last executing test programs: 28m6.852408248s ago: executing program 32 (id=73): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 24m22.440505876s ago: executing program 33 (id=549): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0xe, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 20m57.685893252s ago: executing program 6 (id=1111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 20m53.234856201s ago: executing program 6 (id=1116): syz_open_dev$dri(0x0, 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) 20m50.449598585s ago: executing program 6 (id=1122): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 20m49.532134435s ago: executing program 6 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 20m33.118430732s ago: executing program 34 (id=1124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 16m27.934832469s ago: executing program 35 (id=1722): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 13m46.774601403s ago: executing program 3 (id=2065): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 13m45.289660971s ago: executing program 3 (id=2069): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x57de, 0x0, 0x0, 0x0, 0x0) 13m40.301978625s ago: executing program 3 (id=2078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) 13m36.749651306s ago: executing program 3 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x555) semtimedop(r3, &(0x7f00000002c0)=[{0x2, 0x97a, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 13m34.821545388s ago: executing program 3 (id=2087): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 13m32.093977073s ago: executing program 3 (id=2091): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='tlb_flush\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13m18.268389986s ago: executing program 36 (id=2085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 13m14.803818258s ago: executing program 37 (id=2091): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='tlb_flush\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12m9.65684277s ago: executing program 38 (id=2169): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) io_uring_setup(0x5f48, &(0x7f00000001c0)={0x0, 0x0, 0x2}) 11m41.381472853s ago: executing program 8 (id=2229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11m39.214107996s ago: executing program 8 (id=2243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd=r3, 0x0, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 11m35.347606965s ago: executing program 8 (id=2246): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) 11m31.997225876s ago: executing program 8 (id=2242): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) pipe2$9p(&(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065efff0100000008003950323030302e4c"], 0x15) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$key(0xf, 0x3, 0x2) r2 = fsmount(r1, 0x0, 0x3) syz_clone3(&(0x7f0000001000)={0x201888080, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_clone(0x7821000, 0x0, 0x1d, 0x0, 0x0, 0x0) 11m29.657009401s ago: executing program 8 (id=2250): close(0x3) r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xe}], 0x2, 0x32000, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) 11m26.182617639s ago: executing program 8 (id=2257): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x900, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x800001c0, 0x0, 0x0, 0x800001f0, 0x80000220], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB]}, 0x78) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11m8.787953863s ago: executing program 39 (id=2257): openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x900, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) socket(0x2, 0x80805, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x800001c0, 0x0, 0x0, 0x800001f0, 0x80000220], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB]}, 0x78) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8m5.880953529s ago: executing program 6 (id=2190): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001070000000000000409000400000027e72888307ee40dd7b35c076bd19ad42d517be0a3af2bd9ed8ddc9d8f5e051215f64b020698f58a4257e4"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x60) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') utimes(&(0x7f0000000180)='./file0\x00', 0x0) 8m3.254904832s ago: executing program 6 (id=2504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 7m45.572988576s ago: executing program 40 (id=2504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 7m41.371320073s ago: executing program 5 (id=2536): socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x2, 0x5ffe, &(0x7f0000001b00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 7m38.41420872s ago: executing program 9 (id=2541): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@private2, @in=@multicast2}}, {{}, 0x0, @in=@local}}, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) 7m36.227226599s ago: executing program 5 (id=2544): socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x88, 0x1300) 7m35.917114022s ago: executing program 9 (id=2546): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xb5) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 7m34.72672203s ago: executing program 5 (id=2548): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x80000000, 0x100001, 0x0, 0x0, 0x0, 0x6}) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r2, 0x2def, 0x0, 0xe, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4c885) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1002) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$rds(r5, &(0x7f00000019c0)={&(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/34, 0x22}, {&(0x7f0000001a00)=""/202, 0xca}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/248, 0xf8}, {0x0}, {&(0x7f0000000340)}, {&(0x7f0000000440)=""/23, 0x17}], 0x8, &(0x7f0000000500)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001940)=""/83, 0x53}, &(0x7f0000000480), 0x1f}}], 0x30}, 0x20000000) 7m31.989498634s ago: executing program 5 (id=2553): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x10, 0x1, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0x80000001, 0x10000, 0x9, 0x2d9, 0x4, 0x40000003, 0xc5, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x862, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x7, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0xc, 0x3a67, 0x7f, 0x1aac, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x4002, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x7, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0xc67d, 0x7, 0xffffffffffffff92, 0x100000001, 0x5, 0xe39, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x5, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 7m31.90299718s ago: executing program 9 (id=2555): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) 7m29.569000905s ago: executing program 5 (id=2558): close(0x3) r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r1, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xe}], 0x2, 0x32000, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) 7m28.258148723s ago: executing program 9 (id=2559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000a5000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 7m26.773444286s ago: executing program 9 (id=2562): socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc3afe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) 7m24.21467939s ago: executing program 5 (id=2565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) 7m23.968097124s ago: executing program 9 (id=2566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x2, 0x106}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0xa, 0x8001}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7m7.268491381s ago: executing program 41 (id=2565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) 7m7.084913201s ago: executing program 42 (id=2566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x2, 0x106}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x800, 0x101, 0x1, 0x1, 0x57, 0x7, 0x9, 0xa, 0x8001}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m0.847305469s ago: executing program 0 (id=3102): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r1, 0x2def, 0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4c885) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1002) io_submit(r2, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 58.497337702s ago: executing program 0 (id=3105): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_LINK_POLICY={{0x1}, 0x5}}}, 0x7) 57.081381503s ago: executing program 0 (id=3108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3}, 0x18) mkdir(0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x400000, 0x0) 55.705618538s ago: executing program 0 (id=3109): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x801) symlink(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) unshare(0x8040480) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) 54.617999336s ago: executing program 0 (id=3110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) syz_open_dev$vbi(0x0, 0x2, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 48.161499807s ago: executing program 0 (id=3121): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000007ff) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000799000/0x1000)=nil, 0x1000, 0x100000c, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) setrlimit(0xf, &(0x7f0000000140)={0x2e9e, 0x72e4}) process_vm_writev(0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) 47.66644658s ago: executing program 43 (id=3121): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000007ff) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000799000/0x1000)=nil, 0x1000, 0x100000c, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) setrlimit(0xf, &(0x7f0000000140)={0x2e9e, 0x72e4}) process_vm_writev(0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, r2, 0x0, 0x8000002b) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) 31.02257861s ago: executing program 1 (id=3146): r0 = open(&(0x7f0000022ff6)='./file0\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) r6 = semget$private(0x0, 0x5, 0x0) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000340)=""/219) 28.680395236s ago: executing program 1 (id=3151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200), 0xc) 27.169587843s ago: executing program 1 (id=3153): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00"/11], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) prctl$PR_SET_SECCOMP(0xd, 0x0, 0x0) 23.574991152s ago: executing program 1 (id=3160): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x801) symlink(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) unshare(0x8040480) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x82000, 0x0, 0x0, 0x0, 0x0, 0x0) 22.232960118s ago: executing program 1 (id=3164): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@resgid}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pselect6(0x0, 0x0, &(0x7f0000000200)={0x9, 0x8, 0x6, 0xc65, 0x7, 0x3, 0x1a, 0x2}, &(0x7f0000000280)={0x6, 0x1, 0x2, 0x1e7, 0x2, 0x8, 0x2, 0x2}, &(0x7f00000002c0), 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 15.700964139s ago: executing program 2 (id=3173): socket$inet6_udplite(0xa, 0x2, 0x88) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000a00), 0x1, 0x50f3, &(0x7f000000a2c0)="$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") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe77, 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_nanosleep(0x0, 0x0, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYRES64], 0x1, 0x4703, &(0x7f0000004800)="$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") 15.698325154s ago: executing program 1 (id=3174): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000001"]) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) 12.837498673s ago: executing program 44 (id=3174): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000001"]) ioctl$SG_SET_TIMEOUT(r4, 0x2201, 0x0) 12.804351187s ago: executing program 4 (id=3177): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) close(r0) 11.401000162s ago: executing program 4 (id=3179): socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0x40, &(0x7f0000000380)=ANY=[], 0x2, 0x5ffe, &(0x7f0000001b00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000007c0)={0x52, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 11.052324088s ago: executing program 2 (id=3180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) 9.469685748s ago: executing program 7 (id=3181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x8, 0x1000) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r3, 0x105, 0x4800003a, r4, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) r5 = fsopen(0x0, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) fsmount(r5, 0x0, 0xf) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 9.330375891s ago: executing program 2 (id=3183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xc140, 0xd4, {0x0}, {0xee01}, 0xe}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) pipe(&(0x7f0000000200)) io_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) 8.086922256s ago: executing program 7 (id=3184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x181240, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000040)=""/179, 0xb3}], 0x1, 0x3ca, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000100)=0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x55201, 0x8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000000)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x20) 6.795740438s ago: executing program 7 (id=3185): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) init_module(&(0x7f0000000340)=ANY=[@ANYBLOB], 0x78, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6.785441403s ago: executing program 2 (id=3186): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r0, r0, 0x0, 0x40008) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008c}, 0x4004000) accept4(r3, 0x0, 0x0, 0x80800) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x13, 0x1b, 0xb, 0x46, 0x4, 0xf5, 0x1}) 6.693796337s ago: executing program 4 (id=3187): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) shutdown(0xffffffffffffffff, 0x1) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1008, &(0x7f0000000340)={[{@errors_remount}]}, 0x5, 0x521, &(0x7f0000000ac0)="$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") rename(0x0, &(0x7f00000001c0)='./bus/file0\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.836731418s ago: executing program 4 (id=3188): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$key(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x4004808) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) 5.739421336s ago: executing program 2 (id=3189): syz_io_uring_setup(0x3dac, &(0x7f0000005b80)={0x0, 0xe876, 0x10, 0x2000040, 0x350}, &(0x7f0000000140), &(0x7f0000000080)) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x9f) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 4.398142507s ago: executing program 4 (id=3190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r3, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 1.254158591s ago: executing program 4 (id=3193): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x525a41, 0x0) keyctl$clear(0x7, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x4, &(0x7f0000000300)) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x5, 0x2b0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r3, &(0x7f0000004b80)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) 1.253096511s ago: executing program 7 (id=3202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmdt(0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000040)={0x0, 0x0, 0x7}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_emit_vhci(0x0, 0x7) 0s ago: executing program 7 (id=3194): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCSETSW2(r3, 0x5425, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): 2750][T14863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1275.197752][ T6059] bridge_slave_0: left allmulticast mode [ 1275.233085][ T6059] bridge_slave_0: left promiscuous mode [ 1275.324629][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.819002][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.846455][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.867009][ T6059] bond0 (unregistering): Released all slaves [ 1278.413561][T14881] SET target dimension over the limit! [ 1279.172563][T14891] loop9: detected capacity change from 0 to 8 [ 1279.184609][T14891] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1279.234877][T14891] cramfs: Error -3 while decompressing! [ 1279.240874][T14891] cramfs: ffffffff9aebcee2(26)->ffff8880b8453000(4096) [ 1279.248205][T14891] cramfs: Error -3 while decompressing! [ 1279.253863][T14891] cramfs: ffffffff9aebcefc(16)->ffff888040e19000(4096) [ 1279.261370][T14891] cramfs: Error -3 while decompressing! [ 1279.267020][T14891] cramfs: ffffffff9aebcee2(26)->ffff8880b8453000(4096) [ 1279.324146][ T30] audit: type=1800 audit(1752767360.590:190): pid=14891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2435" name="file2" dev="loop9" ino=348 res=0 errno=0 [ 1279.944310][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1280.034166][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.118927][ T6059] bond0 (unregistering): Released all slaves [ 1280.373033][ T9106] libceph: connect (1)[c::]:6789 error -101 [ 1280.414121][ T9106] libceph: mon0 (1)[c::]:6789 connect error [ 1280.442867][T14898] ceph: No mds server is up or the cluster is laggy [ 1280.468201][ T9106] libceph: connect (1)[c::]:6789 error -101 [ 1280.495642][ T9106] libceph: mon0 (1)[c::]:6789 connect error [ 1280.863916][ T9106] libceph: connect (1)[c::]:6789 error -101 [ 1280.951897][ T9106] libceph: mon0 (1)[c::]:6789 connect error [ 1283.460643][ T6059] hsr_slave_0: left promiscuous mode [ 1283.477120][ T6059] hsr_slave_1: left promiscuous mode [ 1283.498552][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.517326][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.565441][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.593288][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.121787][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 1286.234522][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 1289.760477][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 1290.845397][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 1292.463511][T14626] hsr_slave_0: entered promiscuous mode [ 