057c9b9fec53e0579f6ec69dde32e39551799bd9950612c08cddbfb8e0a4da728bac7c4b0480881862eb72dd5148fae6278768951a204b21d8045e2a20c8229768d6231a9e135ab8652b9d0d8520b3faf575b"], 0x50) kernel console output (not intermixed with test programs): 0] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.625878][ T7100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.663090][ T6136] bridge_slave_1: left promiscuous mode [ 291.700189][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.815539][ T6136] bridge_slave_0: left allmulticast mode [ 293.994691][ T6136] bridge_slave_0: left promiscuous mode [ 294.000600][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.413844][ T7125] loop2: detected capacity change from 0 to 512 [ 294.533516][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.545986][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.419921][ T7125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.616803][ T7151] loop0: detected capacity change from 0 to 512 [ 297.758647][ T7151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.975319][ T7160] loop4: detected capacity change from 0 to 512 [ 298.536208][ T7165] loop1: detected capacity change from 0 to 1024 [ 298.551254][ T7165] EXT4-fs: Ignoring removed orlov option [ 298.557154][ T7165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.889021][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.243519][ T7165] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 301.243616][ T7165] EXT4-fs: failed to create workqueue [ 301.258776][ T7165] EXT4-fs (loop1): mount failed [ 301.423006][ T7160] EXT4-fs: error -4 creating inode table initialization thread [ 301.502849][ T7160] EXT4-fs (loop4): mount failed [ 301.684103][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.981109][ T7181] nbd: couldn't find device at index 1 [ 302.892945][ T7177] nbd: device at index 2 is going down [ 303.244452][ T7191] loop4: detected capacity change from 0 to 512 [ 303.575562][ T7191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.631547][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.512536][ T7229] loop4: detected capacity change from 0 to 512 [ 307.544466][ T7229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.716186][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.858621][ T7235] loop5: detected capacity change from 0 to 2048 [ 308.903697][ T7235] EXT4-fs: Ignoring removed bh option [ 308.909629][ T7235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.972292][ T7235] EXT4-fs: Ignoring removed orlov option [ 309.202326][ T7235] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 309.283345][ T7235] EXT4-fs (loop5): can't mount with both data=journal and dax [ 310.089832][ T7235] loop5: detected capacity change from 0 to 256 [ 310.205404][ T7235] ======================================================= [ 310.205404][ T7235] WARNING: The mand mount option has been deprecated and [ 310.205404][ T7235] and is ignored by this kernel. Remove the mand [ 310.205404][ T7235] option from the mount to silence this warning. [ 310.205404][ T7235] ======================================================= [ 310.294429][ T7235] exfat: Deprecated parameter 'namecase' [ 311.031841][ T7259] nbd: couldn't find device at index 2 [ 311.590870][ T7235] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 311.913621][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.960059][ T7268] loop4: detected capacity change from 0 to 512 [ 311.980230][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.990648][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.998782][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.024296][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.032955][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.170864][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.183627][ T7268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.490708][ T6136] bond0 (unregistering): Released all slaves [ 313.560243][ T7270] nbd: device at index 1 is going down [ 313.911090][ T6845] team0: Port device team_slave_0 added [ 314.855709][ T5833] Bluetooth: hci4: command tx timeout [ 316.544516][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.923460][ T5833] Bluetooth: hci4: command tx timeout [ 316.928177][ T7305] loop4: detected capacity change from 0 to 512 [ 317.074771][ T7305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.255972][ T7310] loop2: detected capacity change from 0 to 512 [ 317.301458][ T7310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.002421][ T5833] Bluetooth: hci4: command tx timeout [ 319.995982][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.007629][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.083492][ T5833] Bluetooth: hci4: command tx timeout [ 322.964239][ T7354] loop0: detected capacity change from 0 to 2048 [ 323.754969][ T7354] EXT4-fs: Ignoring removed bh option [ 323.834786][ T7354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.980638][ T7354] EXT4-fs: Ignoring removed orlov option [ 324.027573][ T7354] EXT4-fs (loop0): can't mount with both data=journal and dax [ 324.198725][ T7354] loop0: detected capacity change from 0 to 256 [ 324.287403][ T7354] exfat: Deprecated parameter 'namecase' [ 324.425191][ T7354] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 324.839340][ T6136] hsr_slave_0: left promiscuous mode [ 324.900112][ T6136] hsr_slave_1: left promiscuous mode [ 324.931357][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.968446][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.901078][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.931248][ T6136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.050567][ T7382] loop2: detected capacity change from 0 to 512 [ 326.182510][ T7384] loop1: detected capacity change from 0 to 512 [ 326.219791][ T6136] veth1_macvtap: left promiscuous mode [ 326.764564][ T7384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.777931][ T7382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.831893][ T7393] loop5: detected capacity change from 0 to 512 [ 326.850257][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.857216][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.212304][ T6136] veth0_macvtap: left promiscuous mode [ 327.218898][ T6136] veth1_vlan: left promiscuous mode [ 327.224631][ T6136] veth0_vlan: left promiscuous mode [ 329.100396][ T7393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.998817][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.019897][ T7403] loop4: detected capacity change from 0 to 512 [ 330.100006][ T7403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.222679][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.605199][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.661765][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.830313][ T7426] loop5: detected capacity change from 0 to 2048 [ 333.927695][ T7426] EXT4-fs: Ignoring removed bh option [ 333.982618][ T7426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.017807][ T7426] EXT4-fs: Ignoring removed orlov option [ 334.056069][ T7426] EXT4-fs (loop5): can't mount with both data=journal and dax [ 335.121809][ T7426] loop5: detected capacity change from 0 to 256 [ 335.382513][ T7426] exfat: Deprecated parameter 'namecase' [ 335.547046][ T7426] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 337.530751][ T7448] loop2: detected capacity change from 0 to 512 [ 338.470142][ T7448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.741092][ T7458] loop4: detected capacity change from 0 to 512 [ 338.822443][ T7458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.779302][ T7470] nbd: couldn't find device at index 5 [ 341.130387][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.159934][ T7472] loop0: detected capacity change from 0 to 512 [ 341.175184][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.359481][ T7472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.877380][ T7478] loop4: detected capacity change from 0 to 512 [ 342.964900][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.991111][ T7478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.101766][ T7485] loop5: detected capacity change from 0 to 512 [ 343.435398][ T7485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.695198][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.574574][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.544545][ T7513] loop0: detected capacity change from 0 to 512 [ 348.762047][ T7513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.844658][ T7518] loop1: detected capacity change from 0 to 2048 [ 348.861881][ T7518] EXT4-fs: Ignoring removed bh option [ 348.987969][ T7518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.016922][ T7518] EXT4-fs: Ignoring removed orlov option [ 349.067506][ T7524] loop5: detected capacity change from 0 to 512 [ 349.093358][ T7518] EXT4-fs (loop1): can't mount with both data=journal and dax [ 349.141477][ T7524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.998298][ T7518] loop1: detected capacity change from 0 to 256 [ 351.049084][ T7518] exfat: Deprecated parameter 'namecase' [ 351.074412][ T6136] team0 (unregistering): Port device team_slave_1 removed [ 351.679865][ T7518] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 352.113283][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.117728][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.089412][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 362.604294][ T7606] loop5: detected capacity change from 0 to 512 [ 362.891513][ T7606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.365915][ T7611] loop0: detected capacity change from 0 to 2048 [ 364.509404][ T7611] EXT4-fs: Ignoring removed bh option [ 365.133603][ T7611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.140372][ T7611] EXT4-fs: Ignoring removed orlov option [ 366.184495][ T7611] EXT4-fs (loop0): can't mount with both data=journal and dax [ 366.654146][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.285180][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.325995][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.337320][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.354079][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 376.369138][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.442616][ T5824] Bluetooth: hci6: command tx timeout [ 379.730547][ T7701] loop0: detected capacity change from 0 to 2048 [ 380.055852][ T7701] EXT4-fs: Ignoring removed bh option [ 380.061379][ T7701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.138994][ T7701] EXT4-fs: Ignoring removed orlov option [ 380.374105][ T7701] EXT4-fs (loop0): can't mount with both data=journal and dax [ 380.522649][ T5824] Bluetooth: hci6: command tx timeout [ 381.050284][ T7717] loop2: detected capacity change from 0 to 512 [ 381.162697][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.602593][ T5824] Bluetooth: hci6: command tx timeout [ 382.729440][ T7728] loop4: detected capacity change from 0 to 512 [ 382.939122][ T7728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.379800][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.593113][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.621978][ T7263] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 384.712583][ T5824] Bluetooth: hci6: command tx timeout [ 388.320269][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.330286][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.102051][ T7779] loop0: detected capacity change from 0 to 2048 [ 391.340514][ T7779] EXT4-fs: Ignoring removed bh option [ 391.472655][ T7779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 391.479468][ T7779] EXT4-fs: Ignoring removed orlov option [ 392.312049][ T7779] EXT4-fs (loop0): can't mount with both data=journal and dax [ 395.508975][ T7818] process 'syz.4.356' launched '/dev/fd/7' with NULL argv: empty string added [ 399.105987][ T7691] chnl_net:caif_netlink_parms(): no params data found [ 401.248938][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 401.265897][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 401.293012][ T7848] ceph: No mds server is up or the cluster is laggy [ 401.560898][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 401.567999][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 403.622105][ T6136] IPVS: stop unused estimator thread 0... [ 408.527685][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.056121][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.207567][ T7691] bridge_slave_0: entered allmulticast mode [ 409.476833][ T7691] bridge_slave_0: entered promiscuous mode [ 410.072360][ T6136] bridge_slave_1: left allmulticast mode [ 410.078088][ T6136] bridge_slave_1: left promiscuous mode [ 410.122644][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.210661][ T6136] bridge_slave_0: left allmulticast mode [ 410.446847][ T6136] bridge_slave_0: left promiscuous mode [ 410.472814][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.948121][ T7911] ceph: No mds server is up or the cluster is laggy [ 413.956334][ T925] libceph: connect (1)[c::]:6789 error -101 [ 413.993138][ T925] libceph: mon0 (1)[c::]:6789 connect error [ 416.428684][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 416.567340][ T7929] ceph: No mds server is up or the cluster is laggy [ 416.692016][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 416.953889][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 416.962687][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 423.374776][ T6136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.963345][ T6136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.799228][ T6136] bond0 (unregistering): Released all slaves [ 425.145007][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.075816][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 426.111566][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 426.462374][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.469689][ T7691] bridge_slave_1: entered allmulticast mode [ 426.471714][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 426.482378][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 426.484268][ T7691] bridge_slave_1: entered promiscuous mode [ 426.527073][ T7986] ceph: No mds server is up or the cluster is laggy [ 429.271791][ T6136] team0 (unregistering): Port device team_slave_0 removed [ 429.971677][ T48] libceph: connect (1)[c::]:6789 error -101 [ 429.990712][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 430.581950][ T8024] loop2: detected capacity change from 0 to 512 [ 430.637343][ T8026] ceph: No mds server is up or the cluster is laggy [ 430.738284][ T8024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.833789][ T3394] libceph: connect (1)[c::]:6789 error -101 [ 430.841850][ T3394] libceph: mon0 (1)[c::]:6789 connect error [ 433.165289][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.456056][ T8049] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 437.431849][ T8056] ceph: No mds server is up or the cluster is laggy [ 437.457673][ T48] libceph: connect (1)[c::]:6789 error -101 [ 437.573527][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 437.843456][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 438.800747][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 438.813902][ T48] libceph: connect (1)[c::]:6789 error -101 [ 438.820098][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 438.830047][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 438.838680][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 438.847284][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 438.854988][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 439.859722][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 439.875105][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 440.859070][ T48] libceph: connect (1)[c::]:6789 error -101 [ 440.865393][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 441.044207][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 441.057093][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 441.157323][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.180636][ T8079] loop2: detected capacity change from 0 to 512 [ 443.574379][ T8079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.586752][ T5833] Bluetooth: hci4: command tx timeout [ 443.593806][ T5833] Bluetooth: hci7: command tx timeout [ 445.566268][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.649325][ T5824] Bluetooth: hci7: command tx timeout [ 445.654930][ T5824] Bluetooth: hci4: command tx timeout [ 447.862355][ T5833] Bluetooth: hci4: command tx timeout [ 447.867830][ T5833] Bluetooth: hci7: command tx timeout [ 449.728461][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.883232][ T5833] Bluetooth: hci7: command tx timeout [ 449.888692][ T5833] Bluetooth: hci4: command tx timeout [ 450.140279][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.533464][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 453.573118][ T8140] ceph: No mds server is up or the cluster is laggy [ 453.591100][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 455.633757][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 455.641728][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 455.688575][ T8160] loop2: detected capacity change from 0 to 512 [ 455.790926][ T8157] ceph: No mds server is up or the cluster is laggy [ 456.161256][ T8160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.849688][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.052052][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 459.211407][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 459.935813][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 460.072862][ T8184] ceph: No mds server is up or the cluster is laggy [ 460.404906][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 460.452282][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 460.766513][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.064328][ T3394] libceph: connect (1)[c::]:6789 error -101 [ 462.093013][ T3394] libceph: mon0 (1)[c::]:6789 connect error [ 462.355128][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 462.405529][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 462.658510][ T8203] ceph: No mds server is up or the cluster is laggy [ 464.516353][ T8222] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 464.646417][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 467.522978][ T8236] loop0: detected capacity change from 0 to 512 [ 467.724393][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.746255][ T8236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.136006][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.329589][ T8274] nbd: couldn't find device at index 1 [ 473.867966][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.694186][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.701461][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.709095][ T8062] bridge_slave_0: entered allmulticast mode [ 476.719066][ T8062] bridge_slave_0: entered promiscuous mode [ 477.568279][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.578709][ T8298] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 477.602348][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.626783][ T8062] bridge_slave_1: entered allmulticast mode [ 477.760956][ T8062] bridge_slave_1: entered promiscuous mode [ 478.886351][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.176416][ T8317] loop2: detected capacity change from 0 to 512 [ 479.727734][ T8317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.090233][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.195883][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.857340][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.650368][ T8359] loop1: detected capacity change from 0 to 512 [ 485.699930][ T8359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.829255][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.840694][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.877008][ T8060] bridge_slave_0: entered allmulticast mode [ 486.447731][ T8060] bridge_slave_0: entered promiscuous mode [ 487.416001][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.466303][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.714326][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.734958][ T8060] bridge_slave_1: entered allmulticast mode [ 487.745348][ T8060] bridge_slave_1: entered promiscuous mode [ 488.789852][ T8062] team0: Port device team_slave_0 added [ 488.837763][ T10] libceph: connect (1)[c::]:6789 error -101 [ 488.846578][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 488.868872][ T8062] team0: Port device team_slave_1 added [ 488.939014][ T8390] loop0: detected capacity change from 0 to 512 [ 489.011515][ T8390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.126546][ T10] libceph: connect (1)[c::]:6789 error -101 [ 489.167387][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 489.623356][ T8384] ceph: No mds server is up or the cluster is laggy [ 489.889633][ T925] libceph: connect (1)[c::]:6789 error -101 [ 489.971464][ T925] libceph: mon0 (1)[c::]:6789 connect error [ 490.128035][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.318903][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.393517][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.400546][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.539415][ T8062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.982752][ T62] bridge_slave_1: left allmulticast mode [ 491.012380][ T62] bridge_slave_1: left promiscuous mode [ 491.018292][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.206998][ T62] bridge_slave_0: left allmulticast mode [ 491.242540][ T62] bridge_slave_0: left promiscuous mode [ 491.271819][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.455214][ T62] bridge_slave_1: left allmulticast mode [ 491.521182][ T62] bridge_slave_1: left promiscuous mode [ 491.547702][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.683756][ T62] bridge_slave_0: left allmulticast mode [ 491.722412][ T62] bridge_slave_0: left promiscuous mode [ 491.728309][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.116164][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 493.133650][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 493.142147][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 493.201001][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 493.220385][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 493.256289][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 493.264982][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 