last executing test programs: 49.848837467s ago: executing program 0 (id=103): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000002380)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/33, 0x21}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) write$UHID_INPUT(r1, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) bind$alg(r0, 0x0, 0x0) r3 = accept$alg(r0, 0x0, 0x0) dup(r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r4, 0x200004) 46.656950387s ago: executing program 0 (id=114): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], &(0x7f0000000240)=""/220, 0x18, 0xdc, 0xa, 0x0, 0x0, @void, @value}, 0x28) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r1, 0x0, 0x0, 0x0) 44.568443023s ago: executing program 0 (id=117): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x800008ec0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) read$FUSE(r1, &(0x7f000000b800)={0x2020, 0x0, 0x0}, 0xe80) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0x0, r4, {0x7, 0x28, 0x1ff, 0x2020202, 0x4, 0x6, 0x422, 0x1e}}, 0x50) dup3(0xffffffffffffffff, r1, 0x0) write$binfmt_elf64(r2, 0x0, 0xfffffe14) 44.005481258s ago: executing program 0 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./bus/file0/../file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) fchdir(r1) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0x40049366, 0x0) 43.833053913s ago: executing program 3 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) 43.781063929s ago: executing program 0 (id=124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000000)={[{@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@rodir}, {@shortname_winnt}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@numtail}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}]}, 0x1, 0x2b8, &(0x7f0000000840)="$eJzs3c+KI0UYAPCvM5mk1UNy8CSKDXrwtOzsE2SQWVjMSclBPeji7oJMgrALA/7B3j0Jnrx49AkEYW++hBffwAcQvLmHhZJOurcna5KdwGRGh9/vMt901Vf1VXfNDHPoyqevz47vFHHv0Td/RJ5n0RnFKJ5kMYxONB7GktEPAQD8nz1JKf5KC9vkZRGR764sAGCHtv77/3jnJQEAO/bBhx+9dzgeH71fFHncnH13Mqn+s6++LtoP78XnMY27cT0G8TQiPbOIb6aUym5RGcbbs/JkUmXOPvmtHv/wz4h5/kEMYji/tJx/a3x0UCycyi+rOl6u5x9V+TdiEK+umP/W+OjGivyY9OKdt07Vfy0G8ftn8UVM4868iDb/24OieDf9+PfXH1flVflZeTLpz/u10t4FPxoAAAAAAAAAAAAAAAAAAAAAAK6wa/XZOf2Yn99TXarP39l7Wn2zH0VjuHw+zyI/awZ67nygMsVPzfk614uiSHXHNr8br3WjezmrBgAAAAAAAAAAAAAAAAAAgP+WB19+dXx7Or17/1yC5jSA5rX+7cd5PM8anbryZmzO6rdzdepwwxSx1/TJIjbWUy3inG7Li4KX1tX88y/bDpi/uM9+NVe+rk/1CM8418M6aB5329TsruPb2ep72H/WOW82ya/NlZRS6sUZl9xb15S22n69lU2DDVnl6nFemQflhrkiW1fY92+0P5d1U/b8KnpL93kp2K+DWPcE8632879/V2RO6wAAAAAAAAAAAAAAAAAAgJ1qX/pd0fhoY2on9XdWFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcqPbz/7cIyjr5DJ17cf9B1TXLLnedAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG3/BAAA//8bwltm") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000000)) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "0c959905"}]}}, 0x0}, 0x0) 43.498680844s ago: executing program 0 (id=125): creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) epoll_create1(0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x64, 0x17, 0x2f, 0x20, 0x1557, 0x8150, 0x29ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0x7a, 0x61}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x89, 0x2}}) 42.180494631s ago: executing program 3 (id=130): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 38.455552984s ago: executing program 3 (id=138): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect(0x3, 0x8c6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) fanotify_init(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) 37.018697268s ago: executing program 3 (id=145): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000001f80)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000003f40)=""/4109, 0x100d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r3, &(0x7f0000000180)='./file1\x00', r3, &(0x7f00000001c0)='./file3\x00', 0x0) openat(r3, &(0x7f0000000080)='./file3\x00', 0x0, 0x0) 34.877464648s ago: executing program 3 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r3}, 0x10) setresuid(0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x0) 33.352431269s ago: executing program 3 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/105, 0x69) 29.380435416s ago: executing program 1 (id=160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000100e0ffffff170100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) dup2(r0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0xfecc) 29.042515793s ago: executing program 1 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000080)={[{@data_journal}]}, 0x3e, 0x517, &(0x7f00000013c0)="$eJzs3c9vI1cdAPDvTOJtdjfdpIJDqUSJaFFSQexkQ7cRh4VKiFslULkvIXGiKE4cxU67iSo2EX8AEkKAxIkTB5D4A5BQ/wSEVAnuCBAIwRYOHKCDPLbTrGOTdOtkJOfzkcZ+b35934vHz34zL54Arq2ZiLgbER9kWdbKT51alrYekog4aq/3/uN3VltTEln25t+TfFEr31pt7tR2t9ubxPxslvt2cjZu4+Bwa6VWq+518pXm9m6lcXA4v7m9slHdqO4sLS3eW35t+dXlhaHUczIi7n/1zz/83s++dv/XX3j7Dw/+OvedpFO9OFWPofj5h8n2/ksxcWrxeETsDS1YscY69Smdv+rknSfzM30OCwAALlnamT4bEa/EVIzl3+YAAACAUZJ9eTL+k0RkZ/SZ1cczPflS9NsXAAAAUKQ0HxubpOXOOIDJSNNyuT2G95NxK63VG83Pr9f3d9baY2ino5Sub9aqC52xwtNRSlr5xTz9Yf5uT34pIp6LiB9M3czz5dV6ba3okx8AAABwTdzu6f//a6rd/wcAAABGzHTRBQAAAAAunf4/AAAAjD79fwAAABhpX3/jjdaUde9/vfbWwf5W/a35tWpjq7y9v1rO6nu75Y16fSP/zb7t8/ZXq9d3vxg7+w8rzWqjWWkcHD7Yru/vNB9sPnELbAAAAOAKPfeZd3+fRMTRl27mU8uNogsFXInxk4cL+NPllgW4WmNFFwAozEU/+oHRUyq6AEDhknOWDxy885vhlwUAALgcs5/qf/0/OffcwFF6RUUELonzf3B9uf4P19dTXP/3f7wwIkoxFjrycL1d/vX/LPtIBQIAAIZuMp+StByRnweYjDQtlyOezW8LUErWN2vVhYi4ExG/myo908ov5lsm5/YZAAAAAAAAAAAAAAAAAAAAAAAAAIC2LEsiAwAAAEZaRPqXpHP/r9mplyd7zw/cSP49lT9HxNs/efNHD1eazb3F1vx/nMxv/rgz/257m6e4pygAAAAwRN1+ercfDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADD9P7jd1a701XG/dvrETHdL/54TOTPE1GKiFv/TGL81HZJRIwNIf7RcUQ83y9+0ipWTHdK0S/+zQLjpxFxewjx4Tp7t9X+fKXf+y+Nmfy5//vvXt5CfXwD27+ku8ZE3s71a3+evWCMF977ZWVg/OOIF8b7tz/d9jfpxL/TE/+lPvt7/f7Zed/65uHhoPjZTyNm+37+JE/EqjS3dyuNg8P5ze2VjepGdWdpafHe8mvLry4vVNY3a9XO46kmeeYk9f1P/+qDgfXPHsWtAfGne+rf+/d/edBOe/z3vYePP9FOls7EP46Ye6n/8ff8gPhp57Pvc510a/lsN33UTp/24i9+++LA+h9HrLXrP37e699b/7kL1v+Vb3z3jxdcFQC4Ao2Dw62VWq26V2BiLIqM3kp8rL9G62vRBVZO42kKdlT4qzPKiUeFRr9xkcPmJJE9ah+jQ37rDdxhgY0SAABwKRoHSdFFAAAAAAAAAAAAAAAAAAAAgGvvKn9dr+uomKoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxf/wsAAP//WhPMbg==") 27.694265838s ago: executing program 1 (id=166): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x2}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 26.941983124s ago: executing program 1 (id=169): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x255, &(0x7f00000003c0)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r3 = open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101800, 0x0) sendfile(r3, r2, 0x0, 0x80000000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x1a, '\x00', @c}) 26.463476708s ago: executing program 1 (id=170): prctl$PR_SET_SECUREBITS(0x1c, 0x7) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r1) open(0x0, 0x8e040, 0x0) setreuid(0x0, 0x0) creat(0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x36) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) 24.289904817s ago: executing program 1 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000000203050000000000000000000000bf0000080001000100000008accfc293e7a48ca84e8b3f454441bb6c6af7b4b5e721dbb0d7fb5dcd0c2dda035661406d0b"], 0x1c}}, 0x0) 23.034516911s ago: executing program 4 (id=179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) 22.66601947s ago: executing program 4 (id=181): socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 22.301081177s ago: executing program 4 (id=183): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x2705, &(0x7f0000000040)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001400)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0}) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "ca00"}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) r7 = io_uring_setup(0x6248, &(0x7f0000000280)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x18, 0x20000000, r8) 21.986316719s ago: executing program 4 (id=184): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000240)='./file2\x00', 0x800000, &(0x7f0000001500)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYRES8, @ANYRES8], 0x1, 0x1e4, &(0x7f0000000280)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utime(&(0x7f0000000200)='.\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}, {{&(0x7f0000005840)=@file={0x1, './file2\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 21.639249503s ago: executing program 4 (id=185): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000001180)='./file1\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 20.067087857s ago: executing program 4 (id=190): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 6.181306754s ago: executing program 5 (id=224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9e) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x339f7000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f0000000200)={[{@file_umask={'file_umask', 0x3d, 0x4}}, {@type={'type', 0x3d, "7763e6ef"}}, {@file_umask={'file_umask', 0x3d, 0x400}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x1, 0x300, &(0x7f0000000780)="$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") 4.592781804s ago: executing program 5 (id=227): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x2000004c, &(0x7f0000000780)=ANY=[], 0x7, 0x1527, &(0x7f0000000580)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x481001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) 3.679225556s ago: executing program 5 (id=228): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x20, 0x70bd29, 0x1}, 0x10}}, 0x20004010) recvmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.526994036s ago: executing program 5 (id=229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodelalloc}, {@noload}, {@noinit_itable}, {@abort}, {@auto_da_alloc}]}, 0x6, 0x444, &(0x7f0000000780)="$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") ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f000000c1c0)={0x2020}, 0x2020) 2.640424759s ago: executing program 5 (id=230): r0 = timerfd_create(0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0xc}, 0x18) writev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000240)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000001200)={r4, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000001300)=0x100) 2.015007798s ago: executing program 2 (id=232): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}], [], 0x6b}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 2.014475812s ago: executing program 5 (id=233): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$revoke(0x6, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x40000000002, 0x3, 0x2) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.923579985s ago: executing program 2 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000040)={0x710, 0x0, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x2}, 0x1, 0x8, 0xfff7, 0xc3e, 0x27, 'syz0\x00', "163ba0c48234025c517981bbcb450278d6ddf2dfbd7a5a44843c98457732fc9f", "e05cd30aabd512fb4816aa8bd37f218658f014d9a871f33e72460e9961f55744", [{0x1d12, 0x100, {0x2, 0x7}}, {0x0, 0x101, {0x1, 0x1}}, {0x3f, 0xe133, {0x3, 0x9}}, {0x9, 0x9, {0x0, 0x3c05}}, {0x1dc4, 0x6, {0x2, 0xa5d}}, {0x7, 0x8, {0x0, 0x6f}}, {0xfffa, 0xb8dd, {0x2, 0x80000000}}, {0x3, 0xb0, {0x2, 0x7}}, {0x6, 0x5, {0x0, 0x9}}, {0x8, 0x1ff, {0x0, 0x1}}, {0x9, 0x4, {0x3, 0x5}}, {0x8000, 0x8, {0x2, 0x9}}, {0x40, 0x4, {0x1, 0x10001}}, {0x9, 0x0, {0x2, 0x2}}, {0x47d2, 0x4, {0x2, 0x5}}, {0x1, 0xa3, {0x3, 0x5369}}, {0x1000, 0x8001, {0x3, 0x6815de8c}}, {0x80, 0x3, {0x2, 0xfff}}, {0x1, 0x6, {0x3}}, {0x101, 0x1f, {0x0, 0x3}}, {0x40, 0x9c1, {0x3, 0x8001}}, {0xd3e4, 0x200, {0x2, 0x7ff}}, {0x800, 0x6, {0x1, 0xfffffffa}}, {0x7ff, 0x400, {0x1, 0x9}}, {0x1, 0x8000, {0x2, 0x200}}, {0x3f, 0xed0, {0x3, 0xffff}}, {0xbff, 0x2, {0x1, 0x5}}, {0x1f, 0x4f, {0x2, 0x43}}, {0x5, 0x2, {0x0, 0x20}}, {0xfff8, 0x7, {0x2, 0x78b98d5c}}, {0x0, 0x8b3, {0x0, 0x2}}, {0x381, 0x9, {0x1, 0x5}}, {0x1, 0x8, {0x3, 0x2}}, {0x6, 0x1f, {0x3, 0x3}}, {0x4, 0x3, {0x3, 0x84}}, {0x1, 0x3f, {0x3, 0x38ce}}, {0x8, 0x0, {0x1}}, {0x8, 0x81, {0x1, 0x3}}, {0xfc01, 0x8001, {0x1, 0x6}}, {0x7, 0x8001, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x1f, 0x3, 0x8c, 0x4, 0x1d, 'syz0\x00', "8a64c95ea5add8a0fcc93eed253b08831f990192343e701652434ca44ef45c2b", "c2be3bdae06bd00c9d7c103843fb847a53aef94128d215e13079809f7b22e4fb", [{0x9, 0x8000, {0x3, 0x7f}}, {0xfff, 0xfffe, {0x2, 0x1}}, {0xffff, 0x2, {0x1, 0x101}}, {0x8000, 0x1, {0x2, 0x4}}, {0xd081, 0x1, {0x0, 0x7}}, {0x0, 0x0, {0x3, 0x1}}, {0x0, 0x7, {0x1, 0xd13}}, {0x6, 0x1, {0x1, 0x790}}, {0x3, 0xa, {0x1, 0xff}}, {0x0, 0x9, {0x0, 0x8}}, {0x9, 0xe3, {0x1, 0x100}}, {0x8, 0x40, {0x1, 0x4}}, {0x8b, 0x7, {0x0, 0x1}}, {0x5, 0x0, {0x0, 0x9}}, {0x7, 0x20, {0x0, 0x2}}, {0x7fff, 0x73, {0x1, 0x3}}, {0x7fff, 0x0, {0x0, 0x8000}}, {0x3, 0x47a7, {0x0, 0x5}}, {0x8, 0xc5, {0x0, 0x4}}, {0x8001, 0x2, {0x1, 0x9}}, {0x1, 0x0, {0x2, 0x5}}, {0x3, 0x2, {0x1, 0x3}}, {0x7, 0x4, {0x1, 0x8001}}, {0x400, 0x101, {0x2, 0x80000001}}, {0x6a, 0x24f8, {0x1}}, {0x5, 0x0, {0x1, 0x2}}, {0x8001, 0x0, {0x0, 0xde}}, {0x3, 0x1ff, {0x3, 0x5}}, {0x4, 0x8}, {0x8, 0x3ff, {0x1, 0x8}}, {0xff, 0x80, {0x0, 0x6}}, {0x8000, 0x0, {0x2, 0x4}}, {0x6, 0x0, {0x2, 0x8ef}}, {0x1000, 0x200, {0x2, 0x3}}, {0x5, 0xf4, {0x2, 0x8}}, {0xff07, 0x4, {0x1, 0xc2d8}}, {0xf000, 0x3, {0x2, 0x8}}, {0x200, 0x1f, {0x3, 0x1}}, {0x8, 0xb15, {0x3, 0x7ff}}, {0x1, 0x7fff, {0x2, 0xffffffa1}}]}}}, {{0x254, 0x1, {{0x2}, 0x40, 0x3, 0x2d1e, 0x1, 0x1, 'syz0\x00', "49518514ecce007ba83aaebd98f8cfaab69ce90d40fb06debe1e17a8696fe1a7", "b8d1d90bfc0ac4c84e164131dc4ab3851f3e74713ea842679dc90c8b5c763b90", [{0x2, 0xfffb, {0x0, 0xba51}}, {0x7, 0x3, {0x0, 0x10000}}, {0x6, 0x5, {0x1, 0x7}}, {0x6958, 0x20, {0x1, 0x1}}, {0x20, 0x3f9, {0x3, 0x80}}, {0x3, 0x1, {0x3, 0xf028}}, {0x3ff, 0x1111, {0x27194057fe940b31, 0x9}}, {0x3f, 0x80, {0x3, 0x1}}, {0x3, 0x2, {0x0, 0x8001}}, {0x0, 0x0, {0x2, 0x3ff0}}, {0x1, 0x7ff, {0x0, 0x400}}, {0xffff, 0xffc, {0x0, 0xfff}}, {0x9, 0x6b, {0x0, 0xc184}}, {0xa0a, 0x7c7c, {0x3, 0x1c}}, {0x101, 0x1, {0x3, 0xfffffffb}}, {0x5, 0x7, {0x1, 0x6}}, {0x77e, 0x200, {0x3, 0x200}}, {0x9, 0x3ff, {0x0, 0x5}}, {0x9, 0x8, {0x0, 0x2}}, {0x47, 0x9, {0x2, 0x7}}, {0x2, 0x3, {0x1, 0x2}}, {0x7, 0x1f, {0x1, 0x9}}, {0x3, 0x5, {0x2, 0x80}}, {0x9, 0x4, {0x2}}, {0x3, 0x1, {0x1, 0x5}}, {0xd, 0xde5, {0x3, 0x3}}, {0x6, 0x1, {0x2}}, {0x111d, 0x3, {0x1, 0x30}}, {0x81, 0x3, {0x0, 0x1}}, {0x3, 0x9, {0x0, 0x3}}, {0x8, 0x592, {0x1, 0x2}}, {0x3, 0x5, {0x0, 0x80}}, {0xff43, 0x3ff, {0x3, 0x2}}, {0x401, 0x4, {0x0, 0x2}}, {0x3f, 0xcd, {0x2, 0x3f}}, {0x13, 0x9, {0x2, 0x9380}}, {0x1, 0x1000, {0x3, 0x9}}, {0x2, 0x2, {0x3, 0x6f}}, {0x3f, 0x1, {0x2, 0x5}}, {0x7, 0x101, {0x1, 0xef0}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x4010}, 0x20040080) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x1, 0x7, 0x801, 0x0, 0x0, {}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x58a2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x5) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8011) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4008800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x4c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x4c}}, 0x4004094) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x40, 0x1, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x64, 0x1, 0x6, 0x301, 0x0, 0x0, {0xb, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x40044) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000001c40)={0x0, 'veth1_virt_wifi\x00', {0x2}, 0x7}) 1.503453977s ago: executing program 2 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x29, &(0x7f0000000040)=0x5022, 0x4) sendto$inet(r3, &(0x7f0000000100)="1ce0", 0xffeb, 0x900, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 354.882053ms ago: executing program 2 (id=236): socket(0x10, 0x3, 0xcbb) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "bcceaaba4545b04e69b917c9945696bdd308351c59b24331321c0d22cbe700358571f15b1daff8c0c3069002b95fd75c2bdb10a35d3e178c55f33d6afa0964dd", 0x26}, 0x48, 0xfffffffffffffffd) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r1, 0xf7000, 0x3, 0x3) keyctl$setperm(0x5, r0, 0x4021022) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='rootfs\x00', 0x80, &(0x7f0000000200)='\x00') write$P9_RFLUSH(r1, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) r3 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x2, 0x40000) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f00000002c0)={0x0, &(0x7f0000000900)="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", 0x1000}) keyctl$read(0xb, r0, 0x0, 0x0) 157.954863ms ago: executing program 2 (id=237): r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff0180c2000003884869fd6fd100007300fe8000000000000000000000000000aaff7a0000000000000000000000000001"], 