1292.485592][T14626] hsr_slave_1: entered promiscuous mode [ 1292.532003][T14657] hsr_slave_0: entered promiscuous mode [ 1292.538951][T14657] hsr_slave_1: entered promiscuous mode [ 1292.545423][T14657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1292.553088][T14657] Cannot create hsr debugfs directory [ 1292.568808][T14619] hsr_slave_0: entered promiscuous mode [ 1292.575959][T14619] hsr_slave_1: entered promiscuous mode [ 1292.582194][T14619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1292.599576][T14619] Cannot create hsr debugfs directory [ 1293.008396][ T9105] libceph: connect (1)[c::]:6789 error -101 [ 1293.023573][T14961] ceph: No mds server is up or the cluster is laggy [ 1293.137472][ T9105] libceph: mon0 (1)[c::]:6789 connect error [ 1293.521506][ T9105] libceph: connect (1)[c::]:6789 error -101 [ 1293.632062][ T9105] libceph: mon0 (1)[c::]:6789 connect error [ 1293.920585][T14958] program syz.1.2463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1294.896759][ T9105] libceph: connect (1)[c::]:6789 error -101 [ 1294.955337][ T9105] libceph: mon0 (1)[c::]:6789 connect error [ 1298.115991][T14297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1298.125733][T14297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1298.168703][T14297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1298.179201][T14657] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.198265][T14297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1298.214375][T14297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1298.402019][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1298.424537][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1298.433903][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1298.444504][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1298.452260][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1298.486721][T14657] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.828036][T14657] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.318576][T14996] loop1: detected capacity change from 0 to 40427 [ 1300.495476][T14297] Bluetooth: hci3: command tx timeout [ 1300.937731][T14297] Bluetooth: hci6: command tx timeout [ 1301.008430][T14996] F2FS-fs (loop1): invalid crc value [ 1301.202662][T14996] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1301.294775][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1301.384791][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1301.399934][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1301.410592][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1301.419480][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1301.438381][T14657] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.507897][ T6059] bridge_slave_1: left allmulticast mode [ 1301.528564][ T6059] bridge_slave_1: left promiscuous mode [ 1301.536068][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.553357][ T6059] bridge_slave_0: left allmulticast mode [ 1301.560184][ T6059] bridge_slave_0: left promiscuous mode [ 1301.566041][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.615833][ T6059] bridge_slave_1: left allmulticast mode [ 1301.621665][ T6059] bridge_slave_1: left promiscuous mode [ 1301.627376][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.637012][ T6059] bridge_slave_0: left allmulticast mode [ 1301.646597][ T6059] bridge_slave_0: left promiscuous mode [ 1301.652308][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.459358][T13500] syz-executor: attempt to access beyond end of device [ 1302.459358][T13500] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1302.495879][T13500] CPU: 0 UID: 0 PID: 13500 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1302.495938][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1302.495961][T13500] Call Trace: [ 1302.495972][T13500] [ 1302.495987][T13500] dump_stack_lvl+0x16c/0x1f0 [ 1302.496039][T13500] f2fs_handle_critical_error+0x621/0x9f0 [ 1302.496102][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.496149][T13500] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1302.496208][T13500] f2fs_write_end_io+0x785/0xc20 [ 1302.496275][T13500] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1302.496341][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.496397][T13500] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1302.496461][T13500] bio_endio+0x70d/0x850 [ 1302.496512][T13500] submit_bio_noacct+0x56d/0x1eb0 [ 1302.496580][T13500] __submit_merged_bio+0x33c/0x770 [ 1302.496649][T13500] __submit_merged_write_cond+0x319/0x3f0 [ 1302.496723][T13500] f2fs_write_cache_pages+0x2067/0x2570 [ 1302.496791][T13500] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1302.496845][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.496891][T13500] ? __lock_acquire+0x622/0x1c90 [ 1302.496965][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.497104][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.497151][T13500] ? mod_memcg_lruvec_state+0x394/0x610 [ 1302.497204][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.497261][T13500] f2fs_write_data_pages+0x4ad/0xd90 [ 1302.497310][T13500] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1302.497349][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.497409][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.497461][T13500] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1302.497506][T13500] do_writepages+0x27a/0x600 [ 1302.497558][T13500] ? __pfx_do_writepages+0x10/0x10 [ 1302.497599][T13500] ? do_raw_spin_unlock+0x172/0x230 [ 1302.497643][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.497690][T13500] ? _raw_spin_unlock+0x28/0x50 [ 1302.497753][T13500] filemap_fdatawrite_wbc+0x104/0x160 [ 1302.497802][T13500] __filemap_fdatawrite_range+0xb2/0xf0 [ 1302.497860][T13500] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 1302.497976][T13500] ? find_held_lock+0x2b/0x80 [ 1302.498034][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.498082][T13500] ? do_raw_spin_unlock+0x172/0x230 [ 1302.498130][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.498183][T13500] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 1302.498250][T13500] block_operations+0x2a3/0xfd0 [ 1302.498290][T13500] ? __pfx_stack_trace_save+0x10/0x10 [ 1302.498352][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.498404][T13500] ? __pfx_block_operations+0x10/0x10 [ 1302.498501][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.498551][T13500] ? down_write+0x14d/0x200 [ 1302.498594][T13500] ? __pfx_down_write+0x10/0x10 [ 1302.498640][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.498685][T13500] ? rcu_is_watching+0x12/0xc0 [ 1302.498742][T13500] f2fs_write_checkpoint+0x2b8/0x4c60 [ 1302.498797][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.498844][T13500] ? kfree+0x2b4/0x4d0 [ 1302.498883][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.498928][T13500] ? lockdep_hardirqs_on+0x7c/0x110 [ 1302.498963][T13500] ? f2fs_stop_gc_thread+0x79/0xd0 [ 1302.499022][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.499080][T13500] kill_f2fs_super+0x3c2/0x470 [ 1302.499125][T13500] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1302.499168][T13500] ? lockdep_hardirqs_on+0x7c/0x110 [ 1302.499227][T13500] deactivate_locked_super+0xc1/0x1a0 [ 1302.499278][T13500] deactivate_super+0xde/0x100 [ 1302.499329][T13500] cleanup_mnt+0x225/0x450 [ 1302.499389][T13500] task_work_run+0x150/0x240 [ 1302.499433][T13500] ? __pfx_task_work_run+0x10/0x10 [ 1302.499473][T13500] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1302.499522][T13500] ? __pfx___x64_sys_umount+0x10/0x10 [ 1302.499592][T13500] exit_to_user_mode_loop+0xeb/0x110 [ 1302.499640][T13500] do_syscall_64+0x3f6/0x4c0 [ 1302.499684][T13500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.499723][T13500] RIP: 0033:0x7fbe0c58fc57 [ 1302.499752][T13500] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1302.499793][T13500] RSP: 002b:00007ffd91ba6398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1302.499829][T13500] RAX: 0000000000000000 RBX: 00007fbe0c610a8d RCX: 00007fbe0c58fc57 [ 1302.499855][T13500] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd91ba6450 [ 1302.499879][T13500] RBP: 00007ffd91ba6450 R08: 0000000000000000 R09: 0000000000000000 [ 1302.499903][T13500] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd91ba74e0 [ 1302.499927][T13500] R13: 00007fbe0c610a8d R14: 000000000012f7f4 R15: 00007ffd91ba7520 [ 1302.499978][T13500] [ 1303.894842][ T5866] Bluetooth: hci6: command tx timeout [ 1303.937131][T14279] Bluetooth: hci1: command tx timeout [ 1303.959180][T14297] Bluetooth: hci3: command tx timeout [ 1304.047320][T13500] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1304.618371][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1304.637098][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.648579][ T6059] bond0 (unregistering): Released all slaves [ 1305.781369][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.807108][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.880783][ T6059] bond0 (unregistering): Released all slaves [ 1306.519895][T14297] Bluetooth: hci1: command tx timeout [ 1306.525660][T14297] Bluetooth: hci6: command tx timeout [ 1306.531375][T14297] Bluetooth: hci3: command tx timeout [ 1307.608863][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.676659][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.727547][T14297] Bluetooth: hci6: command tx timeout [ 1308.727565][T14279] Bluetooth: hci3: command tx timeout [ 1308.733114][ T5866] Bluetooth: hci1: command tx timeout [ 1310.997540][ T5866] Bluetooth: hci1: command tx timeout [ 1311.083708][ T6059] hsr_slave_0: left promiscuous mode [ 1311.145927][ T6059] hsr_slave_1: left promiscuous mode [ 1311.176732][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.215780][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.248498][ T6059] hsr_slave_0: left promiscuous mode [ 1311.268087][ T6059] hsr_slave_1: left promiscuous mode [ 1312.282590][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.379528][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.396535][T15059] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1317.884522][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 1318.290011][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 1323.974746][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 1324.014975][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 1324.751268][T14279] Bluetooth: hci1: command 0x0405 tx timeout [ 1324.782496][T15002] chnl_net:caif_netlink_parms(): no params data found [ 1324.803233][T14977] chnl_net:caif_netlink_parms(): no params data found [ 1325.277057][T14297] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 1325.730520][T14279] Bluetooth: hci2: command 0x0406 tx timeout [ 1328.583111][T14979] chnl_net:caif_netlink_parms(): no params data found [ 1329.861850][T15150] loop1: detected capacity change from 0 to 32768 [ 1330.837414][T15150] lmLogOpen: exit(-6) [ 1330.841710][T15150] jfs_mount_rw failed, return code = -6 [ 1333.022417][T15002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.031041][T15002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.038340][T15002] bridge_slave_0: entered allmulticast mode [ 1333.048620][T15002] bridge_slave_0: entered promiscuous mode [ 1333.344565][T14977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.353798][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.364628][T14977] bridge_slave_0: entered allmulticast mode [ 1333.384480][T14977] bridge_slave_0: entered promiscuous mode [ 1338.492306][T15002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.573735][T15002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.593121][T15002] bridge_slave_1: entered allmulticast mode [ 1338.612277][T15002] bridge_slave_1: entered promiscuous mode [ 1338.663164][T14977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.670953][T14977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.692359][T14977] bridge_slave_1: entered allmulticast mode [ 1338.725213][T14977] bridge_slave_1: entered promiscuous mode [ 1338.735537][T14979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.742971][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.751622][T14979] bridge_slave_0: entered allmulticast mode [ 1338.772825][T14979] bridge_slave_0: entered promiscuous mode [ 1338.791608][T14979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.798928][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.814440][T14979] bridge_slave_1: entered allmulticast mode [ 1338.829944][T14979] bridge_slave_1: entered promiscuous mode [ 1338.968725][T14979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.995133][T14979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.014558][T15002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.065829][T15002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.105426][T14977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.149346][T14977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.174962][T14979] team0: Port device team_slave_0 added [ 1339.190971][T15002] team0: Port device team_slave_0 added [ 1339.205529][T15002] team0: Port device team_slave_1 added [ 1339.230481][T14979] team0: Port device team_slave_1 added [ 1339.330021][T14977] team0: Port device team_slave_0 added [ 1339.339855][T14977] team0: Port device team_slave_1 added [ 1339.348054][T14979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.355032][T14979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.381231][T14979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.394274][T14979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.401335][T14979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.429845][T14979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.447133][T15002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.454568][T15002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.480721][T15002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.539106][T15002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.546569][T15002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.574001][T15002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.593766][T14977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.600843][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.627162][T14977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.640220][T14977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.648140][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.675332][T14977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.767682][ T6059] bridge_slave_1: left allmulticast mode [ 1339.773444][ T6059] bridge_slave_1: left promiscuous mode [ 1339.779853][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.789745][ T6059] bridge_slave_0: left allmulticast mode [ 1339.795518][ T6059] bridge_slave_0: left promiscuous mode [ 1339.801942][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.952108][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.968079][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1339.980215][ T6059] bond0 (unregistering): Released all slaves [ 1340.037455][T14979] hsr_slave_0: entered promiscuous mode [ 1340.044365][T14979] hsr_slave_1: entered promiscuous mode [ 1340.122169][T14977] hsr_slave_0: entered promiscuous mode [ 1340.128971][T14977] hsr_slave_1: entered promiscuous mode [ 1340.135305][T14977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1340.143002][T14977] Cannot create hsr debugfs directory [ 1340.160319][T15002] hsr_slave_0: entered promiscuous mode [ 1340.166794][T15002] hsr_slave_1: entered promiscuous mode [ 1340.173673][T15002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1340.181577][T15002] Cannot create hsr debugfs directory [ 1340.193450][ T6059] hsr_slave_0: left promiscuous mode [ 1340.203798][ T6059] hsr_slave_1: left promiscuous mode [ 1340.209797][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.219575][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.413927][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 1340.468150][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 1341.201678][T14977] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.321474][T14977] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.406449][T14977] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.512377][T14977] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.928812][T14977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1341.940371][T14977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1341.952200][T14977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1341.981306][T14977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1342.057223][T14979] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1342.076917][T14979] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1342.099904][T14979] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1342.146033][T14979] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1342.214227][T15002] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1342.243342][T15002] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1342.266965][T15002] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1342.279831][T15002] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1342.396583][T14977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.450640][T14977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.496303][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.503454][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.529950][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.537111][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.579090][T15002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.605444][T14979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.646466][T15002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.691893][T14979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.730938][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.738168][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.760265][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.767399][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.809154][T14977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1342.837265][ T9865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.844482][ T9865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.871512][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.878712][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.388222][T14977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.522129][T15002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.536303][T14979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1344.208931][T14977] veth0_vlan: entered promiscuous mode [ 1344.237829][T14977] veth1_vlan: entered promiscuous mode [ 1344.274168][T15002] veth0_vlan: entered promiscuous mode [ 1344.325168][T15002] veth1_vlan: entered promiscuous mode [ 1344.342975][T14977] veth0_macvtap: entered promiscuous mode [ 1344.366099][T14977] veth1_macvtap: entered promiscuous mode [ 1344.376622][T14979] veth0_vlan: entered promiscuous mode [ 1344.408654][T14977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.422185][T14977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.434314][T14977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.444633][T14977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.453733][T14977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.463685][T14977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.504776][T14979] veth1_vlan: entered promiscuous mode [ 1344.536730][T15002] veth0_macvtap: entered promiscuous mode [ 1344.569609][T15002] veth1_macvtap: entered promiscuous mode [ 1344.657653][ T6630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.676721][ T6630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.684333][T15002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.742014][T15002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.786893][T14979] veth0_macvtap: entered promiscuous mode [ 1344.798699][T15002] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.807490][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.807520][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.825241][T15002] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.834576][T15002] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.843954][T15002] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.859024][T14979] veth1_macvtap: entered promiscuous mode [ 1344.943955][T14979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.018605][T14979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.070996][T14979] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.082641][T14979] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.092324][T14979] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.101582][T14979] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.234412][ T9865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.269417][ T9865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.378777][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.391078][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.170154][T15239] loop5: detected capacity change from 0 to 4096 [ 1346.191002][T15239] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 1346.256783][T15239] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1346.264200][T15239] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1346.294796][ T6645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.311147][ T6645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.400858][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.423146][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.046850][T15248] loop6: detected capacity change from 0 to 40427 [ 1347.481412][T15248] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1347.489271][T15248] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1347.653020][ T12] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1347.663761][T15248] F2FS-fs (loop6): invalid crc value [ 1347.815859][T15248] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1347.823129][T15248] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1347.896997][T14977] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1350.206802][T14977] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1350.226395][T14977] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 1350.243143][ T9848] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 1351.667487][T15273] sctp: failed to load transform for md5: -2 [ 1360.421798][T15329] loop9: detected capacity change from 0 to 64 [ 1360.769446][T15335] SET target dimension over the limit! [ 1370.638723][T15376] netlink: 'syz.7.2532': attribute type 1 has an invalid length. [ 1370.656031][T15376] netlink: 208 bytes leftover after parsing attributes in process `syz.7.2532'. [ 1372.070692][T15387] loop5: detected capacity change from 0 to 32768 [ 1373.878321][ T6630] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.908747][T15387] lmLogOpen: exit(-6) [ 1373.912841][T15387] jfs_mount_rw failed, return code = -6 [ 1374.173044][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1374.250831][T14279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1374.299388][T14279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1374.309152][T14279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1374.331874][T14279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1374.344974][T14279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1375.940082][T15403] syzkaller0: entered promiscuous mode [ 1375.992614][T15403] syzkaller0: entered allmulticast mode [ 1376.456357][T15418] loop9: detected capacity change from 0 to 1024 [ 1377.469653][T14297] Bluetooth: hci0: command tx timeout [ 1377.980915][ T6630] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.065716][T15428] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1378.080856][T15418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1380.012262][T14297] Bluetooth: hci0: command tx timeout [ 1380.322973][ T6630] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.350881][T13506] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.310007][T14297] Bluetooth: hci0: command tx timeout [ 1382.997753][T15461] loop1: detected capacity change from 0 to 32768 [ 1383.815970][T15461] lmLogOpen: exit(-6) [ 1383.820320][T15461] jfs_mount_rw failed, return code = -6 [ 1383.966922][ T6630] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.567388][T14297] Bluetooth: hci0: command tx timeout [ 1388.017426][T15401] chnl_net:caif_netlink_parms(): no params data found [ 1388.336005][ T6630] bridge_slave_1: left allmulticast mode [ 1388.359262][ T6630] bridge_slave_1: left promiscuous mode [ 1388.365332][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.361374][T15504] loop1: detected capacity change from 0 to 32768 [ 1389.765270][T15512] loop7: detected capacity change from 0 to 40427 [ 1389.799272][T15512] F2FS-fs (loop7): invalid crc value [ 1389.814282][ T6630] bridge_slave_0: left allmulticast mode [ 1389.857985][ T6630] bridge_slave_0: left promiscuous mode [ 1389.912625][T15512] F2FS-fs (loop7): Start checkpoint disabled! [ 1389.918910][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.929183][T15512] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1390.150220][ T30] audit: type=1800 audit(1752767462.932:191): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2567" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 1390.275523][T15531] syz.7.2567: attempt to access beyond end of device [ 1390.275523][T15531] loop7: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1391.033728][T15504] lmLogOpen: exit(-6) [ 1391.037935][T15504] jfs_mount_rw failed, return code = -6 [ 1391.263964][ T9861] kworker/u8:7: attempt to access beyond end of device [ 1391.263964][ T9861] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1391.304275][ T9861] CPU: 1 UID: 0 PID: 9861 Comm: kworker/u8:7 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1391.304331][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1391.304357][ T9861] Workqueue: writeback wb_workfn (flush-7:7) [ 1391.304415][ T9861] Call Trace: [ 1391.304426][ T9861] [ 1391.304441][ T9861] dump_stack_lvl+0x16c/0x1f0 [ 1391.304484][ T9861] f2fs_handle_critical_error+0x621/0x9f0 [ 1391.304545][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.304592][ T9861] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1391.304651][ T9861] f2fs_write_end_io+0x785/0xc20 [ 1391.304713][ T9861] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1391.304777][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.304832][ T9861] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1391.304888][ T9861] bio_endio+0x70d/0x850 [ 1391.304938][ T9861] submit_bio_noacct+0x56d/0x1eb0 [ 1391.305006][ T9861] __submit_merged_bio+0x33c/0x770 [ 1391.305074][ T9861] __submit_merged_write_cond+0x319/0x3f0 [ 1391.305150][ T9861] f2fs_write_cache_pages+0x2067/0x2570 [ 1391.305218][ T9861] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1391.305262][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.305308][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.305353][ T9861] ? find_held_lock+0x2b/0x80 [ 1391.305403][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.305452][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.305496][ T9861] ? do_raw_spin_unlock+0x172/0x230 [ 1391.305555][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.305599][ T9861] ? f2fs_available_free_memory+0x279/0xa30 [ 1391.305711][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.305758][ T9861] ? lock_acquire+0x179/0x350 [ 1391.305794][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.305849][ T9861] f2fs_write_data_pages+0x4ad/0xd90 [ 1391.305900][ T9861] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1391.305950][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.305992][ T9861] ? __lock_acquire+0xb8a/0x1c90 [ 1391.306054][ T9861] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1391.306097][ T9861] do_writepages+0x27a/0x600 [ 1391.306152][ T9861] ? __pfx_do_writepages+0x10/0x10 [ 1391.306191][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.306235][ T9861] ? reacquire_held_locks+0xcd/0x1f0 [ 1391.306268][ T9861] ? writeback_sb_inodes+0x3a4/0xf90 [ 1391.306315][ T9861] __writeback_single_inode+0x160/0xfb0 [ 1391.306361][ T9861] ? __pfx___writeback_single_inode+0x10/0x10 [ 1391.306401][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.306446][ T9861] ? do_raw_spin_unlock+0x172/0x230 [ 1391.306488][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.306537][ T9861] writeback_sb_inodes+0x601/0xf90 [ 1391.306599][ T9861] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1391.306639][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.306683][ T9861] ? find_held_lock+0x2b/0x80 [ 1391.306788][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.306831][ T9861] ? rcu_is_watching+0x12/0xc0 [ 1391.306879][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.306922][ T9861] ? queue_io+0x3f6/0x520 [ 1391.306960][ T9861] wb_writeback+0x419/0xb70 [ 1391.307010][ T9861] ? __pfx_wb_writeback+0x10/0x10 [ 1391.307049][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.307105][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.307157][ T9861] ? mark_held_locks+0x49/0x80 [ 1391.307228][ T9861] wb_workfn+0x14d/0xbe0 [ 1391.307278][ T9861] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1391.307345][ T9861] ? __pfx_wb_workfn+0x10/0x10 [ 1391.307392][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.307442][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.307494][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.307540][ T9861] ? rcu_is_watching+0x12/0xc0 [ 1391.307598][ T9861] process_one_work+0x9cf/0x1b70 [ 1391.307662][ T9861] ? __pfx_process_one_work+0x10/0x10 [ 1391.307706][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.307763][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.307810][ T9861] ? assign_work+0x1a0/0x250 [ 1391.307852][ T9861] worker_thread+0x6c8/0xf10 [ 1391.307924][ T9861] ? __pfx_worker_thread+0x10/0x10 [ 1391.307968][ T9861] kthread+0x3c5/0x780 [ 1391.308008][ T9861] ? __pfx_kthread+0x10/0x10 [ 1391.308047][ T9861] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1391.308093][ T9861] ? rcu_is_watching+0x12/0xc0 [ 1391.308148][ T9861] ? __pfx_kthread+0x10/0x10 [ 1391.308188][ T9861] ret_from_fork+0x5d7/0x6f0 [ 1391.308247][ T9861] ? __pfx_kthread+0x10/0x10 [ 1391.308286][ T9861] ret_from_fork_asm+0x1a/0x30 [ 1391.308353][ T9861] [ 1391.815697][ T9861] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1396.556715][T14297] Bluetooth: hci2: unexpected event for opcode 0x080f [ 1397.474685][ T6630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.964762][ T6630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1399.998607][ T6630] bond0 (unregistering): Released all slaves [ 1400.963482][T15513] tipc: Enabled bearer , priority 0 [ 1401.290306][T15517] syzkaller0: entered promiscuous mode [ 1401.298572][T15517] syzkaller0: entered allmulticast mode [ 1402.338632][T12836] tipc: Node number set to 628510242 [ 1404.942509][T15517] tipc: Resetting bearer [ 1405.260575][T15517] tipc: Disabling bearer [ 1407.755514][T14279] Bluetooth: hci0: command 0x0405 tx timeout [ 1412.399992][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1413.312187][ T9] usb 2-1: device descriptor read/64, error -71 [ 1413.570643][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1413.601891][T14279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1413.627573][T14279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1413.648748][T14279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1413.659901][T14279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1413.669563][T14279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1413.706133][T14297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1413.721300][T14297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1413.729411][T14297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1413.736501][ T9] usb 2-1: device descriptor read/64, error -71 [ 1413.784382][T14297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1413.798221][T14297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1413.857324][ T6630] hsr_slave_0: left promiscuous mode [ 1413.883722][ T6630] hsr_slave_1: left promiscuous mode [ 1413.893386][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.910596][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.918592][ T9] usb usb2-port1: attempt power cycle [ 1413.931233][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.948478][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.980288][ T6630] veth1_macvtap: left promiscuous mode [ 1413.988864][ T6630] veth0_macvtap: left promiscuous mode [ 1413.995111][ T6630] veth1_vlan: left promiscuous mode [ 1414.000523][ T6630] veth0_vlan: left promiscuous mode [ 1415.945292][T14279] Bluetooth: hci1: command tx timeout [ 1416.296353][T14279] Bluetooth: hci3: command tx timeout [ 1418.027906][T15684] sctp: failed to load transform for md5: -2 [ 1419.015212][T14297] Bluetooth: hci3: command tx timeout [ 1419.020898][T14279] Bluetooth: hci1: command tx timeout [ 1421.246667][T14279] Bluetooth: hci1: command tx timeout [ 1421.251833][T14297] Bluetooth: hci3: command tx timeout [ 1421.858780][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1422.651516][T15711] loop1: detected capacity change from 0 to 40427 [ 1422.663367][T15711] F2FS-fs (loop1): invalid crc value [ 1422.742711][ T9] usb 8-1: device descriptor read/64, error -71 [ 1422.753966][T15711] F2FS-fs (loop1): Start checkpoint disabled! [ 1422.770500][T15711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1423.013822][ T30] audit: type=1800 audit(1752767493.262:192): pid=15718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2616" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1423.123836][T15718] syz.1.2616: attempt to access beyond end of device [ 1423.123836][T15718] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 1423.400553][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1423.512105][T14297] Bluetooth: hci3: command tx timeout [ 1423.519184][T14297] Bluetooth: hci1: command tx timeout [ 1423.559220][ T9] usb 8-1: device descriptor read/64, error -71 [ 1423.747243][ T6630] team0 (unregistering): Port device team_slave_1 removed [ 1423.895015][T15722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2618'. [ 1424.537295][ T9] usb usb8-port1: attempt power cycle [ 1424.785131][ T6630] team0 (unregistering): Port device team_slave_0 removed [ 1424.926678][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1425.173836][ T9] usb 8-1: device not accepting address 4, error -71 [ 1428.895677][ T6648] kworker/u8:34: attempt to access beyond end of device [ 1428.895677][ T6648] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1428.923863][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: kworker/u8:34 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1428.923922][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1428.923947][ T6648] Workqueue: writeback wb_workfn (flush-7:1) [ 1428.924002][ T6648] Call Trace: [ 1428.924013][ T6648] [ 1428.924028][ T6648] dump_stack_lvl+0x16c/0x1f0 [ 1428.924068][ T6648] f2fs_handle_critical_error+0x621/0x9f0 [ 1428.924125][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.924169][ T6648] ? f2fs_build_fault_attr+0x53/0x1f0 [ 1428.924229][ T6648] f2fs_write_end_io+0x785/0xc20 [ 1428.924290][ T6648] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1428.924355][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.924410][ T6648] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1428.924466][ T6648] bio_endio+0x70d/0x850 [ 1428.924517][ T6648] submit_bio_noacct+0x56d/0x1eb0 [ 1428.924590][ T6648] __submit_merged_bio+0x33c/0x770 [ 1428.924653][ T6648] __submit_merged_write_cond+0x319/0x3f0 [ 1428.924726][ T6648] f2fs_write_cache_pages+0x2067/0x2570 [ 1428.924800][ T6648] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1428.924845][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.924890][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.924938][ T6648] ? find_held_lock+0x2b/0x80 [ 1428.924989][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.925037][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.925080][ T6648] ? do_raw_spin_unlock+0x172/0x230 [ 1428.925142][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.925184][ T6648] ? f2fs_available_free_memory+0x279/0xa30 [ 1428.925311][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.925356][ T6648] ? lock_acquire+0x179/0x350 [ 1428.925391][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.925444][ T6648] f2fs_write_data_pages+0x4ad/0xd90 [ 1428.925493][ T6648] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1428.925550][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.925593][ T6648] ? __lock_acquire+0xb8a/0x1c90 [ 1428.925653][ T6648] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1428.925695][ T6648] do_writepages+0x27a/0x600 [ 1428.925744][ T6648] ? __pfx_do_writepages+0x10/0x10 [ 