493.290729][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 493.303863][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 493.310024][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 493.344775][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 493.360728][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 493.593285][ T8426] ceph: No mds server is up or the cluster is laggy [ 493.760323][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 493.767098][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 494.227014][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 494.675127][ T8436] ceph: No mds server is up or the cluster is laggy [ 494.676305][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 495.322354][ T5824] Bluetooth: hci2: command tx timeout [ 495.402428][ T5824] Bluetooth: hci4: command tx timeout [ 495.622077][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 496.212618][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 496.220763][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.233081][ T8444] ceph: No mds server is up or the cluster is laggy [ 496.294116][ T62] bond0 (unregistering): Released all slaves [ 497.444752][ T5824] Bluetooth: hci2: command tx timeout [ 497.485524][ T5824] Bluetooth: hci4: command tx timeout [ 498.893030][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.931371][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.965534][ T62] bond0 (unregistering): Released all slaves [ 499.484685][ T5824] Bluetooth: hci2: command tx timeout [ 499.562684][ T5824] Bluetooth: hci4: command tx timeout [ 501.662026][ T5824] Bluetooth: hci2: command tx timeout [ 501.662135][ T5833] Bluetooth: hci4: command tx timeout [ 501.675920][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 501.694109][ T8476] ceph: No mds server is up or the cluster is laggy [ 501.710484][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 503.866067][ T8496] loop5: detected capacity change from 0 to 1024 [ 503.880284][ T8496] EXT4-fs: Ignoring removed orlov option [ 503.886198][ T8496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 504.295852][ T8496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.977004][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 505.088175][ T8501] ceph: No mds server is up or the cluster is laggy [ 505.135861][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 505.272437][ T8496] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.453312][ T8510] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 507.117670][ T10] libceph: connect (1)[c::]:6789 error -101 [ 507.147703][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 508.376099][ T8522] ceph: No mds server is up or the cluster is laggy [ 509.741622][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 509.990303][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 510.045166][ T8530] ceph: No mds server is up or the cluster is laggy [ 510.692167][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 510.698403][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 510.773041][ T62] hsr_slave_0: left promiscuous mode [ 511.071918][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 511.722904][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.729291][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.762325][ T62] hsr_slave_1: left promiscuous mode [ 511.769548][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.803575][ T8538] ceph: No mds server is up or the cluster is laggy [ 511.810607][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 511.842336][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.965129][ T48] libceph: connect (1)[c::]:6789 error -101 [ 512.971379][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 513.006161][ T8553] ceph: No mds server is up or the cluster is laggy [ 513.015505][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.023379][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.369093][ T62] veth1_macvtap: left promiscuous mode [ 513.699548][ T62] veth0_macvtap: left promiscuous mode [ 513.705365][ T62] veth1_vlan: left promiscuous mode [ 513.710729][ T62] veth0_vlan: left promiscuous mode [ 514.976647][ T8568] loop5: detected capacity change from 0 to 1024 [ 514.984366][ T8568] EXT4-fs: Ignoring removed orlov option [ 514.990054][ T8568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 515.307123][ T8568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.815657][ T8568] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.517059][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 519.590298][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 520.203076][ T8593] ceph: No mds server is up or the cluster is laggy [ 520.226312][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 520.244038][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 520.786656][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 520.971508][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 521.331499][ T8602] ceph: No mds server is up or the cluster is laggy [ 521.473115][ T8608] loop0: detected capacity change from 0 to 512 [ 521.655574][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 521.662727][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 523.135789][ T8608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.763847][ T8620] loop1: detected capacity change from 0 to 512 [ 524.379411][ T8620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.010917][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.649006][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.279519][ T8646] loop5: detected capacity change from 0 to 1024 [ 529.293361][ T8646] EXT4-fs: Ignoring removed orlov option [ 529.299189][ T8646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 529.448424][ T8646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.780396][ T8646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.400032][ T8643] ceph: No mds server is up or the cluster is laggy [ 530.422361][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 530.428488][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 532.999026][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 533.009758][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 533.563566][ T8672] ceph: No mds server is up or the cluster is laggy [ 533.822945][ T48] libceph: connect (1)[c::]:6789 error -101 [ 533.829207][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 536.402335][ T3394] libceph: connect (1)[c::]:6789 error -101 [ 536.408567][ T3394] libceph: mon0 (1)[c::]:6789 connect error [ 536.421145][ T8692] ceph: No mds server is up or the cluster is laggy [ 538.207352][ T8700] ceph: No mds server is up or the cluster is laggy [ 538.215440][ T3394] libceph: connect (1)[c::]:6789 error -101 [ 538.244175][ T3394] libceph: mon0 (1)[c::]:6789 connect error [ 538.504625][ T3394] libceph: connect (1)[c::]:6789 error -101 [ 538.510757][ T8703] ceph: No mds server is up or the cluster is laggy [ 538.512018][ T3394] libceph: mon0 (1)[c::]:6789 connect error [ 539.417425][ T8722] loop5: detected capacity change from 0 to 1024 [ 539.425056][ T8722] EXT4-fs: Ignoring removed orlov option [ 539.430733][ T8722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.930676][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 539.942938][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 540.769203][ T8722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.031348][ T8718] ceph: No mds server is up or the cluster is laggy [ 541.154962][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 541.162832][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 541.402685][ T8722] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.540596][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 549.560113][ T8758] ceph: No mds server is up or the cluster is laggy [ 549.634500][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 552.094011][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 552.106320][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 552.231319][ T8765] ceph: No mds server is up or the cluster is laggy [ 552.234470][ T62] team0 (unregistering): Port device team_slave_1 removed [ 552.493005][ T62] team0 (unregistering): Port device team_slave_0 removed [ 553.488273][ T8794] loop5: detected capacity change from 0 to 1024 [ 553.495954][ T8794] EXT4-fs: Ignoring removed orlov option [ 553.501665][ T8794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.142918][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 554.149078][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 554.667893][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 554.725845][ T8790] ceph: No mds server is up or the cluster is laggy [ 554.793970][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 554.938200][ T8794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.255212][ T8794] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.943126][ T5959] libceph: connect (1)[c::]:6789 error -101 [ 556.443125][ T8803] ceph: No mds server is up or the cluster is laggy [ 556.461351][ T5959] libceph: mon0 (1)[c::]:6789 connect error [ 556.784250][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 556.794527][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 556.802757][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 556.825021][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 556.834066][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 558.303734][ T3394] libceph: connect (1)[c::]:6789 error -101 [ 558.309920][ T3394] libceph: mon0 (1)[c::]:6789 connect error [ 558.328783][ T8817] ceph: No mds server is up or the cluster is laggy [ 558.413419][ T5824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 558.421645][ T5824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 558.443157][ T5824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 558.552505][ T5824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 558.561682][ T5824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 559.002528][ T5824] Bluetooth: hci6: command tx timeout [ 560.638176][ T5824] Bluetooth: hci7: command tx timeout [ 560.677993][ T8836] ceph: No mds server is up or the cluster is laggy [ 560.687404][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 560.693615][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 561.099171][ T5824] Bluetooth: hci6: command tx timeout [ 563.018374][ T5824] Bluetooth: hci7: command tx timeout [ 563.466716][ T5824] Bluetooth: hci6: command tx timeout [ 563.592300][ T3394] libceph: connect (1)[c::]:6789 error -101 [ 563.773696][ T8854] ceph: No mds server is up or the cluster is laggy [ 563.882334][ T3394] libceph: mon0 (1)[c::]:6789 connect error [ 565.212610][ T5824] Bluetooth: hci7: command tx timeout [ 565.590594][ T8869] loop2: detected capacity change from 0 to 1024 [ 565.605414][ T8869] EXT4-fs: Ignoring removed orlov option [ 565.611214][ T8869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.861072][ T8869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.187838][ T5824] Bluetooth: hci6: command tx timeout [ 566.944953][ T8869] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.332252][ T5824] Bluetooth: hci7: command tx timeout [ 571.064103][ T8897] ceph: No mds server is up or the cluster is laggy [ 571.085461][ T3394] libceph: connect (1)[c::]:6789 error -101 [ 571.091605][ T3394] libceph: mon0 (1)[c::]:6789 connect error [ 571.522325][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 571.529239][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 572.611929][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.621294][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.882691][ T8940] loop0: detected capacity change from 0 to 512 [ 575.916033][ T8939] loop2: detected capacity change from 0 to 512 [ 575.932087][ T8940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.958286][ T8939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.936999][ T8948] loop5: detected capacity change from 0 to 1024 [ 576.951207][ T8948] EXT4-fs: Ignoring removed orlov option [ 576.957352][ T8948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 577.804587][ T8948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.287573][ T8948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.439250][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.503270][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.239439][ T8965] nbd: device at index 0 is going down [ 581.313238][ T48] libceph: connect (1)[c::]:6789 error -101 [ 581.321126][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 581.870401][ T8983] ceph: No mds server is up or the cluster is laggy [ 582.391989][ T8990] workqueue: Failed to create a rescuer kthread for wq "nbd5-recv": -EINTR [ 582.392081][ T8990] block (null): Could not allocate knbd recv work queue. [ 582.392772][ T8990] nbd: failed to add new device [ 582.600097][ T8822] chnl_net:caif_netlink_parms(): no params data found [ 585.876683][ T9000] loop1: detected capacity change from 0 to 512 [ 587.652296][ T9013] loop0: detected capacity change from 0 to 512 [ 588.543201][ T8811] chnl_net:caif_netlink_parms(): no params data found [ 588.924512][ T9013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.767390][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.613331][ T48] libceph: connect (1)[c::]:6789 error -101 [ 591.622636][ T9041] ceph: No mds server is up or the cluster is laggy [ 591.627135][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 591.659009][ T9047] loop2: detected capacity change from 0 to 512 [ 591.726134][ T8822] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.878882][ T9047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.902480][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.909790][ T8822] bridge_slave_0: entered allmulticast mode [ 591.929355][ T8822] bridge_slave_0: entered promiscuous mode [ 593.947580][ T9060] loop5: detected capacity change from 0 to 2048 [ 594.007784][ T8822] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.032841][ T9060] EXT4-fs: Ignoring removed bh option [ 594.078235][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.101931][ T9060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 594.139757][ T8822] bridge_slave_1: entered allmulticast mode [ 594.147991][ T9060] EXT4-fs: Ignoring removed orlov option [ 594.186730][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.210307][ T8822] bridge_slave_1: entered promiscuous mode [ 594.260825][ T9060] EXT4-fs (loop5): can't mount with both data=journal and dax [ 595.181575][ T9060] loop5: detected capacity change from 0 to 256 [ 595.272420][ T9060] exfat: Deprecated parameter 'namecase' [ 595.318811][ T9074] loop1: detected capacity change from 0 to 512 [ 595.363439][ T9060] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 595.470000][ T9074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.899486][ T9077] nbd: couldn't find device at index 2 [ 597.992829][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.140085][ T8822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.042940][ T8811] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.051442][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.059472][ T8811] bridge_slave_0: entered allmulticast mode [ 599.067810][ T8811] bridge_slave_0: entered promiscuous mode [ 599.081155][ T8811] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.126345][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.149521][ T8811] bridge_slave_1: entered allmulticast mode [ 599.454778][ T8811] bridge_slave_1: entered promiscuous mode [ 600.388264][ T62] IPVS: stop unused estimator thread 0... [ 600.388258][ T8822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.516818][ T9108] loop2: detected capacity change from 0 to 512 [ 601.044854][ T48] libceph: connect (1)[c::]:6789 error -101 [ 601.064848][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 601.563211][ T9111] ceph: No mds server is up or the cluster is laggy [ 601.598733][ T9108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.873648][ T10] libceph: connect (1)[c::]:6789 error -101 [ 602.879924][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 602.897327][ T9120] ceph: No mds server is up or the cluster is laggy [ 603.234077][ T9128] loop0: detected capacity change from 0 to 512 [ 603.268260][ T9128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.402013][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.465795][ T8822] team0: Port device team_slave_0 added [ 603.530058][ T8811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.862672][ T48] libceph: connect (1)[c::]:6789 error -101 [ 604.305299][ T9134] ceph: No mds server is up or the cluster is laggy [ 604.306453][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 604.454696][ T8822] team0: Port device team_slave_1 added [ 607.804284][ T8811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.484210][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.600493][ T9168] nbd: couldn't find device at index 1 [ 611.491027][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.583608][ T9181] loop2: detected capacity change from 0 to 1024 [ 611.591261][ T9181] EXT4-fs: Ignoring removed orlov option [ 611.597018][ T9181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 612.352393][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.387991][ T8822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.402354][ T9181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.669591][ T9181] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.695007][ T9189] loop5: detected capacity change from 0 to 512 [ 612.837660][ T9189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.859686][ T62] bridge_slave_1: left allmulticast mode [ 612.916360][ T62] bridge_slave_1: left promiscuous mode [ 612.922548][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.373299][ T62] bridge_slave_0: left allmulticast mode [ 613.379185][ T62] bridge_slave_0: left promiscuous mode [ 613.405307][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.417275][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.614244][ T62] bridge_slave_1: left allmulticast mode [ 613.621390][ T62] bridge_slave_1: left promiscuous mode [ 613.692468][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.763004][ T62] bridge_slave_0: left allmulticast mode [ 613.768726][ T62] bridge_slave_0: left promiscuous mode [ 613.802461][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.452122][ T9219] loop5: detected capacity change from 0 to 512 [ 615.574947][ T9219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.700689][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 615.710218][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 615.724349][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 615.739789][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 615.843213][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 616.052313][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 616.058469][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 616.394043][ T9209] ceph: No mds server is up or the cluster is laggy [ 617.055036][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 617.243006][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 617.251731][ T8955] libceph: connect (1)[c::]:6789 error -101 [ 617.258883][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 617.423500][ T9233] ceph: No mds server is up or the cluster is laggy [ 617.464918][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 617.546709][ T9240] loop0: detected capacity change from 0 to 512 [ 617.599703][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 617.620675][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 617.630031][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 617.639144][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 617.701095][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.720548][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.741535][ T9240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.882768][ T5833] Bluetooth: hci2: command tx timeout [ 619.369142][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.852632][ T5833] Bluetooth: hci4: command tx timeout [ 619.972880][ T5833] Bluetooth: hci2: command tx timeout [ 620.639273][ T9256] workqueue: Failed to create a rescuer kthread for wq "nbd5-recv": -EINTR [ 620.639463][ T9256] block (null): Could not allocate knbd recv work queue. [ 620.798208][ T9256] nbd: failed to add new device [ 621.053315][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.904974][ T5833] Bluetooth: hci4: command tx timeout [ 621.934050][ T62] bond0 (unregistering): Released all slaves [ 621.951132][ T8955] libceph: connect (1)[c::]:6789 error -101 [ 621.973014][ T9261] ceph: No mds server is up or the cluster is laggy [ 621.981552][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 622.052664][ T5833] Bluetooth: hci2: command tx timeout [ 622.316842][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.652583][ T62] bond0 (unregistering): Released all slaves [ 623.846846][ T8822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.133577][ T5833] Bluetooth: hci4: command tx timeout [ 624.139580][ T5833] Bluetooth: hci2: command tx timeout [ 624.161880][ T8822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.487689][ T8822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.648680][ T9284] loop2: detected capacity change from 0 to 512 [ 625.708241][ T9284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.344680][ T5824] Bluetooth: hci4: command tx timeout [ 627.363942][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.322635][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.636130][ T48] libceph: connect (1)[c::]:6789 error -101 [ 630.685473][ T9314] ceph: No mds server is up or the cluster is laggy [ 630.686063][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 630.968099][ T9319] loop5: detected capacity change from 0 to 512 [ 631.086106][ T9319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.364755][ T9327] ceph: No mds server is up or the cluster is laggy [ 632.485081][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 632.515686][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.525565][ T62] team0 (unregistering): Port device team_slave_1 removed [ 632.547650][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 632.649423][ T62] team0 (unregistering): Port device team_slave_0 removed [ 632.731292][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 632.737606][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 634.183303][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.189695][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.208126][ T48] libceph: connect (1)[c::]:6789 error -101 [ 634.222504][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 634.246469][ T9347] ceph: No mds server is up or the cluster is laggy [ 635.319756][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 635.839386][ T9358] ceph: No mds server is up or the cluster is laggy [ 635.839960][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 636.197980][ T9364] loop1: detected capacity change from 0 to 512 [ 636.241721][ T9364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.904722][ T9370] loop5: detected capacity change from 0 to 512 [ 636.992714][ T9370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.185942][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 637.192127][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 637.258790][ T9371] ceph: No mds server is up or the cluster is laggy [ 637.261367][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.620266][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 637.628328][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 638.410002][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.107733][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 640.414712][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 640.444023][ T9392] ceph: No mds server is up or the cluster is laggy [ 641.941235][ T9414] loop1: detected capacity change from 0 to 512 [ 642.063927][ T9237] chnl_net:caif_netlink_parms(): no params data found [ 642.114509][ T9414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.802696][ T9222] chnl_net:caif_netlink_parms(): no params data found [ 645.833082][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 645.839263][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 645.965930][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.006988][ T9448] ceph: No mds server is up or the cluster is laggy [ 646.360982][ T9463] loop1: detected capacity change from 0 to 512 [ 646.453496][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.513396][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.520735][ T9237] bridge_slave_0: entered allmulticast mode [ 646.601817][ T9237] bridge_slave_0: entered promiscuous mode [ 646.620663][ T9463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.750833][ T62] bridge_slave_1: left allmulticast mode [ 648.112366][ T48] libceph: connect (1)[c::]:6789 error -101 [ 648.118615][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 648.191516][ T62] bridge_slave_1: left promiscuous mode [ 648.352416][ T9473] ceph: No mds server is up or the cluster is laggy [ 648.793297][ T48] libceph: connect (1)[c::]:6789 error -101 [ 648.799613][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 648.810246][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.888686][ T62] bridge_slave_0: left allmulticast mode [ 649.111746][ T62] bridge_slave_0: left promiscuous mode [ 649.175728][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.283811][ T62] bridge_slave_1: left allmulticast mode [ 649.348113][ T62] bridge_slave_1: left promiscuous mode [ 649.380576][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.105775][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.163787][ T62] bridge_slave_0: left allmulticast mode [ 651.169509][ T62] bridge_slave_0: left promiscuous mode [ 651.185558][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.450817][ T9494] loop1: detected capacity change from 0 to 512 [ 651.574469][ T9494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.613128][ T9506] loop5: detected capacity change from 0 to 512 [ 653.766445][ T9506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.909322][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.211300][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.208220][ T62] bond0 (unregistering): Released all slaves [ 656.630547][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.648534][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 657.008105][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.036717][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.070433][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 657.287744][ T9529] ceph: No mds server is up or the cluster is laggy [ 657.733238][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.807837][ T9540] loop5: detected capacity change from 0 to 512 [ 658.464049][ T62] bond0 (unregistering): Released all slaves [ 658.492169][ T9540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 659.396227][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.406350][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.434422][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.522545][ T9237] bridge_slave_1: entered allmulticast mode [ 659.560671][ T9237] bridge_slave_1: entered promiscuous mode [ 660.139853][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 660.278409][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 660.740929][ T9556] ceph: No mds server is up or the cluster is laggy [ 662.956217][ T9237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.989291][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.568716][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.118816][ T62] team0 (unregistering): Port device team_slave_1 removed [ 664.303809][ T62] team0 (unregistering): Port device team_slave_0 removed [ 664.385801][ T9577] loop0: detected capacity change from 0 to 512 [ 664.464901][ T9577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.819637][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.541007][ T9604] ceph: No mds server is up or the cluster is laggy [ 669.548862][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 669.555078][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 669.812987][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 669.836090][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 670.685625][ T9521] libceph: connect (1)[c::]:6789 error -101 [ 670.705874][ T9521] libceph: mon0 (1)[c::]:6789 connect error [ 670.842570][ T9612] ceph: No mds server is up or the cluster is laggy [ 671.468889][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 671.593902][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 671.730984][ T9621] ceph: No mds server is up or the cluster is laggy [ 672.087597][ T48] libceph: connect (1)[c::]:6789 error -101 [ 672.097945][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 674.175655][ T9644] workqueue: Failed to create a rescuer kthread for wq "nbd5-recv": -EINTR [ 674.175840][ T9644] block (null): Could not allocate knbd recv work queue. [ 674.306757][ T9644] nbd: failed to add new device [ 674.856992][ T9237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.154723][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.172465][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.179769][ T9222] bridge_slave_0: entered allmulticast mode [ 675.224759][ T9222] bridge_slave_0: entered promiscuous mode [ 675.273252][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.280448][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.300417][ T9222] bridge_slave_1: entered allmulticast mode [ 675.334633][ T9222] bridge_slave_1: entered promiscuous mode [ 679.859835][ T62] bridge_slave_1: left allmulticast mode [ 679.892296][ T62] bridge_slave_1: left promiscuous mode [ 679.898180][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.123563][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 681.159898][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 681.482623][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 681.491680][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 681.504612][ T9709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.599183][ T9709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.610238][ T9709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.735477][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.846078][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.877807][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 682.308065][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 682.327416][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 682.340766][ T62] bridge_slave_0: left allmulticast mode [ 682.492346][ T62] bridge_slave_0: left promiscuous mode [ 682.499199][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.515376][ T9710] ceph: No mds server is up or the cluster is laggy [ 683.157612][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 683.172610][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 684.603054][ T5824] Bluetooth: hci4: command tx timeout [ 684.609292][ T5824] Bluetooth: hci2: command tx timeout [ 686.381961][ T9725] ceph: No mds server is up or the cluster is laggy [ 686.682766][ T5824] Bluetooth: hci2: command tx timeout [ 686.688235][ T5824] Bluetooth: hci4: command tx timeout [ 686.904115][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 686.910284][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 686.953456][ T9521] libceph: connect (1)[c::]:6789 error -101 [ 686.959644][ T9521] libceph: mon0 (1)[c::]:6789 connect error [ 686.978569][ T9726] ceph: No mds server is up or the cluster is laggy [ 686.990014][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.464191][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 687.718347][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 688.019840][ T9739] ceph: No mds server is up or the cluster is laggy [ 688.039058][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.366272][ T9752] nbd: couldn't find device at index 2 [ 688.571179][ T62] bond0 (unregistering): Released all slaves [ 688.773808][ T5833] Bluetooth: hci2: command tx timeout [ 688.792314][ T5824] Bluetooth: hci4: command tx timeout [ 690.842387][ T5824] Bluetooth: hci4: command tx timeout [ 690.848286][ T5833] Bluetooth: hci2: command tx timeout [ 692.400994][ T9773] loop1: detected capacity change from 0 to 512 [ 692.647404][ T9773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.834015][ T48] libceph: connect (1)[c::]:6789 error -101 [ 693.841746][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 694.760669][ T9782] ceph: No mds server is up or the cluster is laggy [ 694.785511][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 694.791664][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 695.039974][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.487950][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.494361][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.806783][ T48] libceph: connect (1)[c::]:6789 error -101 [ 695.992348][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 696.077478][ T9799] ceph: No mds server is up or the cluster is laggy [ 697.118708][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 697.245080][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 697.655964][ T9808] ceph: No mds server is up or the cluster is laggy [ 702.008657][ T9836] loop0: detected capacity change from 0 to 1024 [ 702.016572][ T9836] EXT4-fs: Ignoring removed orlov option [ 702.022356][ T9836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 702.664795][ T9836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.824442][ T9836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.873345][ T9851] loop2: detected capacity change from 0 to 512 [ 703.960874][ T9851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.199976][ T48] libceph: connect (1)[c::]:6789 error -101 [ 706.932516][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 707.020306][ T9875] ceph: No mds server is up or the cluster is laggy [ 707.255385][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.331378][ T9700] chnl_net:caif_netlink_parms(): no params data found [ 708.117228][ T9705] chnl_net:caif_netlink_parms(): no params data found [ 708.690597][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 708.836283][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 709.026917][ T9892] ceph: No mds server is up or the cluster is laggy [ 712.107933][ T9930] loop2: detected capacity change from 0 to 1024 [ 712.115800][ T9930] EXT4-fs: Ignoring removed orlov option [ 712.121496][ T9930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 712.276722][ T9930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.722940][ T9930] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.139482][ T62] bridge_slave_1: left allmulticast mode [ 715.055219][ T62] bridge_slave_1: left promiscuous mode [ 715.061079][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.593863][ T9952] loop2: detected capacity change from 0 to 512 [ 716.371236][ T62] bridge_slave_0: left allmulticast mode [ 716.392454][ T62] bridge_slave_0: left promiscuous mode [ 717.247641][ T9952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.268080][ T48] libceph: connect (1)[c::]:6789 error -101 [ 717.274227][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 717.318576][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.538966][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 717.545740][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 717.574318][ T9963] ceph: No mds server is up or the cluster is laggy [ 720.245032][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.289707][ T62] bond0 (unregistering): Released all slaves [ 723.641935][ T9995] workqueue: Failed to create a rescuer kthread for wq "nbd1-recv": -EINTR [ 723.642060][ T9995] block (null): Could not allocate knbd recv work queue. [ 723.675255][ T9705] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.689485][ T9705] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.709665][ T9995] nbd: failed to add new device [ 723.718974][ T9705] bridge_slave_0: entered allmulticast mode [ 723.774678][ T9705] bridge_slave_0: entered promiscuous mode [ 723.826234][ T9705] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.074543][ T9705] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.190922][T10001] loop5: detected capacity change from 0 to 1024 [ 724.198623][T10001] EXT4-fs: Ignoring removed orlov option [ 724.204520][T10001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 724.485410][ T9705] bridge_slave_1: entered allmulticast mode [ 724.537869][ T9705] bridge_slave_1: entered promiscuous mode [ 724.548024][T10001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.576506][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.652599][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.663646][ T9700] bridge_slave_0: entered allmulticast mode [ 724.694693][ T9700] bridge_slave_0: entered promiscuous mode [ 724.725855][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.741019][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.832662][ T9700] bridge_slave_1: entered allmulticast mode [ 724.862453][ T9700] bridge_slave_1: entered promiscuous mode [ 724.878959][T10001] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.418694][ T48] libceph: connect (1)[c::]:6789 error -101 [ 731.444262][T10039] ceph: No mds server is up or the cluster is laggy [ 731.460427][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 731.732607][T10047] loop5: detected capacity change from 0 to 512 [ 732.753553][T10047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.770580][T10055] loop2: detected capacity change from 0 to 512 [ 733.133845][T10055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.189830][ T9700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.216274][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.252199][ T9705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.298088][ T9700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.407680][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.588551][ T9705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.467542][T10064] workqueue: Failed to create a rescuer kthread for wq "nbd5-recv": -EINTR [ 734.467663][T10064] block (null): Could not allocate knbd recv work queue. [ 734.529391][T10064] nbd: failed to add new device [ 737.355272][ T9705] team0: Port device team_slave_0 added [ 737.393511][ T9705] team0: Port device team_slave_1 added [ 737.501692][ T9705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.524926][ T9705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.602819][ T9705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.655419][ T9705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.682642][ T9705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.780247][ T9705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.919768][T10107] loop1: detected capacity change from 0 to 512 [ 741.163682][T10107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.331053][ T7167] bridge_slave_1: left allmulticast mode [ 741.336947][ T7167] bridge_slave_1: left promiscuous mode [ 741.599789][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.673090][ T7167] bridge_slave_0: left allmulticast mode [ 741.715749][ T7167] bridge_slave_0: left promiscuous mode [ 741.760946][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.813746][ T9709] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.821636][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 743.823887][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.838991][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 743.851093][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.859760][ T9709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 743.882636][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.897409][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 743.907399][ T9709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.920116][ T9709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 743.928346][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.986800][T10132] nbd: couldn't find device at index 0 [ 746.063732][ T7167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.118946][ T7167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.131812][ T7167] bond0 (unregistering): Released all slaves [ 746.442659][ T5824] Bluetooth: hci2: command tx timeout [ 746.522628][ T5824] Bluetooth: hci4: command tx timeout [ 746.990773][T10130] chnl_net:caif_netlink_parms(): no params data found [ 747.025192][ T7167] bridge_slave_1: left allmulticast mode [ 747.031432][ T7167] bridge_slave_1: left promiscuous mode [ 747.041255][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.057479][ T7167] bridge_slave_0: left allmulticast mode [ 747.068410][ T7167] bridge_slave_0: left promiscuous mode [ 747.076928][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.276841][ T7167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.295095][ T7167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.311320][ T7167] bond0 (unregistering): Released all slaves [ 747.350972][T10127] chnl_net:caif_netlink_parms(): no params data found [ 747.481495][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.491868][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.550137][ T7167] team0 (unregistering): Port device team_slave_1 removed [ 747.587069][ T7167] team0 (unregistering): Port device team_slave_0 removed [ 747.882070][T10130] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.889478][T10130] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.897476][T10130] bridge_slave_0: entered allmulticast mode [ 747.906063][T10130] bridge_slave_0: entered promiscuous mode [ 747.914542][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.921684][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.929246][T10127] bridge_slave_0: entered allmulticast mode [ 747.937511][T10127] bridge_slave_0: entered promiscuous mode [ 747.946651][T10130] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.954275][T10130] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.961492][T10130] bridge_slave_1: entered allmulticast mode [ 747.971582][T10130] bridge_slave_1: entered promiscuous mode [ 747.979312][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.986568][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.993835][T10127] bridge_slave_1: entered allmulticast mode [ 748.001478][T10127] bridge_slave_1: entered promiscuous mode [ 748.098099][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.116396][T10130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.132113][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.168980][T10130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.217539][T10127] team0: Port device team_slave_0 added [ 748.227160][T10127] team0: Port device team_slave_1 added [ 748.283220][T10130] team0: Port device team_slave_0 added [ 748.296009][T10130] team0: Port device team_slave_1 added [ 748.321630][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.328831][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.355856][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.371775][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.382186][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.408544][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.490262][T10130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.498309][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.525301][ T5824] Bluetooth: hci2: command tx timeout [ 748.539495][T10130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.602553][ T5824] Bluetooth: hci4: command tx timeout [ 748.631610][T10130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.645877][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.678655][T10130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.710535][T10127] hsr_slave_0: entered promiscuous mode [ 748.721488][T10127] hsr_slave_1: entered promiscuous mode [ 748.735200][T10127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.748524][T10127] Cannot create hsr debugfs directory [ 748.900073][T10130] hsr_slave_0: entered promiscuous mode [ 748.907257][T10130] hsr_slave_1: entered promiscuous mode [ 748.921210][T10130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.931510][T10130] Cannot create hsr debugfs directory [ 749.400743][T10127] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 749.465728][T10127] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 749.480924][T10127] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 749.532091][T10127] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 749.620176][T10130] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 749.649706][T10130] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 749.679075][T10130] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 749.725965][T10130] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 