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c3200000000002abe2b502dbc1fa1da892edccf8f8745754de7402c7bf88e099c74289e5ae39c9356f31b37e12896aed95639018119c484ecccc20ef5bc3b9b982ad5b3f766b83b2ef9f95622f03bb4d91f95004f0e37c7654b0200000000000000b66bf1253907dfe4cd35691a4a2116ac4059badb58c9880d1173b099d2b45cb207e15be66c3e5657c46c419cba47f89ee913c8304ccc74b30c9bb8b8ab3d828286c89342f1f99e765c4729e16fc68e6615a718916f7d4347ea876251cd65898fd3f1317cc64b5e6eb81ccc2bc41304ab", @ANYRES64, @ANYRES32, @ANYBLOB="c1f2a76544c59866ac8c487b2dda29292062a54819bb2a570867a105a334323aae0fa2cbe24fe923d0833aa072cabbdaca17799f8e3361e58e58405b1eb4589aa06346b5ca447050557237ada791d9bdcee30f680870a9945af38ff5831e42da6a50310dda88975e5e1488c76da81842973f561be9cb897f2367509f6683fd4f8e6c4ff1bf629dee8d260810524ed5292b22f5061ca91c3fd4965d3984b423723daed71f6b54aebc36b480ba039f3925b46c865b765449e3803abb32b6a881dcee196ca1727afb3392", @ANYRESHEX], 0x1, 0x1a2, &(0x7f0000000000)="$eJzs0L9r1GAcx/H390nul1DlVBwq2AOLMUe1yVUdnA6nEy7g4CJ46HGNvWKqXHODLS10kYJU+y/oIHVUQScRBefiIDhoXLpJbygO4iAnyT0V/Bt8XpB88v1Aki9PN+7FBeD33kqHOhmLg3xEsIEJGXVKjfK1nr/r3BwFl/S8ofOZzvF4afl2O4rCxcrFCuV/CuBH1v2t4hccU5SEOvJ5b6XTlpsBwzoLajag3KT6EKtFz33EuD3G0RtYDJ0NLit64jTh0HS/yHS8tHxmfqE9F86Fd2q1mQveOc87n+4fhd4rxH0gises4gYUAkruKrkW97ftA0wJ4nZVYkl1QL7F5rZ1+uTUAOXuMkR45wwofLW7FXWVUxSvp8s3OCI8wQqYbFJS2Nyaj0KvgVxRL8W3P9k/c4rimmWd7dyNZtevKfmV36rLblH8HXKOT63qM5MeDYd5z3rCZEIjYSth5xsT8ib9y/652mvp/bmejnOCp3nutfv9RT8PH8QJqKVXGcayz6lsrzK81e/o4Mv+g2EYhmEYhmEYhvEf+BMAAP//l8hh1g==") creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/29, 0x1d) getdents64(r2, 0xfffffffffffffffe, 0x29) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="435d61e778eb38a7b38869e147b2bb2d8ea5f836c654c0d9d14ceca9529604eb9a1f8d24c87b2153413b8bc5d52b8aa671b64b2290f0d96afeaa40f60d23f9f9f7d8b4c37a6409abd84ddbe5264f73200c67d8f9742d0f51951f7bb8fe27a59cc395ba580c12f6e995b8a62901c58273c223abb61def8a24a9d9c3e164fcc9c0ef085049e39d964b4afa4e79d6dc9d4f792776248a6ac45606026857497e7760e7dcc543cbd35aaaca6b30aa8acb8e4e77cd6626b8371a55fa07ede86c92893bad324de1fef3953ff5c36951f9647ffd6924de49d9a66baeb6a75df64352c800a13b897dbd01621199d6d5424e90a346c805c801fd6be1e96f2a69e5937a4e7df9445d776f56182a9c26c219e3462d7ef57f9037d6b14a5f0288", 0x11a}, {&(0x7f0000000180)="518cf9568a61ae87e9e450447422ed8ab8e2d292b9e8f1", 0x17}, {&(0x7f0000000380)="5132ac5e8205378f905fac4b0f7b0ad4ff080df00b5a6655e32124d51a45ebebdf4a86101587d502357bfc43f44098742b83caede42f6e007330dc8ab67371c65d39bc126b8f9bf17dce0ba9d14f263efa7056bb8a0291a4842e42342519a9e795b7d8aee13edfa09bd3f9ae3bdc4c2dccc274c0cf4fe85fa17f46ff8c017571490f296ef2ea1cf31486bd4167bb33cb9a5e1f96de2ee8af5074695ddf5d1ec4d17c9508cdd9e77ec5bc62a820e263a31521f0b9031c9e1e1491f0c99b44960df2aaee22480355aa20d280d1ed54ae539055ca1e20a57f81db185fa207", 0xdd}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cc8ec0030873c527172f369fc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a54", 0xe8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000003040)="9b94bd4f7c3a6ece62bebec3ebc3f6245c2cf71ebb80b25d12176c9248f03c509f9c9efa61aac34738d5eb54550e4ee1a5e35c2b82abfcd8c84c175b38e97da83e872522954d2a5ec48d8fa0f5363f20ca098ee73815ead5dccd3b1bd88c69cc612a19197857d16407c95aad3267a5e215e5286ad9499090ad01695dda8a723c7a9527739b30e773846d51649d2a12c74347e388d2f2e1b18131aafb21f42775673001247846a3cedff1d0c0f8c890fdd89f8043a1e1c23624799d60d25f9e4e2f24baae9a3eb60e5bda0c03d1fabb1733cc68d868432a874c5b93efb3eec7aa1db3482fe3d7f644b4afad6e623cf239b49191afda5cd7e9628ac5cfec755cc9e966c07869c4830e0bafab970c7eca46a4f3af4d753d9dedcc0612ff49a2fd599c84df464ff3c58630d07c2611eb", 0x12e}, {&(0x7f0000000bc0)="ebb4431e47a08e69be39d99a05e164370fea19918eda462585b3e7d878eab91929a2929e0c3d931b038606966c61ca9cb8691a4b8ff9eb5f4236355b275ae5db5cdd3dd74f0b442723d7c839f08eabfcdcdf92b8b8ccfdda4f3410e0bb79", 0x5e}, {&(0x7f0000000900)="79a5ab1a0f9d91cfde8f26d84e989a7f13232cff8a084fdb400fe2092c2396051c32b0689f415a6b36647bd3072f2c326f78eaffb66d50b1f9b44eab40bd546e7ff8b43dd2e179857398e9c78c53b9e98941e7e870bee89f6dc90febbee5456bbb93000cfd62257b62804b4eb4ed0e9b8c6f3702ab333ef840acd1aa9fa01a967eb19b17fe01945f32bc9f890b23f5b45204f3cf83fee26c98eabfe0fdfed43133d23d5500412496348ece7fd361121a67bdfe57", 0xb4}], 0x3}}], 0x4, 0x2000c044) write$binfmt_misc(r1, &(0x7f0000000540), 0xa2) 0s ago: executing program 2 (id=238): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): phy0 wpan0: encryption failed: -22 [ 70.869662][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.876076][ T29] audit: type=1800 audit(1728340175.061:5): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 70.899248][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.910641][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.929924][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.951360][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.958928][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.973471][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.987269][ T5226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.997946][ T5226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.007907][ T5226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.026684][ T5226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.066542][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.124963][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.133700][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.215685][ T5338] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.240890][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.248703][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.260036][ T5340] bridge0: entered allmulticast mode [ 71.356417][ T5338] team_slave_0: entered promiscuous mode [ 71.362615][ T5338] team_slave_1: entered promiscuous mode [ 71.370468][ T5338] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.381129][ T5338] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 71.411696][ T5235] Bluetooth: hci0: command tx timeout [ 71.418385][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.443863][ T5346] bond0: entered promiscuous mode [ 71.447275][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.455683][ T5346] bond_slave_0: entered promiscuous mode [ 71.466731][ T5346] bond_slave_1: entered promiscuous mode [ 71.480986][ T5346] macvlan2: entered promiscuous mode [ 71.491203][ T5235] Bluetooth: hci1: command tx timeout [ 71.498144][ T54] Bluetooth: hci5: command tx timeout [ 71.498928][ T5233] Bluetooth: hci4: command tx timeout [ 71.503636][ T5232] Bluetooth: hci2: command tx timeout [ 71.509373][ T5233] Bluetooth: hci3: command tx timeout [ 71.520996][ T5346] team0: entered promiscuous mode [ 71.547798][ T5245] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.563997][ T5345] mmap: syz.0.7 (5345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.647979][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.713872][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.782302][ T5245] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 71.799708][ T5245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.855837][ T5245] usb 2-1: config 0 descriptor?? [ 71.869301][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.911767][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.887961][ T5340] bridge0: port 2(bridge_slave_1) entered listening state [ 73.068234][ T5341] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.075683][ T5341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.140958][ T5341] bridge0: entered promiscuous mode [ 73.336871][ T5327] usb 2-1: USB disconnect, device number 2 [ 77.668495][ T5401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.273252][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.398357][ T5403] loop0: detected capacity change from 0 to 32768 [ 78.425738][ T5403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.21 (5403) [ 78.449899][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.511638][ T5403] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.571097][ T5403] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 78.579841][ T5403] BTRFS info (device loop0): using free-space-tree [ 78.685510][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.880604][ T5429] loop4: detected capacity change from 0 to 256 [ 78.933320][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.021685][ T5426] loop5: detected capacity change from 0 to 1024 [ 79.029530][ T5426] hfsplus: invalid gid specified [ 79.036752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 79.095379][ T5426] hfsplus: unable to parse mount options [ 79.201249][ T5429] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 79.202502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.242060][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.328623][ T12] bridge_slave_1: left promiscuous mode [ 79.338145][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.354320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 79.354383][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.398186][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.443262][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.449912][ T12] bridge_slave_0: left allmulticast mode [ 79.456525][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.466132][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.469615][ T12] bridge_slave_0: left promiscuous mode [ 79.485120][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.485358][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.503000][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.513876][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.521168][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.593041][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.634820][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.652213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 80.335332][ T5227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.353646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.657901][ T5448] loop4: detected capacity change from 0 to 128 [ 80.721634][ T5448] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.743718][ T5448] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.780999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.096619][ T8] cfg80211: failed to load regulatory.db [ 81.914689][ T5235] Bluetooth: hci4: command tx timeout [ 82.456767][ T5235] Bluetooth: hci0: command tx timeout [ 82.606021][ T29] audit: type=1326 audit(1728340186.871:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5462 comm="syz.5.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773917dff9 code=0x0 [ 82.667029][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.692691][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.712305][ T12] bond0 (unregistering): Released all slaves [ 82.892666][ T5243] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.035866][ T5470] loop4: detected capacity change from 0 to 64 [ 83.176540][ T5471] loop3: detected capacity change from 0 to 16 [ 83.256648][ T5471] erofs: (device loop3): mounted with root inode @ nid 36. [ 83.281467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.456253][ T5470] ======================================================= [ 83.456253][ T5470] WARNING: The mand mount option has been deprecated and [ 83.456253][ T5470] and is ignored by this kernel. Remove the mand [ 83.456253][ T5470] option from the mount to silence this warning. [ 83.456253][ T5470] ======================================================= [ 83.653233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.662327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.981313][ T5233] Bluetooth: hci4: command tx timeout [ 84.185714][ T12] hsr_slave_0: left promiscuous mode [ 84.243426][ T12] hsr_slave_1: left promiscuous mode [ 84.268138][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.293359][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.321688][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.349204][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.421749][ T12] veth1_macvtap: left promiscuous mode [ 84.427586][ T12] veth0_macvtap: left promiscuous mode [ 84.452586][ T12] veth1_vlan: left promiscuous mode [ 84.458070][ T12] veth0_vlan: left promiscuous mode [ 84.531037][ T5233] Bluetooth: hci0: command tx timeout [ 85.066407][ T5503] loop5: detected capacity change from 0 to 1024 [ 85.098669][ T5503] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.109731][ T5503] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 85.138903][ T5503] JBD2: no valid journal superblock found [ 85.144806][ T5503] EXT4-fs (loop5): Could not load journal inode [ 85.821581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 86.131427][ T5233] Bluetooth: hci4: command tx timeout [ 87.086427][ T5233] Bluetooth: hci0: command tx timeout [ 87.116405][ T5233] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 87.128248][ T5233] CPU: 0 UID: 0 PID: 5233 Comm: kworker/u9:3 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 87.139109][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.149161][ T5233] Workqueue: hci3 hci_rx_work [ 87.153852][ T5233] Call Trace: [ 87.157128][ T5233] [ 87.160053][ T5233] dump_stack_lvl+0x241/0x360 [ 87.164737][ T5233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.170018][ T5233] ? __pfx__printk+0x10/0x10 [ 87.174616][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.180249][ T5233] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 87.185562][ T5233] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 87.191137][ T5233] sysfs_create_dir_ns+0x2ce/0x3a0 [ 87.196270][ T5233] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 87.201916][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.207570][ T5233] kobject_add_internal+0x435/0x8d0 [ 87.212788][ T5233] kobject_add+0x152/0x220 [ 87.217226][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.222871][ T5233] ? do_raw_spin_unlock+0x13c/0x8b0 [ 87.228085][ T5233] ? device_add+0x3e7/0xbf0 [ 87.232622][ T5233] ? __pfx_kobject_add+0x10/0x10 [ 87.237567][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.243211][ T5233] ? _raw_spin_unlock+0x28/0x50 [ 87.248082][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.253733][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.259371][ T5233] ? get_device_parent+0x165/0x410 [ 87.264510][ T5233] device_add+0x4e5/0xbf0 [ 87.268871][ T5233] hci_conn_add_sysfs+0xe8/0x200 [ 87.273824][ T5233] le_conn_complete_evt+0xc9f/0x12e0 [ 87.279134][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.284777][ T5233] ? trace_contention_end+0x3c/0x120 [ 87.290101][ T5233] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 87.295840][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.301480][ T5233] ? __mutex_unlock_slowpath+0x21d/0x750 [ 87.307127][ T5233] ? __copy_skb_header+0x437/0x5b0 [ 87.312253][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.317892][ T5233] ? skb_pull_data+0x112/0x230 [ 87.322677][ T5233] hci_le_enh_conn_complete_evt+0x185/0x420 [ 87.328629][ T5233] hci_event_packet+0xa57/0x1540 [ 87.333590][ T5233] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 87.338901][ T5233] ? __pfx_hci_event_packet+0x10/0x10 [ 87.344311][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.349955][ T5233] ? unpair_device_complete+0xe0/0x230 [ 87.355424][ T5233] ? srso_alias_return_thunk+0x5/0xfbef5 [ 87.361066][ T5233] ? kcov_remote_start+0x97/0x7d0 [ 87.366363][ T5233] hci_rx_work+0x3fe/0xd80 [ 87.370816][ T5233] ? process_scheduled_works+0x976/0x1850 [ 87.376592][ T5233] process_scheduled_works+0xa65/0x1850 [ 87.382190][ T5233] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.388208][ T5233] ? assign_work+0x364/0x3d0 [ 87.392826][ T5233] worker_thread+0x870/0xd30 [ 87.397453][ T5233] ? __kthread_parkme+0x169/0x1d0 [ 87.402501][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 87.407635][ T5233] kthread+0x2f2/0x390 [ 87.411714][ T5233] ? __pfx_worker_thread+0x10/0x10 [ 87.416934][ T5233] ? __pfx_kthread+0x10/0x10 [ 87.421534][ T5233] ret_from_fork+0x4d/0x80 [ 87.425975][ T5233] ? __pfx_kthread+0x10/0x10 [ 87.430663][ T5233] ret_from_fork_asm+0x1a/0x30 [ 87.435473][ T5233] [ 87.441505][ T5233] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.456404][ T5233] Bluetooth: hci3: failed to register connection device [ 88.230820][ T5235] Bluetooth: hci4: command tx timeout [ 89.193007][ T5235] Bluetooth: hci0: command tx timeout [ 89.316573][ T12] team0 (unregistering): Port device team_slave_1 removed [ 89.367991][ T5523] loop5: detected capacity change from 0 to 512 [ 89.429031][ T12] team0 (unregistering): Port device team_slave_0 removed [ 89.467449][ T5523] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 89.490816][ T5235] Bluetooth: hci3: command tx timeout [ 89.547794][ T5523] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.47: corrupted in-inode xattr: e_value out of bounds [ 89.593564][ T5523] EXT4-fs (loop5): Remounting filesystem read-only [ 89.638021][ T5523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.838663][ T5523] loop5: detected capacity change from 512 to 0 [ 89.990858][ T5236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.038336][ T5236] syz-executor: attempt to access beyond end of device [ 90.038336][ T5236] loop5: rw=133121, sector=2, nr_sectors = 2 limit=0 [ 90.058517][ T5236] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 90.067454][ T5236] EXT4-fs (loop5): I/O error while writing superblock [ 90.588490][ T5434] chnl_net:caif_netlink_parms(): no params data found [ 90.635241][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.642682][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.655973][ T5514] bridge_slave_1: left allmulticast mode [ 90.661825][ T5514] bridge_slave_1: left promiscuous mode [ 90.668465][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.687704][ T5514] bridge_slave_0: left allmulticast mode [ 90.696309][ T5514] bridge_slave_0: left promiscuous mode [ 90.706679][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.143855][ T5436] chnl_net:caif_netlink_parms(): no params data found [ 91.226524][ T5235] block nbd5: Receive control failed (result -32) [ 91.226999][ T5530] block nbd5: shutting down sockets [ 91.291603][ T5434] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.298686][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.329372][ T5233] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.338241][ T5233] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.347126][ T5233] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.355952][ T5233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.364874][ T5233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.373600][ T5233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.410902][ T5434] bridge_slave_0: entered allmulticast mode [ 91.424973][ T5434] bridge_slave_0: entered promiscuous mode [ 91.507191][ T5434] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.532311][ T5434] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.539472][ T5434] bridge_slave_1: entered allmulticast mode [ 91.558062][ T5434] bridge_slave_1: entered promiscuous mode [ 91.878319][ T5434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.000610][ T5434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.144675][ T5436] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.170642][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.213961][ T5436] bridge_slave_0: entered allmulticast mode [ 92.242882][ T5436] bridge_slave_0: entered promiscuous mode [ 92.288504][ T5436] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.304915][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.312941][ T5436] bridge_slave_1: entered allmulticast mode [ 92.531759][ T5436] bridge_slave_1: entered promiscuous mode [ 93.425037][ T5233] Bluetooth: hci5: command tx timeout [ 93.647903][ T5436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.751938][ T5436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.876940][ T5434] team0: Port device team_slave_0 added [ 93.983562][ T5434] team0: Port device team_slave_1 added [ 94.075386][ T5436] team0: Port device team_slave_0 added [ 94.400414][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.434997][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.443067][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.485964][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.536867][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.544783][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.552332][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.580935][ T5434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.610820][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.832565][ T5436] team0: Port device team_slave_1 added [ 94.903365][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.008983][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.022783][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.100198][ T5434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.198907][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.219058][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.284838][ T5436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.372981][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.445258][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.478718][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.505444][ T5235] Bluetooth: hci5: command tx timeout [ 95.550775][ T5436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.566510][ T5539] chnl_net:caif_netlink_parms(): no params data found [ 95.578555][ T5434] hsr_slave_0: entered promiscuous mode [ 95.585168][ T5434] hsr_slave_1: entered promiscuous mode [ 95.591271][ T5434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.599625][ T5434] Cannot create hsr debugfs directory [ 95.797563][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.085710][ T5590] loop5: detected capacity change from 0 to 512 [ 96.128780][ T5590] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.151090][ T5590] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.473069][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.486193][ T5590] EXT4-fs (loop5): 1 truncate cleaned up [ 96.551013][ T5590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.696865][ T5235] Bluetooth: hci6: command tx timeout [ 96.743298][ T5236] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.828709][ T5236] EXT4-fs error (device loop5): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 96.884820][ T5236] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 96.950463][ T5236] EXT4-fs error (device loop5): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 96.984042][ T5436] hsr_slave_0: entered promiscuous mode [ 97.014525][ T5436] hsr_slave_1: entered promiscuous mode [ 97.020953][ T5236] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 97.043202][ T5436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.046441][ T5236] EXT4-fs error (device loop5): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 97.058967][ T5436] Cannot create hsr debugfs directory [ 97.075323][ T5236] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 97.116015][ T5236] EXT4-fs error (device loop5): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 97.141933][ T5236] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /19/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 97.187476][ T5236] EXT4-fs error (device loop5): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 97.360927][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.368060][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.377379][ T5539] bridge_slave_0: entered allmulticast mode [ 97.384519][ T5539] bridge_slave_0: entered promiscuous mode [ 97.392620][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.399728][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.407641][ T5539] bridge_slave_1: entered allmulticast mode [ 97.417548][ T5539] bridge_slave_1: entered promiscuous mode [ 97.573421][ T5235] Bluetooth: hci5: command tx timeout [ 97.667224][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.694558][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.704112][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.716159][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.726850][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.745640][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.797026][ T5539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.905813][ T5539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.116477][ T5539] team0: Port device team_slave_0 added [ 98.146856][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.199337][ T5539] team0: Port device team_slave_1 added [ 98.249011][ T5236] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.407422][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.465235][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.481226][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.511623][ T5539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.563059][ T5574] chnl_net:caif_netlink_parms(): no params data found [ 98.602241][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.616552][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.637784][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.670764][ T5539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.686238][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.716638][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.726877][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.736913][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.745266][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.760157][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.771330][ T5235] Bluetooth: hci6: command tx timeout [ 98.799302][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.864407][ T5539] hsr_slave_0: entered promiscuous mode [ 98.872168][ T5539] hsr_slave_1: entered promiscuous mode [ 98.878491][ T5539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.886272][ T5539] Cannot create hsr debugfs directory [ 98.995345][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.003635][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.014437][ T5574] bridge_slave_0: entered allmulticast mode [ 99.021625][ T5574] bridge_slave_0: entered promiscuous mode [ 99.029924][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.037282][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.045942][ T5574] bridge_slave_1: entered allmulticast mode [ 99.053200][ T5574] bridge_slave_1: entered promiscuous mode [ 99.133422][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.193867][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.239859][ T5434] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.267302][ T12] bridge_slave_1: left allmulticast mode [ 99.273210][ T12] bridge_slave_1: left promiscuous mode [ 99.279682][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.290290][ T12] bridge_slave_0: left allmulticast mode [ 99.297153][ T12] bridge_slave_0: left promiscuous mode [ 99.304243][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.315484][ T12] bridge_slave_1: left allmulticast mode [ 99.321684][ T12] bridge_slave_1: left promiscuous mode [ 99.327438][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.344007][ T12] bridge_slave_0: left allmulticast mode [ 99.350909][ T12] bridge_slave_0: left promiscuous mode [ 99.356591][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.651567][ T5235] Bluetooth: hci5: command tx timeout [ 99.807221][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.815954][ T5235] Bluetooth: hci1: command tx timeout [ 99.827963][ T12] bond_slave_0: left promiscuous mode [ 99.837025][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.846152][ T12] bond_slave_1: left promiscuous mode [ 99.855133][ T12] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 99.864962][ T12] macvlan2: left promiscuous mode [ 99.870004][ T12] team0: left promiscuous mode [ 99.876513][ T12] team_slave_0: left promiscuous mode [ 99.882087][ T12] team_slave_1: left promiscuous mode [ 99.889745][ T12] bond0 (unregistering): Released all slaves [ 99.960636][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.973398][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.985080][ T12] bond0 (unregistering): Released all slaves [ 100.030475][ T5434] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.042990][ T5574] team0: Port device team_slave_0 added [ 100.106272][ T5603] chnl_net:caif_netlink_parms(): no params data found [ 100.139779][ T5574] team0: Port device team_slave_1 added [ 100.145790][ T5434] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.201520][ T5434] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.263123][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.271950][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.303327][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.316171][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.323695][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.350131][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.539339][ T5574] hsr_slave_0: entered promiscuous mode [ 100.545984][ T5574] hsr_slave_1: entered promiscuous mode [ 100.552414][ T5574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.559974][ T5574] Cannot create hsr debugfs directory [ 100.703681][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.711207][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.718532][ T5603] bridge_slave_0: entered allmulticast mode [ 100.725667][ T5603] bridge_slave_0: entered promiscuous mode [ 100.737799][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.745689][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.753442][ T5603] bridge_slave_1: entered allmulticast mode [ 100.760226][ T5603] bridge_slave_1: entered promiscuous mode [ 100.788298][ T5621] chnl_net:caif_netlink_parms(): no params data found [ 100.845533][ T12] hsr_slave_0: left promiscuous mode [ 100.850987][ T5235] Bluetooth: hci3: command tx timeout [ 100.851317][ T5235] Bluetooth: hci6: command tx timeout [ 100.866487][ T12] hsr_slave_1: left promiscuous mode [ 100.873214][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.880632][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.889202][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.896721][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.908855][ T12] hsr_slave_0: left promiscuous mode [ 100.915535][ T12] hsr_slave_1: left promiscuous mode [ 100.922108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.929623][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.939307][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.949624][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.978234][ T12] veth1_macvtap: left promiscuous mode [ 100.984065][ T12] veth0_macvtap: left promiscuous mode [ 100.990552][ T12] veth1_vlan: left promiscuous mode [ 100.997215][ T12] veth0_vlan: left promiscuous mode [ 101.003700][ T12] veth1_macvtap: left promiscuous mode [ 101.009218][ T12] veth0_macvtap: left promiscuous mode [ 101.015290][ T12] veth1_vlan: left promiscuous mode [ 101.020590][ T12] veth0_vlan: left promiscuous mode [ 101.486834][ T12] team0 (unregistering): Port device team_slave_1 removed [ 101.526477][ T12] team0 (unregistering): Port device team_slave_0 removed [ 101.890820][ T5235] Bluetooth: hci1: command tx timeout [ 102.060214][ T12] team0 (unregistering): Port device team_slave_1 removed [ 102.093560][ T12] team0 (unregistering): Port device team_slave_0 removed [ 102.424745][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.518583][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.546455][ T5436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.605650][ T5603] team0: Port device team_slave_0 added [ 102.636340][ T5436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.645758][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.653299][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.660438][ T5621] bridge_slave_0: entered allmulticast mode [ 102.667563][ T5621] bridge_slave_0: entered promiscuous mode [ 102.678368][ T5603] team0: Port device team_slave_1 added [ 102.712975][ T5436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.723981][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.733397][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.740643][ T5621] bridge_slave_1: entered allmulticast mode [ 102.755691][ T5621] bridge_slave_1: entered promiscuous mode [ 102.797508][ T5436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.847521][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.855833][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.881954][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.902317][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.909268][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.936637][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.948527][ T5235] Bluetooth: hci6: command tx timeout [ 102.954265][ T5233] Bluetooth: hci3: command tx timeout [ 103.019425][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.063669][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.116287][ T5603] hsr_slave_0: entered promiscuous mode [ 103.123220][ T5603] hsr_slave_1: entered promiscuous mode [ 103.144943][ T5621] team0: Port device team_slave_0 added [ 103.157750][ T5621] team0: Port device team_slave_1 added [ 103.273333][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.280297][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.314877][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.330803][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.337749][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.372668][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.447076][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.542476][ T5621] hsr_slave_0: entered promiscuous mode [ 103.549628][ T5621] hsr_slave_1: entered promiscuous mode [ 103.557657][ T5621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.565701][ T5621] Cannot create hsr debugfs directory [ 103.625257][ T5539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.680035][ T5574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.711816][ T5434] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.732519][ T5539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.775607][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.782797][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.817870][ T5574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.848892][ T5539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.866281][ T5539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.916997][ T5574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.946328][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.953985][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.971307][ T5233] Bluetooth: hci1: command tx timeout [ 104.076981][ T5574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.117323][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.176856][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.227454][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.286881][ T5603] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.344691][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.401699][ T5603] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.429983][ T5436] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.512569][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.568632][ T5603] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.615794][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.622944][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.665312][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.672451][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.744443][ T5603] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.829713][ T5539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.905617][ T5436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.021245][ T5233] Bluetooth: hci3: command tx timeout [ 105.059014][ T5539] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.092011][ T12] bridge_slave_1: left allmulticast mode [ 105.097685][ T12] bridge_slave_1: left promiscuous mode [ 105.104208][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.127936][ T12] bridge_slave_0: left allmulticast mode [ 105.135072][ T12] bridge_slave_0: left promiscuous mode [ 105.140950][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.154935][ T12] bridge_slave_1: left allmulticast mode [ 105.160602][ T12] bridge_slave_1: left promiscuous mode [ 105.167866][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.192966][ T12] bridge_slave_0: left allmulticast mode [ 105.198638][ T12] bridge_slave_0: left promiscuous mode [ 105.217985][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.044133][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.053446][ T5233] Bluetooth: hci1: command tx timeout [ 106.081258][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.093584][ T12] bond0 (unregistering): Released all slaves [ 106.218168][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.229974][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.241549][ T12] bond0 (unregistering): Released all slaves [ 106.278829][ T5434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.331431][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.338799][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.399781][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.526249][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.552000][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.559213][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.602137][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.634256][ T5436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.655624][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.664474][ T5574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.746100][ T5574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.781442][ T5574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.797030][ T5574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.944433][ T5434] veth0_vlan: entered promiscuous mode [ 107.078923][ T5434] veth1_vlan: entered promiscuous mode [ 107.090876][ T5233] Bluetooth: hci3: command tx timeout [ 107.221850][ T5436] veth0_vlan: entered promiscuous mode [ 107.299901][ T12] hsr_slave_0: left promiscuous mode [ 107.318679][ T12] hsr_slave_1: left promiscuous mode [ 107.338861][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.349485][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.358395][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.366461][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.388782][ T12] hsr_slave_0: left promiscuous mode [ 107.399941][ T12] hsr_slave_1: left promiscuous mode [ 107.406483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.414788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.423390][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.442194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.506771][ T12] veth1_macvtap: left promiscuous mode [ 107.512634][ T12] veth0_macvtap: left promiscuous mode [ 107.518230][ T12] veth1_vlan: left promiscuous mode [ 107.523998][ T12] veth0_vlan: left promiscuous mode [ 107.530243][ T12] veth1_macvtap: left promiscuous mode [ 107.535955][ T12] veth0_macvtap: left promiscuous mode [ 107.542754][ T12] veth1_vlan: left promiscuous mode [ 107.548075][ T12] veth0_vlan: left promiscuous mode [ 107.997508][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.034574][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.584009][ T12] team0 (unregistering): Port device team_slave_1 removed [ 108.621067][ T12] team0 (unregistering): Port device team_slave_0 removed [ 108.935010][ T5436] veth1_vlan: entered promiscuous mode [ 108.976834][ T5434] veth0_macvtap: entered promiscuous mode [ 109.028784][ T5539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.116608][ T5434] veth1_macvtap: entered promiscuous mode [ 109.203976][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.232866][ T5436] veth0_macvtap: entered promiscuous mode [ 109.330494][ T5436] veth1_macvtap: entered promiscuous mode [ 109.354789][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.376722][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.389009][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.397035][ T5621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.422480][ T5621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.448218][ T5621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.472503][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.484781][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.498547][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.520251][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.556298][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.568835][ T5621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.601806][ T5434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.611539][ T5434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.620255][ T5434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.629431][ T5434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.695727][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.717192][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.731165][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.752154][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.763321][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.774593][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.799697][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.806823][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.850421][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.857582][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.869045][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.876194][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.903026][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.914738][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.926143][ T5436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.940819][ T5436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.957972][ T5436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.982725][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.989837][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.000158][ T5436] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.015011][ T5436] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.024604][ T5436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.033786][ T5436] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.137524][ T5539] veth0_vlan: entered promiscuous mode [ 110.261217][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.269081][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.304934][ T5539] veth1_vlan: entered promiscuous mode [ 110.446593][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.456498][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.491084][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.510535][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.547310][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.592943][ T5539] veth0_macvtap: entered promiscuous mode [ 110.627969][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.654858][ T5539] veth1_macvtap: entered promiscuous mode [ 110.674340][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.701862][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.740466][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.752311][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.762772][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.773346][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.783490][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.794869][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.808675][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.834382][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.873700][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.892182][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.909995][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.925739][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.925758][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.925779][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.927250][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.932229][ T5603] veth0_vlan: entered promiscuous mode [ 110.957052][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.004550][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.024048][ T5603] veth1_vlan: entered promiscuous mode [ 111.065932][ T5539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.075696][ T5539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.075727][ T5539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.075754][ T5539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.139638][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.139706][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.155950][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.277218][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.301276][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.359276][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.360353][ T5768] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET) [ 111.377110][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.380455][ T5603] veth0_macvtap: entered promiscuous mode [ 111.414161][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.433968][ T5770] loop2: detected capacity change from 0 to 16 [ 111.449794][ T5603] veth1_macvtap: entered promiscuous mode [ 111.475044][ T5770] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 111.496655][ T5574] veth0_vlan: entered promiscuous mode [ 111.518704][ T5574] veth1_vlan: entered promiscuous mode [ 111.560429][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.612968][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.635191][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.710908][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.730360][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.759303][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.799051][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.838987][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.891264][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.744153][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.761915][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.776793][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.787864][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.810191][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.833198][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.854350][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.867268][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.879477][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.893334][ T5574] veth0_macvtap: entered promiscuous mode [ 113.177897][ T5574] veth1_macvtap: entered promiscuous mode [ 113.236756][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.256197][ T5603] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.295780][ T5603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.524405][ T5603] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.663427][ T5603] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.017265][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.093140][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.155999][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.187004][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.212957][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.229637][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.232284][ T5793] loop1: detected capacity change from 0 to 1024 [ 114.250410][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.266342][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.276560][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.287900][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.312594][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.370523][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.400531][ T5795] loop4: detected capacity change from 0 to 4096 [ 114.412256][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.423920][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.436409][ T5793] hfsplus: request for non-existent node 2048 in B*Tree [ 114.450906][ T5793] hfsplus: request for non-existent node 2048 in B*Tree [ 114.451019][ T5795] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 114.478178][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.490564][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.538669][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.555880][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.566620][ T5795] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 114.599612][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.624280][ T5574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.635430][ T5574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.647394][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.713622][ T5574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.745478][ T5574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.764168][ T5574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.779710][ T5574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.067380][ T29] audit: type=1107 audit(1728340219.281:7): pid=5804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='P' [ 116.213759][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.341125][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.750425][ T5621] veth0_vlan: entered promiscuous mode [ 116.858673][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.867588][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.120059][ T2463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.137080][ T2463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.415930][ T5621] veth1_vlan: entered promiscuous mode [ 118.977736][ T3053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.046290][ T3053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.123054][ T5621] veth0_macvtap: entered promiscuous mode [ 119.536609][ T5833] loop4: detected capacity change from 0 to 32768 [ 119.786369][ T5621] veth1_macvtap: entered promiscuous mode [ 119.821164][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.832459][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.843287][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.853806][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.863641][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.874104][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.884046][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.894724][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.904663][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.915170][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.925082][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.936255][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.948420][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.958076][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.968779][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.979153][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.989718][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.999708][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.010168][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.020024][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.030506][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.041055][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.052566][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.062455][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.072928][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.084716][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.198715][ T5621] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.210294][ T5833] XFS (loop4): device supports 512 byte sectors (not 0) [ 120.296867][ T5621] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.318819][ T5621] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.359003][ T5621] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.480800][ T932] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.488513][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.661101][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 120.669443][ T932] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.684499][ T9] usb 1-1: config 0 has no interfaces? [ 120.690170][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.275710][ T932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 121.297446][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.319632][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.328464][ T932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.338160][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.353672][ T9] usb 1-1: config 0 descriptor?? [ 121.405754][ T932] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 121.446194][ T932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.466005][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.468386][ T932] usb 2-1: config 0 descriptor?? [ 121.515436][ T5843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.523439][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.532364][ T932] hub 2-1:0.0: USB hub found [ 121.617679][ T5291] usb 1-1: USB disconnect, device number 2 [ 121.755257][ T932] hub 2-1:0.0: 2 ports detected [ 122.045222][ T5865] loop3: detected capacity change from 0 to 512 [ 122.091477][ T5865] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 122.482190][ T5878] dccp_close: ABORT with 5 bytes unread [ 124.105063][ T9] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 124.221383][ T5901] loop5: detected capacity change from 0 to 1024 [ 126.022027][ T2957] hfsplus: b-tree write err: -5, ino 4 [ 126.105173][ T5906] loop0: detected capacity change from 0 to 512 [ 126.221483][ T5906] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.308398][ T5906] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 126.328101][ T5906] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 126.339044][ T5906] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.89: Failed to acquire dquot type 1 [ 126.376159][ T5906] EXT4-fs (loop0): 1 truncate cleaned up [ 126.463006][ T5906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.531450][ T5292] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.631848][ T5574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.696085][ T5292] usb 3-1: Using ep0 maxpacket: 16 [ 126.712741][ T5292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 126.730742][ T5292] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 126.755111][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.771939][ T5290] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.796684][ T5292] usb 3-1: config 0 descriptor?? [ 127.837012][ T9] usb 2-1: device descriptor read/64, error -71 [ 128.520959][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 128.528507][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 128.541915][ T5290] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 128.551251][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.582030][ T5290] usb 4-1: config 0 descriptor?? [ 128.646562][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.679283][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.680830][ T9] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 128.710821][ T9] usb 2-1: device reset changed ep0 maxpacket size! [ 128.719484][ T9] hub 2-1:0.0: set hub depth failed [ 128.741631][ T5292] hid (null): invalid report_count 983040256 [ 128.747833][ T5292] hid (null): unknown global tag 0xc [ 128.756110][ T5291] usb 2-1: USB disconnect, device number 3 [ 128.779378][ T5292] hid-generic 0003:0158:0100.0001: unknown main item tag 0x0 [ 128.787532][ T5292] hid-generic 0003:0158:0100.0001: invalid report_count 983040256 [ 128.795504][ T5292] hid-generic 0003:0158:0100.0001: item 0 4 1 9 parsing failed [ 128.799440][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.803978][ T5292] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 128.875414][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.980824][ T5291] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.987707][ T5350] usb 3-1: USB disconnect, device number 2 [ 129.140798][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 129.201150][ T5291] usb 2-1: device descriptor read/all, error -71 [ 129.296343][ T5945] loop4: detected capacity change from 0 to 32768 [ 129.362896][ T5945] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.439173][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.452388][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.479944][ T5290] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 129.486363][ T5945] XFS (loop4): Ending clean mount [ 129.488400][ T5290] hid-generic 0003:0158:0100.0002: unexpected long global item [ 129.504210][ T5290] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 129.530614][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.558758][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.578891][ T5945] XFS (loop4): Quotacheck needed: Please wait. [ 129.586961][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.611215][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.618694][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.636492][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.667662][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.700511][ T5945] XFS (loop4): Quotacheck: Done. [ 129.707177][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.737656][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.774836][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.800993][ T5968] process 'syz.2.104' launched './file0' with NULL argv: empty string added [ 129.830115][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.855947][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.889194][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.933217][ T5971] loop5: detected capacity change from 0 to 512 [ 129.941001][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 129.973275][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.025432][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.059936][ T5971] loop5: detected capacity change from 0 to 1024 [ 130.074522][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.087000][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.104428][ T5971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.117020][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.180813][ T5971] EXT4-fs: Ignoring removed bh option [ 130.200865][ T5971] ext2: Unknown parameter 'uid>00000000000000000000' [ 130.202715][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.277678][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.297843][ T5539] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.321524][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.331192][ T25] usb 4-1: USB disconnect, device number 2 [ 130.492525][ T5979] loop1: detected capacity change from 0 to 2048 [ 130.545807][ T5979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.722838][ T29] audit: type=1800 audit(1728340234.861:8): pid=5979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.106" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 131.246994][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.255152][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.262629][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.270029][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.277599][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.285038][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.292526][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.300909][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.308309][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.316727][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.324217][ T5327] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.354170][ T5327] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.369450][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.376848][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.399984][ T5987] binder: 5986:5987 ioctl c0306201 20000680 returned -14 [ 133.900362][ T5350] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.111463][ T5350] usb 2-1: Using ep0 maxpacket: 8 [ 134.579925][ T5350] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 134.589098][ T5350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.597213][ T5350] usb 2-1: Product: syz [ 134.601466][ T5350] usb 2-1: Manufacturer: syz [ 134.606084][ T5350] usb 2-1: SerialNumber: syz [ 134.675616][ T5350] usb 2-1: config 0 descriptor?? [ 134.692789][ T6014] input: syz1 as /devices/virtual/input/input5 [ 134.694019][ T5350] gspca_main: spca500-2.14.0 probing 046d:0900 [ 134.798199][ T5992] loop5: detected capacity change from 0 to 512 [ 135.033514][ T5992] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 135.048243][ T6023] kernel read not supported for file /rmdF¼ì (pid: 6023 comm: syz.3.118) [ 135.049936][ T6022] loop4: detected capacity change from 0 to 1024 [ 135.121671][ T29] audit: type=1800 audit(1728340239.381:9): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.118" name=726D64461716BCEC dev="mqueue" ino=12895 res=0 errno=0 [ 135.264189][ T6031] loop2: detected capacity change from 0 to 1024 [ 135.303455][ T6031] EXT4-fs: Ignoring removed nobh option [ 135.309068][ T6031] EXT4-fs: Ignoring removed orlov option [ 135.632215][ T6031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.602134][ T53] hfsplus: b-tree write err: -5, ino 4 [ 136.802430][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.889234][ T5436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.033134][ T6045] loop5: detected capacity change from 0 to 1024 [ 137.040449][ T6045] EXT4-fs: Ignoring removed orlov option [ 137.046311][ T5350] gspca_spca500: reg write: error -71 [ 137.060770][ T5350] gspca_spca500: reg write: error -71 [ 137.071001][ T5350] gspca_spca500: reg write: error -71 [ 137.089381][ T5350] gspca_spca500: reg write: error -71 [ 137.107450][ T6045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.114340][ T5350] gspca_spca500: reg write: error -71 [ 137.145104][ T5350] gspca_spca500: reg write: error -71 [ 137.194911][ T5350] usb 2-1: USB disconnect, device number 6 [ 137.198048][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.226047][ T6045] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 137.275429][ T6045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.301595][ T6047] tipc: Started in network mode [ 137.306904][ T6047] tipc: Node identity b84, cluster identity 4711 [ 137.314450][ T6047] tipc: Node number set to 2948 [ 137.342991][ T6045] overlayfs: failed to resolve './file0': -2 [ 137.350273][ T5290] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.532858][ T5290] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.559321][ T5290] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.594967][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.617345][ T5290] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.652623][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.692435][ T6050] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 137.720427][ T5290] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.462787][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.503347][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.531608][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.541745][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.549796][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 139.557371][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.653019][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.783163][ T6069] loop2: detected capacity change from 0 to 512 [ 139.802436][ T6045] syz.5.129 (6045): drop_caches: 2 [ 139.882195][ T6069] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.968176][ T6069] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 140.004563][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.039846][ T6069] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 140.051790][ T6069] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.133: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 140.120899][ T6052] loop1: detected capacity change from 0 to 32768 [ 140.180893][ T6069] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.133: couldn't read orphan inode 13 (err -117) [ 140.235285][ T6061] chnl_net:caif_netlink_parms(): no params data found [ 140.274331][ T6069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.313484][ T6052] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 140.314610][ T6052] (syz.1.131,6052,0):ocfs2_initialize_super:2281 ERROR: status = -12 [ 140.334229][ T6052] (syz.1.131,6052,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 140.449732][ T35] bridge_slave_1: left allmulticast mode [ 140.460137][ T35] bridge_slave_1: left promiscuous mode [ 140.480632][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.553764][ T6069] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 140.567996][ T5290] usb 4-1: USB disconnect, device number 3 [ 140.604049][ T6085] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 140.680112][ T35] bridge_slave_0: left allmulticast mode [ 140.702684][ T29] audit: type=1804 audit(1728340244.971:10): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.136" name="/newroot/11/file0/bus/bus" dev="overlay" ino=10 res=1 errno=0 [ 140.719656][ T35] bridge_slave_0: left promiscuous mode [ 140.741297][ T6085] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 140.779011][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.808684][ T6089] Invalid ELF header magic: != ELF [ 140.918375][ T6099] loop5: detected capacity change from 0 to 256 [ 141.123829][ T5436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.733316][ T5233] Bluetooth: hci6: command tx timeout [ 142.033488][ T6115] loop5: detected capacity change from 0 to 512 [ 142.060818][ T6115] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 142.098501][ T6115] EXT4-fs (loop5): invalid journal inode [ 142.106066][ T6115] EXT4-fs (loop5): can't get journal size [ 142.351813][ T6115] EXT4-fs (loop5): 1 truncate cleaned up [ 142.360534][ T6115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.735095][ T6133] loop2: detected capacity change from 0 to 256 [ 143.791353][ T6136] loop1: detected capacity change from 0 to 1024 [ 143.818805][ T6125] loop3: detected capacity change from 0 to 512 [ 143.841666][ T6125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.902581][ T5233] Bluetooth: hci6: command tx timeout [ 143.964077][ T6125] EXT4-fs (loop3): 1 truncate cleaned up [ 144.010205][ T6133] FAT-fs (loop2): Directory bread(block 64) failed [ 144.026457][ T6133] FAT-fs (loop2): Directory bread(block 65) failed [ 144.033578][ T6133] FAT-fs (loop2): Directory bread(block 66) failed [ 144.040230][ T6133] FAT-fs (loop2): Directory bread(block 67) failed [ 144.053079][ T6133] FAT-fs (loop2): Directory bread(block 68) failed [ 144.056841][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.062376][ T6133] FAT-fs (loop2): Directory bread(block 69) failed [ 144.086544][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.096131][ T6133] FAT-fs (loop2): Directory bread(block 70) failed [ 144.114095][ T6133] FAT-fs (loop2): Directory bread(block 71) failed [ 144.120968][ T6133] FAT-fs (loop2): Directory bread(block 72) failed [ 144.127509][ T6133] FAT-fs (loop2): Directory bread(block 73) failed [ 144.149519][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.983887][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.027659][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.071280][ T35] bond0 (unregistering): Released all slaves [ 145.253247][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.302218][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.309507][ T6061] bridge_slave_0: entered allmulticast mode [ 145.379209][ T6061] bridge_slave_0: entered promiscuous mode [ 145.481701][ T6157] loop2: detected capacity change from 0 to 8 [ 145.558531][ T6157] SQUASHFS error: Unable to read inode 0xa7 [ 145.672510][ T5603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.725442][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.734564][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.750997][ T6061] bridge_slave_1: entered allmulticast mode [ 145.758847][ T6061] bridge_slave_1: entered promiscuous mode [ 145.877772][ T6161] loop5: detected capacity change from 0 to 64 [ 146.070340][ T5233] Bluetooth: hci6: command tx timeout [ 146.444808][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.461536][ T6121] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 146.553120][ T6061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.761724][ T5350] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.932661][ T5350] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.942788][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.997744][ T5350] usb 3-1: config 0 descriptor?? [ 147.018321][ T5350] cp210x 3-1:0.0: cp210x converter detected [ 147.073203][ T5434] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.327284][ T6061] team0: Port device team_slave_0 added [ 148.304138][ T5235] Bluetooth: hci6: command tx timeout [ 148.979292][ T5350] usb 3-1: cp210x converter now attached to ttyUSB0 [ 148.993619][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.575879][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.583018][ T35] hsr_slave_0: left promiscuous mode [ 149.592969][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.601362][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.610115][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.617998][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.628404][ T35] hsr_slave_1: left promiscuous mode [ 149.679514][ T29] audit: type=1800 audit(1728340253.841:11): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.156" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 149.756644][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.817647][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.849848][ T6182] loop5: detected capacity change from 0 to 128 [ 149.886700][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.936418][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.978125][ T5350] usb 3-1: USB disconnect, device number 3 [ 149.991540][ T5350] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.993926][ T6182] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.039372][ T5350] cp210x 3-1:0.0: device disconnected [ 150.078718][ T6182] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.137768][ T35] veth1_macvtap: left promiscuous mode [ 150.153027][ T35] veth0_macvtap: left promiscuous mode [ 150.153117][ T6188] loop2: detected capacity change from 0 to 764 [ 150.168235][ T35] veth1_vlan: left promiscuous mode [ 150.169670][ T35] veth0_vlan: left promiscuous mode [ 150.581846][ T6182] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 150.645068][ T29] audit: type=1800 audit(1728340254.911:12): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.159" name="bus" dev="loop5" ino=13 res=0 errno=0 [ 150.805020][ T6203] loop1: detected capacity change from 0 to 512 [ 150.900298][ T6203] EXT4-fs (loop1): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 150.909899][ T6203] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.919859][ T6203] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.929016][ T6203] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (fffc1829) [ 150.938726][ T6203] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 151.734884][ T5621] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.738868][ T5235] Bluetooth: hci1: command tx timeout [ 152.356476][ T6214] loop1: detected capacity change from 0 to 128 [ 152.422140][ T6214] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.461913][ T6214] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.613328][ T6214] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x1a) [ 152.723975][ T6210] loop4: detected capacity change from 0 to 32768 [ 152.736660][ T5434] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 152.749742][ T6210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.168 (6210) [ 152.775925][ T5434] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 152.803572][ T6210] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.823309][ T6210] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 152.837690][ T5434] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 152.838491][ T6210] BTRFS info (device loop4): using free-space-tree [ 152.874443][ T5434] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 152.923599][ T5434] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 152.956834][ T35] team0 (unregistering): Port device team_slave_1 removed [ 152.961458][ T5434] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 152.992760][ T5434] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 153.018259][ T5434] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 153.053027][ T35] team0 (unregistering): Port device team_slave_0 removed [ 153.076442][ T5434] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 153.109500][ T5434] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 153.245285][ T5539] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.810878][ T5235] Bluetooth: hci1: command tx timeout [ 154.211159][ T6061] team0: Port device team_slave_1 added [ 154.236013][ T6207] netlink: 'syz.2.165': attribute type 10 has an invalid length. [ 154.298572][ T6207] team0: Port device netdevsim0 added [ 154.554025][ T6250] loop2: detected capacity change from 0 to 256 [ 154.581847][ T6250] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 154.683176][ T29] audit: type=1800 audit(1728340258.951:13): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.173" name="bus" dev="loop2" ino=1048656 res=0 errno=0 [ 154.708878][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 154.721232][ T6247] vcan0: Master is either lo or non-ether device [ 154.721347][ T5434] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.758729][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.767168][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.822306][ T6061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.841759][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.848716][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.878176][ T6061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.406851][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 155.416241][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 155.958289][ T5235] Bluetooth: hci1: command tx timeout [ 156.063420][ T6061] hsr_slave_0: entered promiscuous mode [ 156.103595][ T6061] hsr_slave_1: entered promiscuous mode [ 156.176484][ T6061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.208896][ T6061] Cannot create hsr debugfs directory [ 156.230841][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.298388][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 156.412962][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.446525][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.477501][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.492966][ T6275] sctp: [Deprecated]: syz.5.180 (pid 6275) Use of int in max_burst socket option deprecated. [ 156.492966][ T6275] Use struct sctp_assoc_value instead [ 156.503042][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.572159][ T9] usb 3-1: SerialNumber: syz [ 156.577097][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.615899][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.624714][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.638527][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.648651][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.661607][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.682010][ T6283] loop4: detected capacity change from 0 to 256 [ 156.831701][ T9] usb 3-1: 0:2 : does not exist [ 156.953914][ T6173] chnl_net:caif_netlink_parms(): no params data found [ 157.175645][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.270317][ T6297] loop4: detected capacity change from 0 to 8 [ 157.394238][ T5350] usb 3-1: USB disconnect, device number 4 [ 157.554068][ T5539] SQUASHFS error: Unable to read directory block [631:72] [ 157.565119][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.589874][ T5539] SQUASHFS error: Unable to read inode 0x0 [ 157.604786][ T5539] SQUASHFS error: Unable to read inode 0x0 [ 157.823531][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.842485][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.861024][ T6173] bridge_slave_0: entered allmulticast mode [ 157.868112][ T6173] bridge_slave_0: entered promiscuous mode [ 157.894416][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.901871][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.909163][ T6173] bridge_slave_1: entered allmulticast mode [ 157.918581][ T6173] bridge_slave_1: entered promiscuous mode [ 157.965972][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.987737][ T5233] Bluetooth: hci1: command tx timeout [ 158.222259][ T6316] loop2: detected capacity change from 0 to 1024 [ 158.774217][ T5233] Bluetooth: hci0: command tx timeout [ 159.104587][ T6316] hfsplus: can't free extent [ 159.143852][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.983482][ T53] hfsplus: b-tree write err: -5, ino 4 [ 160.020917][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.082276][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.535004][ T6331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.851452][ T5233] Bluetooth: hci0: command tx timeout [ 161.454310][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.460405][ T6337] loop5: detected capacity change from 0 to 16 [ 161.471607][ T6337] erofs: (device loop5): mounted with root inode @ nid 36. [ 161.478927][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.489668][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.497602][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.506530][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.514444][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.764751][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.917955][ T6341] erofs: (device loop5): erofs_map_blocks_flatmode: inline data across blocks @ nid 36 [ 161.927924][ T6341] syz.5.195: attempt to access beyond end of device [ 161.927924][ T6341] loop5: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 162.591416][ T6173] team0: Port device team_slave_0 added [ 162.623589][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.776558][ T6344] syz.5.196[6344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.776663][ T6344] syz.5.196[6344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.811437][ T6173] team0: Port device team_slave_1 added [ 162.829110][ T6344] syz.5.196[6344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.864592][ T6344] loop5: detected capacity change from 0 to 512 [ 162.871027][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.897397][ T6061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.931248][ T5235] Bluetooth: hci0: command tx timeout [ 163.007797][ T6061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.087830][ T6061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.106971][ T6344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 163.163853][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.191637][ T6344] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.220932][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.227935][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.254652][ T6173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.267789][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.274783][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.301156][ T6173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.343125][ T6061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.375970][ T6344] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 163.391776][ T6280] chnl_net:caif_netlink_parms(): no params data found [ 163.463725][ T6344] evm: overlay not supported [ 163.501161][ T6173] hsr_slave_0: entered promiscuous mode [ 163.520598][ T6173] hsr_slave_1: entered promiscuous mode [ 163.527715][ T6344] syz.5.196 (6344) used greatest stack depth: 16240 bytes left [ 163.546877][ T6173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.571856][ T5235] Bluetooth: hci5: command tx timeout [ 163.579455][ T6173] Cannot create hsr debugfs directory [ 163.764695][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 163.939978][ T6353] loop2: detected capacity change from 0 to 2048 [ 163.959035][ T6353] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.146377][ T35] bridge_slave_1: left allmulticast mode [ 164.152838][ T35] bridge_slave_1: left promiscuous mode [ 164.158540][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.214469][ T35] bridge_slave_0: left allmulticast mode [ 164.220172][ T35] bridge_slave_0: left promiscuous mode [ 164.227019][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.251766][ T35] bridge_slave_1: left allmulticast mode [ 164.257079][ T6359] loop5: detected capacity change from 0 to 4096 [ 164.257406][ T35] bridge_slave_1: left promiscuous mode [ 164.269461][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.285851][ T35] bridge_slave_0: left allmulticast mode [ 164.292414][ T35] bridge_slave_0: left promiscuous mode [ 164.298286][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.308551][ T6359] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 164.320089][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 164.330505][ T6359] ntfs3: loop5: Failed to load $MFT (-22). [ 164.808385][ T6370] loop5: detected capacity change from 0 to 2048 [ 164.848354][ T6370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.885820][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.010849][ T5235] Bluetooth: hci0: command tx timeout [ 165.038823][ T6370] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.066753][ T6370] EXT4-fs (loop5): Remounting filesystem read-only [ 165.367704][ T6377] loop2: detected capacity change from 0 to 32768 [ 165.407147][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.454006][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.469850][ T29] audit: type=1800 audit(1728340269.731:14): pid=6377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.204" name=6673B45D236B2391CE322E30FB9C69FE0D514DC1F8B6E3979C1205FD5224B07D18A44FEC4F6F1A6F65158BB6ADCC295BF2DD7DEA107F59D7E03C61FE5822292E45968956B931BDC4D6445FF1631E0B98E4B4448774DD4B9CD53A45896FDB3F03702778741AE2B45A25BF9A23FC02FB97A630F132BF9DEF6C6D4A7BAEB62972F1A814F6F2377BCFC78E2E86368C138510A04CEDF7175AF8C2034FAE7413E3ACE8C71AB9A0AF1CA7042011A6ED028E205648535DABF3B2F85196AE18D36B839E3CD54AE4933AD529888FDAC7BB8A70C72BC0FC81BA06506F2D5BC7686E219BBE5283959CBEF9950E071CB6D9F341FC624A5110341F26CEBD71 dev="loop2" ino=12 res=0 errno=0 [ 165.480815][ T35] bond0 (unregistering): Released all slaves [ 165.652436][ T5235] Bluetooth: hci5: command tx timeout [ 165.673715][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.754501][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.809467][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.832465][ T35] bond0 (unregistering): Released all slaves [ 165.897380][ T6061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.939293][ T6338] chnl_net:caif_netlink_parms(): no params data found [ 166.310437][ T6061] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.135526][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.170991][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.221007][ T6280] bridge_slave_0: entered allmulticast mode [ 167.228165][ T6280] bridge_slave_0: entered promiscuous mode [ 167.317465][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.324665][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.344143][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.364070][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.372945][ T6412] Zero length message leads to an empty skb [ 167.380124][ T6280] bridge_slave_1: entered allmulticast mode [ 167.393011][ T6280] bridge_slave_1: entered promiscuous mode [ 167.502587][ T6280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.591771][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.598972][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.610922][ T6338] bridge_slave_0: entered allmulticast mode [ 167.625285][ T6338] bridge_slave_0: entered promiscuous mode [ 167.655667][ T6280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.711132][ T2463] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.718310][ T2463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.746444][ T5235] Bluetooth: hci5: command tx timeout [ 167.761146][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.772044][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.784415][ T6338] bridge_slave_1: entered allmulticast mode [ 167.792630][ T6338] bridge_slave_1: entered promiscuous mode [ 167.975096][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.097699][ T6431] loop5: detected capacity change from 0 to 16 [ 168.136841][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.151035][ T6431] erofs: (device loop5): mounted with root inode @ nid 36. [ 168.254469][ T6280] team0: Port device team_slave_0 added [ 168.547462][ T6440] syz.5.212: attempt to access beyond end of device [ 168.547462][ T6440] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 168.561222][ T6440] erofs: (device loop5): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 168.897488][ T6280] team0: Port device team_slave_1 added [ 169.097144][ T6338] team0: Port device team_slave_0 added [ 169.121697][ T6338] team0: Port device team_slave_1 added [ 169.394698][ T6448] loop5: detected capacity change from 0 to 64 [ 169.395048][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.412574][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.464790][ T6280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.535202][ T6448] overlayfs: upper fs needs to support d_type. [ 169.555035][ T35] hsr_slave_0: left promiscuous mode [ 169.564063][ T6448] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 169.572100][ T35] hsr_slave_1: left promiscuous mode [ 169.591088][ T6448] overlayfs: failed to set xattr on upper [ 169.602302][ T6448] overlayfs: ...falling back to redirect_dir=nofollow. [ 169.609168][ T6448] overlayfs: ...falling back to index=off. [ 169.615592][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.635647][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.642929][ T6448] overlayfs: ...falling back to uuid=null. [ 169.670049][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.677710][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.708678][ T35] hsr_slave_0: left promiscuous mode [ 169.759094][ T35] hsr_slave_1: left promiscuous mode [ 169.785410][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.794611][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.811024][ T5235] Bluetooth: hci5: command tx timeout [ 169.820430][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.840070][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.905230][ T35] veth1_macvtap: left promiscuous mode [ 169.910949][ T35] veth0_macvtap: left promiscuous mode [ 169.916685][ T35] veth1_vlan: left promiscuous mode [ 169.924840][ T35] veth0_vlan: left promiscuous mode [ 169.948691][ T35] veth1_macvtap: left promiscuous mode [ 169.971273][ T35] veth0_macvtap: left promiscuous mode [ 169.981238][ T35] veth1_vlan: left promiscuous mode [ 169.986569][ T35] veth0_vlan: left promiscuous mode [ 170.033036][ T5621] Trying to free block not in datazone [ 171.347241][ T6474] loop2: detected capacity change from 0 to 4096 [ 171.365530][ T6474] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 171.526429][ T6474] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 171.579303][ T35] team0 (unregistering): Port device team_slave_1 removed [ 171.708068][ T35] team0 (unregistering): Port device team_slave_0 removed [ 172.473675][ T6485] loop2: detected capacity change from 0 to 2048 [ 172.546429][ T6485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.674259][ T5436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.998702][ T6504] loop5: detected capacity change from 0 to 64 [ 174.688846][ T6511] loop5: detected capacity change from 0 to 256 [ 174.706181][ T6510] loop2: detected capacity change from 0 to 2048 [ 174.719289][ T6511] exfat: Unknown parameter 'BDÅM¢¤¸YÄ‹R¢´(#œ(+ʉ[Dyq«¨ nÅí¢’¸CTUDUQMÜ)ª‹»DQSÔw‹Ú¢Ž¨+ê‰{D}q¯h îÅý¢‘x@4Š&â!ÑT<' [ 174.750379][ T6510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.759200][ T6517] loop5: detected capacity change from 0 to 512 [ 175.817223][ T6517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.866617][ T6517] EXT4-fs (loop5): 1 orphan inode deleted [ 175.876550][ T6517] EXT4-fs (loop5): 1 truncate cleaned up [ 175.901575][ T6517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.927469][ T35] team0 (unregistering): Port device team_slave_1 removed [ 176.005089][ T35] team0 (unregistering): Port device team_slave_0 removed [ 176.554736][ T5621] EXT4-fs error (device loop5): __ext4_iget:4952: inode #11: block 524051: comm syz-executor: invalid block [ 176.571383][ T5621] EXT4-fs error (device loop5): __ext4_iget:4952: inode #11: block 524051: comm syz-executor: invalid block [ 176.625078][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.636693][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.679574][ T6280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.698358][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.709715][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.735809][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.742061][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.758083][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.776297][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.814787][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.962268][ T6280] hsr_slave_0: entered promiscuous mode [ 176.969818][ T6280] hsr_slave_1: entered promiscuous mode [ 176.991846][ T5621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.014942][ T6061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.219576][ T6338] hsr_slave_0: entered promiscuous mode [ 177.235029][ T6338] hsr_slave_1: entered promiscuous mode [ 177.249096][ T6338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.273369][ T6338] Cannot create hsr debugfs directory [ 177.557435][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.566865][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.590111][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.600974][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.608729][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 177.617108][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.935813][ T6173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.006911][ T6173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.034117][ T6173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.700379][ T6061] veth0_vlan: entered promiscuous mode [ 178.732641][ T6173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.874775][ T6550] loop2: detected capacity change from 0 to 16 [ 178.888122][ T6550] erofs: (device loop2): mounted with root inode @ nid 36. [ 178.922126][ T6550] erofs: (device loop2): erofs_map_blocks_flatmode: inline data across blocks @ nid 36 [ 178.969798][ T6550] syz.2.236: attempt to access beyond end of device [ 178.969798][ T6550] loop2: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 178.976971][ T6061] veth1_vlan: entered promiscuous mode [ 179.041348][ T6338] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.110378][ T6552] loop2: detected capacity change from 0 to 8 [ 179.181285][ T6338] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.606946][ T6338] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.651993][ T5235] Bluetooth: hci3: command tx timeout [ 180.486738][ T6338] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.367267][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.740897][ T5235] Bluetooth: hci3: command tx timeout [ 183.820855][ T5235] Bluetooth: hci3: command tx timeout [ 184.802638][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.572439][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 185.891107][ T5233] Bluetooth: hci3: command tx timeout [ 186.430596][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.490715][ T6061] veth0_macvtap: entered promiscuous mode [ 186.951205][ T6061] veth1_macvtap: entered promiscuous mode [ 187.118788][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.086362][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 188.769106][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.524602][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.821754][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.117885][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.533358][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.676661][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.786090][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.888652][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.992146][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.127620][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.734140][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.740536][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.049117][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.156195][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.239570][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.604400][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.658774][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.054927][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.112325][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.156445][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.232558][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.493395][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 196.505817][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 196.530607][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 196.547287][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 196.563403][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 196.574845][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 196.661571][ T6061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.685894][ T6061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.697724][ T6061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.709109][ T6061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.231894][ T35] bridge_slave_1: left allmulticast mode [ 197.262644][ T35] bridge_slave_1: left promiscuous mode [ 197.273459][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.339139][ T35] bridge_slave_0: left allmulticast mode [ 197.356082][ T35] bridge_slave_0: left promiscuous mode [ 197.368596][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.406278][ T35] bridge_slave_1: left allmulticast mode [ 198.510520][ T35] bridge_slave_1: left promiscuous mode [ 198.549695][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.612459][ T5235] Bluetooth: hci7: command tx timeout [ 198.731868][ T35] bridge_slave_0: left allmulticast mode [ 198.766193][ T35] bridge_slave_0: left promiscuous mode [ 198.811088][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.691028][ T5235] Bluetooth: hci7: command tx timeout [ 201.672470][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 201.702732][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 201.755846][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 201.787932][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 201.810796][ T5233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 201.820910][ T5233] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 202.770841][ T5233] Bluetooth: hci7: command tx timeout [ 203.973699][ T5235] Bluetooth: hci8: command tx timeout [ 204.850778][ T5235] Bluetooth: hci7: command tx timeout [ 206.053533][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 206.053562][ T5233] Bluetooth: hci8: command tx timeout [ 206.159439][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.333293][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.708576][ T35] bond0 (unregistering): Released all slaves [ 208.131286][ T5232] Bluetooth: hci8: command tx timeout [ 209.864567][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.922740][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.989353][ T35] bond0 (unregistering): Released all slaves [ 210.210779][ T5232] Bluetooth: hci8: command tx timeout [ 210.508335][ T6173] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.909906][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.977266][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.041147][ T6534] bridge_slave_0: entered allmulticast mode [ 211.094581][ T6534] bridge_slave_0: entered promiscuous mode [ 211.491763][ T35] tipc: Left network mode [ 211.807564][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.898339][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.984312][ T6534] bridge_slave_1: entered allmulticast mode [ 212.291328][ T6534] bridge_slave_1: entered promiscuous mode [ 215.412098][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 215.465120][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 215.514081][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 215.651064][ T5233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 215.718314][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 215.768352][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 217.511201][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.973557][ T5233] Bluetooth: hci9: command tx timeout [ 220.218135][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.233716][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.244553][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.262876][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.274892][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.285412][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.421187][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.061288][ T5233] Bluetooth: hci9: command tx timeout [ 222.451850][ T5233] Bluetooth: hci1: command tx timeout [ 224.141417][ T5233] Bluetooth: hci9: command tx timeout [ 224.531017][ T5233] Bluetooth: hci1: command tx timeout [ 225.740135][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.759450][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.771957][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.789833][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.800941][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.810067][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.066380][ T6534] team0: Port device team_slave_0 added [ 226.221328][ T5232] Bluetooth: hci9: command tx timeout [ 226.375655][ T6534] team0: Port device team_slave_1 added [ 226.611019][ T5232] Bluetooth: hci1: command tx timeout [ 227.890838][ T5232] Bluetooth: hci6: command tx timeout [ 228.700881][ T5232] Bluetooth: hci1: command tx timeout [ 228.758040][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.809733][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.900737][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.265847][ T35] hsr_slave_0: left promiscuous mode [ 229.454874][ T35] hsr_slave_1: left promiscuous mode [ 229.720823][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.972288][ T5232] Bluetooth: hci6: command tx timeout [ 230.046607][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.100640][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.109677][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.211036][ T35] hsr_slave_0: left promiscuous mode [ 231.797725][ T35] hsr_slave_1: left promiscuous mode [ 232.052255][ T5232] Bluetooth: hci6: command tx timeout [ 232.139871][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.184584][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.232624][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.259930][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.450018][ T35] veth1_macvtap: left promiscuous mode [ 232.456255][ T35] veth0_macvtap: left promiscuous mode [ 232.469853][ T35] veth1_vlan: left promiscuous mode [ 232.475543][ T35] veth0_vlan: left promiscuous mode [ 232.496299][ T35] veth1_macvtap: left promiscuous mode [ 232.502569][ T35] veth0_macvtap: left promiscuous mode [ 232.508489][ T35] veth1_vlan: left promiscuous mode [ 232.520843][ T35] veth0_vlan: left promiscuous mode [ 234.132213][ T5232] Bluetooth: hci6: command tx timeout [ 238.864043][ T35] team0 (unregistering): Port device team_slave_1 removed [ 239.388096][ T35] team0 (unregistering): Port device team_slave_0 removed [ 240.208418][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.233812][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.256455][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.271431][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.312101][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.324826][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.373530][ T5232] Bluetooth: hci0: command tx timeout [ 243.022342][ T30] INFO: task syz.3.44:5512 blocked for more than 143 seconds. [ 243.033556][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 243.041359][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.050150][ T30] task:syz.3.44 state:D stack:25872 pid:5512 tgid:5511 ppid:5234 flags:0x00004004 [ 243.061460][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 243.073540][ T30] [ 243.115370][ T30] __schedule+0x1895/0x4b30 [ 243.143774][ T30] ? __pfx___schedule+0x10/0x10 [ 243.174089][ T30] ? __pfx_lock_release+0x10/0x10 [ 243.205832][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 244.430222][ T30] ? schedule+0x90/0x320 [ 244.458677][ T5232] Bluetooth: hci0: command tx timeout [ 244.499393][ T30] schedule+0x14b/0x320 [ 244.578682][ T30] schedule_preempt_disabled+0x13/0x30 [ 244.991333][ T30] __mutex_lock+0x6a7/0xd70 [ 245.101109][ T30] ? __mutex_lock+0x52a/0xd70 [ 245.106110][ T30] ? br_ioctl_call+0x57/0xb0 [ 245.128285][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 245.153500][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 245.159334][ T30] br_ioctl_call+0x57/0xb0 [ 245.164431][ T30] dev_ifsioc+0xc20/0xe70 [ 245.170430][ T30] ? __pfx_dev_ifsioc+0x10/0x10 [ 245.176341][ T30] ? dev_load+0x21/0x1f0 [ 245.181186][ T30] dev_ioctl+0x719/0x1340 [ 245.185735][ T30] sock_do_ioctl+0x240/0x460 [ 245.190513][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 245.205518][ T30] sock_ioctl+0x626/0x8e0 [ 245.216107][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 245.225533][ T30] ? __fget_files+0x29/0x470 [ 245.230360][ T30] ? __fget_files+0x3f3/0x470 [ 245.238244][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 245.244535][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 245.252077][ T30] __se_sys_ioctl+0xfb/0x170 [ 245.300241][ T30] do_syscall_64+0xf3/0x230 [ 245.306788][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.312873][ T30] RIP: 0033:0x7f205897dff9 [ 245.317362][ T30] RSP: 002b:00007f205984e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.327024][ T30] RAX: ffffffffffffffda RBX: 00007f2058b35f80 RCX: 00007f205897dff9 [ 245.335519][ T30] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000004 [ 245.344436][ T30] RBP: 00007f20589f0296 R08: 0000000000000000 R09: 0000000000000000 [ 245.352616][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.360732][ T30] R13: 0000000000000000 R14: 00007f2058b35f80 R15: 00007ffd5069acd8 [ 245.368817][ T30] [ 245.374621][ T30] [ 245.374621][ T30] Showing all locks held in the system: [ 245.382556][ T30] 3 locks held by kworker/u8:1/12: [ 245.387678][ T30] #0: ffff88802c448948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 245.414675][ T30] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 245.474390][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 245.486479][ T30] 1 lock held by khungtaskd/30: [ 245.502440][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 245.515063][ T30] 5 locks held by kworker/u8:2/35: [ 245.520331][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 245.535620][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 245.547161][ T30] #2: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 245.557671][ T30] #3: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xaa0 [ 245.570254][ T30] #4: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 245.583569][ T30] 3 locks held by kworker/u8:3/53: [ 245.588824][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 245.599379][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 245.615994][ T30] #2: ffff88807be68768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 245.629394][ T30] 3 locks held by kworker/u8:7/2463: [ 245.637250][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 245.650773][ T30] #1: ffffc90008eb7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 245.664856][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 245.676807][ T30] 1 lock held by dhcpcd/4897: [ 245.684901][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 245.697015][ T30] 2 locks held by getty/4980: [ 245.704643][ T30] #0: ffff88802dc770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 245.715530][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 245.727676][ T30] 1 lock held by syz.3.44/5512: [ 245.732910][ T30] #0: ffffffff8fcb6708 (br_ioctl_mutex){+.+.}-{3:3}, at: br_ioctl_call+0x57/0xb0 [ 245.742995][ T30] 2 locks held by syz.3.44/5514: [ 245.748075][ T30] #0: ffffffff8fcb6708 (br_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x5c3/0x8e0 [ 245.760270][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 245.830320][ T30] 7 locks held by syz-executor/6338: [ 245.841361][ T30] #0: ffff8880322e2420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 245.947581][ T30] #1: ffff88802de3f888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 245.975541][ T30] #2: ffff8881417af698 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 246.052320][ T30] #3: ffffffff8f56fda8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 246.063631][ T30] #4: ffff8880124100e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 246.082027][ T30] #5: ffff888011962250 (&devlink->lock_key#16){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 246.203661][ T30] #6: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_create+0x408/0x890 [ 246.230733][ T30] 1 lock held by syz-executor/6534: [ 246.236313][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.247484][ T30] 1 lock held by syz-executor/6581: [ 246.253873][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.271517][ T30] 1 lock held by syz-executor/6584: [ 246.276882][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.286517][ T30] 2 locks held by syz-executor/6592: [ 246.324575][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 246.346883][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 246.357721][ T30] 2 locks held by syz-executor/6597: [ 246.365617][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 246.406972][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 246.430276][ T30] 1 lock held by syz-executor/6600: [ 246.437744][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.449486][ T30] 1 lock held by syz-executor/6619: [ 246.490175][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.591043][ T5232] Bluetooth: hci0: command tx timeout [ 246.640955][ T30] [ 246.643312][ T30] ============================================= [ 246.643312][ T30] [ 246.652986][ T30] NMI backtrace for cpu 1 [ 246.657848][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 246.668361][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.678503][ T30] Call Trace: [ 246.681784][ T30] [ 246.684718][ T30] dump_stack_lvl+0x241/0x360 [ 246.689397][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.694599][ T30] ? __pfx__printk+0x10/0x10 [ 246.699224][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 246.704180][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 246.709656][ T30] ? _printk+0xd5/0x120 [ 246.713828][ T30] ? __pfx__printk+0x10/0x10 [ 246.718444][ T30] ? __wake_up_klogd+0xcc/0x110 [ 246.723323][ T30] ? __pfx__printk+0x10/0x10 [ 246.727946][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.733586][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 246.738643][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 246.744630][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 246.750634][ T30] watchdog+0xff4/0x1040 [ 246.754909][ T30] ? watchdog+0x1ea/0x1040 [ 246.759355][ T30] ? __pfx_watchdog+0x10/0x10 [ 246.764048][ T30] kthread+0x2f2/0x390 [ 246.768142][ T30] ? __pfx_watchdog+0x10/0x10 [ 246.772849][ T30] ? __pfx_kthread+0x10/0x10 [ 246.777459][ T30] ret_from_fork+0x4d/0x80 [ 246.781911][ T30] ? __pfx_kthread+0x10/0x10 [ 246.786521][ T30] ret_from_fork_asm+0x1a/0x30 [ 246.791354][ T30] [ 246.795231][ T30] Sending NMI from CPU 1 to CPUs 0: [ 246.800806][ C0] NMI backtrace for cpu 0 [ 246.800821][ C0] CPU: 0 UID: 0 PID: 6482 Comm: kworker/u8:13 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 246.800847][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.800862][ C0] Workqueue: events_unbound toggle_allocation_gate [ 246.800895][ C0] RIP: 0010:preempt_count_sub+0x45/0x170 [ 246.800929][ C0] Code: fc ff df 42 0f b6 04 30 84 c0 0f 85 d0 00 00 00 83 3d de 8b d9 18 00 75 22 65 8b 05 5d 9a a0 7e 89 c1 81 e1 ff ff ff 7f 39 d9 <7c> 27 81 fb fe 00 00 00 77 07 0f b6 c0 85 c0 74 5f 65 8b 05 3b 9a [ 246.800949][ C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00000202 [ 246.800968][ C0] RAX: 0000000000000102 RBX: 0000000000000001 RCX: 0000000000000102 [ 246.800983][ C0] RDX: dffffc0000000000 RSI: ffffc90003358000 RDI: 0000000000000001 [ 246.801000][ C0] RBP: ffffc900000077c0 R08: ffffc9000335fed0 R09: ffffc90000007810 [ 246.801017][ C0] R10: dffffc0000000000 R11: fffff52000000f04 R12: dffffc0000000000 [ 246.801035][ C0] R13: ffffc900000077c0 R14: dffffc0000000000 R15: ffffc9000335fee0 [ 246.801056][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 246.801076][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.801092][ C0] CR2: 00007fc8fd867d60 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 246.801111][ C0] Call Trace: [ 246.801118][ C0] [ 246.801127][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 246.801157][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 246.801196][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 246.801224][ C0] ? nmi_handle+0x2a/0x5a0 [ 246.801259][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 246.801293][ C0] ? nmi_handle+0x151/0x5a0 [ 246.801317][ C0] ? nmi_handle+0x2a/0x5a0 [ 246.801343][ C0] ? preempt_count_sub+0x45/0x170 [ 246.801373][ C0] ? default_do_nmi+0x63/0x160 [ 246.801403][ C0] ? exc_nmi+0x123/0x1f0 [ 246.801431][ C0] ? end_repeat_nmi+0xf/0x53 [ 246.801461][ C0] ? preempt_count_sub+0x45/0x170 [ 246.801497][ C0] ? preempt_count_sub+0x45/0x170 [ 246.801530][ C0] ? preempt_count_sub+0x45/0x170 [ 246.801562][ C0] [ 246.801569][ C0] [ 246.801578][ C0] unwind_next_frame+0x18e6/0x22d0 [ 246.801606][ C0] ? worker_thread+0x870/0xd30 [ 246.801643][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 246.801674][ C0] arch_stack_walk+0x11c/0x150 [ 246.801703][ C0] ? kthread+0x2f2/0x390 [ 246.801729][ C0] stack_trace_save+0x118/0x1d0 [ 246.801759][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 246.801789][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.801814][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.801855][ C0] kasan_save_track+0x3f/0x80 [ 246.801878][ C0] ? kasan_save_track+0x3f/0x80 [ 246.801900][ C0] ? kasan_save_free_info+0x40/0x50 [ 246.801934][ C0] ? __kasan_slab_free+0x59/0x70 [ 246.801958][ C0] ? kmem_cache_free+0x1a2/0x420 [ 246.801990][ C0] ? rcu_core+0xaac/0x17a0 [ 246.802013][ C0] ? handle_softirqs+0x2c7/0x980 [ 246.802044][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 246.802075][ C0] ? irq_exit_rcu+0x9/0x30 [ 246.802104][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 246.802138][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.802190][ C0] ? __text_poke+0xa4a/0xd30 [ 246.802217][ C0] ? text_poke_bp_batch+0x59c/0xb30 [ 246.802246][ C0] ? text_poke_finish+0x30/0x50 [ 246.802274][ C0] ? arch_jump_label_transform_apply+0x1c/0x30 [ 246.802309][ C0] ? static_key_disable_cpuslocked+0xd2/0x1c0 [ 246.802344][ C0] ? static_key_disable+0x1a/0x20 [ 246.802376][ C0] ? toggle_allocation_gate+0x1bf/0x260 [ 246.802404][ C0] ? process_scheduled_works+0xa65/0x1850 [ 246.802436][ C0] ? worker_thread+0x870/0xd30 [ 246.802497][ C0] kasan_save_free_info+0x40/0x50 [ 246.802531][ C0] __kasan_slab_free+0x59/0x70 [ 246.802556][ C0] ? rcu_core+0xaac/0x17a0 [ 246.802578][ C0] kmem_cache_free+0x1a2/0x420 [ 246.802611][ C0] ? rcu_core+0xaac/0x17a0 [ 246.802635][ C0] ? rcu_core+0xa37/0x17a0 [ 246.802658][ C0] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 246.802696][ C0] rcu_core+0xaac/0x17a0 [ 246.802729][ C0] ? __pfx_rcu_core+0x10/0x10 [ 246.802755][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.802779][ C0] ? sched_balance_domains+0x91b/0xa90 [ 246.802815][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 246.802844][ C0] ? __pfx_sched_balance_domains+0x10/0x10 [ 246.802879][ C0] handle_softirqs+0x2c7/0x980 [ 246.802914][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 246.802948][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 246.802982][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.803006][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 246.803032][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 246.803063][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 246.803098][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.803124][ C0] irq_exit_rcu+0x9/0x30 [ 246.803154][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 246.803189][ C0] [ 246.803197][ C0] [ 246.803205][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.803243][ C0] RIP: 0010:__text_poke+0xa4a/0xd30 [ 246.803271][ C0] Code: 7c 24 50 00 75 19 e8 45 78 5f 00 eb 18 e8 3e 78 5f 00 e8 59 09 90 0a 48 83 7c 24 50 00 74 e7 e8 2c 78 5f 00 fb 48 8b 44 24 78 <42> 80 3c 28 00 74 0d 48 8d bc 24 60 01 00 00 e8 c2 29 c9 00 48 8b [ 246.803291][ C0] RSP: 0018:ffffc9000335f740 EFLAGS: 00000293 [ 246.803310][ C0] RAX: 1ffff9200066bf14 RBX: 0000000000000000 RCX: ffff888025503c00 [ 246.803327][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.803341][ C0] RBP: ffffc9000335f910 R08: ffffffff81356e14 R09: 1ffffffff2858b00 [ 246.803358][ C0] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: 1ffff9200066bef8 [ 246.803376][ C0] R13: dffffc0000000000 R14: 0000000000000046 R15: ffffffff81f28bd0 [ 246.803393][ C0] ? kmem_cache_alloc_noprof+0x80/0x2a0 [ 246.803428][ C0] ? __text_poke+0xa14/0xd30 [ 246.803460][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 246.803494][ C0] ? kmem_cache_alloc_noprof+0x80/0x2a0 [ 246.803526][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 246.803557][ C0] ? __pfx___text_poke+0x10/0x10 [ 246.803584][ C0] ? process_scheduled_works+0x976/0x1850 [ 246.803617][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.803644][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 246.803670][ C0] ? __pfx___might_resched+0x10/0x10 [ 246.803702][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 246.803730][ C0] ? __pfx___might_resched+0x10/0x10 [ 246.803766][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.803795][ C0] text_poke_bp_batch+0x59c/0xb30 [ 246.803825][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.803854][ C0] ? kmem_cache_alloc_noprof+0x80/0x2a0 [ 246.803886][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 246.803918][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.803945][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.803969][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 246.804004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.804030][ C0] ? process_scheduled_works+0x976/0x1850 [ 246.804064][ C0] text_poke_finish+0x30/0x50 [ 246.804093][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 246.804127][ C0] static_key_disable_cpuslocked+0xd2/0x1c0 [ 246.804163][ C0] static_key_disable+0x1a/0x20 [ 246.804196][ C0] toggle_allocation_gate+0x1bf/0x260 [ 246.804225][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 246.804255][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.804305][ C0] process_scheduled_works+0xa65/0x1850 [ 246.804360][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.804403][ C0] ? assign_work+0x364/0x3d0 [ 246.804442][ C0] worker_thread+0x870/0xd30 [ 246.804487][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 246.804512][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 246.804550][ C0] ? __kthread_parkme+0x169/0x1d0 [ 246.804587][ C0] ? __pfx_worker_thread+0x10/0x10 [ 246.804621][ C0] kthread+0x2f2/0x390 [ 246.804643][ C0] ? __pfx_worker_thread+0x10/0x10 [ 246.804677][ C0] ? __pfx_kthread+0x10/0x10 [ 246.804700][ C0] ret_from_fork+0x4d/0x80 [ 246.804735][ C0] ? __pfx_kthread+0x10/0x10 [ 246.804758][ C0] ret_from_fork_asm+0x1a/0x30 [ 246.804801][ C0] [ 247.595116][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 247.602009][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 247.612537][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.622695][ T30] Call Trace: [ 247.625983][ T30] [ 247.628929][ T30] dump_stack_lvl+0x241/0x360 [ 247.633633][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.638853][ T30] ? __pfx__printk+0x10/0x10 [ 247.643486][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.649135][ T30] ? vscnprintf+0x5d/0x90 [ 247.653494][ T30] panic+0x349/0x880 [ 247.657425][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.663266][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 247.669446][ T30] ? __pfx_panic+0x10/0x10 [ 247.673897][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 247.679292][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.684936][ T30] ? __irq_work_queue_local+0x137/0x410 [ 247.690506][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.696145][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 247.701530][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 247.707716][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 247.713886][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 247.719527][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 247.725696][ T30] watchdog+0x1033/0x1040 [ 247.730045][ T30] ? watchdog+0x1ea/0x1040 [ 247.734502][ T30] ? __pfx_watchdog+0x10/0x10 [ 247.739197][ T30] kthread+0x2f2/0x390 [ 247.743274][ T30] ? __pfx_watchdog+0x10/0x10 [ 247.747974][ T30] ? __pfx_kthread+0x10/0x10 [ 247.752580][ T30] ret_from_fork+0x4d/0x80 [ 247.757020][ T30] ? __pfx_kthread+0x10/0x10 [ 247.761791][ T30] ret_from_fork_asm+0x1a/0x30 [ 247.766590][ T30] [ 247.769832][ T30] Kernel Offset: disabled [ 247.774157][ T30] Rebooting in 86400 seconds..