1428.925781][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.925824][ T6648] ? reacquire_held_locks+0xcd/0x1f0 [ 1428.925858][ T6648] ? writeback_sb_inodes+0x3a4/0xf90 [ 1428.925906][ T6648] __writeback_single_inode+0x160/0xfb0 [ 1428.925961][ T6648] ? __pfx___writeback_single_inode+0x10/0x10 [ 1428.926001][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.926044][ T6648] ? do_raw_spin_unlock+0x172/0x230 [ 1428.926086][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.926137][ T6648] writeback_sb_inodes+0x601/0xf90 [ 1428.926205][ T6648] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1428.926244][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.926285][ T6648] ? find_held_lock+0x2b/0x80 [ 1428.926406][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.926448][ T6648] ? rcu_is_watching+0x12/0xc0 [ 1428.926494][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.926536][ T6648] ? queue_io+0x3f6/0x520 [ 1428.926577][ T6648] wb_writeback+0x419/0xb70 [ 1428.926630][ T6648] ? __pfx_wb_writeback+0x10/0x10 [ 1428.926668][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.926726][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.926769][ T6648] ? mark_held_locks+0x49/0x80 [ 1428.926837][ T6648] wb_workfn+0x14d/0xbe0 [ 1428.926887][ T6648] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1428.926957][ T6648] ? __pfx_wb_workfn+0x10/0x10 [ 1428.927004][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.927053][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.927104][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.927146][ T6648] ? rcu_is_watching+0x12/0xc0 [ 1428.927204][ T6648] process_one_work+0x9cf/0x1b70 [ 1428.927270][ T6648] ? __pfx_process_one_work+0x10/0x10 [ 1428.927311][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.927369][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.927411][ T6648] ? assign_work+0x1a0/0x250 [ 1428.927454][ T6648] worker_thread+0x6c8/0xf10 [ 1428.927521][ T6648] ? __pfx_worker_thread+0x10/0x10 [ 1428.927561][ T6648] kthread+0x3c5/0x780 [ 1428.927599][ T6648] ? __pfx_kthread+0x10/0x10 [ 1428.927639][ T6648] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1428.927682][ T6648] ? rcu_is_watching+0x12/0xc0 [ 1428.927729][ T6648] ? __pfx_kthread+0x10/0x10 [ 1428.927768][ T6648] ret_from_fork+0x5d7/0x6f0 [ 1428.927821][ T6648] ? __pfx_kthread+0x10/0x10 [ 1428.927858][ T6648] ret_from_fork_asm+0x1a/0x30 [ 1428.927933][ T6648] [ 1428.927946][ T6648] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1431.901919][T14297] Bluetooth: hci6: command 0x0406 tx timeout [ 1432.455872][T15401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.472589][T15401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.480766][T15401] bridge_slave_0: entered allmulticast mode [ 1432.506130][T15401] bridge_slave_0: entered promiscuous mode [ 1433.226680][T14297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1433.237368][T14297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1433.247341][T14297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1433.255557][T14297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1433.276429][T14297] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1435.531386][T14297] Bluetooth: hci5: command tx timeout [ 1435.860953][T15791] loop7: detected capacity change from 0 to 40427 [ 1435.891068][T15791] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1435.898864][T15791] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1435.937792][T15791] F2FS-fs (loop7): invalid crc value [ 1436.952564][T15791] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1436.959748][T15791] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1437.870774][T14297] Bluetooth: hci5: command tx timeout [ 1439.776933][ T6630] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.148418][T14297] Bluetooth: hci5: command tx timeout [ 1440.347306][T15658] chnl_net:caif_netlink_parms(): no params data found [ 1440.450303][ T9068] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1440.491537][T15656] chnl_net:caif_netlink_parms(): no params data found [ 1440.601826][ T9068] usb 2-1: device descriptor read/64, error -71 [ 1440.634035][ T6630] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.800932][ T6630] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.970817][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1441.638895][ T6630] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.913374][T15658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.934737][ T9068] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1441.948344][T15658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.194671][T15658] bridge_slave_0: entered allmulticast mode [ 1442.213483][T15658] bridge_slave_0: entered promiscuous mode [ 1442.230171][T15658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.201976][T14297] Bluetooth: hci5: command tx timeout [ 1443.245483][T15658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.291029][T15658] bridge_slave_1: entered allmulticast mode [ 1443.299543][ T9068] usb 2-1: device descriptor read/64, error -71 [ 1443.320628][T15658] bridge_slave_1: entered promiscuous mode [ 1444.188720][ T9068] usb usb2-port1: attempt power cycle [ 1445.262589][T15656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.422112][T15656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.756805][T15656] bridge_slave_0: entered allmulticast mode [ 1445.808126][T15656] bridge_slave_0: entered promiscuous mode [ 1445.977733][T15658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.911703][T15859] loop7: detected capacity change from 0 to 8 [ 1447.720451][T15656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.755316][T15656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.762674][T15656] bridge_slave_1: entered allmulticast mode [ 1447.795854][T15656] bridge_slave_1: entered promiscuous mode [ 1447.951870][T15658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.066250][T15656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.158241][T15778] chnl_net:caif_netlink_parms(): no params data found [ 1448.200382][T15656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.238605][T15658] team0: Port device team_slave_0 added [ 1448.251966][T14297] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 1448.263159][T14297] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 1448.300032][T15656] team0: Port device team_slave_0 added [ 1448.325134][T15658] team0: Port device team_slave_1 added [ 1448.356720][T15656] team0: Port device team_slave_1 added [ 1448.440426][T15656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.447536][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.473847][T15656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.542103][T15656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.549442][T15656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.586681][T15656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.614887][T15658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.626977][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.661638][T15658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.725956][T15658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.738332][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.775035][T15658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.926360][ T6630] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.976791][T15778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.984870][T15778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.992882][T15778] bridge_slave_0: entered allmulticast mode [ 1449.002853][T15778] bridge_slave_0: entered promiscuous mode [ 1449.012425][T15778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.019585][T15778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.027502][T15778] bridge_slave_1: entered allmulticast mode [ 1449.039483][T15778] bridge_slave_1: entered promiscuous mode [ 1451.095717][T15658] hsr_slave_0: entered promiscuous mode [ 1451.127361][T15658] hsr_slave_1: entered promiscuous mode [ 1451.152796][T15658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1451.174021][T15658] Cannot create hsr debugfs directory [ 1451.280016][T15778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.380173][ T6630] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.121234][T15656] hsr_slave_0: entered promiscuous mode [ 1452.128054][T15656] hsr_slave_1: entered promiscuous mode [ 1452.180837][T15656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1452.202126][T15656] Cannot create hsr debugfs directory [ 1452.259221][T15778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.526844][ T6630] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.845075][T14297] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1452.854158][T14297] Bluetooth: hci2: Injecting HCI hardware error event [ 1453.633775][T14279] Bluetooth: hci2: hardware error 0x00 [ 1455.230882][T15778] team0: Port device team_slave_0 added [ 1456.274640][T14279] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1458.638616][ T6630] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.777494][T15778] team0: Port device team_slave_1 added [ 1459.061837][T15778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1459.072297][T15778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1459.126223][T15778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1459.312515][T15778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1459.350243][T15778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1459.420205][T15778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.987185][T15778] hsr_slave_0: entered promiscuous mode [ 1459.993998][T15778] hsr_slave_1: entered promiscuous mode [ 1460.002472][T15778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1460.020346][T15778] Cannot create hsr debugfs directory [ 1460.079558][ T6630] bridge_slave_1: left allmulticast mode [ 1460.085454][ T6630] bridge_slave_1: left promiscuous mode [ 1460.091203][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.103025][ T6630] bridge_slave_0: left allmulticast mode [ 1460.108913][ T6630] bridge_slave_0: left promiscuous mode [ 1460.118952][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.135331][ T6630] bridge_slave_1: left allmulticast mode [ 1460.141227][ T6630] bridge_slave_1: left promiscuous mode [ 1460.148214][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.158103][ T6630] bridge_slave_0: left allmulticast mode [ 1460.163773][ T6630] bridge_slave_0: left promiscuous mode [ 1460.170312][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.690303][ T6630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.704277][ T6630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.714832][ T6630] bond0 (unregistering): Released all slaves [ 1461.089343][ T6630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.111720][ T6630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.122603][ T6630] bond0 (unregistering): Released all slaves [ 1461.288093][ T6630] tipc: Left network mode [ 1461.814179][ T6630] hsr_slave_0: left promiscuous mode [ 1461.822415][ T6630] hsr_slave_1: left promiscuous mode [ 1461.828658][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.836121][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.845106][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.852653][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.872462][ T6630] hsr_slave_0: left promiscuous mode [ 1461.878440][ T6630] hsr_slave_1: left promiscuous mode [ 1461.885041][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.892860][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.903824][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.911367][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.953727][ T6630] veth1_macvtap: left promiscuous mode [ 1461.959742][ T6630] veth0_macvtap: left promiscuous mode [ 1461.965483][ T6630] veth1_vlan: left promiscuous mode [ 1461.970964][ T6630] veth0_vlan: left promiscuous mode [ 1461.977394][ T6630] veth1_macvtap: left promiscuous mode [ 1461.983413][ T6630] veth0_macvtap: left promiscuous mode [ 1461.989198][ T6630] veth1_vlan: left promiscuous mode [ 1461.994546][ T6630] veth0_vlan: left promiscuous mode [ 1462.655860][ T6630] team0 (unregistering): Port device team_slave_1 removed [ 1462.711587][ T6630] team0 (unregistering): Port device team_slave_0 removed [ 1463.717784][ T6630] team0 (unregistering): Port device team_slave_1 removed [ 1463.774361][ T6630] team0 (unregistering): Port device team_slave_0 removed [ 1464.446814][T15658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1464.474214][T15658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1464.499342][T15658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1464.540527][T15658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1464.722749][T15658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.810320][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.851464][T14188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.858858][T14188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.919815][T14188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.927029][T14188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.061633][T15778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1465.097085][T15778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1465.119020][T15778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1465.145842][T15778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1465.310442][T15656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1465.334841][T15656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1465.359387][T15656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1465.380944][T15656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1465.497215][ T6630] bridge_slave_0: left allmulticast mode [ 1465.503675][ T6630] bridge_slave_0: left promiscuous mode [ 1465.509437][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.606651][ T6630] bond0 (unregistering): Released all slaves [ 1465.712630][T15658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.022364][T15778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.083334][T15778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.115605][T15658] veth0_vlan: entered promiscuous mode [ 1466.137010][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.144172][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.164001][T15658] veth1_vlan: entered promiscuous mode [ 1466.183397][T15656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.210140][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.217326][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.274342][T15656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.313848][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.321014][ T9863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.351978][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.359161][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.406033][T15658] veth0_macvtap: entered promiscuous mode [ 1466.462368][T15658] veth1_macvtap: entered promiscuous mode [ 1466.545370][T15658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.584015][T15658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.595877][T15658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.605333][T15658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.614108][T15658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.623765][T15658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.880012][ T9882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.924307][ T9882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.002795][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.043807][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.055086][T15778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.140852][T15656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.273049][T15778] veth0_vlan: entered promiscuous mode [ 1467.303351][T15778] veth1_vlan: entered promiscuous mode [ 1467.357126][T15778] veth0_macvtap: entered promiscuous mode [ 1467.369924][T15778] veth1_macvtap: entered promiscuous mode [ 1467.393990][T15778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.406978][T15778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.420656][T15778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.435146][T15778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.444653][T15778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.454432][T15778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.359899][T15966] ieee802154 phy0 wpan0: encryption failed: -22 [ 1470.094074][T15656] veth0_vlan: entered promiscuous mode [ 1470.201501][T15656] veth1_vlan: entered promiscuous mode [ 1470.255042][ T9876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.263016][ T9876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.427776][ T9872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.470937][ T9872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.932843][T16022] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1476.381266][T14297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1476.395796][T14297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1476.411397][T14297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1476.420384][T14297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1476.428730][T14297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1476.505601][T16015] orangefs_mount: mount request failed with -4 [ 1478.695559][T14297] Bluetooth: hci0: command tx timeout [ 1478.826515][T16038] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1478.853080][T16038] CIFS: Unable to determine destination address [ 1481.299889][T14297] Bluetooth: hci0: command tx timeout [ 1481.782344][T16056] loop7: detected capacity change from 0 to 512 [ 1482.654875][T16056] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1483.039751][T16056] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1483.050739][T16056] EXT4-fs: failed to create workqueue [ 1483.126652][T16056] EXT4-fs (loop7): mount failed [ 1483.173270][T16068] loop0: detected capacity change from 0 to 256 [ 1483.251585][T16068] exfat: Deprecated parameter 'utf8' [ 1483.267879][T16068] exfat: Deprecated parameter 'namecase' [ 1483.549032][T14297] Bluetooth: hci0: command tx timeout [ 1483.581488][T16068] exfat: Bad value for 'gid' [ 1483.587950][T16068] exfat: Bad value for 'gid' [ 1484.547684][T16026] chnl_net:caif_netlink_parms(): no params data found [ 1485.806405][T14297] Bluetooth: hci0: command tx timeout [ 1488.854299][T16112] loop1: detected capacity change from 0 to 512 [ 1489.141720][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.160523][T16112] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:168: inode #15: comm syz.1.2701: inline data xattr refers to an external xattr inode [ 1489.185407][T16112] EXT4-fs (loop1): Remounting filesystem read-only [ 1489.196251][T16112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.254306][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.263031][T16026] bridge_slave_0: entered allmulticast mode [ 1489.278968][T16113] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1489.289193][T16026] bridge_slave_0: entered promiscuous mode [ 1490.162369][T13500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.527418][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.535688][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.547960][T16026] bridge_slave_1: entered allmulticast mode [ 1490.555970][T16026] bridge_slave_1: entered promiscuous mode [ 1493.292865][ T9882] bridge_slave_1: left allmulticast mode [ 1493.315973][ T9882] bridge_slave_1: left promiscuous mode [ 1493.539337][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.809703][ T9882] bridge_slave_0: left allmulticast mode [ 1493.823361][ T9882] bridge_slave_0: left promiscuous mode [ 1493.834727][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.195705][ T30] audit: type=1800 audit(1752767559.884:193): pid=16157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2714" name="nullb0" dev="tmpfs" ino=408 res=0 errno=0 [ 1497.779861][ T9068] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1497.827323][T16168] loop2: detected capacity change from 0 to 128 [ 1497.839680][T16168] adfs: Bad value for 'uid' [ 1497.844271][T16168] adfs: Bad value for 'uid' [ 1498.060054][T16175] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2718'. [ 1498.363028][T16177] loop2: detected capacity change from 0 to 128 [ 1498.370132][T16177] udf: Unknown parameter '000000000000000000060xffffffffffffffff' [ 1498.922438][ T9068] usb 1-1: device descriptor read/64, error -71 [ 1499.178058][T16175] loop7: detected capacity change from 0 to 128 [ 1499.380104][ T9068] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1499.637528][ T9068] usb 1-1: device descriptor read/64, error -71 [ 1499.768559][ T9068] usb usb1-port1: attempt power cycle [ 1500.710337][ T9068] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1501.203842][ T9068] usb 1-1: device descriptor read/8, error -71 [ 1505.141527][ T9068] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1506.171228][T16212] loop1: detected capacity change from 0 to 2048 [ 1506.178701][T16212] udf: Unknown parameter 'undelete`Eò±:æÈË' [ 1506.256928][ T9] IPVS: starting estimator thread 0... [ 1506.383869][ T9068] usb 1-1: device descriptor read/64, error -71 [ 1506.798884][T16213] IPVS: using max 23 ests per chain, 55200 per kthread [ 1507.243413][ T9068] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1507.302973][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1507.349412][T16221] loop7: detected capacity change from 0 to 64 [ 1509.307860][ T9102] IPVS: starting estimator thread 0... [ 1510.525958][T16234] IPVS: using max 23 ests per chain, 55200 per kthread [ 1511.773672][T16247] loop1: detected capacity change from 0 to 128 [ 1511.823501][T16247] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4621: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1512.085516][T16247] EXT4-fs (loop1): Encoding requested by superblock is unknown [ 1515.738161][ T9882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.846850][ T9882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.083153][ T9882] bond0 (unregistering): Released all slaves [ 1516.465651][ T9068] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1517.095443][ T9068] usb 8-1: device descriptor read/64, error -71 [ 1517.118037][T16026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.438728][ T9068] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1517.498685][T16026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.784890][ T9068] usb 8-1: device descriptor read/64, error -71 [ 1518.189634][ T9068] usb usb8-port1: attempt power cycle [ 1519.464139][ T9068] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1521.438984][ T9068] usb 8-1: device descriptor read/8, error -71 [ 1524.621362][ T9882] hsr_slave_0: left promiscuous mode [ 1524.889225][ T9882] hsr_slave_1: left promiscuous mode [ 1524.916428][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.738661][ T9882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.992984][T16336] loop0: detected capacity change from 0 to 2048 [ 1526.002800][T16336] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1526.015349][T16336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1526.305054][ T9882] veth1_vlan: left promiscuous mode [ 1526.326266][ T9882] veth0_vlan: left promiscuous mode [ 1527.699003][T16334] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1540.966243][T16407] Bluetooth: MGMT ver 1.23 [ 1541.727638][T14297] Bluetooth: hci5: hardware error 0x00 [ 1542.308974][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1542.682285][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1542.700705][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1542.714688][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1542.723399][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1545.445178][T14297] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1545.451892][T14297] Bluetooth: hci1: command tx timeout [ 1547.800158][T14297] Bluetooth: hci1: command tx timeout [ 1548.780853][ T9882] team0 (unregistering): Port device team_slave_1 removed [ 1549.565771][T14297] Bluetooth: hci3: command 0x0406 tx timeout [ 1550.010879][T16457] loop7: detected capacity change from 0 to 128 [ 1550.018249][T16457] adfs: Bad value for 'uid' [ 1550.022795][T16457] adfs: Bad value for 'uid' [ 1550.656006][ T5866] Bluetooth: hci1: command tx timeout [ 1552.949573][T14279] Bluetooth: hci1: command tx timeout [ 1553.018076][T16469] syz.2.2793: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1553.033982][T16469] CPU: 1 UID: 0 PID: 16469 Comm: syz.2.2793 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1553.034035][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1553.034066][T16469] Call Trace: [ 1553.034078][T16469] [ 1553.034092][T16469] dump_stack_lvl+0x16c/0x1f0 [ 1553.034136][T16469] warn_alloc+0x248/0x3a0 [ 1553.034192][T16469] ? __pfx_warn_alloc+0x10/0x10 [ 1553.034242][T16469] ? __pfx_stack_trace_save+0x10/0x10 [ 1553.034299][T16469] ? stack_depot_save_flags+0x28/0xa40 [ 1553.034340][T16469] ? find_held_lock+0x2b/0x80 [ 1553.034398][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1553.034445][T16469] ? kasan_save_stack+0x42/0x60 [ 1553.034495][T16469] ? kasan_save_stack+0x33/0x60 [ 1553.034544][T16469] ? kasan_save_track+0x14/0x30 [ 1553.034594][T16469] ? xskq_create+0x52/0x1d0 [ 1553.034651][T16469] ? xsk_setsockopt+0x640/0x840 [ 1553.034703][T16469] ? do_sock_setsockopt+0xf3/0x1d0 [ 1553.034754][T16469] ? xskq_create+0xfb/0x1d0 [ 1553.034814][T16469] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1553.034877][T16469] ? xskq_create+0xfb/0x1d0 [ 1553.034948][T16469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1553.035012][T16469] ? xskq_create+0xfb/0x1d0 [ 1553.035078][T16469] vmalloc_user_noprof+0x9e/0xe0 [ 1553.035121][T16469] ? xskq_create+0xfb/0x1d0 [ 1553.035182][T16469] xskq_create+0xfb/0x1d0 [ 1553.035245][T16469] xsk_setsockopt+0x640/0x840 [ 1553.035304][T16469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1553.035359][T16469] ? __pfx_aa_sk_perm+0x10/0x10 [ 1553.035414][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1553.035472][T16469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1553.035531][T16469] do_sock_setsockopt+0xf3/0x1d0 [ 1553.035585][T16469] __sys_setsockopt+0x1a0/0x230 [ 1553.035658][T16469] __x64_sys_setsockopt+0xbd/0x160 [ 1553.035720][T16469] ? do_syscall_64+0x91/0x4c0 [ 1553.035757][T16469] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1553.035803][T16469] ? lockdep_hardirqs_on+0x7c/0x110 [ 1553.035839][T16469] do_syscall_64+0xcd/0x4c0 [ 1553.035883][T16469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.035922][T16469] RIP: 0033:0x7f32ad58e929 [ 1553.035951][T16469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.035988][T16469] RSP: 002b:00007f32ae357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1553.036024][T16469] RAX: ffffffffffffffda RBX: 00007f32ad7b6080 RCX: 00007f32ad58e929 [ 1553.036050][T16469] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1553.036084][T16469] RBP: 00007f32ad610ca1 R08: 0000000000000004 R09: 0000000000000000 [ 1553.036108][T16469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.036133][T16469] R13: 0000000000000000 R14: 00007f32ad7b6080 R15: 00007fff0c2356e8 [ 1553.036184][T16469] [ 1553.036256][T16469] Mem-Info: [ 1553.329949][T16469] active_anon:13282 inactive_anon:0 isolated_anon:0 [ 1553.329949][T16469] active_file:23318 inactive_file:40419 isolated_file:0 [ 1553.329949][T16469] unevictable:768 dirty:337 writeback:0 [ 1553.329949][T16469] slab_reclaimable:11619 slab_unreclaimable:110143 [ 1553.329949][T16469] mapped:45110 shmem:10017 pagetables:1213 [ 1553.329949][T16469] sec_pagetables:0 bounce:0 [ 1553.329949][T16469] kernel_misc_reclaimable:0 [ 1553.329949][T16469] free:1240181 free_pcp:21057 free_cma:0 [ 1553.375799][T16469] Node 0 active_anon:53128kB inactive_anon:0kB active_file:93272kB inactive_file:161476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:180440kB dirty:1344kB writeback:0kB shmem:38532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13220kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1553.409673][T16469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1553.443399][T16469] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1553.474232][T16469] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 1553.482306][T16469] Node 0 DMA32 free:1040224kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53092kB inactive_anon:0kB active_file:93272kB inactive_file:160168kB unevictable:1536kB writepending:1364kB present:3129332kB managed:2540376kB mlocked:0kB bounce:0kB free_pcp:66984kB local_pcp:32176kB free_cma:0kB [ 1553.515050][T16469] lowmem_reserve[]: 0 0 1 1 1 [ 1554.102458][ T9882] team0 (unregistering): Port device team_slave_0 removed [ 1554.943417][T16469] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1555.184805][T16469] lowmem_reserve[]: 0 0 0 0 0 [ 1555.194408][T16469] Node 1 Normal free:3908292kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:13984kB free_cma:0kB [ 1555.637132][T16489] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1556.405953][T16469] lowmem_reserve[]: 0 0 0 0 0 [ 1557.478043][T16469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1557.774783][T16469] Node 0 DMA32: 28*4kB (UE) 330*8kB (UM) 459*16kB (UM) 297*32kB (UM) 88*64kB (UME) 51*128kB (UME) 40*256kB (UME) 21*512kB (UME) 12*1024kB (UME) 7*2048kB (UM) 236*4096kB (UM) = 1046032kB [ 1558.511082][T16469] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1558.535835][T16469] Node 1 Normal: 181*4kB (UME) 44*8kB (UME) 37*16kB (UME) 256*32kB (UME) 103*64kB (UME) 21*128kB (UME) 6*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 4*2048kB (UME) 946*4096kB (M) = 3908292kB [ 1559.492815][T16505] 9pnet: Unknown protocol version 9 [ 1560.302715][T16469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1560.922212][T16508] loop7: detected capacity change from 0 to 512 [ 1560.967286][T16508] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.099976][T16469] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1561.109463][T16469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1561.154443][T16508] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.164985][T16469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1561.522703][T16469] 79512 total pagecache pages [ 1561.544241][T16469] 0 pages in swap cache [ 1562.613563][T16469] Free swap = 124996kB [ 1563.180272][T16469] Total swap = 124996kB [ 1563.184485][T16469] 2097051 pages RAM [ 1563.188328][T16469] 0 pages HighMem/MovableOnly [ 1563.460714][T16469] 429979 pages reserved [ 1563.490560][T16469] 0 pages cma reserved [ 1563.572966][T16526] Quota error (device loop7): do_check_range: Getting block 134217728 out of range 0-5 [ 1564.730438][T14979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1568.509429][T16541] loop2: detected capacity change from 0 to 4096 [ 1569.219922][T16553] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1569.507738][ T30] audit: type=1800 audit(1752767628.463:194): pid=16541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2812" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1571.883167][T16566] loop1: detected capacity change from 0 to 8 [ 1572.975768][T16566] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1572.982251][T16566] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1573.019016][T16566] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1573.227272][T16573] loop0: detected capacity change from 0 to 40427 [ 1573.243460][T16573] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1573.251244][T16573] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1573.267201][T16573] F2FS-fs (loop0): invalid crc value [ 1573.374305][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1573.398227][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1573.403785][T16573] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1573.411753][T16573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1573.682121][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1573.690876][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1573.711416][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1574.547436][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1574.559511][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1574.566263][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1574.566659][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1574.572833][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1574.585776][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1574.605110][T16566] SQUASHFS error: Failed to read block 0x4de: -5 [ 1574.621461][T16566] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1574.866942][ T30] audit: type=1800 audit(1752767633.420:195): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2817" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1578.800971][T16612] loop7: detected capacity change from 0 to 1024 [ 1580.195466][ T6630] hfsplus: b-tree write err: -5, ino 3 [ 1580.295931][T16612] hfsplus: node 4:3 still has 1 user(s)! [ 1584.298116][T16628] loop0: detected capacity change from 0 to 128 [ 1584.305853][T16628] adfs: Bad value for 'uid' [ 1584.310495][T16628] adfs: Bad value for 'uid' [ 1584.412120][T16630] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1584.582821][T16627] loop0: detected capacity change from 0 to 128 [ 1584.589791][T16627] udf: Unknown parameter '000000000000000000050xffffffffffffffff' [ 1584.987073][T16026] team0: Port device team_slave_0 added [ 1587.343006][T16640] loop1: detected capacity change from 0 to 4096 [ 1587.621770][T16651] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1589.699822][T16420] chnl_net:caif_netlink_parms(): no params data found [ 1593.802401][T16682] loop2: detected capacity change from 0 to 64 [ 1594.525321][T16689] hfs: request for non-existent node -129 in B*Tree [ 1594.532299][T16689] hfs: request for non-existent node -129 in B*Tree [ 1595.296172][T16691] loop1: detected capacity change from 0 to 4096 [ 1597.725593][T16705] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1597.747815][T16420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.814444][ T30] audit: type=1800 audit(1752767654.584:196): pid=16691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2851" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1597.840382][T16420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.405989][T16420] bridge_slave_0: entered allmulticast mode [ 1598.431276][T16420] bridge_slave_0: entered promiscuous mode [ 1598.524928][T16420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.575722][T16420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.856625][T16713] loop2: detected capacity change from 0 to 40427 [ 1598.875748][T16713] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1598.883589][T16713] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1598.897393][T16713] F2FS-fs (loop2): invalid crc value [ 1598.977143][T16420] bridge_slave_1: entered allmulticast mode [ 1598.985228][T16420] bridge_slave_1: entered promiscuous mode [ 1599.090966][T16713] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1599.098213][T16713] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1601.532025][ T9868] bridge_slave_1: left allmulticast mode [ 1601.545656][ T9868] bridge_slave_1: left promiscuous mode [ 1601.551474][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.705422][ T9868] bridge_slave_0: left allmulticast mode [ 1601.740233][ T9868] bridge_slave_0: left promiscuous mode [ 1601.767420][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.804522][T15236] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1602.042609][T15236] usb 2-1: Using ep0 maxpacket: 16 [ 1602.101094][T15236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.155555][T15236] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1602.530016][T16734] overlayfs: failed to clone upperpath [ 1603.282130][T15236] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1603.452536][T15236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.462321][ T9868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.516621][T15236] usb 2-1: Product: syz [ 1603.520841][T15236] usb 2-1: Manufacturer: syz [ 1603.525456][T15236] usb 2-1: SerialNumber: syz [ 1603.603045][T15236] usb 2-1: config 0 descriptor?? [ 1603.636766][ T9868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.935179][ T9868] bond0 (unregistering): Released all slaves [ 1603.945844][T15236] usb 2-1: USB disconnect, device number 12 [ 1605.213573][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1605.227489][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1605.236611][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1605.247249][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1605.255343][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1606.875516][T16758] atomic_op ffff888054fa0998 conn xmit_atomic 0000000000000000 [ 1606.984596][T16759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1607.268364][ T9868] team0 (unregistering): Port device team_slave_0 removed [ 1607.500424][ T5866] Bluetooth: hci0: command tx timeout [ 1610.358948][ T5866] Bluetooth: hci0: command tx timeout [ 1611.626950][T16780] loop1: detected capacity change from 0 to 16 [ 1612.606705][T16780] erofs (device loop1): mounted with root inode @ nid 36. [ 1612.610331][ T5866] Bluetooth: hci0: command tx timeout [ 1614.229728][T16792] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1614.909329][ T5866] Bluetooth: hci0: command tx timeout [ 1615.561004][T16799] loop2: detected capacity change from 0 to 256 [ 1615.773900][T16799] FAT-fs (loop2): Directory bread(block 64) failed [ 1615.782625][T16799] FAT-fs (loop2): Directory bread(block 65) failed [ 1615.792435][T16799] FAT-fs (loop2): Directory bread(block 66) failed [ 1615.799114][T16799] FAT-fs (loop2): Directory bread(block 67) failed [ 1615.806559][T16799] FAT-fs (loop2): Directory bread(block 68) failed [ 1615.813354][T16799] FAT-fs (loop2): Directory bread(block 69) failed [ 1615.820742][T16799] FAT-fs (loop2): Directory bread(block 70) failed [ 1615.827493][T16799] FAT-fs (loop2): Directory bread(block 71) failed [ 1615.835035][T16799] FAT-fs (loop2): Directory bread(block 72) failed [ 1615.841740][T16799] FAT-fs (loop2): Directory bread(block 73) failed [ 1617.834452][T16820] loop2: detected capacity change from 0 to 16 [ 1617.874711][T16820] erofs (device loop2): mounted with root inode @ nid 36. [ 1621.978196][T16841] loop1: detected capacity change from 0 to 256 [ 1623.007572][T16841] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1625.871325][T16747] chnl_net:caif_netlink_parms(): no params data found [ 1626.922794][ T9876] bridge_slave_1: left allmulticast mode [ 1626.928529][ T9876] bridge_slave_1: left promiscuous mode [ 1627.278369][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.229107][ T5866] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1629.387440][ T9876] bridge_slave_0: left allmulticast mode [ 1629.393458][ T9876] bridge_slave_0: left promiscuous mode [ 1629.405888][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.465075][T16892] loop2: detected capacity change from 0 to 4096 [ 1631.261844][T16892] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1632.067938][T16892] ntfs3(loop2): ino=5, "/" ntfs_readdir [ 1635.763215][ T9876] bond0 (unregistering): Released all slaves [ 1637.868875][T16921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1637.876783][T16921] IPv6: NLM_F_CREATE should be set when creating new route [ 1637.925686][T15236] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1639.226241][T16927] loop2: detected capacity change from 0 to 256 [ 1639.315370][T16927] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1640.787351][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1640.832351][T16932] loop0: detected capacity change from 0 to 128 [ 1641.382200][T16938] atomic_op ffff888051b92198 conn xmit_atomic 0000000000000000 [ 1642.582056][T16942] Cannot find del_set index 0 as target [ 1643.204906][T16747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.235287][T16747] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.247442][T16747] bridge_slave_0: entered allmulticast mode [ 1643.255750][T16747] bridge_slave_0: entered promiscuous mode [ 1643.304840][T16747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.313328][T16747] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.325316][T16747] bridge_slave_1: entered allmulticast mode [ 1643.353108][T16747] bridge_slave_1: entered promiscuous mode [ 1646.860417][T16747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.190155][T16956] Set syz1 is full, maxelem 1038 reached [ 1647.314755][T16747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.380037][T16968] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2912'. [ 1647.500138][T16747] team0: Port device team_slave_0 added [ 1647.529320][T16747] team0: Port device team_slave_1 added [ 1647.540961][ T30] audit: type=1800 audit(1752767700.498:197): pid=16972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2915" name="nullb0" dev="tmpfs" ino=408 res=0 errno=0 [ 1647.680909][T16747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.693486][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.774163][T16747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.845575][T16747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.852686][T16747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.878938][T16747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.123375][T16747] hsr_slave_0: entered promiscuous mode [ 1651.146572][T16993] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1651.152280][T16747] hsr_slave_1: entered promiscuous mode [ 1651.206391][T16747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1651.217922][T16747] Cannot create hsr debugfs directory [ 1652.026063][T17001] loop1: detected capacity change from 0 to 40427 [ 1652.034037][T17001] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1652.041824][T17001] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1652.130169][T17001] F2FS-fs (loop1): invalid crc value [ 1652.951781][T17001] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1652.960242][T17001] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1654.296893][ T5866] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1654.314989][ T30] audit: type=1800 audit(1752767706.045:198): pid=17018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2924" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1656.424131][ T9876] kworker/u8:14: attempt to access beyond end of device [ 1656.424131][ T9876] loop1: rw=1, sector=77824, nr_sectors = 2192 limit=40427 [ 1656.461581][ T9876] kworker/u8:14: attempt to access beyond end of device [ 1656.461581][ T9876] loop1: rw=1, sector=80016, nr_sectors = 1904 limit=40427 [ 1657.322408][ T9876] kworker/u8:14: attempt to access beyond end of device [ 1657.322408][ T9876] loop1: rw=1, sector=49152, nr_sectors = 1832 limit=40427 [ 1660.924771][T17050] sctp: [Deprecated]: syz.7.2936 (pid 17050) Use of int in maxseg socket option. [ 1660.924771][T17050] Use struct sctp_assoc_value instead [ 1662.606919][T17063] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1664.352949][T16747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1664.794855][T16747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1665.537629][T16747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1665.947375][T16747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1666.567867][T17086] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2945'. [ 1667.012103][T16747] kthread_run failed with err -4 [ 1667.028012][T17093] loop2: detected capacity change from 0 to 16 [ 1667.065615][T17093] erofs (device loop2): mounted with root inode @ nid 36. [ 1667.409285][T17093] syz.2.2947: attempt to access beyond end of device [ 1667.409285][T17093] loop2: rw=0, sector=1259035608, nr_sectors = 8 limit=16 [ 1667.424022][T17093] erofs (device loop2): read error -5 @ 87 of nid 36 [ 1667.430815][T17093] erofs (device loop2): failed to readdir of logical block 87 of nid 36 [ 1677.594617][T14279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1677.607428][T14279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1677.758405][T17169] loop1: detected capacity change from 0 to 2048 [ 1678.569144][T14297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1678.591810][T14297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1678.606632][T14297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1678.683371][T17169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1679.888350][T17183] loop0: detected capacity change from 0 to 512 [ 1680.081576][ C1] hrtimer: interrupt took 48448 ns [ 1680.115346][T17183] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1680.162655][T17183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 1681.054720][T14297] Bluetooth: hci0: command tx timeout [ 1681.154680][T17183] System zones: 1-12 [ 1681.174794][T17183] EXT4-fs (loop0): 1 truncate cleaned up [ 1681.222339][T17183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1683.283673][ T5866] Bluetooth: hci0: command tx timeout [ 1685.060213][T15658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.498994][ T5866] Bluetooth: hci0: command tx timeout [ 1685.566109][T17223] loop1: detected capacity change from 0 to 512 [ 1686.182772][T17223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.280596][T17223] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1686.300967][ T9068] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1686.488046][ T9068] usb 1-1: device descriptor read/64, error -71 [ 1686.929700][ T9068] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1687.318522][T17237] Quota error (device loop1): do_check_range: Getting block 134217728 out of range 0-5 [ 1687.542579][T13500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.811791][ T5866] Bluetooth: hci0: command tx timeout [ 1687.883089][ T9068] usb 1-1: device descriptor read/64, error -71 [ 1689.260135][ T9068] usb usb1-port1: attempt power cycle [ 1689.411361][ T9881] bridge_slave_1: left allmulticast mode [ 1689.427764][ T9881] bridge_slave_1: left promiscuous mode [ 1689.466981][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.529193][ T9881] bridge_slave_0: left allmulticast mode [ 1689.782208][ T9881] bridge_slave_0: left promiscuous mode [ 1689.788164][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.086897][ T5866] Bluetooth: hci4: unexpected event for opcode 0x080f [ 1692.639691][T17265] loop0: detected capacity change from 0 to 1024 [ 1693.643738][ T6630] hfsplus: b-tree write err: -5, ino 4 [ 1694.686842][ T9881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.189339][T17282] loop0: detected capacity change from 0 to 512 [ 1697.196650][T17282] EXT4-fs: Ignoring removed mblk_io_submit option [ 1697.218963][ T9881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.227919][T17282] EXT4-fs: Ignoring removed bh option [ 1697.253891][T17282] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1697.309776][ T9881] bond0 (unregistering): Released all slaves [ 1697.415867][T17282] EXT4-fs (loop0): 1 truncate cleaned up [ 1697.481516][T17150] chnl_net:caif_netlink_parms(): no params data found [ 1697.515728][T17282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1698.822233][ T5866] Bluetooth: hci6: unexpected event for opcode 0x080f [ 1698.936727][T15658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1699.923085][T17301] fuse: Bad value for 'fd' [ 1700.213587][ T9881] hsr_slave_0: left promiscuous mode [ 1700.241007][ T9881] hsr_slave_1: left promiscuous mode [ 1701.292730][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.247646][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.749462][T17320] loop0: detected capacity change from 0 to 40427 [ 1702.763285][T17322] loop1: detected capacity change from 0 to 16 [ 1702.807335][T17320] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1702.809765][T17322] erofs (device loop1): mounted with root inode @ nid 36. [ 1702.816577][T17320] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1702.844591][T17322] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1702.959084][T17323] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1702.968281][T17323] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1702.976783][T17323] erofs (device loop1): readahead error at folio 42 @ nid 36 [ 1702.986441][T17323] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 1702.994769][T17323] erofs (device loop1): readahead error at folio 41 @ nid 36 [ 1703.003717][T17323] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36 [ 1703.012119][T17323] erofs (device loop1): readahead error at folio 40 @ nid 36 [ 1703.021125][T17323] erofs (device loop1): readahead error at folio 39 @ nid 36 [ 1703.028630][T17323] erofs (device loop1): readahead error at folio 38 @ nid 36 [ 1703.037482][T17323] erofs (device loop1): readahead error at folio 36 @ nid 36 [ 1703.049135][T17323] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 1703.071851][T17323] erofs (device loop1): readahead error at folio 31 @ nid 36 [ 1703.081024][T17323] erofs (device loop1): readahead error at folio 25 @ nid 36 [ 1703.088740][T17323] erofs (device loop1): readahead error at folio 24 @ nid 36 [ 1703.099453][T17323] erofs (device loop1): readahead error at folio 19 @ nid 36 [ 1703.112151][T17323] syz.1.2999: attempt to access beyond end of device [ 1703.112151][T17323] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1703.127887][T17323] syz.1.2999: attempt to access beyond end of device [ 1703.127887][T17323] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1703.143708][T17323] syz.1.2999: attempt to access beyond end of device [ 1703.143708][T17323] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1703.178247][T17323] erofs (device loop1): readahead error at folio 87 @ nid 36 [ 1703.185804][T17323] erofs (device loop1): readahead error at folio 86 @ nid 36 [ 1703.233346][T17323] erofs (device loop1): bogus lookback distance 363 @ lcn 82 of nid 36 [ 1703.241765][T17323] erofs (device loop1): readahead error at folio 83 @ nid 36 [ 1703.249258][T17323] erofs (device loop1): bogus lookback distance 363 @ lcn 82 of nid 36 [ 1703.257636][T17323] erofs (device loop1): readahead error at folio 82 @ nid 36 [ 1703.265847][T17323] erofs (device loop1): readahead error at folio 79 @ nid 36 [ 1703.273354][T17323] erofs (device loop1): readahead error at folio 78 @ nid 36 [ 1703.281041][T17323] erofs (device loop1): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 1703.289593][T17323] erofs (device loop1): readahead error at folio 76 @ nid 36 [ 1703.297105][T17323] erofs (device loop1): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 1703.305664][T17323] erofs (device loop1): readahead error at folio 75 @ nid 36 [ 1703.315467][T17323] erofs (device loop1): readahead error at folio 74 @ nid 36 [ 1703.324671][T17323] erofs (device loop1): readahead error at folio 72 @ nid 36 [ 1703.334074][T17323] erofs (device loop1): readahead error at folio 71 @ nid 36 [ 1703.341657][T17323] erofs (device loop1): readahead error at folio 70 @ nid 36 [ 1703.349820][T17323] erofs (device loop1): readahead error at folio 63 @ nid 36 [ 1703.357386][T17323] erofs (device loop1): readahead error at folio 61 @ nid 36 [ 1703.364884][T17323] erofs (device loop1): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 1703.373251][T17323] erofs (device loop1): readahead error at folio 59 @ nid 36 [ 1703.380676][T17323] erofs (device loop1): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 1703.389072][T17323] erofs (device loop1): readahead error at folio 58 @ nid 36 [ 1703.396517][T17323] erofs (device loop1): readahead error at folio 56 @ nid 36 [ 1703.404163][T17323] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 1703.412647][T17323] erofs (device loop1): readahead error at folio 47 @ nid 36 [ 1703.420133][T17323] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 1703.430237][T17323] erofs (device loop1): readahead error at folio 46 @ nid 36 [ 1703.437643][T17323] erofs (device loop1): readahead error at folio 45 @ nid 36 [ 1703.446827][T17323] syz.1.2999: attempt to access beyond end of device [ 1703.446827][T17323] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 1703.460504][T17323] syz.1.2999: attempt to access beyond end of device [ 1703.460504][T17323] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1703.474587][T17323] syz.1.2999: attempt to access beyond end of device [ 1703.474587][T17323] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 1703.519905][T17322] erofs (device loop1): failed to decompress -3 in[47, 4049] out[5297] [ 1703.528988][T17322] erofs (device loop1): read error -117 @ 43 of nid 36 [ 1703.573940][T17320] F2FS-fs (loop0): invalid crc value [ 1703.799082][T17320] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1703.806173][T17320] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1705.140611][ T30] audit: type=1800 audit(1752767752.980:199): pid=17334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3001" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1707.183270][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1707.728209][T17344] Cannot find set identified by id 0 to match [ 1708.267946][ T987] kworker/u8:5: attempt to access beyond end of device [ 1708.267946][ T987] loop0: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 1709.833766][ T987] kworker/u8:5: attempt to access beyond end of device [ 1709.833766][ T987] loop0: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 1711.193952][ T987] kworker/u8:5: attempt to access beyond end of device [ 1711.193952][ T987] loop0: rw=1, sector=57344, nr_sectors = 3120 limit=40427 [ 1711.782142][ T5866] Bluetooth: hci4: unexpected event for opcode 0x080f [ 1712.042972][ T9881] team0 (unregistering): Port device team_slave_1 removed [ 1712.337427][ T9881] team0 (unregistering): Port device team_slave_0 removed [ 1716.192871][T17150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.200515][T17150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.209712][T17150] bridge_slave_0: entered allmulticast mode [ 1716.241925][T17150] bridge_slave_0: entered promiscuous mode [ 1716.465150][T17150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.472447][T17150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.489390][T17150] bridge_slave_1: entered allmulticast mode [ 1716.503251][T17150] bridge_slave_1: entered promiscuous mode [ 1719.006093][T17150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1719.366194][T17409] 9pnet_fd: p9_fd_create_tcp (17409): problem connecting socket to 127.0.0.1 [ 1722.257557][T17150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.613835][T17150] team0: Port device team_slave_0 added [ 1723.646443][T17150] team0: Port device team_slave_1 added [ 1723.732758][ T9068] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1724.011466][T17150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.043451][T17150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.069609][ C0] vkms_vblank_simulate: vblank timer overrun [ 1724.113464][T17150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.134115][ T5866] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1724.317913][ T9068] usb 3-1: Using ep0 maxpacket: 16 [ 1724.321916][T17150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.330383][T17150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.351925][ T9068] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1725.149275][T17150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1725.436389][ T9068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.303696][ T9068] usb 3-1: Product: syz [ 1726.307972][ T9068] usb 3-1: Manufacturer: syz [ 1726.313099][ T9068] usb 3-1: SerialNumber: syz [ 1726.405005][T17448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.429323][ T9068] usb 3-1: config 0 descriptor?? [ 1726.525587][ T9068] usb 3-1: can't set config #0, error -71 [ 1726.559822][ T9068] usb 3-1: USB disconnect, device number 12 [ 1726.677709][T17150] hsr_slave_0: entered promiscuous mode [ 1726.710861][T17150] hsr_slave_1: entered promiscuous mode [ 1726.736523][T17150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1726.881450][T17150] Cannot create hsr debugfs directory [ 1734.299161][T17491] loop8: detected capacity change from 0 to 16384 [ 1736.997725][ T5866] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1737.441130][ T9872] bridge_slave_1: left allmulticast mode [ 1737.446867][ T9872] bridge_slave_1: left promiscuous mode [ 1738.033670][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.309241][T17527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(0) [ 1738.316123][T17527] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1738.324876][T17527] vhci_hcd vhci_hcd.0: Device attached [ 1738.685010][ T9872] bridge_slave_0: left allmulticast mode [ 1738.690723][ T9872] bridge_slave_0: left promiscuous mode [ 1738.718060][T12836] vhci_hcd: vhci_device speed not set [ 1738.730055][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.803373][T12836] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 1739.889659][T17528] vhci_hcd: connection reset by peer [ 1739.934135][ T6059] vhci_hcd: stop threads [ 1739.939066][ T6059] vhci_hcd: release socket [ 1739.966738][ T6059] vhci_hcd: disconnect device [ 1742.563393][T14297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1742.593327][T14297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1742.603085][T14297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1742.611293][T14297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1742.619082][T14297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1742.670387][ T9872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.050080][ T9872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1745.103848][T14297] Bluetooth: hci0: command tx timeout [ 1745.109582][T12836] vhci_hcd: vhci_device speed not set [ 1745.441136][ T9872] bond0 (unregistering): Released all slaves [ 1746.812074][ T9872] hsr_slave_0: left promiscuous mode [ 1746.988700][ T9872] hsr_slave_1: left promiscuous mode [ 1747.054803][ T9872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1747.200868][ T9872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1747.528356][T14297] Bluetooth: hci0: command tx timeout [ 1749.095917][T14297] Bluetooth: hci6: unexpected event for opcode 0x080f [ 1749.574611][T17600] loop0: detected capacity change from 0 to 256 [ 1749.762122][T14297] Bluetooth: hci0: command tx timeout [ 1749.985380][T17600] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1749.996348][T17600] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1750.033828][T17600] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1752.588574][T14297] Bluetooth: hci0: command tx timeout [ 1755.506288][T17631] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3077'. [ 1755.736623][ T9872] team0 (unregistering): Port device team_slave_1 removed [ 1755.879808][T14297] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1755.988588][ T9872] team0 (unregistering): Port device team_slave_0 removed [ 1761.607409][T17556] chnl_net:caif_netlink_parms(): no params data found [ 1763.800707][T17683] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3090'. [ 1764.674010][T17556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.935541][T17556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.942864][T17556] bridge_slave_0: entered allmulticast mode [ 1764.970047][T17556] bridge_slave_0: entered promiscuous mode [ 1764.991611][T17556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.002574][T17556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1765.027314][T17556] bridge_slave_1: entered allmulticast mode [ 1766.051944][T17556] bridge_slave_1: entered promiscuous mode [ 1768.548623][T17697] program syz.0.3093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1769.506992][T17556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.666865][T17703] overlayfs: failed to clone upperpath [ 1769.737423][T17704] overlayfs: failed to clone upperpath [ 1770.205088][T17556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1770.978722][T17556] team0: Port device team_slave_0 added [ 1771.176192][T17556] team0: Port device team_slave_1 added [ 1772.177922][T17556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.445951][T17556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.208845][T17721] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1773.511202][T17556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1773.565500][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1773.578373][T17556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1773.594121][T17556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1773.631871][T14297] Bluetooth: hci6: unexpected event for opcode 0x080f [ 1773.737052][T17556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1774.112843][T14297] Bluetooth: hci3: unexpected event for opcode 0x080f [ 1774.258418][T17556] hsr_slave_0: entered promiscuous mode [ 1774.286810][T17556] hsr_slave_1: entered promiscuous mode [ 1774.293190][T17556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1774.361151][T17556] Cannot create hsr debugfs directory [ 1774.420865][T17738] loop1: detected capacity change from 0 to 1024 [ 1775.270432][T17739] delete_channel: no stack [ 1776.566365][T17750] loop0: detected capacity change from 0 to 1024 [ 1777.504804][T17753] hfsplus: xattr searching failed [ 1777.557778][ T30] audit: type=1800 audit(1752767820.460:200): pid=17753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3109" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 1777.602092][T17756] hfsplus: xattr searching failed [ 1777.608670][T17756] hfsplus: xattr searching failed [ 1777.666562][T15658] hfsplus: bad catalog entry type [ 1778.101471][ T9872] hfsplus: b-tree write err: -5, ino 3 [ 1783.010019][ T9881] hfsplus: bad catalog file entry [ 1784.305499][T17791] loop1: detected capacity change from 0 to 512 [ 1784.339979][T17791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1784.394094][ T6630] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.439830][T17791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1784.526719][T17791] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1784.972203][ T6630] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.421618][ T6630] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.028605][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1787.049336][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1787.065262][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1787.085824][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1787.094022][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1787.789815][ T6630] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.967313][T17814] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1787.968003][T12836] IPVS: starting estimator thread 0... [ 1788.002714][T17815] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1788.098973][T17816] IPVS: using max 23 ests per chain, 55200 per kthread [ 1788.384302][T17556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1788.432672][T17819] loop2: detected capacity change from 0 to 512 [ 1788.438986][T17556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1788.540771][T17819] EXT4-fs warning (device loop2): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1788.662967][T17819] EXT4-fs (loop2): mount failed [ 1788.733898][T17556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1788.837422][T17556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1789.083562][T17809] chnl_net:caif_netlink_parms(): no params data found [ 1789.164417][T13500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1789.179939][ T6630] bridge_slave_1: left allmulticast mode [ 1789.195981][ T6630] bridge_slave_1: left promiscuous mode [ 1789.379605][ T5866] Bluetooth: hci1: command tx timeout [ 1789.744772][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.030195][ T6630] bridge_slave_0: left allmulticast mode [ 1790.070914][ T6630] bridge_slave_0: left promiscuous mode [ 1790.076791][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.583156][T17851] loop2: detected capacity change from 0 to 2048 [ 1791.591705][ T5866] Bluetooth: hci1: command tx timeout [ 1793.873625][ T5866] Bluetooth: hci1: command tx timeout [ 1796.094702][ T5866] Bluetooth: hci1: command tx timeout [ 1796.148128][T17874] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1796.261039][ T9881] Bluetooth: hci3: Frame reassembly failed (-84) [ 1798.168385][T17885] loop1: detected capacity change from 0 to 512 [ 1798.226732][T17885] EXT4-fs warning (device loop1): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1798.337296][T17885] EXT4-fs (loop1): mount failed [ 1798.357283][ T5866] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1801.724359][ T5866] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1802.056738][ T6630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.104506][ T6630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1802.186175][ T6630] bond0 (unregistering): Released all slaves [ 1803.453737][T14279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1803.464409][T14279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1803.483753][T14279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1803.500374][T14279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1803.508310][T14279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1805.136831][T17809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.164624][T17809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.185164][T17809] bridge_slave_0: entered allmulticast mode [ 1805.208317][T17809] bridge_slave_0: entered promiscuous mode [ 1805.241891][T17809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.259277][T17809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.270740][T17934] loop1: detected capacity change from 0 to 512 [ 1805.277715][T17809] bridge_slave_1: entered allmulticast mode [ 1805.305073][T17934] EXT4-fs: Ignoring removed mblk_io_submit option [ 1805.311559][T17934] EXT4-fs: Ignoring removed bh option [ 1805.336590][T17934] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1805.506051][T17809] bridge_slave_1: entered promiscuous mode [ 1805.804996][ T5866] Bluetooth: hci3: command tx timeout [ 1806.675712][T17934] EXT4-fs (loop1): 1 truncate cleaned up [ 1806.688250][T17934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1808.088381][ T5866] Bluetooth: hci3: command tx timeout [ 1808.728536][T13500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1808.820916][T17809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.875301][T17809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.984894][T17957] loop1: detected capacity change from 0 to 1024 [ 1809.700932][T17963] hfsplus: xattr searching failed [ 1809.709397][T17963] hfsplus: xattr searching failed [ 1810.028682][ T6630] hsr_slave_0: left promiscuous mode [ 1810.067802][ T6630] hsr_slave_1: left promiscuous mode [ 1810.162954][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1810.326922][ T5866] Bluetooth: hci3: command tx timeout [ 1810.340285][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1810.385768][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1810.504820][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.605927][ T6630] veth1_macvtap: left promiscuous mode [ 1810.627268][ T6630] veth0_macvtap: left promiscuous mode [ 1810.667785][ T6630] veth1_vlan: left promiscuous mode [ 1810.695512][ T6630] veth0_vlan: left promiscuous mode [ 1812.562991][ T5866] Bluetooth: hci3: command tx timeout [ 1812.833230][T17982] loop2: detected capacity change from 0 to 64 [ 1815.505898][ T6630] team0 (unregistering): Port device team_slave_1 removed [ 1815.547717][ T6630] team0 (unregistering): Port device team_slave_0 removed [ 1816.030920][T17809] team0: Port device team_slave_0 added [ 1816.099010][T17809] team0: Port device team_slave_1 added [ 1816.313984][ T9876] hfsplus: b-tree write err: -5, ino 3 [ 1816.355760][T17963] hfsplus: node 4:3 still has 1 user(s)! [ 1816.424894][T17809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1816.466918][T17809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1816.492883][ C1] vkms_vblank_simulate: vblank timer overrun [ 1816.530231][T17809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1816.575576][T17809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1816.598561][T17809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.007852][T17809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1819.362085][T17809] hsr_slave_0: entered promiscuous mode [ 1819.368947][T17809] hsr_slave_1: entered promiscuous mode [ 1819.375320][T17809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1819.382970][T17809] Cannot create hsr debugfs directory [ 1821.236905][T14279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1821.239587][T18027] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1821.260930][T14279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1821.264618][T18028] bond1: entered promiscuous mode [ 1821.273709][T14279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1821.278168][T18028] ip6gretap1: entered promiscuous mode [ 1821.290557][T14279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1821.301980][T14279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1821.310271][T18028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1821.328163][T17916] chnl_net:caif_netlink_parms(): no params data found [ 1823.013261][T17916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.158777][T17916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.168552][T17916] bridge_slave_0: entered allmulticast mode [ 1823.572158][T14279] Bluetooth: hci0: command tx timeout [ 1824.083376][T17916] bridge_slave_0: entered promiscuous mode [ 1824.101825][T17916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.108984][T17916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.116260][T17916] bridge_slave_1: entered allmulticast mode [ 1824.124549][T17916] bridge_slave_1: entered promiscuous mode [ 1824.881444][ T6630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.823780][T14279] Bluetooth: hci0: command tx timeout [ 1826.475155][T18054] Invalid ELF header magic: != ELF [ 1826.516771][T17916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.743035][T17916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1827.782679][ T6630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.095303][T14279] Bluetooth: hci0: command tx timeout [ 1828.713159][ T6630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.740567][ T9102] libceph: connect (1)[c::]:6789 error -101 [ 1829.746795][ T9102] libceph: mon0 (1)[c::]:6789 connect error [ 1829.813857][T18080] loop2: detected capacity change from 0 to 64 [ 1830.047081][ T9102] libceph: connect (1)[c::]:6789 error -101 [ 1830.446566][T18076] ceph: No mds server is up or the cluster is laggy [ 1830.458416][T14279] Bluetooth: hci0: command tx timeout [ 1830.707133][ T9102] libceph: mon0 (1)[c::]:6789 connect error [ 1831.110458][T17916] team0: Port device team_slave_0 added [ 1831.184598][ T6630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.222934][T18088] x_tables: duplicate underflow at hook 1 [ 1832.320341][ T30] audit: type=1800 audit(1752767871.013:201): pid=18088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3191" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1832.418825][T18088] [ 1832.421175][T18088] ====================================================== [ 1832.428203][T18088] WARNING: possible circular locking dependency detected [ 1832.435232][T18088] 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 Not tainted [ 1832.442359][T18088] ------------------------------------------------------ [ 1832.449390][T18088] syz.2.3191/18088 is trying to acquire lock: [ 1832.455468][T18088] ffff888035821478 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa1/0xb10 [ 1832.466245][T18088] [ 1832.466245][T18088] but task is already holding lock: [ 1832.473618][T18088] ffff8880348920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x183/0x220 [ 1832.483045][T18088] [ 1832.483045][T18088] which lock already depends on the new lock. [ 1832.483045][T18088] [ 1832.493456][T18088] [ 1832.493456][T18088] the existing dependency chain (in reverse order) is: [ 1832.502483][T18088] [ 1832.502483][T18088] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 1832.510460][T18088] __mutex_lock+0x199/0xb90 [ 1832.515517][T18088] hfs_find_init+0x183/0x220 [ 1832.520686][T18088] hfs_ext_read_extent+0x19b/0x9e0 [ 1832.526365][T18088] hfs_extend_file+0x4e2/0xb10 [ 1832.531692][T18088] hfs_bmap_reserve+0x2a2/0x390 [ 1832.537103][T18088] hfs_cat_create+0x229/0x820 [ 1832.542339][T18088] hfs_create+0x6b/0xf0 [ 1832.547050][T18088] lookup_open.isra.0+0x11d3/0x1580 [ 1832.552806][T18088] path_openat+0x893/0x2cb0 [ 1832.557875][T18088] do_filp_open+0x20b/0x470 [ 1832.562943][T18088] do_sys_openat2+0x11b/0x1d0 [ 1832.568170][T18088] __x64_sys_openat+0x174/0x210 [ 1832.573574][T18088] do_syscall_64+0xcd/0x4c0 [ 1832.578632][T18088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.585078][T18088] [ 1832.585078][T18088] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 1832.594346][T18088] __lock_acquire+0x126f/0x1c90 [ 1832.599784][T18088] lock_acquire+0x179/0x350 [ 1832.604842][T18088] __mutex_lock+0x199/0xb90 [ 1832.609897][T18088] hfs_extend_file+0xa1/0xb10 [ 1832.615134][T18088] hfs_bmap_reserve+0x2a2/0x390 [ 1832.620543][T18088] __hfs_ext_write_extent+0x3cf/0x520 [ 1832.626477][T18088] hfs_ext_read_extent+0x807/0x9e0 [ 1832.632151][T18088] hfs_extend_file+0x4e2/0xb10 [ 1832.637477][T18088] hfs_get_block+0x17f/0x830 [ 1832.642627][T18088] __block_write_begin_int+0x4f4/0x16d0 [ 1832.648725][T18088] block_write_begin+0x9a/0x1d0 [ 1832.654133][T18088] cont_write_begin+0x61b/0x950 [ 1832.659537][T18088] hfs_write_begin+0x64/0x120 [ 1832.664778][T18088] cont_write_begin+0x350/0x950 [ 1832.670185][T18088] hfs_write_begin+0x64/0x120 [ 1832.675423][T18088] hfs_file_truncate+0xc0f/0xfc0 [ 1832.680923][T18088] hfs_inode_setattr+0x48e/0x5e0 [ 1832.686423][T18088] notify_change+0x6a9/0x1230 [ 1832.691664][T18088] do_truncate+0x1d7/0x230 [ 1832.696652][T18088] do_ftruncate+0x5a9/0x970 [ 1832.701721][T18088] do_sys_ftruncate+0x61/0xb0 [ 1832.706971][T18088] __x64_sys_ftruncate+0x58/0x80 [ 1832.712476][T18088] do_syscall_64+0xcd/0x4c0 [ 1832.717532][T18088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.723977][T18088] [ 1832.723977][T18088] other info that might help us debug this: [ 1832.723977][T18088] [ 1832.734218][T18088] Possible unsafe locking scenario: [ 1832.734218][T18088] [ 1832.741679][T18088] CPU0 CPU1 [ 1832.747053][T18088] ---- ---- [ 1832.752430][T18088] lock(&tree->tree_lock/1); [ 1832.757156][T18088] lock(&HFS_I(tree->inode)->extents_lock); [ 1832.765691][T18088] lock(&tree->tree_lock/1); [ 1832.772942][T18088] lock(&HFS_I(tree->inode)->extents_lock); [ 1832.778957][T18088] [ 1832.778957][T18088] *** DEADLOCK *** [ 1832.778957][T18088] [ 1832.787109][T18088] 4 locks held by syz.2.3191/18088: [ 1832.792325][T18088] #0: ffff888052b12428 (sb_writers#24){.