749.855239][T10127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.910520][T10127] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.989460][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.996700][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.027062][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.035679][ T7167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.067525][T10130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.161717][T10130] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.187847][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.195031][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.232068][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.239404][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.550866][T10127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.603467][ T5824] Bluetooth: hci2: command tx timeout [ 750.682874][ T5824] Bluetooth: hci4: command tx timeout [ 750.801035][T10130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.197910][T10127] veth0_vlan: entered promiscuous mode [ 751.218333][T10127] veth1_vlan: entered promiscuous mode [ 751.307227][T10127] veth0_macvtap: entered promiscuous mode [ 751.384083][T10127] veth1_macvtap: entered promiscuous mode [ 751.448864][T10130] veth0_vlan: entered promiscuous mode [ 751.464261][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.475054][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.486317][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.497100][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.508452][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.519065][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.536735][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.547615][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.560996][T10127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.576019][T10130] veth1_vlan: entered promiscuous mode [ 751.590188][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.602060][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.619226][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.629751][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.640831][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.652307][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.663656][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.674386][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.686420][T10127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.718173][T10127] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.728613][T10127] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.740428][T10127] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.749217][T10127] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.843334][T10130] veth0_macvtap: entered promiscuous mode [ 751.867894][T10130] veth1_macvtap: entered promiscuous mode [ 751.921768][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.934548][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.946162][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.957920][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.969461][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 751.980290][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.990183][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.000744][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.010690][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.021302][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.034078][T10130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.061385][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.062164][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.075254][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.090992][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.100474][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.114531][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.124686][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.136957][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.147046][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.158437][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.170450][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.181242][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.193668][T10130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.215995][T10130] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.225770][T10130] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.235318][T10130] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.244452][T10130] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.336244][ T7167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.344549][ T7167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.463500][ T7167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.471347][ T7167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.578144][ T6055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.598557][ T6055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.683543][ T5824] Bluetooth: hci2: command tx timeout [ 752.762859][ T5824] Bluetooth: hci4: command tx timeout [ 756.936514][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.943092][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 765.104769][ T8955] libceph: connect (1)[c::]:6789 error -101 [ 765.110936][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 765.219651][T10309] ceph: No mds server is up or the cluster is laggy [ 769.537346][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 769.553726][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 770.929604][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 770.946354][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 770.972322][T10371] ceph: No mds server is up or the cluster is laggy [ 772.491708][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 772.498055][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 773.352018][T10387] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 775.195470][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 775.248493][T10399] ceph: No mds server is up or the cluster is laggy [ 775.305566][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 776.713709][T10404] ceph: No mds server is up or the cluster is laggy [ 776.753625][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 777.030848][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 777.037698][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 777.054795][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 777.742659][ T8955] libceph: connect (1)[c::]:6789 error -101 [ 777.750390][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 778.130536][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 778.313388][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 778.524232][T10418] ceph: No mds server is up or the cluster is laggy [ 779.673814][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 779.679966][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 780.723028][ T8955] libceph: connect (1)[c::]:6789 error -101 [ 780.729219][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 781.313367][T10435] ceph: No mds server is up or the cluster is laggy [ 782.015780][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 783.079477][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 787.735743][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 787.741974][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 788.083420][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 788.769511][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 789.893075][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 789.899303][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 791.149972][T10476] ceph: No mds server is up or the cluster is laggy [ 794.017816][T10510] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 794.893063][T10506] loop7: detected capacity change from 0 to 512 [ 796.126150][ T8730] libceph: connect (1)[c::]:6789 error -101 [ 796.139056][ T8730] libceph: mon0 (1)[c::]:6789 connect error [ 796.308558][T10527] ceph: No mds server is up or the cluster is laggy [ 796.402882][ T8955] libceph: connect (1)[c::]:6789 error -101 [ 796.410801][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 797.703226][ T8955] libceph: connect (1)[c::]:6789 error -101 [ 798.272596][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 798.323099][T10545] ceph: No mds server is up or the cluster is laggy [ 801.647442][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 801.708821][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 801.776327][T10566] ceph: No mds server is up or the cluster is laggy [ 803.222149][T10584] loop7: detected capacity change from 0 to 512 [ 806.197108][ T8955] libceph: connect (1)[c::]:6789 error -101 [ 806.203998][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 806.745066][T10584] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 806.745154][T10584] EXT4-fs: failed to create workqueue [ 806.767162][T10595] ceph: No mds server is up or the cluster is laggy [ 806.804267][T10584] EXT4-fs (loop7): mount failed [ 809.061901][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 809.379298][T10612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.839'. [ 809.712664][T10623] loop0: detected capacity change from 0 to 512 [ 810.011194][T10627] loop1: detected capacity change from 0 to 1024 [ 810.396390][T10623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.521677][T10623] ext4 filesystem being mounted at /197/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.642733][ T8955] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 810.797673][T10623] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #4: comm syz.0.844: corrupted inode contents [ 810.822426][ T8955] usb 7-1: Using ep0 maxpacket: 32 [ 810.876789][ T8955] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 810.899448][T10623] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #4: comm syz.0.844: mark_inode_dirty error [ 810.917012][ T8955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.938928][ T7362] hfsplus: b-tree write err: -5, ino 4 [ 810.978822][ T8955] usb 7-1: config 0 descriptor?? [ 810.994878][T10623] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #4: comm syz.0.844: corrupted inode contents [ 811.044251][ T8955] gspca_main: sunplus-2.14.0 probing 041e:400b [ 811.109798][T10623] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.844: mark_inode_dirty error [ 811.183852][T10623] Quota error (device loop0): write_blk: dquota write failed [ 811.247582][T10623] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 811.384656][T10623] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.844: Failed to acquire dquot type 1 [ 811.649269][T10642] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #4: comm syz.0.844: corrupted inode contents [ 811.942034][T10642] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #4: comm syz.0.844: mark_inode_dirty error [ 812.051364][T10642] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #4: comm syz.0.844: corrupted inode contents [ 812.089083][ T8955] gspca_sunplus: reg_r err -71 [ 812.106799][ T8955] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 813.211158][T10642] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #4: comm syz.0.844: mark_inode_dirty error [ 813.232749][ T8955] usb 7-1: USB disconnect, device number 2 [ 814.210617][T10642] Quota error (device loop0): write_blk: dquota write failed [ 814.265750][T10642] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 814.329360][T10642] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 814.547869][T10642] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.844: Failed to acquire dquot type 1 [ 814.967211][T10643] Quota error (device loop0): do_insert_tree: Inserting already present quota entry (block 7) [ 815.028723][T10643] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 816.125123][T10687] pimreg: entered allmulticast mode [ 816.130816][T10688] pimreg: left allmulticast mode [ 816.412650][T10675] loop1: detected capacity change from 0 to 2048 [ 816.668877][T10675] Alternate GPT is invalid, using primary GPT. [ 816.685138][T10675] loop1: p1 p2 p3 [ 816.729448][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.186870][T10521] udevd[10521]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 817.198690][T10699] loop2: detected capacity change from 0 to 1024 [ 817.225851][T10520] udevd[10520]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 817.278596][T10699] EXT4-fs: Ignoring removed nobh option [ 817.290576][T10519] udevd[10519]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 817.342580][T10699] EXT4-fs: Ignoring removed bh option [ 817.469281][T10699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.892711][ T5884] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 817.923262][T10715] loop5: detected capacity change from 0 to 4096 [ 818.092564][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 818.122075][ T5884] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.176547][ T5884] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 818.203154][ T5824] Bluetooth: hci0: Unable to find connection with handle 0x00c8 [ 818.314385][ T5884] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.373119][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.382373][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.440274][ T5884] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.485473][ T5884] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 818.536105][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.771987][ T9521] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 818.876033][ T5884] usb 7-1: GET_CAPABILITIES returned 0 [ 818.883742][ T9521] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 818.885002][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.893469][ T5884] usbtmc 7-1:16.0: can't read capabilities [ 819.114292][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.152713][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.161890][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.171103][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.180250][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.219611][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.228763][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.237876][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.246989][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.256080][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.327519][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.336694][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.345816][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.354936][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.364113][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.449457][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.458609][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.467708][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.476799][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.485965][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.630523][ T9521] usb 7-1: USB disconnect, device number 3 [ 819.805236][T10739] input: syz0 as /devices/virtual/input/input5 [ 820.407257][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 820.631010][ T5884] usb 8-1: too many configurations: 23, using maximum allowed: 8 [ 821.110284][ T5884] usb 8-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 821.159560][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 821.212319][ T5884] usb 8-1: SerialNumber: syz [ 821.259113][ T5884] usb 8-1: config 0 descriptor?? [ 821.359226][T10756] input: syz0 as /devices/virtual/input/input6 [ 823.316612][T10778] loop1: detected capacity change from 0 to 128 [ 823.607138][T10778] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 823.791366][T10778] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 823.835250][T10783] loop2: detected capacity change from 0 to 512 [ 823.976437][T10783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 824.103009][ T8955] usb 8-1: USB disconnect, device number 2 [ 824.128026][T10783] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 824.226829][T10783] EXT4-fs (loop2): 1 truncate cleaned up [ 824.235387][T10783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.428531][T10801] loop1: detected capacity change from 0 to 2048 [ 826.541085][T10801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.609865][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.257824][T10823] loop5: detected capacity change from 0 to 2048 [ 829.421947][T10823] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=26504, location=26504 [ 829.508566][T10823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 829.703386][ T48] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 830.157024][ T48] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.350142][ T48] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.422765][ T48] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 830.458859][ T48] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 830.488375][ T48] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.541060][ T48] usb 8-1: config 0 descriptor?? [ 831.141118][ T48] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 831.705645][ T48] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 831.779273][ T48] usb 8-1: USB disconnect, device number 3 [ 833.515707][T10870] loop6: detected capacity change from 0 to 128 [ 833.530134][T10870] vfat: Unknown parameter '0000000000000000000001777777777777777777777' [ 834.053661][T10868] netlink: 44 bytes leftover after parsing attributes in process `syz.5.899'. [ 834.270738][T10867] loop0: detected capacity change from 0 to 4096 [ 834.357493][T10867] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 834.608908][T10867] ntfs3(loop0): ino=19, mi_enum_attr [ 834.641578][T10867] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 835.060125][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 835.228989][T10888] netlink: 788 bytes leftover after parsing attributes in process `syz.1.905'. [ 835.919418][T10894] loop2: detected capacity change from 0 to 64 [ 836.487210][T10892] Trying to free block not in datazone [ 838.258178][T10902] loop0: detected capacity change from 0 to 2048 [ 838.374085][T10902] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 838.400180][T10624] udevd[10624]: incorrect nilfs2 checksum on /dev/loop0 [ 838.432938][T10902] NILFS (loop0): mounting unchecked fs [ 838.439218][T10902] NILFS (loop0): invalid segment: Checksum error in segment payload [ 839.529490][T10624] udevd[10624]: incorrect nilfs2 checksum on /dev/loop0 [ 839.537005][T10902] NILFS (loop0): unable to fall back to spare super block [ 839.632387][T10902] NILFS (loop0): error -22 while searching super root [ 840.263927][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.6.913'. [ 841.772387][T10932] loop0: detected capacity change from 0 to 1024 [ 842.019681][ T6136] hfsplus: b-tree write err: -5, ino 4 [ 842.262388][ T48] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 842.353767][ T925] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 842.618504][ T48] usb 7-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 842.913017][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.149434][T10955] loop5: detected capacity change from 0 to 512 [ 843.184522][T10955] EXT4-fs: Ignoring removed orlov option [ 843.192648][ T925] usb 2-1: Using ep0 maxpacket: 16 [ 843.223429][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.248348][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.264455][ T925] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 843.281305][ T925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.290835][ T925] usb 2-1: config 0 descriptor?? [ 844.291284][ T48] usb 7-1: config 0 descriptor?? [ 844.321415][T10955] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.924: iget: bad extra_isize 50264 (inode size 256) [ 844.404302][T10955] EXT4-fs (loop5): Remounting filesystem read-only [ 844.445387][T10955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.690197][ T5826] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.782858][ T48] apple 0003:05AC:027D.0003: hidraw0: USB HID v1.01 Device [HID 05ac:027d] on usb-dummy_hcd.6-1/input0 [ 844.939868][ T925] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0004/input/input8 [ 845.004177][ T9761] usb 7-1: USB disconnect, device number 4 [ 845.659650][ T925] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 845.953333][ T925] usb 2-1: USB disconnect, device number 2 [ 846.598861][T10987] loop6: detected capacity change from 0 to 4096 [ 846.683648][T10987] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 846.722910][T10987] ntfs3(loop6): It is recommened to use chkdsk. [ 847.028727][T10998] loop1: detected capacity change from 0 to 512 [ 847.035797][T10998] ext4: Unknown parameter 'inlinecrypt"init_itable' [ 850.342353][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 850.557595][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 850.833517][ T48] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 850.938848][ T48] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 851.076188][ T48] usb 1-1: config 0 has no interface number 0 [ 851.336777][ T48] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 851.466838][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.563886][ T48] usb 1-1: Product: syz [ 851.651152][ T48] usb 1-1: Manufacturer: syz [ 851.708545][ T48] usb 1-1: SerialNumber: syz [ 851.859363][T11038] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 851.948274][ T48] usb 1-1: config 0 descriptor?? [ 852.207622][T11043] loop7: detected capacity change from 0 to 8 [ 852.216461][ T48] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 852.252677][ T48] usb 1-1: No valid video chain found. [ 852.332837][ T48] usb 1-1: USB disconnect, device number 2 [ 853.871490][ T30] audit: type=1400 audit(1746289615.959:2): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11061 comm="syz.7.950" [ 855.690518][T11079] loop7: detected capacity change from 0 to 2048 [ 855.995812][T11090] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 856.852338][ T9761] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 857.044867][ T9761] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 857.092356][ T9761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.283620][ T9761] usb 2-1: config 0 descriptor?? [ 857.294597][T11090] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 857.343926][T11090] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 857.348381][ T9761] pwc: Samsung MPC-C10 USB webcam detected. [ 