+.+}-{0:0}, at: do_sys_ftruncate+0x61/0xb0 [ 1832.801842][T18088] #1: ffff88804facbd20 (&sb->s_type->i_mutex_key#34){+.+.}-{4:4}, at: do_truncate+0x146/0x230 [ 1832.812313][T18088] #2: ffff88804facbb78 (&HFS_I(inode)->extents_lock#2){+.+.}-{4:4}, at: hfs_extend_file+0xa1/0xb10 [ 1832.823222][T18088] #3: ffff8880348920b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x183/0x220 [ 1832.833111][T18088] [ 1832.833111][T18088] stack backtrace: [ 1832.839017][T18088] CPU: 0 UID: 0 PID: 18088 Comm: syz.2.3191 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1832.839069][T18088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1832.839094][T18088] Call Trace: [ 1832.839105][T18088] [ 1832.839119][T18088] dump_stack_lvl+0x116/0x1f0 [ 1832.839158][T18088] print_circular_bug+0x275/0x350 [ 1832.839223][T18088] check_noncircular+0x14c/0x170 [ 1832.839294][T18088] __lock_acquire+0x126f/0x1c90 [ 1832.839363][T18088] ? stack_trace_save+0x8e/0xc0 [ 1832.839423][T18088] lock_acquire+0x179/0x350 [ 1832.839458][T18088] ? hfs_extend_file+0xa1/0xb10 [ 1832.839508][T18088] ? __pfx___might_resched+0x10/0x10 [ 1832.839566][T18088] __mutex_lock+0x199/0xb90 [ 1832.839605][T18088] ? hfs_extend_file+0xa1/0xb10 [ 1832.839652][T18088] ? lockdep_hardirqs_on+0x7c/0x110 [ 1832.839691][T18088] ? hfs_extend_file+0xa1/0xb10 [ 1832.839741][T18088] ? __pfx___mutex_lock+0x10/0x10 [ 1832.839792][T18088] ? preempt_schedule_common+0x44/0xc0 [ 1832.839857][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.839906][T18088] ? preempt_schedule_thunk+0x16/0x30 [ 1832.839964][T18088] ? hfs_extend_file+0xa1/0xb10 [ 1832.840010][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.840058][T18088] hfs_extend_file+0xa1/0xb10 [ 1832.840109][T18088] ? __pfx_hfs_extend_file+0x10/0x10 [ 1832.840158][T18088] ? hfs_brec_find+0x3ea/0x540 [ 1832.840194][T18088] ? __pfx___mutex_lock+0x10/0x10 [ 1832.840239][T18088] hfs_bmap_reserve+0x2a2/0x390 [ 1832.840281][T18088] ? rcu_is_watching+0x12/0xc0 [ 1832.840338][T18088] __hfs_ext_write_extent+0x3cf/0x520 [ 1832.840391][T18088] hfs_ext_read_extent+0x807/0x9e0 [ 1832.840442][T18088] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 1832.840504][T18088] hfs_extend_file+0x4e2/0xb10 [ 1832.840556][T18088] ? __pfx_hfs_extend_file+0x10/0x10 [ 1832.840613][T18088] hfs_get_block+0x17f/0x830 [ 1832.840669][T18088] ? __pfx_hfs_get_block+0x10/0x10 [ 1832.840717][T18088] __block_write_begin_int+0x4f4/0x16d0 [ 1832.840769][T18088] ? __pfx_hfs_get_block+0x10/0x10 [ 1832.840823][T18088] ? __pfx___block_write_begin_int+0x10/0x10 [ 1832.840874][T18088] ? __pfx_hfs_get_block+0x10/0x10 [ 1832.840923][T18088] block_write_begin+0x9a/0x1d0 [ 1832.840965][T18088] ? lockdep_hardirqs_on+0x7c/0x110 [ 1832.841003][T18088] cont_write_begin+0x61b/0x950 [ 1832.841046][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.841096][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.841146][T18088] ? __pfx_hfs_get_block+0x10/0x10 [ 1832.841195][T18088] ? __pfx_cont_write_begin+0x10/0x10 [ 1832.841238][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.841292][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.841345][T18088] hfs_write_begin+0x64/0x120 [ 1832.841395][T18088] ? __pfx_hfs_get_block+0x10/0x10 [ 1832.841447][T18088] cont_write_begin+0x350/0x950 [ 1832.841495][T18088] ? __pfx_hfs_get_block+0x10/0x10 [ 1832.841545][T18088] ? __pfx_cont_write_begin+0x10/0x10 [ 1832.841597][T18088] hfs_write_begin+0x64/0x120 [ 1832.841647][T18088] ? __pfx_hfs_get_block+0x10/0x10 [ 1832.841699][T18088] hfs_file_truncate+0xc0f/0xfc0 [ 1832.841754][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.841802][T18088] ? __up_read+0x1f8/0x750 [ 1832.841842][T18088] ? down_read+0x13d/0x480 [ 1832.841888][T18088] ? __pfx___up_read+0x10/0x10 [ 1832.841931][T18088] ? __pfx_hfs_file_truncate+0x10/0x10 [ 1832.841989][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.842043][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.842097][T18088] hfs_inode_setattr+0x48e/0x5e0 [ 1832.842151][T18088] ? __pfx_hfs_inode_setattr+0x10/0x10 [ 1832.842205][T18088] notify_change+0x6a9/0x1230 [ 1832.842258][T18088] do_truncate+0x1d7/0x230 [ 1832.842311][T18088] ? __pfx_do_truncate+0x10/0x10 [ 1832.842374][T18088] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1832.842427][T18088] do_ftruncate+0x5a9/0x970 [ 1832.842484][T18088] ? __pfx_do_ftruncate+0x10/0x10 [ 1832.842541][T18088] ? __entry_text_end+0x1020b5/0x1020b9 [ 1832.842595][T18088] do_sys_ftruncate+0x61/0xb0 [ 1832.842652][T18088] __x64_sys_ftruncate+0x58/0x80 [ 1832.842715][T18088] do_syscall_64+0xcd/0x4c0 [ 1832.842765][T18088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.842806][T18088] RIP: 0033:0x7f32ad58e929 [ 1832.842835][T18088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1832.842878][T18088] RSP: 002b:00007f32ae357038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 1832.842914][T18088] RAX: ffffffffffffffda RBX: 00007f32ad7b6080 RCX: 00007f32ad58e929 [ 1832.842940][T18088] RDX: 0000000000000000 RSI: 0000000002007ffb RDI: 000000000000000a [ 1832.842965][T18088] RBP: 00007f32ad610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1832.842990][T18088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1832.843014][T18088] R13: 0000000000000000 R14: 00007f32ad7b6080 R15: 00007fff0c2356e8 [ 1832.843053][T18088] [ 1833.565260][T17916] team0: Port device team_slave_1 added [ 1833.607352][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.607352][ T987] loop2: rw=1, sector=413, nr_sectors = 1 limit=64 [ 1833.621024][ T987] Buffer I/O error on dev loop2, logical block 413, lost async page write [ 1833.633643][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.633643][ T987] loop2: rw=1, sector=414, nr_sectors = 1 limit=64 [ 1833.646985][ T987] Buffer I/O error on dev loop2, logical block 414, lost async page write [ 1833.655570][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.655570][ T987] loop2: rw=1, sector=415, nr_sectors = 1 limit=64 [ 1833.669403][ T987] Buffer I/O error on dev loop2, logical block 415, lost async page write [ 1833.678009][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.678009][ T987] loop2: rw=1, sector=416, nr_sectors = 1 limit=64 [ 1833.691319][ T987] Buffer I/O error on dev loop2, logical block 416, lost async page write [ 1833.699894][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.699894][ T987] loop2: rw=1, sector=417, nr_sectors = 1 limit=64 [ 1833.713212][ T987] Buffer I/O error on dev loop2, logical block 417, lost async page write [ 1833.721816][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.721816][ T987] loop2: rw=1, sector=420, nr_sectors = 1 limit=64 [ 1833.735119][ T987] Buffer I/O error on dev loop2, logical block 420, lost async page write [ 1833.743720][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.743720][ T987] loop2: rw=1, sector=421, nr_sectors = 1 limit=64 [ 1833.757025][ T987] Buffer I/O error on dev loop2, logical block 421, lost async page write [ 1833.765606][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.765606][ T987] loop2: rw=1, sector=422, nr_sectors = 1 limit=64 [ 1833.778901][ T987] Buffer I/O error on dev loop2, logical block 422, lost async page write [ 1833.788778][ T987] kworker/u8:5: attempt to access beyond end of device [ 1833.788778][ T987] loop2: rw=1, sector=423, nr_sectors = 17 limit=64 [ 1833.827117][T17916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1833.834149][T17916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1833.860317][T17916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1834.431801][T17916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1834.438868][T17916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1834.543520][T17916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1834.729343][T17916] hsr_slave_0: entered promiscuous mode [ 1834.736932][T17916] hsr_slave_1: entered promiscuous mode [ 1834.763866][T17916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1834.771427][T17916] Cannot create hsr debugfs directory [ 1834.783905][T18030] chnl_net:caif_netlink_parms(): no params data found [ 1834.841549][T17809] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1834.866220][T17809] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1834.907362][T17809] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1834.923108][T17809] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1834.983589][T18030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.992991][T18030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.001705][T18030] bridge_slave_0: entered allmulticast mode [ 1835.008469][T18030] bridge_slave_0: entered promiscuous mode [ 1835.015929][T18030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.023087][T18030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.030210][T18030] bridge_slave_1: entered allmulticast mode [ 1835.037162][T18030] bridge_slave_1: entered promiscuous mode [ 1835.089967][T18030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1835.124689][T18030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1835.156657][ T6630] bridge_slave_1: left allmulticast mode [ 1835.162361][ T6630] bridge_slave_1: left promiscuous mode [ 1835.168804][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.177482][ T6630] bridge_slave_0: left allmulticast mode [ 1835.183126][ T6630] bridge_slave_0: left promiscuous mode [ 1835.194417][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.203688][ T6630] bridge_slave_1: left allmulticast mode [ 1835.210134][ T6630] bridge_slave_1: left promiscuous mode [ 1835.215787][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.225550][ T6630] bridge_slave_0: left allmulticast mode [ 1835.231416][ T6630] bridge_slave_0: left promiscuous mode [ 1835.237063][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.344925][ T6630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1835.356842][ T6630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1835.366517][ T6630] bond0 (unregistering): Released all slaves [ 1835.431210][ T6630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1835.441239][ T6630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1835.452813][ T6630] bond0 (unregistering): Released all slaves [ 1835.465091][T18030] team0: Port device team_slave_0 added [ 1835.482649][T18030] team0: Port device team_slave_1 added [ 1835.536531][T18030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1835.543772][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1835.571760][T18030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1835.602787][T18030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1835.610025][T18030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1835.637149][T18030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1835.700128][T18030] hsr_slave_0: entered promiscuous mode [ 1835.708738][T18030] hsr_slave_1: entered promiscuous mode [ 1835.714725][T18030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1835.723067][T18030] Cannot create hsr debugfs directory [ 1835.766215][ T6630] hsr_slave_0: left promiscuous mode [ 1835.774062][ T6630] hsr_slave_1: left promiscuous mode [ 1835.780124][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.788124][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.796542][ T6630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.805341][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.817717][ T6630] hsr_slave_0: left promiscuous mode [ 1835.823441][ T6630] hsr_slave_1: left promiscuous mode [ 1835.830971][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.840369][ T6630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.852966][ T6630] veth1_macvtap: left promiscuous mode [ 1835.858639][ T6630] veth0_macvtap: left promiscuous mode [ 1835.864192][ T6630] veth1_vlan: left promiscuous mode [ 1835.870079][ T6630] veth0_vlan: left promiscuous mode [ 1836.023379][ T6630] team0 (unregistering): Port device team_slave_1 removed [ 1836.051071][ T6630] team0 (unregistering): Port device team_slave_0 removed [ 1836.257050][ T6630] team0 (unregistering): Port device team_slave_1 removed [ 1836.281599][ T6630] team0 (unregistering): Port device team_slave_0 removed [ 1836.456759][T17916] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1836.465743][T17916] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1836.480278][T17809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.487973][T17916] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1836.505473][T17916] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1836.550665][T17809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1836.567770][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.574880][ T9852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.590530][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.597639][ T9852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.700270][T17916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.723512][T17916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1836.739189][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.746306][ T9881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.765280][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.772407][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.866172][T18030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1836.889507][T18030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1836.905063][T18030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1836.936659][T18030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1836.976284][T17809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1837.012901][ T6630] IPVS: stop unused estimator thread 0... [ 1837.105657][T18030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1837.158654][T17916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1837.170870][T18030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.191541][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.198630][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1837.223299][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.230385][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1837.301364][T17916] veth0_vlan: entered promiscuous mode [ 1837.326655][T17916] veth1_vlan: entered promiscuous mode [ 1837.356907][T17916] veth0_macvtap: entered promiscuous mode [ 1837.375616][T17916] veth1_macvtap: entered promiscuous mode [ 1837.424229][T17916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.453771][T17916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.466177][T17809] veth0_vlan: entered promiscuous mode [ 1837.477018][T17916] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.503989][T17916] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.512730][T17916] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.533586][T17916] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.556715][T17809] veth1_vlan: entered promiscuous mode [ 1837.604091][T17916] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 1837.637924][T18030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1837.645905][ T6615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.653726][ T6615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.667930][T17916] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 1837.704405][T17809] veth0_macvtap: entered promiscuous mode [ 1837.727052][T17809] veth1_macvtap: entered promiscuous mode [ 1837.734402][ T6615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.749219][ T6615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.767462][T17809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.787043][T17809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.804014][T17809] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.813669][T17809] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.826119][T17809] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.836247][T17809] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.890376][T17809] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 1837.918730][ T9881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.928287][T17809] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 1837.936554][ T9881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.968606][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.990624][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.052872][T18030] veth0_vlan: entered promiscuous mode [ 1838.065440][T18030] veth1_vlan: entered promiscuous mode [ 1838.093850][T18030] veth0_macvtap: entered promiscuous mode [ 1838.103023][T18030] veth1_macvtap: entered promiscuous mode [ 1838.120307][T18030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1838.133606][T18030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1838.144695][T18030] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.154416][T18030] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.163137][T18030] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.171879][T18030] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.202461][T18030] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 1838.236302][ T6615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.238363][T18030] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 1838.252288][ T6615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.273317][ T6615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.281173][ T6615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.127877][ T1294] ieee802154 phy0 wpan0: encryption failed: -22