857.452814][T11090] Remounting filesystem read-only [ 857.502480][T10130] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 857.514993][ T9761] pwc: send_video_command error -71 [ 857.520231][ T9761] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 857.556882][ T9761] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 857.628787][ T9761] usb 2-1: USB disconnect, device number 3 [ 858.072361][ T9761] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 858.174298][T11122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.708069][ T9761] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 859.939288][ T9761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.000570][ T9761] usb 2-1: config 0 descriptor?? [ 860.283939][ T9761] usb 2-1: can't set config #0, error -71 [ 860.503092][ T9761] usb 2-1: USB disconnect, device number 4 [ 860.514135][T11134] syzkaller0: entered promiscuous mode [ 860.519734][T11134] syzkaller0: entered allmulticast mode [ 863.867866][T11147] loop6: detected capacity change from 0 to 4096 [ 863.879780][T11147] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 864.671223][T11147] ntfs3(loop6): $Secure::$SII is corrupted. [ 864.677343][T11147] ntfs3(loop6): Failed to initialize $Secure (-22). [ 866.523905][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 866.530172][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 868.055350][T11160] loop6: detected capacity change from 0 to 40427 [ 868.341355][T11160] F2FS-fs (loop6): build fault injection attr: rate: 4, type: 0x3fffff [ 868.350201][T11160] F2FS-fs (loop6): Image doesn't support compression [ 868.359735][T11160] F2FS-fs (loop6): Image doesn't support compression [ 868.366642][T11160] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4 [ 868.441811][T11160] F2FS-fs (loop6): invalid crc value [ 868.584456][T11160] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_segment_manager+0x5015/0x98f0 [ 868.605376][T11160] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_segment_manager+0x315b/0x98f0 [ 868.842847][T11160] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1f3/0xe60 [ 868.856324][T11160] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1f3/0xe60 [ 869.139164][T11160] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_get_meta_page_retry+0x28/0xb0 [ 875.822542][ T5892] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 878.071478][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 879.264942][ T5824] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 879.285311][ T5824] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 879.302367][ T5824] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 879.310728][ T5824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 879.334729][ T5824] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 879.829537][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.836068][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.972390][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 879.992620][ T5892] usb 7-1: device descriptor read/all, error -71 [ 880.215282][ T5884] usb 6-1: too many configurations: 23, using maximum allowed: 8 [ 880.956991][T11232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.994786][ T5884] usb 6-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 881.039917][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19 [ 881.282563][ T5884] usb 6-1: SerialNumber: syz [ 881.328033][ T5884] usb 6-1: config 0 descriptor?? [ 881.403867][ T5824] Bluetooth: hci6: command tx timeout [ 883.345129][T11253] loop2: detected capacity change from 0 to 64 [ 883.502371][ T5824] Bluetooth: hci6: command tx timeout [ 884.952343][ T9761] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 885.332618][ T9761] usb 1-1: Using ep0 maxpacket: 8 [ 885.346713][T11264] loop6: detected capacity change from 0 to 8 [ 885.592422][ T5824] Bluetooth: hci6: command tx timeout [ 885.961191][ T9761] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 885.980927][ T9761] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 886.021360][ T9761] usb 1-1: Product: syz [ 886.038068][ T9761] usb 1-1: Manufacturer: syz [ 886.061645][ T9761] usb 1-1: SerialNumber: syz [ 886.091421][ T9761] usb 1-1: config 0 descriptor?? [ 886.121267][ T9761] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 886.385070][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 886.405308][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 886.430280][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 886.440086][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 886.449396][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 886.753786][T11272] loop6: detected capacity change from 0 to 8192 [ 886.774029][ T9761] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 887.036183][ T5892] usb 1-1: USB disconnect, device number 3 [ 887.655821][ T55] Bluetooth: hci6: command tx timeout [ 888.523838][ T55] Bluetooth: hci7: command tx timeout [ 890.452642][ T48] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 890.453823][T11294] loop6: detected capacity change from 0 to 64 [ 890.481814][T11294] minix: Unknown parameter '0x00000000000001c3' [ 890.712743][ T55] Bluetooth: hci7: command tx timeout [ 890.869435][ T48] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 890.968228][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.075949][ T48] usb 3-1: config 0 descriptor?? [ 892.781313][ T55] Bluetooth: hci7: command tx timeout [ 893.311430][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 893.337819][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 893.361084][ T48] usb 3-1: USB disconnect, device number 2 [ 893.461526][T11306] loop6: detected capacity change from 0 to 2048 [ 893.556266][T11306] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=26504, location=26504 [ 893.648458][T11306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 894.493208][T11321] sd 0:0:1:0: device reset [ 895.092283][ T55] Bluetooth: hci7: command tx timeout [ 898.852072][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 898.867638][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 898.877896][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 898.895637][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 898.903918][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 899.274528][T11343] loop2: detected capacity change from 0 to 64 [ 899.303095][T11343] minix: Unknown parameter '0x00000000000001c3' [ 899.499280][ T48] usb 6-1: USB disconnect, device number 2 [ 901.072495][ T5833] Bluetooth: hci8: command tx timeout [ 901.272921][T11359] loop6: detected capacity change from 0 to 2048 [ 901.297461][T11359] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=26504, location=26504 [ 901.607018][ T1148] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.618194][T11359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 902.273954][T11372] loop2: detected capacity change from 0 to 128 [ 902.286975][T11372] vfat: Unknown parameter '0000000000000000000001777777777777777777777' [ 903.016722][ T5833] Bluetooth: hci1: unexpected event for opcode 0x041b [ 903.082423][ T5833] Bluetooth: hci8: command tx timeout [ 903.116969][ T1148] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.288089][T11378] loop2: detected capacity change from 0 to 16 [ 903.340121][T11378] erofs (device loop2): mounted with root inode @ nid 36. [ 903.457275][T11378] erofs (device loop2): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 903.466793][T11378] erofs (device loop2): unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 903.476177][T11378] erofs (device loop2): read error -95 @ 8200 of nid 36 [ 903.706252][ T925] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 904.433935][ T1148] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.822540][ T925] usb 7-1: Using ep0 maxpacket: 16 [ 905.233190][ T5833] Bluetooth: hci8: command tx timeout [ 905.293657][ T925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.306994][ T925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.316845][ T925] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 905.326063][ T925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.364292][ T925] usb 7-1: config 0 descriptor?? [ 905.807040][ T925] usbhid 7-1:0.0: can't add hid device: -71 [ 905.837638][ T925] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 905.873023][ T1148] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.928488][ T925] usb 7-1: USB disconnect, device number 7 [ 906.797127][T11406] loop2: detected capacity change from 0 to 1024 [ 906.957751][T11269] chnl_net:caif_netlink_parms(): no params data found [ 907.242541][ T5833] Bluetooth: hci8: command tx timeout [ 907.338118][ T143] hfsplus: b-tree write err: -5, ino 4 [ 908.217182][T11226] chnl_net:caif_netlink_parms(): no params data found [ 908.320350][ T925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 909.774603][ T925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.786285][ T925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.809155][ T925] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 909.828901][ T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.891868][ T925] usb 1-1: config 0 descriptor?? [ 911.310347][ T925] kye 0003:0458:0087.0005: unknown main item tag 0x4 [ 911.322708][ T925] kye 0003:0458:0087.0005: item fetching failed at offset 2/5 [ 911.352991][ T925] kye 0003:0458:0087.0005: parse failed [ 911.420877][T11447] loop6: detected capacity change from 0 to 8 [ 912.323347][ T925] kye 0003:0458:0087.0005: probe with driver kye failed with error -22 [ 913.236224][ T9761] usb 1-1: USB disconnect, device number 4 [ 913.446533][T11458] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 913.613948][ T1148] bridge_slave_1: left allmulticast mode [ 913.629071][ T1148] bridge_slave_1: left promiscuous mode [ 913.630123][T11457] loop6: detected capacity change from 0 to 128 [ 913.714384][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.942413][ T1148] bridge_slave_0: left allmulticast mode [ 913.948991][T11457] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 913.971084][T11457] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 913.998019][ T1148] bridge_slave_0: left promiscuous mode [ 914.005157][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.734118][T10127] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 915.320207][T11475] loop6: detected capacity change from 0 to 8192 [ 918.532829][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 919.036976][ T5892] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 919.071068][ T5892] usb 3-1: config 0 has no interface number 0 [ 919.139320][ T5892] usb 3-1: config 0 interface 148 has no altsetting 0 [ 919.211363][ T5892] usb 3-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=3a.47 [ 919.331714][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.477708][ T5892] usb 3-1: config 0 descriptor?? [ 919.891482][ T5892] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 920.445761][ T5892] gspca_zc3xx: reg_w_i err -110 [ 920.452205][ T5892] gspca_zc3xx 3-1:0.148: probe with driver gspca_zc3xx failed with error -110 [ 920.798351][ T5833] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 920.975595][ T5892] usb 3-1: USB disconnect, device number 3 [ 922.532741][T11517] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 923.920781][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.070840][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.173791][ T1148] bond0 (unregistering): Released all slaves [ 924.718586][T11269] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.728377][T11269] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.735769][T11269] bridge_slave_0: entered allmulticast mode [ 924.744396][T11269] bridge_slave_0: entered promiscuous mode [ 924.754989][T11269] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.762159][T11269] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.770255][T11269] bridge_slave_1: entered allmulticast mode [ 924.778027][T11269] bridge_slave_1: entered promiscuous mode [ 924.812758][T11328] chnl_net:caif_netlink_parms(): no params data found [ 928.953557][T11555] loop2: detected capacity change from 0 to 32768 [ 929.414486][T11560] loop6: detected capacity change from 0 to 4096 [ 929.446633][T11560] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 929.500315][T11269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.517312][T11269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.557922][T11571] loop2: detected capacity change from 0 to 512 [ 930.573255][T11571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 930.632176][T11571] EXT4-fs (loop2): 1 truncate cleaned up [ 930.644808][T11571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.643465][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.088172][T11269] team0: Port device team_slave_0 added [ 934.133155][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.152494][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.159908][T11226] bridge_slave_0: entered allmulticast mode [ 934.200371][T11226] bridge_slave_0: entered promiscuous mode [ 934.228101][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.262074][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.269640][T11226] bridge_slave_1: entered allmulticast mode [ 934.278373][T11226] bridge_slave_1: entered promiscuous mode [ 934.292762][T11328] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.320471][T11328] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.372709][T11328] bridge_slave_0: entered allmulticast mode [ 934.400518][T11328] bridge_slave_0: entered promiscuous mode [ 934.411305][T11328] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.446157][T11328] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.491300][T11328] bridge_slave_1: entered allmulticast mode [ 934.604460][T11328] bridge_slave_1: entered promiscuous mode [ 934.729802][T11269] team0: Port device team_slave_1 added [ 935.041545][ T1148] hsr_slave_0: left promiscuous mode [ 935.847969][ T1148] hsr_slave_1: left promiscuous mode [ 935.910789][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.724712][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.877541][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.992989][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.052943][ T1148] veth1_macvtap: left promiscuous mode [ 938.068861][ T1148] veth0_macvtap: left promiscuous mode [ 938.084148][ T1148] veth1_vlan: left promiscuous mode [ 938.089867][ T1148] veth0_vlan: left promiscuous mode [ 939.383811][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 939.403373][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 939.423057][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 939.442290][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 939.451520][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 941.325291][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.340206][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.723478][ T5833] Bluetooth: hci3: command tx timeout [ 943.842475][ T5833] Bluetooth: hci3: command tx timeout [ 945.952680][ T5833] Bluetooth: hci3: command tx timeout [ 946.301436][T11663] loop6: detected capacity change from 0 to 512 [ 947.862215][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 947.885784][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 948.827435][ T5824] Bluetooth: hci3: command tx timeout [ 948.882326][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 948.891119][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 948.899039][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 949.348418][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 949.589609][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 950.923060][ T55] Bluetooth: hci4: command tx timeout [ 952.642431][ T5887] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 952.727805][T11653] warning: `syz.2.1113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 952.922358][ T5887] usb 7-1: config 0 has an invalid interface number: 18 but max is 0 [ 952.930517][ T5887] usb 7-1: config 0 has no interface number 0 [ 952.956176][ T5887] usb 7-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=a2.b4 [ 953.005599][ T55] Bluetooth: hci4: command tx timeout [ 953.011159][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.021614][T11328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.031239][ T5887] usb 7-1: Product: syz [ 953.041244][ T5887] usb 7-1: Manufacturer: syz [ 953.046050][ T5887] usb 7-1: SerialNumber: syz [ 953.064824][T11328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.089667][ T5887] usb 7-1: config 0 descriptor?? [ 953.607317][T11703] loop2: detected capacity change from 0 to 512 [ 953.741642][ T5887] usb 7-1: USB disconnect, device number 8 [ 953.778936][T11703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 954.629042][ T5887] ================================================================== [ 954.637170][ T5887] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x227/0x250 [ 954.644850][ T5887] Read of size 8 at addr ffff88807e251898 by task kworker/1:5/5887 [ 954.652812][ T5887] [ 954.655160][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:5 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 954.655221][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 954.655253][ T5887] Workqueue: usb_hub_wq hub_event [ 954.655313][ T5887] Call Trace: [ 954.655329][ T5887] [ 954.655345][ T5887] dump_stack_lvl+0x116/0x1f0 [ 954.655409][ T5887] print_report+0xc3/0x670 [ 954.655468][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.655517][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.655565][ T5887] ? __phys_addr+0xc6/0x150 [ 954.655621][ T5887] ? hdm_disconnect+0x227/0x250 [ 954.655661][ T5887] kasan_report+0xe0/0x110 [ 954.655721][ T5887] ? hdm_disconnect+0x227/0x250 [ 954.655773][ T5887] hdm_disconnect+0x227/0x250 [ 954.655814][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 954.655875][ T5887] ? device_remove+0x96/0x170 [ 954.655914][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 954.655973][ T5887] device_remove+0x125/0x170 [ 954.656011][ T5887] device_release_driver_internal+0x44b/0x620 [ 954.656058][ T5887] ? __entry_text_end+0x1020c5/0x1020c9 [ 954.656125][ T5887] bus_remove_device+0x22f/0x420 [ 954.656194][ T5887] device_del+0x396/0x9f0 [ 954.656237][ T5887] ? __pfx_device_del+0x10/0x10 [ 954.656275][ T5887] ? __pfx___mutex_lock+0x10/0x10 [ 954.656332][ T5887] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 954.656372][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.656421][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.656468][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 954.656513][ T5887] usb_disable_device+0x355/0x7d0 [ 954.656569][ T5887] usb_disconnect+0x2e1/0x920 [ 954.656622][ T5887] hub_event+0x1c57/0x4fa0 [ 954.656689][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.656743][ T5887] ? __lock_acquire+0xaa4/0x1ba0 [ 954.656807][ T5887] ? __pfx_hub_event+0x10/0x10 [ 954.656854][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 954.656899][ T5887] ? debug_object_deactivate+0x1ec/0x3a0 [ 954.656938][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 954.656987][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.657037][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.657088][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.657136][ T5887] ? rcu_is_watching+0x12/0xc0 [ 954.657185][ T5887] process_one_work+0x9cf/0x1b70 [ 954.657236][ T5887] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 954.657284][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 954.657326][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.657380][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.657427][ T5887] ? assign_work+0x1a0/0x250 [ 954.657466][ T5887] worker_thread+0x6c8/0xf10 [ 954.657517][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 954.657559][ T5887] kthread+0x3c5/0x780 [ 954.657595][ T5887] ? __pfx_kthread+0x10/0x10 [ 954.657628][ T5887] ? __pfx_kthread+0x10/0x10 [ 954.657662][ T5887] ? __pfx_kthread+0x10/0x10 [ 954.657696][ T5887] ? __pfx_kthread+0x10/0x10 [ 954.657729][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 954.657782][ T5887] ? rcu_is_watching+0x12/0xc0 [ 954.657828][ T5887] ? __pfx_kthread+0x10/0x10 [ 954.657864][ T5887] ret_from_fork+0x48/0x80 [ 954.657902][ T5887] ? __pfx_kthread+0x10/0x10 [ 954.657938][ T5887] ret_from_fork_asm+0x1a/0x30 [ 954.658011][ T5887] [ 954.658024][ T5887] [ 954.974441][ T5887] Allocated by task 5887: [ 954.978795][ T5887] kasan_save_stack+0x33/0x60 [ 954.983525][ T5887] kasan_save_track+0x14/0x30 [ 954.988256][ T5887] __kasan_kmalloc+0xaa/0xb0 [ 954.992892][ T5887] hdm_probe+0xb3/0x19a0 [ 954.997170][ T5887] usb_probe_interface+0x303/0x9c0 [ 955.002337][ T5887] really_probe+0x241/0xa90 [ 955.006873][ T5887] __driver_probe_device+0x1de/0x440 [ 955.012199][ T5887] driver_probe_device+0x4c/0x1b0 [ 955.017262][ T5887] __device_attach_driver+0x1df/0x310 [ 955.022671][ T5887] bus_for_each_drv+0x159/0x1e0 [ 955.027659][ T5887] __device_attach+0x1e4/0x4b0 [ 955.032456][ T5887] bus_probe_device+0x17f/0x1c0 [ 955.037416][ T5887] device_add+0x1148/0x1a70 [ 955.041971][ T5887] usb_set_configuration+0x1187/0x1e20 [ 955.047479][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 955.052979][ T5887] usb_probe_device+0xef/0x3e0 [ 955.057789][ T5887] really_probe+0x241/0xa90 [ 955.062353][ T5887] __driver_probe_device+0x1de/0x440 [ 955.067694][ T5887] driver_probe_device+0x4c/0x1b0 [ 955.072781][ T5887] __device_attach_driver+0x1df/0x310 [ 955.078199][ T5887] bus_for_each_drv+0x159/0x1e0 [ 955.083109][ T5887] __device_attach+0x1e4/0x4b0 [ 955.087908][ T5887] bus_probe_device+0x17f/0x1c0 [ 955.092815][ T5887] device_add+0x1148/0x1a70 [ 955.097361][ T5887] usb_new_device+0xd07/0x1a20 [ 955.102171][ T5887] hub_event+0x2eb7/0x4fa0 [ 955.106631][ T5887] process_one_work+0x9cf/0x1b70 [ 955.111609][ T5887] worker_thread+0x6c8/0xf10 [ 955.116239][ T5887] kthread+0x3c5/0x780 [ 955.120338][ T5887] ret_from_fork+0x48/0x80 [ 955.124792][ T5887] ret_from_fork_asm+0x1a/0x30 [ 955.129612][ T5887] [ 955.131950][ T5887] Freed by task 5887: [ 955.135945][ T5887] kasan_save_stack+0x33/0x60 [ 955.140668][ T5887] kasan_save_track+0x14/0x30 [ 955.145398][ T5887] kasan_save_free_info+0x3b/0x60 [ 955.150463][ T5887] __kasan_slab_free+0x51/0x70 [ 955.155275][ T5887] kfree+0x2b6/0x4d0 [ 955.159214][ T5887] device_release+0xa4/0x240 [ 955.163855][ T5887] kobject_put+0x1e7/0x5a0 [ 955.168324][ T5887] device_unregister+0x2f/0xc0 [ 955.173125][ T5887] hdm_disconnect+0x10b/0x250 [ 955.177839][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 955.183090][ T5887] device_remove+0x125/0x170 [ 955.187716][ T5887] device_release_driver_internal+0x44b/0x620 [ 955.193829][ T5887] bus_remove_device+0x22f/0x420 [ 955.198822][ T5887] device_del+0x396/0x9f0 [ 955.203183][ T5887] usb_disable_device+0x355/0x7d0 [ 955.208248][ T5887] usb_disconnect+0x2e1/0x920 [ 955.212966][ T5887] hub_event+0x1c57/0x4fa0 [ 955.217423][ T5887] process_one_work+0x9cf/0x1b70 [ 955.222415][ T5887] worker_thread+0x6c8/0xf10 [ 955.227049][ T5887] kthread+0x3c5/0x780 [ 955.231147][ T5887] ret_from_fork+0x48/0x80 [ 955.235596][ T5887] ret_from_fork_asm+0x1a/0x30 [ 955.240415][ T5887] [ 955.242765][ T5887] The buggy address belongs to the object at ffff88807e250000 [ 955.242765][ T5887] which belongs to the cache kmalloc-8k of size 8192 [ 955.256846][ T5887] The buggy address is located 6296 bytes inside of [ 955.256846][ T5887] freed 8192-byte region [ffff88807e250000, ffff88807e252000) [ 955.270850][ T5887] [ 955.273189][ T5887] The buggy address belongs to the physical page: [ 955.279614][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e250 [ 955.288403][ T5887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 955.296929][ T5887] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 955.304508][ T5887] page_type: f5(slab) [ 955.308523][ T5887] raw: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 955.317165][ T5887] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 955.325798][ T5887] head: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 955.334507][ T5887] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 955.343214][ T5887] head: 00fff00000000003 ffffea0001f89401 00000000ffffffff 00000000ffffffff [ 955.351926][ T5887] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 955.360623][ T5887] page dumped because: kasan: bad access detected [ 955.367051][ T5887] page_owner tracks the page as allocated [ 955.372779][ T5887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (S10udev), ts 42775867148, free_ts 38784402322 [ 955.392975][ T5887] post_alloc_hook+0x181/0x1b0 [ 955.397788][ T5887] get_page_from_freelist+0x135c/0x3920 [ 955.403385][ T5887] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 955.409332][ T5887] alloc_pages_mpol+0x1fb/0x550 [ 955.414235][ T5887] new_slab+0x244/0x340 [ 955.418441][ T5887] ___slab_alloc+0xd9c/0x1940 [ 955.423154][ T5887] __slab_alloc.constprop.0+0x56/0xb0 [ 955.428572][ T5887] __kmalloc_cache_noprof+0xfb/0x3e0 [ 955.433899][ T5887] tomoyo_init_log+0xc8a/0x2140 [ 955.438799][ T5887] tomoyo_supervisor+0x302/0x13b0 [ 955.443880][ T5887] tomoyo_env_perm+0x191/0x200 [ 955.448676][ T5887] tomoyo_find_next_domain+0xec2/0x20b0 [ 955.454257][ T5887] tomoyo_bprm_check_security+0x12e/0x1d0 [ 955.460051][ T5887] security_bprm_check+0x1b9/0x1e0 [ 955.465222][ T5887] bprm_execve+0x810/0x1650 [ 955.469774][ T5887] do_execveat_common.isra.0+0x4a5/0x610 [ 955.475452][ T5887] page last free pid 1 tgid 1 stack trace: [ 955.481272][ T5887] __free_frozen_pages+0x69d/0xff0 [ 955.486420][ T5887] free_contig_range+0x135/0x3f0 [ 955.491401][ T5887] destroy_args+0x66f/0x830 [ 955.495960][ T5887] debug_vm_pgtable+0x130e/0x2d50 [ 955.501039][ T5887] do_one_initcall+0x123/0x6e0 [ 955.505853][ T5887] kernel_init_freeable+0x5c2/0x900 [ 955.511097][ T5887] kernel_init+0x1c/0x2b0 [ 955.515488][ T5887] ret_from_fork+0x48/0x80 [ 955.519934][ T5887] ret_from_fork_asm+0x1a/0x30 [ 955.524755][ T5887] [ 955.527092][ T5887] Memory state around the buggy address: [ 955.532743][ T5887] ffff88807e251780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.540833][ T5887] ffff88807e251800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.548925][ T5887] >ffff88807e251880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.557006][ T5887] ^ [ 955.561875][ T5887] ffff88807e251900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.569983][ T5887] ffff88807e251980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 955.578069][ T5887] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 955.742372][ T55] Bluetooth: hci4: command tx timeout [ 955.880005][ T5887] Disabling lock debugging due to kernel taint [ 955.886390][ T5887] ================================================================== [ 955.894470][ T5887] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x21d/0x250 [ 955.902140][ T5887] Read of size 8 at addr ffff88807e2504e8 by task kworker/1:5/5887 [ 955.910052][ T5887] [ 955.912402][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:5 Tainted: G B 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 955.912459][ T5887] Tainted: [B]=BAD_PAGE [ 955.912472][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 955.912498][ T5887] Workqueue: usb_hub_wq hub_event [ 955.912545][ T5887] Call Trace: [ 955.912556][ T5887] [ 955.912568][ T5887] dump_stack_lvl+0x116/0x1f0 [ 955.912622][ T5887] print_report+0xc3/0x670 [ 955.912677][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.912724][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.912778][ T5887] ? __phys_addr+0xc6/0x150 [ 955.912833][ T5887] ? hdm_disconnect+0x21d/0x250 [ 955.912872][ T5887] kasan_report+0xe0/0x110 [ 955.912930][ T5887] ? hdm_disconnect+0x21d/0x250 [ 955.912976][ T5887] hdm_disconnect+0x21d/0x250 [ 955.913016][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 955.913076][ T5887] ? device_remove+0x96/0x170 [ 955.913113][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 955.913170][ T5887] device_remove+0x125/0x170 [ 955.913208][ T5887] device_release_driver_internal+0x44b/0x620 [ 955.913255][ T5887] ? __entry_text_end+0x1020c5/0x1020c9 [ 955.913305][ T5887] bus_remove_device+0x22f/0x420 [ 955.913370][ T5887] device_del+0x396/0x9f0 [ 955.913412][ T5887] ? __pfx_device_del+0x10/0x10 [ 955.913450][ T5887] ? __pfx___mutex_lock+0x10/0x10 [ 955.913504][ T5887] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 955.913543][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.913592][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.913639][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 955.913681][ T5887] usb_disable_device+0x355/0x7d0 [ 955.913736][ T5887] usb_disconnect+0x2e1/0x920 [ 955.913792][ T5887] hub_event+0x1c57/0x4fa0 [ 955.913855][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.913902][ T5887] ? __lock_acquire+0xaa4/0x1ba0 [ 955.913964][ T5887] ? __pfx_hub_event+0x10/0x10 [ 955.914010][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 955.914055][ T5887] ? debug_object_deactivate+0x1ec/0x3a0 [ 955.914088][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 955.914131][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.914175][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.914220][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.914261][ T5887] ? rcu_is_watching+0x12/0xc0 [ 955.914321][ T5887] process_one_work+0x9cf/0x1b70 [ 955.914365][ T5887] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 955.914407][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 955.914443][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.914491][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.914533][ T5887] ? assign_work+0x1a0/0x250 [ 955.914566][ T5887] worker_thread+0x6c8/0xf10 [ 955.914611][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 955.914647][ T5887] kthread+0x3c5/0x780 [ 955.914678][ T5887] ? __pfx_kthread+0x10/0x10 [ 955.914707][ T5887] ? __pfx_kthread+0x10/0x10 [ 955.914737][ T5887] ? __pfx_kthread+0x10/0x10 [ 955.914772][ T5887] ? __pfx_kthread+0x10/0x10 [ 955.914802][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 955.914843][ T5887] ? rcu_is_watching+0x12/0xc0 [ 955.914883][ T5887] ? __pfx_kthread+0x10/0x10 [ 955.914915][ T5887] ret_from_fork+0x48/0x80 [ 955.914948][ T5887] ? __pfx_kthread+0x10/0x10 [ 955.914979][ T5887] ret_from_fork_asm+0x1a/0x30 [ 955.915041][ T5887] [ 955.915053][ T5887] [ 956.236656][ T5887] Allocated by task 5887: [ 956.240990][ T5887] kasan_save_stack+0x33/0x60 [ 956.245706][ T5887] kasan_save_track+0x14/0x30 [ 956.250421][ T5887] __kasan_kmalloc+0xaa/0xb0 [ 956.255061][ T5887] hdm_probe+0xb3/0x19a0 [ 956.259324][ T5887] usb_probe_interface+0x303/0x9c0 [ 956.264472][ T5887] really_probe+0x241/0xa90 [ 956.268997][ T5887] __driver_probe_device+0x1de/0x440 [ 956.274318][ T5887] driver_probe_device+0x4c/0x1b0 [ 956.279394][ T5887] __device_attach_driver+0x1df/0x310 [ 956.284787][ T5887] bus_for_each_drv+0x159/0x1e0 [ 956.289670][ T5887] __device_attach+0x1e4/0x4b0 [ 956.294459][ T5887] bus_probe_device+0x17f/0x1c0 [ 956.299353][ T5887] device_add+0x1148/0x1a70 [ 956.303885][ T5887] usb_set_configuration+0x1187/0x1e20 [ 956.309369][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 956.314847][ T5887] usb_probe_device+0xef/0x3e0 [ 956.319643][ T5887] really_probe+0x241/0xa90 [ 956.324165][ T5887] __driver_probe_device+0x1de/0x440 [ 956.329469][ T5887] driver_probe_device+0x4c/0x1b0 [ 956.334520][ T5887] __device_attach_driver+0x1df/0x310 [ 956.339908][ T5887] bus_for_each_drv+0x159/0x1e0 [ 956.344790][ T5887] __device_attach+0x1e4/0x4b0 [ 956.349599][ T5887] bus_probe_device+0x17f/0x1c0 [ 956.354516][ T5887] device_add+0x1148/0x1a70 [ 956.359068][ T5887] usb_new_device+0xd07/0x1a20 [ 956.363856][ T5887] hub_event+0x2eb7/0x4fa0 [ 956.368296][ T5887] process_one_work+0x9cf/0x1b70 [ 956.373251][ T5887] worker_thread+0x6c8/0xf10 [ 956.377858][ T5887] kthread+0x3c5/0x780 [ 956.381935][ T5887] ret_from_fork+0x48/0x80 [ 956.386367][ T5887] ret_from_fork_asm+0x1a/0x30 [ 956.391165][ T5887] [ 956.393497][ T5887] Freed by task 5887: [ 956.397480][ T5887] kasan_save_stack+0x33/0x60 [ 956.402196][ T5887] kasan_save_track+0x14/0x30 [ 956.406907][ T5887] kasan_save_free_info+0x3b/0x60 [ 956.411954][ T5887] __kasan_slab_free+0x51/0x70 [ 956.416755][ T5887] kfree+0x2b6/0x4d0 [ 956.420681][ T5887] device_release+0xa4/0x240 [ 956.425302][ T5887] kobject_put+0x1e7/0x5a0 [ 956.429761][ T5887] device_unregister+0x2f/0xc0 [ 956.434542][ T5887] hdm_disconnect+0x10b/0x250 [ 956.439238][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 956.444476][ T5887] device_remove+0x125/0x170 [ 956.449130][ T5887] device_release_driver_internal+0x44b/0x620 [ 956.455225][ T5887] bus_remove_device+0x22f/0x420 [ 956.460206][ T5887] device_del+0x396/0x9f0 [ 956.464551][ T5887] usb_disable_device+0x355/0x7d0 [ 956.469600][ T5887] usb_disconnect+0x2e1/0x920 [ 956.474309][ T5887] hub_event+0x1c57/0x4fa0 [ 956.478748][ T5887] process_one_work+0x9cf/0x1b70 [ 956.483704][ T5887] worker_thread+0x6c8/0xf10 [ 956.488317][ T5887] kthread+0x3c5/0x780 [ 956.492425][ T5887] ret_from_fork+0x48/0x80 [ 956.496856][ T5887] ret_from_fork_asm+0x1a/0x30 [ 956.501652][ T5887] [ 956.503978][ T5887] The buggy address belongs to the object at ffff88807e250000 [ 956.503978][ T5887] which belongs to the cache kmalloc-8k of size 8192 [ 956.518042][ T5887] The buggy address is located 1256 bytes inside of [ 956.518042][ T5887] freed 8192-byte region [ffff88807e250000, ffff88807e252000) [ 956.532028][ T5887] [ 956.534355][ T5887] The buggy address belongs to the physical page: [ 956.540767][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e250 [ 956.549538][ T5887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 956.558049][ T5887] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 956.565620][ T5887] page_type: f5(slab) [ 956.569618][ T5887] raw: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 956.578216][ T5887] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 956.586816][ T5887] head: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 956.595509][ T5887] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 956.604198][ T5887] head: 00fff00000000003 ffffea0001f89401 00000000ffffffff 00000000ffffffff [ 956.612884][ T5887] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 956.621567][ T5887] page dumped because: kasan: bad access detected [ 956.627982][ T5887] page_owner tracks the page as allocated [ 956.633698][ T5887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (S10udev), ts 42775867148, free_ts 38784402322 [ 956.653874][ T5887] post_alloc_hook+0x181/0x1b0 [ 956.658670][ T5887] get_page_from_freelist+0x135c/0x3920 [ 956.664250][ T5887] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 956.670179][ T5887] alloc_pages_mpol+0x1fb/0x550 [ 956.675066][ T5887] new_slab+0x244/0x340 [ 956.679243][ T5887] ___slab_alloc+0xd9c/0x1940 [ 956.683943][ T5887] __slab_alloc.constprop.0+0x56/0xb0 [ 956.689342][ T5887] __kmalloc_cache_noprof+0xfb/0x3e0 [ 956.694737][ T5887] tomoyo_init_log+0xc8a/0x2140 [ 956.699614][ T5887] tomoyo_supervisor+0x302/0x13b0 [ 956.704678][ T5887] tomoyo_env_perm+0x191/0x200 [ 956.709461][ T5887] tomoyo_find_next_domain+0xec2/0x20b0 [ 956.715027][ T5887] tomoyo_bprm_check_security+0x12e/0x1d0 [ 956.720796][ T5887] security_bprm_check+0x1b9/0x1e0 [ 956.725959][ T5887] bprm_execve+0x810/0x1650 [ 956.730494][ T5887] do_execveat_common.isra.0+0x4a5/0x610 [ 956.736155][ T5887] page last free pid 1 tgid 1 stack trace: [ 956.741961][ T5887] __free_frozen_pages+0x69d/0xff0 [ 956.747099][ T5887] free_contig_range+0x135/0x3f0 [ 956.752057][ T5887] destroy_args+0x66f/0x830 [ 956.756593][ T5887] debug_vm_pgtable+0x130e/0x2d50 [ 956.761651][ T5887] do_one_initcall+0x123/0x6e0 [ 956.766455][ T5887] kernel_init_freeable+0x5c2/0x900 [ 956.771686][ T5887] kernel_init+0x1c/0x2b0 [ 956.776039][ T5887] ret_from_fork+0x48/0x80 [ 956.780472][ T5887] ret_from_fork_asm+0x1a/0x30 [ 956.785274][ T5887] [ 956.787615][ T5887] Memory state around the buggy address: [ 956.793271][ T5887] ffff88807e250380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.801347][ T5887] ffff88807e250400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.809423][ T5887] >ffff88807e250480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.817495][ T5887] ^ [ 956.824998][ T5887] ffff88807e250500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.833090][ T5887] ffff88807e250580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.841155][ T5887] ================================================================== [ 956.933011][ T5887] ================================================================== [ 956.941142][ T5887] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x213/0x250 [ 956.948822][ T5887] Read of size 8 at addr ffff88807e2504f0 by task kworker/1:5/5887 [ 956.956737][ T5887] [ 956.959105][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:5 Tainted: G B 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 956.959160][ T5887] Tainted: [B]=BAD_PAGE [ 956.959172][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 956.959200][ T5887] Workqueue: usb_hub_wq hub_event [ 956.959255][ T5887] Call Trace: [ 956.959267][ T5887] [ 956.959280][ T5887] dump_stack_lvl+0x116/0x1f0 [ 956.959337][ T5887] print_report+0xc3/0x670 [ 956.959391][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.959435][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.959477][ T5887] ? __phys_addr+0xc6/0x150 [ 956.959529][ T5887] ? hdm_disconnect+0x213/0x250 [ 956.959575][ T5887] kasan_report+0xe0/0x110 [ 956.959638][ T5887] ? hdm_disconnect+0x213/0x250 [ 956.959681][ T5887] hdm_disconnect+0x213/0x250 [ 956.959717][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 956.959779][ T5887] ? device_remove+0x96/0x170 [ 956.959813][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 956.959864][ T5887] device_remove+0x125/0x170 [ 956.959898][ T5887] device_release_driver_internal+0x44b/0x620 [ 956.959940][ T5887] ? __entry_text_end+0x1020c5/0x1020c9 [ 956.959987][ T5887] bus_remove_device+0x22f/0x420 [ 956.960049][ T5887] device_del+0x396/0x9f0 [ 956.960087][ T5887] ? __pfx_device_del+0x10/0x10 [ 956.960121][ T5887] ? __pfx___mutex_lock+0x10/0x10 [ 956.960173][ T5887] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 956.960207][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.960250][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.960292][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 956.960340][ T5887] usb_disable_device+0x355/0x7d0 [ 956.960391][ T5887] usb_disconnect+0x2e1/0x920 [ 956.960437][ T5887] hub_event+0x1c57/0x4fa0 [ 956.960495][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.960537][ T5887] ? __lock_acquire+0xaa4/0x1ba0 [ 956.960593][ T5887] ? __pfx_hub_event+0x10/0x10 [ 956.960634][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 956.960674][ T5887] ? debug_object_deactivate+0x1ec/0x3a0 [ 956.960709][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 956.960757][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.960801][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.960846][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.960888][ T5887] ? rcu_is_watching+0x12/0xc0 [ 956.960931][ T5887] process_one_work+0x9cf/0x1b70 [ 956.960976][ T5887] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 956.961018][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 956.961054][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.961102][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.961144][ T5887] ? assign_work+0x1a0/0x250 [ 956.961202][ T5887] worker_thread+0x6c8/0xf10 [ 956.961247][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 956.961284][ T5887] kthread+0x3c5/0x780 [ 956.961315][ T5887] ? __pfx_kthread+0x10/0x10 [ 956.961345][ T5887] ? __pfx_kthread+0x10/0x10 [ 956.961374][ T5887] ? __pfx_kthread+0x10/0x10 [ 956.961404][ T5887] ? __pfx_kthread+0x10/0x10 [ 956.961433][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.961475][ T5887] ? rcu_is_watching+0x12/0xc0 [ 956.961515][ T5887] ? __pfx_kthread+0x10/0x10 [ 956.961547][ T5887] ret_from_fork+0x48/0x80 [ 956.961579][ T5887] ? __pfx_kthread+0x10/0x10 [ 956.961610][ T5887] ret_from_fork_asm+0x1a/0x30 [ 956.961672][ T5887] [ 956.961684][ T5887] [ 957.283212][ T5887] Allocated by task 5887: [ 957.287550][ T5887] kasan_save_stack+0x33/0x60 [ 957.292269][ T5887] kasan_save_track+0x14/0x30 [ 957.296977][ T5887] __kasan_kmalloc+0xaa/0xb0 [ 957.301596][ T5887] hdm_probe+0xb3/0x19a0 [ 957.305857][ T5887] usb_probe_interface+0x303/0x9c0 [ 957.311001][ T5887] really_probe+0x241/0xa90 [ 957.315527][ T5887] __driver_probe_device+0x1de/0x440 [ 957.320834][ T5887] driver_probe_device+0x4c/0x1b0 [ 957.325897][ T5887] __device_attach_driver+0x1df/0x310 [ 957.331376][ T5887] bus_for_each_drv+0x159/0x1e0 [ 957.336260][ T5887] __device_attach+0x1e4/0x4b0 [ 957.341045][ T5887] bus_probe_device+0x17f/0x1c0 [ 957.345934][ T5887] device_add+0x1148/0x1a70 [ 957.350464][ T5887] usb_set_configuration+0x1187/0x1e20 [ 957.355945][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 957.361422][ T5887] usb_probe_device+0xef/0x3e0 [ 957.366209][ T5887] really_probe+0x241/0xa90 [ 957.370739][ T5887] __driver_probe_device+0x1de/0x440 [ 957.376049][ T5887] driver_probe_device+0x4c/0x1b0 [ 957.381092][ T5887] __device_attach_driver+0x1df/0x310 [ 957.386487][ T5887] bus_for_each_drv+0x159/0x1e0 [ 957.391375][ T5887] __device_attach+0x1e4/0x4b0 [ 957.396160][ T5887] bus_probe_device+0x17f/0x1c0 [ 957.401044][ T5887] device_add+0x1148/0x1a70 [ 957.405575][ T5887] usb_new_device+0xd07/0x1a20 [ 957.410363][ T5887] hub_event+0x2eb7/0x4fa0 [ 957.414809][ T5887] process_one_work+0x9cf/0x1b70 [ 957.419765][ T5887] worker_thread+0x6c8/0xf10 [ 957.424380][ T5887] kthread+0x3c5/0x780 [ 957.428461][ T5887] ret_from_fork+0x48/0x80 [ 957.432892][ T5887] ret_from_fork_asm+0x1a/0x30 [ 957.437691][ T5887] [ 957.440013][ T5887] Freed by task 5887: [ 957.444011][ T5887] kasan_save_stack+0x33/0x60 [ 957.448718][ T5887] kasan_save_track+0x14/0x30 [ 957.453432][ T5887] kasan_save_free_info+0x3b/0x60 [ 957.458475][ T5887] __kasan_slab_free+0x51/0x70 [ 957.463268][ T5887] kfree+0x2b6/0x4d0 [ 957.467183][ T5887] device_release+0xa4/0x240 [ 957.471805][ T5887] kobject_put+0x1e7/0x5a0 [ 957.476253][ T5887] device_unregister+0x2f/0xc0 [ 957.481036][ T5887] hdm_disconnect+0x10b/0x250 [ 957.485734][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 957.490969][ T5887] device_remove+0x125/0x170 [ 957.495574][ T5887] device_release_driver_internal+0x44b/0x620 [ 957.501665][ T5887] bus_remove_device+0x22f/0x420 [ 957.506644][ T5887] device_del+0x396/0x9f0 [ 957.510988][ T5887] usb_disable_device+0x355/0x7d0 [ 957.516037][ T5887] usb_disconnect+0x2e1/0x920 [ 957.520736][ T5887] hub_event+0x1c57/0x4fa0 [ 957.525181][ T5887] process_one_work+0x9cf/0x1b70 [ 957.530139][ T5887] worker_thread+0x6c8/0xf10 [ 957.534750][ T5887] kthread+0x3c5/0x780 [ 957.538834][ T5887] ret_from_fork+0x48/0x80 [ 957.543263][ T5887] ret_from_fork_asm+0x1a/0x30 [ 957.548060][ T5887] [ 957.550386][ T5887] The buggy address belongs to the object at ffff88807e250000 [ 957.550386][ T5887] which belongs to the cache kmalloc-8k of size 8192 [ 957.564454][ T5887] The buggy address is located 1264 bytes inside of [ 957.564454][ T5887] freed 8192-byte region [ffff88807e250000, ffff88807e252000) [ 957.578447][ T5887] [ 957.580771][ T5887] The buggy address belongs to the physical page: [ 957.587189][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e250 [ 957.595961][ T5887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 957.604471][ T5887] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 957.612031][ T5887] page_type: f5(slab) [ 957.616028][ T5887] raw: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 957.624636][ T5887] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 957.633258][ T5887] head: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 957.641944][ T5887] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 957.650633][ T5887] head: 00fff00000000003 ffffea0001f89401 00000000ffffffff 00000000ffffffff [ 957.659414][ T5887] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 957.668116][ T5887] page dumped because: kasan: bad access detected [ 957.674544][ T5887] page_owner tracks the page as allocated [ 957.680529][ T5887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (S10udev), ts 42775867148, free_ts 38784402322 [ 957.700717][ T5887] post_alloc_hook+0x181/0x1b0 [ 957.705529][ T5887] get_page_from_freelist+0x135c/0x3920 [ 957.711109][ T5887] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 957.717046][ T5887] alloc_pages_mpol+0x1fb/0x550 [ 957.722027][ T5887] new_slab+0x244/0x340 [ 957.726209][ T5887] ___slab_alloc+0xd9c/0x1940 [ 957.730914][ T5887] __slab_alloc.constprop.0+0x56/0xb0 [ 957.736314][ T5887] __kmalloc_cache_noprof+0xfb/0x3e0 [ 957.741627][ T5887] tomoyo_init_log+0xc8a/0x2140 [ 957.746512][ T5887] tomoyo_supervisor+0x302/0x13b0 [ 957.751585][ T5887] tomoyo_env_perm+0x191/0x200 [ 957.756388][ T5887] tomoyo_find_next_domain+0xec2/0x20b0 [ 957.762038][ T5887] tomoyo_bprm_check_security+0x12e/0x1d0 [ 957.767803][ T5887] security_bprm_check+0x1b9/0x1e0 [ 957.772958][ T5887] bprm_execve+0x810/0x1650 [ 957.777486][ T5887] do_execveat_common.isra.0+0x4a5/0x610 [ 957.783151][ T5887] page last free pid 1 tgid 1 stack trace: [ 957.788994][ T5887] __free_frozen_pages+0x69d/0xff0 [ 957.794136][ T5887] free_contig_range+0x135/0x3f0 [ 957.799098][ T5887] destroy_args+0x66f/0x830 [ 957.803757][ T5887] debug_vm_pgtable+0x130e/0x2d50 [ 957.808824][ T5887] do_one_initcall+0x123/0x6e0 [ 957.813717][ T5887] kernel_init_freeable+0x5c2/0x900 [ 957.818941][ T5887] kernel_init+0x1c/0x2b0 [ 957.823290][ T5887] ret_from_fork+0x48/0x80 [ 957.827721][ T5887] ret_from_fork_asm+0x1a/0x30 [ 957.832523][ T5887] [ 957.834873][ T5887] Memory state around the buggy address: [ 957.840518][ T5887] ffff88807e250380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.848596][ T5887] ffff88807e250400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.856674][ T5887] >ffff88807e250480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.864747][ T5887] ^ [ 957.872470][ T5887] ffff88807e250500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.880569][ T5887] ffff88807e250580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.888644][ T5887] ================================================================== [ 957.999024][ T5887] ================================================================== [ 958.007147][ T5887] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x20c/0x250 [ 958.014829][ T5887] Read of size 8 at addr ffff88807e250500 by task kworker/1:5/5887 [ 958.022749][ T5887] [ 958.025093][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:5 Tainted: G B 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 958.025150][ T5887] Tainted: [B]=BAD_PAGE [ 958.025164][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 958.025190][ T5887] Workqueue: usb_hub_wq hub_event [ 958.025239][ T5887] Call Trace: [ 958.025250][ T5887] [ 958.025263][ T5887] dump_stack_lvl+0x116/0x1f0 [ 958.025319][ T5887] print_report+0xc3/0x670 [ 958.025374][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.025418][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.025460][ T5887] ? __phys_addr+0xc6/0x150 [ 958.025513][ T5887] ? hdm_disconnect+0x20c/0x250 [ 958.025550][ T5887] kasan_report+0xe0/0x110 [ 958.025604][ T5887] ? hdm_disconnect+0x20c/0x250 [ 958.025645][ T5887] hdm_disconnect+0x20c/0x250 [ 958.025687][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 958.025744][ T5887] ? device_remove+0x96/0x170 [ 958.025778][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 958.025829][ T5887] device_remove+0x125/0x170 [ 958.025863][ T5887] device_release_driver_internal+0x44b/0x620 [ 958.025905][ T5887] ? __entry_text_end+0x1020c5/0x1020c9 [ 958.025950][ T5887] bus_remove_device+0x22f/0x420 [ 958.026010][ T5887] device_del+0x396/0x9f0 [ 958.026047][ T5887] ? __pfx_device_del+0x10/0x10 [ 958.026080][ T5887] ? __pfx___mutex_lock+0x10/0x10 [ 958.026131][ T5887] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 958.026165][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.026208][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.026250][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 958.026290][ T5887] usb_disable_device+0x355/0x7d0 [ 958.026338][ T5887] usb_disconnect+0x2e1/0x920 [ 958.026384][ T5887] hub_event+0x1c57/0x4fa0 [ 958.026441][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.026484][ T5887] ? __lock_acquire+0xaa4/0x1ba0 [ 958.026542][ T5887] ? __pfx_hub_event+0x10/0x10 [ 958.026583][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 958.026623][ T5887] ? debug_object_deactivate+0x1ec/0x3a0 [ 958.026657][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 958.026706][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.026750][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.026794][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.026836][ T5887] ? rcu_is_watching+0x12/0xc0 [ 958.026880][ T5887] process_one_work+0x9cf/0x1b70 [ 958.026925][ T5887] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 958.026967][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 958.027004][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.027051][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.027093][ T5887] ? assign_work+0x1a0/0x250 [ 958.027128][ T5887] worker_thread+0x6c8/0xf10 [ 958.027173][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 958.027209][ T5887] kthread+0x3c5/0x780 [ 958.027241][ T5887] ? __pfx_kthread+0x10/0x10 [ 958.027272][ T5887] ? __pfx_kthread+0x10/0x10 [ 958.027301][ T5887] ? __pfx_kthread+0x10/0x10 [ 958.027332][ T5887] ? __pfx_kthread+0x10/0x10 [ 958.027361][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 958.027403][ T5887] ? rcu_is_watching+0x12/0xc0 [ 958.027443][ T5887] ? __pfx_kthread+0x10/0x10 [ 958.027475][ T5887] ret_from_fork+0x48/0x80 [ 958.027508][ T5887] ? __pfx_kthread+0x10/0x10 [ 958.027539][ T5887] ret_from_fork_asm+0x1a/0x30 [ 958.027606][ T5887] [ 958.027618][ T5887] [ 958.348797][ T5887] Allocated by task 5887: [ 958.353131][ T5887] kasan_save_stack+0x33/0x60 [ 958.357841][ T5887] kasan_save_track+0x14/0x30 [ 958.362550][ T5887] __kasan_kmalloc+0xaa/0xb0 [ 958.367167][ T5887] hdm_probe+0xb3/0x19a0 [ 958.371428][ T5887] usb_probe_interface+0x303/0x9c0 [ 958.376570][ T5887] really_probe+0x241/0xa90 [ 958.381086][ T5887] __driver_probe_device+0x1de/0x440 [ 958.386387][ T5887] driver_probe_device+0x4c/0x1b0 [ 958.391429][ T5887] __device_attach_driver+0x1df/0x310 [ 958.396817][ T5887] bus_for_each_drv+0x159/0x1e0 [ 958.401702][ T5887] __device_attach+0x1e4/0x4b0 [ 958.406494][ T5887] bus_probe_device+0x17f/0x1c0 [ 958.411381][ T5887] device_add+0x1148/0x1a70 [ 958.415907][ T5887] usb_set_configuration+0x1187/0x1e20 [ 958.421390][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 958.426865][ T5887] usb_probe_device+0xef/0x3e0 [ 958.431698][ T5887] really_probe+0x241/0xa90 [ 958.436226][ T5887] __driver_probe_device+0x1de/0x440 [ 958.441537][ T5887] driver_probe_device+0x4c/0x1b0 [ 958.446579][ T5887] __device_attach_driver+0x1df/0x310 [ 958.451967][ T5887] bus_for_each_drv+0x159/0x1e0 [ 958.456851][ T5887] __device_attach+0x1e4/0x4b0 [ 958.461629][ T5887] bus_probe_device+0x17f/0x1c0 [ 958.466521][ T5887] device_add+0x1148/0x1a70 [ 958.471055][ T5887] usb_new_device+0xd07/0x1a20 [ 958.475842][ T5887] hub_event+0x2eb7/0x4fa0 [ 958.480279][ T5887] process_one_work+0x9cf/0x1b70 [ 958.485232][ T5887] worker_thread+0x6c8/0xf10 [ 958.489843][ T5887] kthread+0x3c5/0x780 [ 958.493923][ T5887] ret_from_fork+0x48/0x80 [ 958.498352][ T5887] ret_from_fork_asm+0x1a/0x30 [ 958.503157][ T5887] [ 958.505494][ T5887] Freed by task 5887: [ 958.509473][ T5887] kasan_save_stack+0x33/0x60 [ 958.514188][ T5887] kasan_save_track+0x14/0x30 [ 958.518900][ T5887] kasan_save_free_info+0x3b/0x60 [ 958.523944][ T5887] __kasan_slab_free+0x51/0x70 [ 958.528747][ T5887] kfree+0x2b6/0x4d0 [ 958.532662][ T5887] device_release+0xa4/0x240 [ 958.537282][ T5887] kobject_put+0x1e7/0x5a0 [ 958.541731][ T5887] device_unregister+0x2f/0xc0 [ 958.546532][ T5887] hdm_disconnect+0x10b/0x250 [ 958.551223][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 958.556454][ T5887] device_remove+0x125/0x170 [ 958.561066][ T5887] device_release_driver_internal+0x44b/0x620 [ 958.567158][ T5887] bus_remove_device+0x22f/0x420 [ 958.572131][ T5887] device_del+0x396/0x9f0 [ 958.576474][ T5887] usb_disable_device+0x355/0x7d0 [ 958.581520][ T5887] usb_disconnect+0x2e1/0x920 [ 958.586218][ T5887] hub_event+0x1c57/0x4fa0 [ 958.590655][ T5887] process_one_work+0x9cf/0x1b70 [ 958.595608][ T5887] worker_thread+0x6c8/0xf10 [ 958.600210][ T5887] kthread+0x3c5/0x780 [ 958.604295][ T5887] ret_from_fork+0x48/0x80 [ 958.608733][ T5887] ret_from_fork_asm+0x1a/0x30 [ 958.613542][ T5887] [ 958.615869][ T5887] The buggy address belongs to the object at ffff88807e250000 [ 958.615869][ T5887] which belongs to the cache kmalloc-8k of size 8192 [ 958.629943][ T5887] The buggy address is located 1280 bytes inside of [ 958.629943][ T5887] freed 8192-byte region [ffff88807e250000, ffff88807e252000) [ 958.643929][ T5887] [ 958.646251][ T5887] The buggy address belongs to the physical page: [ 958.652662][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e250 [ 958.661435][ T5887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 958.669945][ T5887] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 958.677505][ T5887] page_type: f5(slab) [ 958.681505][ T5887] raw: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 958.690111][ T5887] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 958.698724][ T5887] head: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 958.707421][ T5887] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 958.716115][ T5887] head: 00fff00000000003 ffffea0001f89401 00000000ffffffff 00000000ffffffff [ 958.724804][ T5887] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 958.733484][ T5887] page dumped because: kasan: bad access detected [ 958.739987][ T5887] page_owner tracks the page as allocated [ 958.745703][ T5887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (S10udev), ts 42775867148, free_ts 38784402322 [ 958.765897][ T5887] post_alloc_hook+0x181/0x1b0 [ 958.770700][ T5887] get_page_from_freelist+0x135c/0x3920 [ 958.776371][ T5887] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 958.782304][ T5887] alloc_pages_mpol+0x1fb/0x550 [ 958.787200][ T5887] new_slab+0x244/0x340 [ 958.791379][ T5887] ___slab_alloc+0xd9c/0x1940 [ 958.796080][ T5887] __slab_alloc.constprop.0+0x56/0xb0 [ 958.801482][ T5887] __kmalloc_cache_noprof+0xfb/0x3e0 [ 958.806800][ T5887] tomoyo_init_log+0xc8a/0x2140 [ 958.811680][ T5887] tomoyo_supervisor+0x302/0x13b0 [ 958.816751][ T5887] tomoyo_env_perm+0x191/0x200 [ 958.821533][ T5887] tomoyo_find_next_domain+0xec2/0x20b0 [ 958.827092][ T5887] tomoyo_bprm_check_security+0x12e/0x1d0 [ 958.832849][ T5887] security_bprm_check+0x1b9/0x1e0 [ 958.838001][ T5887] bprm_execve+0x810/0x1650 [ 958.842547][ T5887] do_execveat_common.isra.0+0x4a5/0x610 [ 958.848302][ T5887] page last free pid 1 tgid 1 stack trace: [ 958.854108][ T5887] __free_frozen_pages+0x69d/0xff0 [ 958.859245][ T5887] free_contig_range+0x135/0x3f0 [ 958.864205][ T5887] destroy_args+0x66f/0x830 [ 958.868741][ T5887] debug_vm_pgtable+0x130e/0x2d50 [ 958.873805][ T5887] do_one_initcall+0x123/0x6e0 [ 958.878610][ T5887] kernel_init_freeable+0x5c2/0x900 [ 958.883836][ T5887] kernel_init+0x1c/0x2b0 [ 958.888263][ T5887] ret_from_fork+0x48/0x80 [ 958.892697][ T5887] ret_from_fork_asm+0x1a/0x30 [ 958.897531][ T5887] [ 958.899859][ T5887] Memory state around the buggy address: [ 958.905498][ T5887] ffff88807e250400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.913572][ T5887] ffff88807e250480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.921642][ T5887] >ffff88807e250500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.929713][ T5887] ^ [ 958.933788][ T5887] ffff88807e250580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.941860][ T5887] ffff88807e250600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 958.949929][ T5887] ================================================================== [ 958.988587][ T55] Bluetooth: hci4: command tx timeout [ 959.079972][T11703] EXT4-fs (loop2): 1 truncate cleaned up [ 959.120094][T11703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.292273][ T5887] ================================================================== [ 959.300402][ T5887] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x205/0x250 [ 959.308071][ T5887] Read of size 8 at addr ffff88807e2504f8 by task kworker/1:5/5887 [ 959.315983][ T5887] [ 959.318325][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:5 Tainted: G B 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 959.318380][ T5887] Tainted: [B]=BAD_PAGE [ 959.318394][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 959.318420][ T5887] Workqueue: usb_hub_wq hub_event [ 959.318468][ T5887] Call Trace: [ 959.318480][ T5887] [ 959.318495][ T5887] dump_stack_lvl+0x116/0x1f0 [ 959.318545][ T5887] print_report+0xc3/0x670 [ 959.318600][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.318645][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.318688][ T5887] ? __phys_addr+0xc6/0x150 [ 959.318741][ T5887] ? hdm_disconnect+0x205/0x250 [ 959.318783][ T5887] kasan_report+0xe0/0x110 [ 959.318839][ T5887] ? hdm_disconnect+0x205/0x250 [ 959.318881][ T5887] hdm_disconnect+0x205/0x250 [ 959.318918][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 959.318976][ T5887] ? device_remove+0x96/0x170 [ 959.319010][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 959.319064][ T5887] device_remove+0x125/0x170 [ 959.319098][ T5887] device_release_driver_internal+0x44b/0x620 [ 959.319142][ T5887] ? __entry_text_end+0x1020c5/0x1020c9 [ 959.319189][ T5887] bus_remove_device+0x22f/0x420 [ 959.319258][ T5887] device_del+0x396/0x9f0 [ 959.319296][ T5887] ? __pfx_device_del+0x10/0x10 [ 959.319332][ T5887] ? __pfx___mutex_lock+0x10/0x10 [ 959.319385][ T5887] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 959.319421][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.319466][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.319509][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 959.319551][ T5887] usb_disable_device+0x355/0x7d0 [ 959.319601][ T5887] usb_disconnect+0x2e1/0x920 [ 959.319648][ T5887] hub_event+0x1c57/0x4fa0 [ 959.319708][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.319756][ T5887] ? __lock_acquire+0xaa4/0x1ba0 [ 959.319818][ T5887] ? __pfx_hub_event+0x10/0x10 [ 959.319861][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 959.319903][ T5887] ? debug_object_deactivate+0x1ec/0x3a0 [ 959.319937][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 959.319982][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.320028][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.320075][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.320118][ T5887] ? rcu_is_watching+0x12/0xc0 [ 959.320164][ T5887] process_one_work+0x9cf/0x1b70 [ 959.320209][ T5887] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 959.320252][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 959.320290][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.320339][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.320382][ T5887] ? assign_work+0x1a0/0x250 [ 959.320417][ T5887] worker_thread+0x6c8/0xf10 [ 959.320463][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 959.320501][ T5887] kthread+0x3c5/0x780 [ 959.320533][ T5887] ? __pfx_kthread+0x10/0x10 [ 959.320564][ T5887] ? __pfx_kthread+0x10/0x10 [ 959.320594][ T5887] ? __pfx_kthread+0x10/0x10 [ 959.320626][ T5887] ? __pfx_kthread+0x10/0x10 [ 959.320655][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 959.320699][ T5887] ? rcu_is_watching+0x12/0xc0 [ 959.320740][ T5887] ? __pfx_kthread+0x10/0x10 [ 959.320777][ T5887] ret_from_fork+0x48/0x80 [ 959.320811][ T5887] ? __pfx_kthread+0x10/0x10 [ 959.320843][ T5887] ret_from_fork_asm+0x1a/0x30 [ 959.320911][ T5887] [ 959.320923][ T5887] [ 959.642102][ T5887] Allocated by task 5887: [ 959.646458][ T5887] kasan_save_stack+0x33/0x60 [ 959.651172][ T5887] kasan_save_track+0x14/0x30 [ 959.655875][ T5887] __kasan_kmalloc+0xaa/0xb0 [ 959.660493][ T5887] hdm_probe+0xb3/0x19a0 [ 959.664765][ T5887] usb_probe_interface+0x303/0x9c0 [ 959.669909][ T5887] really_probe+0x241/0xa90 [ 959.674434][ T5887] __driver_probe_device+0x1de/0x440 [ 959.679749][ T5887] driver_probe_device+0x4c/0x1b0 [ 959.684790][ T5887] __device_attach_driver+0x1df/0x310 [ 959.690176][ T5887] bus_for_each_drv+0x159/0x1e0 [ 959.695060][ T5887] __device_attach+0x1e4/0x4b0 [ 959.699840][ T5887] bus_probe_device+0x17f/0x1c0 [ 959.704729][ T5887] device_add+0x1148/0x1a70 [ 959.709352][ T5887] usb_set_configuration+0x1187/0x1e20 [ 959.714844][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 959.720324][ T5887] usb_probe_device+0xef/0x3e0 [ 959.725118][ T5887] really_probe+0x241/0xa90 [ 959.729640][ T5887] __driver_probe_device+0x1de/0x440 [ 959.734945][ T5887] driver_probe_device+0x4c/0x1b0 [ 959.739998][ T5887] __device_attach_driver+0x1df/0x310 [ 959.745389][ T5887] bus_for_each_drv+0x159/0x1e0 [ 959.750270][ T5887] __device_attach+0x1e4/0x4b0 [ 959.755049][ T5887] bus_probe_device+0x17f/0x1c0 [ 959.759936][ T5887] device_add+0x1148/0x1a70 [ 959.764460][ T5887] usb_new_device+0xd07/0x1a20 [ 959.769246][ T5887] hub_event+0x2eb7/0x4fa0 [ 959.773697][ T5887] process_one_work+0x9cf/0x1b70 [ 959.778660][ T5887] worker_thread+0x6c8/0xf10 [ 959.783264][ T5887] kthread+0x3c5/0x780 [ 959.787375][ T5887] ret_from_fork+0x48/0x80 [ 959.791803][ T5887] ret_from_fork_asm+0x1a/0x30 [ 959.796602][ T5887] [ 959.798922][ T5887] Freed by task 5887: [ 959.802992][ T5887] kasan_save_stack+0x33/0x60 [ 959.807787][ T5887] kasan_save_track+0x14/0x30 [ 959.812500][ T5887] kasan_save_free_info+0x3b/0x60 [ 959.817547][ T5887] __kasan_slab_free+0x51/0x70 [ 959.822340][ T5887] kfree+0x2b6/0x4d0 [ 959.826255][ T5887] device_release+0xa4/0x240 [ 959.830901][ T5887] kobject_put+0x1e7/0x5a0 [ 959.835350][ T5887] device_unregister+0x2f/0xc0 [ 959.840311][ T5887] hdm_disconnect+0x10b/0x250 [ 959.845009][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 959.850244][ T5887] device_remove+0x125/0x170 [ 959.854863][ T5887] device_release_driver_internal+0x44b/0x620 [ 959.860961][ T5887] bus_remove_device+0x22f/0x420 [ 959.865948][ T5887] device_del+0x396/0x9f0 [ 959.870317][ T5887] usb_disable_device+0x355/0x7d0 [ 959.875401][ T5887] usb_disconnect+0x2e1/0x920 [ 959.880126][ T5887] hub_event+0x1c57/0x4fa0 [ 959.884576][ T5887] process_one_work+0x9cf/0x1b70 [ 959.889552][ T5887] worker_thread+0x6c8/0xf10 [ 959.894164][ T5887] kthread+0x3c5/0x780 [ 959.898251][ T5887] ret_from_fork+0x48/0x80 [ 959.902686][ T5887] ret_from_fork_asm+0x1a/0x30 [ 959.907484][ T5887] [ 959.909813][ T5887] The buggy address belongs to the object at ffff88807e250000 [ 959.909813][ T5887] which belongs to the cache kmalloc-8k of size 8192 [ 959.923978][ T5887] The buggy address is located 1272 bytes inside of [ 959.923978][ T5887] freed 8192-byte region [ffff88807e250000, ffff88807e252000) [ 959.937986][ T5887] [ 959.940312][ T5887] The buggy address belongs to the physical page: [ 959.946724][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e250 [ 959.955498][ T5887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 959.964017][ T5887] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 959.971582][ T5887] page_type: f5(slab) [ 959.975581][ T5887] raw: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 959.984180][ T5887] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 959.992781][ T5887] head: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 960.001559][ T5887] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 960.010350][ T5887] head: 00fff00000000003 ffffea0001f89401 00000000ffffffff 00000000ffffffff [ 960.019038][ T5887] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 960.027717][ T5887] page dumped because: kasan: bad access detected [ 960.034131][ T5887] page_owner tracks the page as allocated [ 960.039847][ T5887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (S10udev), ts 42775867148, free_ts 38784402322 [ 960.060036][ T5887] post_alloc_hook+0x181/0x1b0 [ 960.064834][ T5887] get_page_from_freelist+0x135c/0x3920 [ 960.070410][ T5887] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 960.076336][ T5887] alloc_pages_mpol+0x1fb/0x550 [ 960.081221][ T5887] new_slab+0x244/0x340 [ 960.085398][ T5887] ___slab_alloc+0xd9c/0x1940 [ 960.090095][ T5887] __slab_alloc.constprop.0+0x56/0xb0 [ 960.095498][ T5887] __kmalloc_cache_noprof+0xfb/0x3e0 [ 960.100816][ T5887] tomoyo_init_log+0xc8a/0x2140 [ 960.105692][ T5887] tomoyo_supervisor+0x302/0x13b0 [ 960.110749][ T5887] tomoyo_env_perm+0x191/0x200 [ 960.115533][ T5887] tomoyo_find_next_domain+0xec2/0x20b0 [ 960.121093][ T5887] tomoyo_bprm_check_security+0x12e/0x1d0 [ 960.126850][ T5887] security_bprm_check+0x1b9/0x1e0 [ 960.131999][ T5887] bprm_execve+0x810/0x1650 [ 960.136533][ T5887] do_execveat_common.isra.0+0x4a5/0x610 [ 960.142194][ T5887] page last free pid 1 tgid 1 stack trace: [ 960.148007][ T5887] __free_frozen_pages+0x69d/0xff0 [ 960.153141][ T5887] free_contig_range+0x135/0x3f0 [ 960.158152][ T5887] destroy_args+0x66f/0x830 [ 960.162692][ T5887] debug_vm_pgtable+0x130e/0x2d50 [ 960.167752][ T5887] do_one_initcall+0x123/0x6e0 [ 960.172553][ T5887] kernel_init_freeable+0x5c2/0x900 [ 960.177773][ T5887] kernel_init+0x1c/0x2b0 [ 960.182113][ T5887] ret_from_fork+0x48/0x80 [ 960.186544][ T5887] ret_from_fork_asm+0x1a/0x30 [ 960.191354][ T5887] [ 960.193709][ T5887] Memory state around the buggy address: [ 960.199342][ T5887] ffff88807e250380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 960.207412][ T5887] ffff88807e250400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 960.215483][ T5887] >ffff88807e250480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 960.223583][ T5887] ^ [ 960.231561][ T5887] ffff88807e250500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 960.239631][ T5887] ffff88807e250580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 960.247871][ T5887] ================================================================== [ 960.483814][T11703] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.483993][ T5887] ================================================================== [ 960.500917][ T5887] BUG: KASAN: slab-use-after-free in kobject_put+0x4ed/0x5a0 [ 960.508323][ T5887] Read of size 1 at addr ffff88807e25003c by task kworker/1:5/5887 [ 960.516235][ T5887] [ 960.518589][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:5 Tainted: G B 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 960.518643][ T5887] Tainted: [B]=BAD_PAGE [ 960.518656][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 960.518680][ T5887] Workqueue: usb_hub_wq hub_event [ 960.518724][ T5887] Call Trace: [ 960.518736][ T5887] [ 960.518749][ T5887] dump_stack_lvl+0x116/0x1f0 [ 960.518801][ T5887] print_report+0xc3/0x670 [ 960.518855][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.518899][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.518943][ T5887] ? __phys_addr+0xc6/0x150 [ 960.518995][ T5887] ? kobject_put+0x4ed/0x5a0 [ 960.519047][ T5887] kasan_report+0xe0/0x110 [ 960.519103][ T5887] ? kobject_put+0x4ed/0x5a0 [ 960.519162][ T5887] kobject_put+0x4ed/0x5a0 [ 960.519221][ T5887] put_device+0x1f/0x30 [ 960.519273][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 960.519329][ T5887] ? device_remove+0x96/0x170 [ 960.519362][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 960.519415][ T5887] device_remove+0x125/0x170 [ 960.519450][ T5887] device_release_driver_internal+0x44b/0x620 [ 960.519493][ T5887] ? __entry_text_end+0x1020c5/0x1020c9 [ 960.519544][ T5887] bus_remove_device+0x22f/0x420 [ 960.519607][ T5887] device_del+0x396/0x9f0 [ 960.519645][ T5887] ? __pfx_device_del+0x10/0x10 [ 960.519680][ T5887] ? __pfx___mutex_lock+0x10/0x10 [ 960.519733][ T5887] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 960.519768][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.519812][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.519856][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 960.519905][ T5887] usb_disable_device+0x355/0x7d0 [ 960.519956][ T5887] usb_disconnect+0x2e1/0x920 [ 960.520003][ T5887] hub_event+0x1c57/0x4fa0 [ 960.520064][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.520108][ T5887] ? __lock_acquire+0xaa4/0x1ba0 [ 960.520167][ T5887] ? __pfx_hub_event+0x10/0x10 [ 960.520210][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 960.520252][ T5887] ? debug_object_deactivate+0x1ec/0x3a0 [ 960.520286][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 960.520332][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.520378][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.520425][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.520469][ T5887] ? rcu_is_watching+0x12/0xc0 [ 960.520515][ T5887] process_one_work+0x9cf/0x1b70 [ 960.520563][ T5887] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 960.520607][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 960.520645][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.520695][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.520739][ T5887] ? assign_work+0x1a0/0x250 [ 960.520774][ T5887] worker_thread+0x6c8/0xf10 [ 960.520821][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 960.520859][ T5887] kthread+0x3c5/0x780 [ 960.520890][ T5887] ? __pfx_kthread+0x10/0x10 [ 960.520921][ T5887] ? __pfx_kthread+0x10/0x10 [ 960.520953][ T5887] ? __pfx_kthread+0x10/0x10 [ 960.520983][ T5887] ? __pfx_kthread+0x10/0x10 [ 960.521014][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 960.521056][ T5887] ? rcu_is_watching+0x12/0xc0 [ 960.521091][ T5887] ? __pfx_kthread+0x10/0x10 [ 960.521118][ T5887] ret_from_fork+0x48/0x80 [ 960.521146][ T5887] ? __pfx_kthread+0x10/0x10 [ 960.521172][ T5887] ret_from_fork_asm+0x1a/0x30 [ 960.521229][ T5887] [ 960.521239][ T5887] [ 960.845871][ T5887] Allocated by task 5887: [ 960.850203][ T5887] kasan_save_stack+0x33/0x60 [ 960.854915][ T5887] kasan_save_track+0x14/0x30 [ 960.859625][ T5887] __kasan_kmalloc+0xaa/0xb0 [ 960.864245][ T5887] hdm_probe+0xb3/0x19a0 [ 960.868595][ T5887] usb_probe_interface+0x303/0x9c0 [ 960.873748][ T5887] really_probe+0x241/0xa90 [ 960.878276][ T5887] __driver_probe_device+0x1de/0x440 [ 960.883587][ T5887] driver_probe_device+0x4c/0x1b0 [ 960.888633][ T5887] __device_attach_driver+0x1df/0x310 [ 960.894025][ T5887] bus_for_each_drv+0x159/0x1e0 [ 960.898932][ T5887] __device_attach+0x1e4/0x4b0 [ 960.903711][ T5887] bus_probe_device+0x17f/0x1c0 [ 960.908602][ T5887] device_add+0x1148/0x1a70 [ 960.913130][ T5887] usb_set_configuration+0x1187/0x1e20 [ 960.918617][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 960.924093][ T5887] usb_probe_device+0xef/0x3e0 [ 960.928882][ T5887] really_probe+0x241/0xa90 [ 960.933401][ T5887] __driver_probe_device+0x1de/0x440 [ 960.938704][ T5887] driver_probe_device+0x4c/0x1b0 [ 960.943748][ T5887] __device_attach_driver+0x1df/0x310 [ 960.949159][ T5887] bus_for_each_drv+0x159/0x1e0 [ 960.954049][ T5887] __device_attach+0x1e4/0x4b0 [ 960.958834][ T5887] bus_probe_device+0x17f/0x1c0 [ 960.963727][ T5887] device_add+0x1148/0x1a70 [ 960.968263][ T5887] usb_new_device+0xd07/0x1a20 [ 960.973052][ T5887] hub_event+0x2eb7/0x4fa0 [ 960.977578][ T5887] process_one_work+0x9cf/0x1b70 [ 960.982537][ T5887] worker_thread+0x6c8/0xf10 [ 960.987146][ T5887] kthread+0x3c5/0x780 [ 960.991228][ T5887] ret_from_fork+0x48/0x80 [ 960.995670][ T5887] ret_from_fork_asm+0x1a/0x30 [ 961.000566][ T5887] [ 961.002895][ T5887] Freed by task 5887: [ 961.006884][ T5887] kasan_save_stack+0x33/0x60 [ 961.011594][ T5887] kasan_save_track+0x14/0x30 [ 961.016295][ T5887] kasan_save_free_info+0x3b/0x60 [ 961.021348][ T5887] __kasan_slab_free+0x51/0x70 [ 961.026143][ T5887] kfree+0x2b6/0x4d0 [ 961.030057][ T5887] device_release+0xa4/0x240 [ 961.034679][ T5887] kobject_put+0x1e7/0x5a0 [ 961.039125][ T5887] device_unregister+0x2f/0xc0 [ 961.043904][ T5887] hdm_disconnect+0x10b/0x250 [ 961.048596][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 961.053829][ T5887] device_remove+0x125/0x170 [ 961.058443][ T5887] device_release_driver_internal+0x44b/0x620 [ 961.064622][ T5887] bus_remove_device+0x22f/0x420 [ 961.069603][ T5887] device_del+0x396/0x9f0 [ 961.073947][ T5887] usb_disable_device+0x355/0x7d0 [ 961.078994][ T5887] usb_disconnect+0x2e1/0x920 [ 961.083691][ T5887] hub_event+0x1c57/0x4fa0 [ 961.088129][ T5887] process_one_work+0x9cf/0x1b70 [ 961.093083][ T5887] worker_thread+0x6c8/0xf10 [ 961.097690][ T5887] kthread+0x3c5/0x780 [ 961.101771][ T5887] ret_from_fork+0x48/0x80 [ 961.106200][ T5887] ret_from_fork_asm+0x1a/0x30 [ 961.110998][ T5887] [ 961.113322][ T5887] The buggy address belongs to the object at ffff88807e250000 [ 961.113322][ T5887] which belongs to the cache kmalloc-8k of size 8192 [ 961.127401][ T5887] The buggy address is located 60 bytes inside of [ 961.127401][ T5887] freed 8192-byte region [ffff88807e250000, ffff88807e252000) [ 961.141217][ T5887] [ 961.143564][ T5887] The buggy address belongs to the physical page: [ 961.149997][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e250 [ 961.158782][ T5887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 961.167294][ T5887] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 961.174854][ T5887] page_type: f5(slab) [ 961.178847][ T5887] raw: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 961.187459][ T5887] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 961.196060][ T5887] head: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 961.204749][ T5887] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 961.213532][ T5887] head: 00fff00000000003 ffffea0001f89401 00000000ffffffff 00000000ffffffff [ 961.222218][ T5887] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 961.230897][ T5887] page dumped because: kasan: bad access detected [ 961.237311][ T5887] page_owner tracks the page as allocated [ 961.243027][ T5887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (S10udev), ts 42775867148, free_ts 38784402322 [ 961.263207][ T5887] post_alloc_hook+0x181/0x1b0 [ 961.268013][ T5887] get_page_from_freelist+0x135c/0x3920 [ 961.273608][ T5887] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 961.279540][ T5887] alloc_pages_mpol+0x1fb/0x550 [ 961.284427][ T5887] new_slab+0x244/0x340 [ 961.288690][ T5887] ___slab_alloc+0xd9c/0x1940 [ 961.293386][ T5887] __slab_alloc.constprop.0+0x56/0xb0 [ 961.298785][ T5887] __kmalloc_cache_noprof+0xfb/0x3e0 [ 961.304094][ T5887] tomoyo_init_log+0xc8a/0x2140 [ 961.308969][ T5887] tomoyo_supervisor+0x302/0x13b0 [ 961.314031][ T5887] tomoyo_env_perm+0x191/0x200 [ 961.318808][ T5887] tomoyo_find_next_domain+0xec2/0x20b0 [ 961.324718][ T5887] tomoyo_bprm_check_security+0x12e/0x1d0 [ 961.330476][ T5887] security_bprm_check+0x1b9/0x1e0 [ 961.335627][ T5887] bprm_execve+0x810/0x1650 [ 961.340176][ T5887] do_execveat_common.isra.0+0x4a5/0x610 [ 961.345837][ T5887] page last free pid 1 tgid 1 stack trace: [ 961.351649][ T5887] __free_frozen_pages+0x69d/0xff0 [ 961.356790][ T5887] free_contig_range+0x135/0x3f0 [ 961.361750][ T5887] destroy_args+0x66f/0x830 [ 961.366304][ T5887] debug_vm_pgtable+0x130e/0x2d50 [ 961.371370][ T5887] do_one_initcall+0x123/0x6e0 [ 961.376179][ T5887] kernel_init_freeable+0x5c2/0x900 [ 961.381409][ T5887] kernel_init+0x1c/0x2b0 [ 961.385783][ T5887] ret_from_fork+0x48/0x80 [ 961.390215][ T5887] ret_from_fork_asm+0x1a/0x30 [ 961.395014][ T5887] [ 961.397338][ T5887] Memory state around the buggy address: [ 961.402971][ T5887] ffff88807e24ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 961.411044][ T5887] ffff88807e24ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 961.419116][ T5887] >ffff88807e250000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 961.427186][ T5887] ^ [ 961.433092][ T5887] ffff88807e250080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 961.441242][ T5887] ffff88807e250100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 961.449361][ T5887] ================================================================== [ 961.536954][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 961.552103][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 961.562089][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 961.570605][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 961.578537][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 961.982639][ T5887] ================================================================== [ 961.990803][ T5887] BUG: KASAN: slab-use-after-free in kobject_put+0x84/0x5a0 [ 961.998196][ T5887] Write of size 4 at addr ffff88807e250038 by task kworker/1:5/5887 [ 962.006180][ T5887] [ 962.008511][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:5 Tainted: G B 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 962.008554][ T5887] Tainted: [B]=BAD_PAGE [ 962.008565][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 962.008587][ T5887] Workqueue: usb_hub_wq hub_event [ 962.008624][ T5887] Call Trace: [ 962.008634][ T5887] [ 962.008645][ T5887] dump_stack_lvl+0x116/0x1f0 [ 962.008687][ T5887] print_report+0xc3/0x670 [ 962.008731][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.008771][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.008805][ T5887] ? __phys_addr+0xc6/0x150 [ 962.008846][ T5887] ? kobject_put+0x84/0x5a0 [ 962.008887][ T5887] kasan_report+0xe0/0x110 [ 962.008930][ T5887] ? kobject_put+0x84/0x5a0 [ 962.008975][ T5887] kasan_check_range+0xef/0x1a0 [ 962.009006][ T5887] kobject_put+0x84/0x5a0 [ 962.009048][ T5887] put_device+0x1f/0x30 [ 962.009090][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 962.009134][ T5887] ? device_remove+0x96/0x170 [ 962.009162][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 962.009209][ T5887] device_remove+0x125/0x170 [ 962.009236][ T5887] device_release_driver_internal+0x44b/0x620 [ 962.009271][ T5887] ? __entry_text_end+0x1020c5/0x1020c9 [ 962.009308][ T5887] bus_remove_device+0x22f/0x420 [ 962.009358][ T5887] device_del+0x396/0x9f0 [ 962.009388][ T5887] ? __pfx_device_del+0x10/0x10 [ 962.009416][ T5887] ? __pfx___mutex_lock+0x10/0x10 [ 962.009456][ T5887] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 962.009484][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.009519][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.009553][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 962.009585][ T5887] usb_disable_device+0x355/0x7d0 [ 962.009624][ T5887] usb_disconnect+0x2e1/0x920 [ 962.009661][ T5887] hub_event+0x1c57/0x4fa0 [ 962.009708][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.009742][ T5887] ? __lock_acquire+0xaa4/0x1ba0 [ 962.009793][ T5887] ? __pfx_hub_event+0x10/0x10 [ 962.009826][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 962.009858][ T5887] ? debug_object_deactivate+0x1ec/0x3a0 [ 962.009886][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 962.009921][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.009957][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.009994][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.010027][ T5887] ? rcu_is_watching+0x12/0xc0 [ 962.010062][ T5887] process_one_work+0x9cf/0x1b70 [ 962.010098][ T5887] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 962.010132][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 962.010162][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.010199][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.010233][ T5887] ? assign_work+0x1a0/0x250 [ 962.010261][ T5887] worker_thread+0x6c8/0xf10 [ 962.010297][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 962.010327][ T5887] kthread+0x3c5/0x780 [ 962.010352][ T5887] ? __pfx_kthread+0x10/0x10 [ 962.010376][ T5887] ? __pfx_kthread+0x10/0x10 [ 962.010400][ T5887] ? __pfx_kthread+0x10/0x10 [ 962.010425][ T5887] ? __pfx_kthread+0x10/0x10 [ 962.010449][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 962.010482][ T5887] ? rcu_is_watching+0x12/0xc0 [ 962.010514][ T5887] ? __pfx_kthread+0x10/0x10 [ 962.010540][ T5887] ret_from_fork+0x48/0x80 [ 962.010566][ T5887] ? __pfx_kthread+0x10/0x10 [ 962.010591][ T5887] ret_from_fork_asm+0x1a/0x30 [ 962.010642][ T5887] [ 962.010652][ T5887] [ 962.341188][ T5887] Allocated by task 5887: [ 962.345557][ T5887] kasan_save_stack+0x33/0x60 [ 962.350271][ T5887] kasan_save_track+0x14/0x30 [ 962.354983][ T5887] __kasan_kmalloc+0xaa/0xb0 [ 962.359639][ T5887] hdm_probe+0xb3/0x19a0 [ 962.363905][ T5887] usb_probe_interface+0x303/0x9c0 [ 962.369054][ T5887] really_probe+0x241/0xa90 [ 962.373566][ T5887] __driver_probe_device+0x1de/0x440 [ 962.378859][ T5887] driver_probe_device+0x4c/0x1b0 [ 962.383915][ T5887] __device_attach_driver+0x1df/0x310 [ 962.389321][ T5887] bus_for_each_drv+0x159/0x1e0 [ 962.394207][ T5887] __device_attach+0x1e4/0x4b0 [ 962.399004][ T5887] bus_probe_device+0x17f/0x1c0 [ 962.403877][ T5887] device_add+0x1148/0x1a70 [ 962.408406][ T5887] usb_set_configuration+0x1187/0x1e20 [ 962.413877][ T5887] usb_generic_driver_probe+0xb1/0x110 [ 962.419343][ T5887] usb_probe_device+0xef/0x3e0 [ 962.424128][ T5887] really_probe+0x241/0xa90 [ 962.428633][ T5887] __driver_probe_device+0x1de/0x440 [ 962.433925][ T5887] driver_probe_device+0x4c/0x1b0 [ 962.438959][ T5887] __device_attach_driver+0x1df/0x310 [ 962.444338][ T5887] bus_for_each_drv+0x159/0x1e0 [ 962.449217][ T5887] __device_attach+0x1e4/0x4b0 [ 962.453982][ T5887] bus_probe_device+0x17f/0x1c0 [ 962.458849][ T5887] device_add+0x1148/0x1a70 [ 962.463359][ T5887] usb_new_device+0xd07/0x1a20 [ 962.468132][ T5887] hub_event+0x2eb7/0x4fa0 [ 962.472580][ T5887] process_one_work+0x9cf/0x1b70 [ 962.477533][ T5887] worker_thread+0x6c8/0xf10 [ 962.482121][ T5887] kthread+0x3c5/0x780 [ 962.486185][ T5887] ret_from_fork+0x48/0x80 [ 962.490604][ T5887] ret_from_fork_asm+0x1a/0x30 [ 962.495387][ T5887] [ 962.497704][ T5887] Freed by task 5887: [ 962.501677][ T5887] kasan_save_stack+0x33/0x60 [ 962.506384][ T5887] kasan_save_track+0x14/0x30 [ 962.511091][ T5887] kasan_save_free_info+0x3b/0x60 [ 962.516123][ T5887] __kasan_slab_free+0x51/0x70 [ 962.520905][ T5887] kfree+0x2b6/0x4d0 [ 962.524829][ T5887] device_release+0xa4/0x240 [ 962.529653][ T5887] kobject_put+0x1e7/0x5a0 [ 962.534109][ T5887] device_unregister+0x2f/0xc0 [ 962.538881][ T5887] hdm_disconnect+0x10b/0x250 [ 962.543587][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 962.548827][ T5887] device_remove+0x125/0x170 [ 962.553423][ T5887] device_release_driver_internal+0x44b/0x620 [ 962.559537][ T5887] bus_remove_device+0x22f/0x420 [ 962.564603][ T5887] device_del+0x396/0x9f0 [ 962.568934][ T5887] usb_disable_device+0x355/0x7d0 [ 962.573967][ T5887] usb_disconnect+0x2e1/0x920 [ 962.578682][ T5887] hub_event+0x1c57/0x4fa0 [ 962.583145][ T5887] process_one_work+0x9cf/0x1b70 [ 962.588130][ T5887] worker_thread+0x6c8/0xf10 [ 962.592748][ T5887] kthread+0x3c5/0x780 [ 962.596836][ T5887] ret_from_fork+0x48/0x80 [ 962.601262][ T5887] ret_from_fork_asm+0x1a/0x30 [ 962.606063][ T5887] [ 962.608396][ T5887] The buggy address belongs to the object at ffff88807e250000 [ 962.608396][ T5887] which belongs to the cache kmalloc-8k of size 8192 [ 962.622465][ T5887] The buggy address is located 56 bytes inside of [ 962.622465][ T5887] freed 8192-byte region [ffff88807e250000, ffff88807e252000) [ 962.636285][ T5887] [ 962.638616][ T5887] The buggy address belongs to the physical page: [ 962.645020][ T5887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e250 [ 962.653791][ T5887] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 962.662296][ T5887] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 962.669842][ T5887] page_type: f5(slab) [ 962.673823][ T5887] raw: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 962.682424][ T5887] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 962.691284][ T5887] head: 00fff00000000040 ffff88801b442280 ffffea0001b15c00 dead000000000004 [ 962.700058][ T5887] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 962.708741][ T5887] head: 00fff00000000003 ffffea0001f89401 00000000ffffffff 00000000ffffffff [ 962.717445][ T5887] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 962.726114][ T5887] page dumped because: kasan: bad access detected [ 962.732551][ T5887] page_owner tracks the page as allocated [ 962.738259][ T5887] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (S10udev), ts 42775867148, free_ts 38784402322 [ 962.758426][ T5887] post_alloc_hook+0x181/0x1b0 [ 962.763213][ T5887] get_page_from_freelist+0x135c/0x3920 [ 962.768779][ T5887] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 962.774690][ T5887] alloc_pages_mpol+0x1fb/0x550 [ 962.779569][ T5887] new_slab+0x244/0x340 [ 962.783738][ T5887] ___slab_alloc+0xd9c/0x1940 [ 962.788455][ T5887] __slab_alloc.constprop.0+0x56/0xb0 [ 962.793852][ T5887] __kmalloc_cache_noprof+0xfb/0x3e0 [ 962.799149][ T5887] tomoyo_init_log+0xc8a/0x2140 [ 962.804029][ T5887] tomoyo_supervisor+0x302/0x13b0 [ 962.809112][ T5887] tomoyo_env_perm+0x191/0x200 [ 962.813883][ T5887] tomoyo_find_next_domain+0xec2/0x20b0 [ 962.819448][ T5887] tomoyo_bprm_check_security+0x12e/0x1d0 [ 962.825205][ T5887] security_bprm_check+0x1b9/0x1e0 [ 962.830347][ T5887] bprm_execve+0x810/0x1650 [ 962.834864][ T5887] do_execveat_common.isra.0+0x4a5/0x610 [ 962.840552][ T5887] page last free pid 1 tgid 1 stack trace: [ 962.846355][ T5887] __free_frozen_pages+0x69d/0xff0 [ 962.851490][ T5887] free_contig_range+0x135/0x3f0 [ 962.856591][ T5887] destroy_args+0x66f/0x830 [ 962.861219][ T5887] debug_vm_pgtable+0x130e/0x2d50 [ 962.866295][ T5887] do_one_initcall+0x123/0x6e0 [ 962.871187][ T5887] kernel_init_freeable+0x5c2/0x900 [ 962.876405][ T5887] kernel_init+0x1c/0x2b0 [ 962.880747][ T5887] ret_from_fork+0x48/0x80 [ 962.885195][ T5887] ret_from_fork_asm+0x1a/0x30 [ 962.890073][ T5887] [ 962.892405][ T5887] Memory state around the buggy address: [ 962.898041][ T5887] ffff88807e24ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 962.906115][ T5887] ffff88807e24ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 962.914215][ T5887] >ffff88807e250000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 962.922282][ T5887] ^ [ 962.928173][ T5887] ffff88807e250080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 962.936237][ T5887] ffff88807e250100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 962.944311][ T5887] ================================================================== [ 962.971678][ T5887] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 962.979456][ T5887] CPU: 1 UID: 0 PID: 5887 Comm: kworker/1:5 Tainted: G B 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 962.993134][ T5887] Tainted: [B]=BAD_PAGE [ 962.997309][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 963.007397][ T5887] Workqueue: usb_hub_wq hub_event [ 963.012487][ T5887] Call Trace: [ 963.015783][ T5887] [ 963.018731][ T5887] dump_stack_lvl+0x3d/0x1f0 [ 963.023379][ T5887] panic+0x71c/0x800 [ 963.027330][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.033009][ T5887] ? __pfx_panic+0x10/0x10 [ 963.037503][ T5887] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 963.043610][ T5887] ? kobject_put+0x84/0x5a0 [ 963.048252][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.054014][ T5887] ? preempt_schedule_common+0x44/0xc0 [ 963.059524][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.065192][ T5887] ? preempt_schedule_thunk+0x16/0x30 [ 963.070702][ T5887] ? kobject_put+0x84/0x5a0 [ 963.075253][ T5887] end_report+0x159/0x170 [ 963.079623][ T5887] kasan_report+0xee/0x110 [ 963.084086][ T5887] ? kobject_put+0x84/0x5a0 [ 963.088668][ T5887] kasan_check_range+0xef/0x1a0 [ 963.093541][ T5887] kobject_put+0x84/0x5a0 [ 963.097911][ T5887] put_device+0x1f/0x30 [ 963.102114][ T5887] usb_unbind_interface+0x1dd/0x9a0 [ 963.107577][ T5887] ? device_remove+0x96/0x170 [ 963.112286][ T5887] ? __pfx_usb_unbind_interface+0x10/0x10 [ 963.118057][ T5887] device_remove+0x125/0x170 [ 963.122719][ T5887] device_release_driver_internal+0x44b/0x620 [ 963.128815][ T5887] ? __entry_text_end+0x1020c5/0x1020c9 [ 963.134403][ T5887] bus_remove_device+0x22f/0x420 [ 963.139402][ T5887] device_del+0x396/0x9f0 [ 963.143757][ T5887] ? __pfx_device_del+0x10/0x10 [ 963.148631][ T5887] ? __pfx___mutex_lock+0x10/0x10 [ 963.153698][ T5887] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 963.159439][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.165146][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.170830][ T5887] ? do_raw_spin_lock+0x12c/0x2b0 [ 963.175895][ T5887] usb_disable_device+0x355/0x7d0 [ 963.180972][ T5887] usb_disconnect+0x2e1/0x920 [ 963.185698][ T5887] hub_event+0x1c57/0x4fa0 [ 963.190169][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.195868][ T5887] ? __lock_acquire+0xaa4/0x1ba0 [ 963.200888][ T5887] ? __pfx_hub_event+0x10/0x10 [ 963.205708][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 963.211206][ T5887] ? debug_object_deactivate+0x1ec/0x3a0 [ 963.216876][ T5887] ? __entry_text_end+0xfdfc5/0x1020c9 [ 963.222395][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.228068][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.233739][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.239400][ T5887] ? rcu_is_watching+0x12/0xc0 [ 963.244201][ T5887] process_one_work+0x9cf/0x1b70 [ 963.249171][ T5887] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 963.255706][ T5887] ? __pfx_process_one_work+0x10/0x10 [ 963.261109][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.266778][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.272440][ T5887] ? assign_work+0x1a0/0x250 [ 963.277056][ T5887] worker_thread+0x6c8/0xf10 [ 963.281679][ T5887] ? __pfx_worker_thread+0x10/0x10 [ 963.286816][ T5887] kthread+0x3c5/0x780 [ 963.290908][ T5887] ? __pfx_kthread+0x10/0x10 [ 963.295522][ T5887] ? __pfx_kthread+0x10/0x10 [ 963.300127][ T5887] ? __pfx_kthread+0x10/0x10 [ 963.304736][ T5887] ? __pfx_kthread+0x10/0x10 [ 963.309342][ T5887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.315001][ T5887] ? rcu_is_watching+0x12/0xc0 [ 963.319801][ T5887] ? __pfx_kthread+0x10/0x10 [ 963.324419][ T5887] ret_from_fork+0x48/0x80 [ 963.328857][ T5887] ? __pfx_kthread+0x10/0x10 [ 963.333464][ T5887] ret_from_fork_asm+0x1a/0x30 [ 963.338289][ T5887] [ 963.341594][ T5887] Kernel Offset: disabled [ 963.345940][ T5887] Rebooting in 86400 seconds..