last executing test programs: 28.992780027s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$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") r0 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[], 0xfd14) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfea7}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './bus'}, 0x9) ftruncate(r0, 0x96ef) 28.045715513s ago: executing program 3 (id=8): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000007f000000008500000000000000950000001db36c4e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r3}}}, @hopopts_2292={{0x188, 0x29, 0x36, {0x2b, 0x2d, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra, @generic={0x3, 0x85, "bd8dcbe940b2edb8f0b9cc9f2d7eb99819b1bd4a8102eb07577517f642f1ee12d88ba77f70a47326210f2957ef46bc4f72c61ff826f8a256eeb95545cbe06df77d573fe281286a30d3724ae1508c0739b81c9a8be1163991d2c32579dda7d77b6ea2b80dbe9b9260f4c51f74b3ed6132b02dd2ce3272d943e8ecdea8217e75ae0f1d47f1a2"}, @ra={0x5, 0x2, 0x8001}, @generic={0x0, 0xc1, "803a2137528e3cb6958ca828094bed18edc215b14d3c3b9ff289ac46ea41196bdb90b3113ad8ddc086491c2f399a229d3a45ab0f14216e6e49f895ba626062c095410f490866b22a375b32c45e414860bc69082ca66a35e7a4e1088b62a7bb34f67f204e4385eca81cd5117b03cbf0a34b423385212aad83eb7fd9df3c1f105eaab9cfe437729362dfe15e52974bc3e526bdd08abae926c3d4efa6e8ed74d3f8faa47ac02212ec92b6fb32df2af1a2ea688f49e16d109b89296301f416c9ac46fd"}, @hao={0xc9, 0x10, @mcast1}, @pad1, @pad1]}}}], 0x1b0}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 27.164127648s ago: executing program 3 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) close(r1) 24.193430463s ago: executing program 3 (id=16): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) link(&(0x7f0000000340)='./file1\x00', &(0x7f0000000540)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000002080)=""/4096, 0x1000) 22.091896996s ago: executing program 3 (id=19): creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) userfaultfd(0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) sched_setaffinity(0x0, 0xffffffffffffff84, &(0x7f0000000080)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 17.656684262s ago: executing program 2 (id=26): rseq(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 17.357189703s ago: executing program 4 (id=27): mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mq_open(&(0x7f0000001140)='rmdF\x17\x16\xbc\xec', 0x1, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000002000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 16.535925542s ago: executing program 2 (id=29): socket$inet6_sctp(0xa, 0x1, 0x84) fanotify_init(0x200, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x6820, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, @remote, @mcast1, 0x0, 0x60}}) syz_io_uring_setup(0x4033, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 15.156144397s ago: executing program 2 (id=32): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x4, 0x787, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 14.641502062s ago: executing program 4 (id=35): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 12.369856724s ago: executing program 4 (id=38): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)={r1, 0x80000000000}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) socket(0x10, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x3, 0x8, 0x20}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, r4}) 12.232459819s ago: executing program 2 (id=40): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10b091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2187017, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) chdir(&(0x7f0000000300)='./file0/../file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x100800001) 10.127107445s ago: executing program 2 (id=43): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) setgroups(0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x3920e, r0}) 9.950569591s ago: executing program 0 (id=44): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x8000451a, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 9.910236592s ago: executing program 5 (id=45): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="fbe286ec23fb1bd83b27c8d2cd648f5692", 0x11}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001f80)='!', 0x1}], 0x1}}], 0x2, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@orlov}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x301, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40019) 9.646989772s ago: executing program 1 (id=46): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@mcast2, @ipv4, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r5}) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r7}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 9.305701981s ago: executing program 2 (id=47): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r0, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000810500"/20, @ANYRES32=r1, @ANYBLOB="5989ffffffdf0000140012800a000100767863616e"], 0x34}}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, r1}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 9.303864063s ago: executing program 1 (id=48): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5421, &(0x7f0000001080)=0x4) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.936527389s ago: executing program 1 (id=50): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x80000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1200000, &(0x7f0000000180), 0xec, 0x57c, &(0x7f0000000ac0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000006c0), 0x0, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='ext4_es_insert_delayed_block\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xa04a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) 8.89634401s ago: executing program 5 (id=51): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 8.757746568s ago: executing program 0 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000200)={[{@shortname_mixed}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@shortname_lower}, {@uni_xlateno}]}, 0x3, 0x350, &(0x7f0000000580)="$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") socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 8.669598884s ago: executing program 5 (id=53): socket$unix(0x1, 0x1, 0x0) r0 = epoll_create(0x188) ioctl$TCSBRK(r0, 0x5451, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000100)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x2) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) mq_open(&(0x7f0000000000)='\\,\x00', 0x4a1483037702dbc5, 0x0, 0x0) r1 = mq_open(&(0x7f0000001400)='\x89\x14\xc5H\x9d\xd3\x03(#X\xa61\x8b?\xef\x03\xe9\vQh?\x10\x13\x9dG\x0f\xc0\x9c\x05\xd2\xaa\xd0\x83\xa3\xf8\xe8_\x1d\xf3\xa3^\xed\xfe7\xa8\xfb&[\x8a\x85\xd4\xdd\xacR\x15;ceF3\xc0\xd3\xca{\xbc\xcf\xce\xa8F\a_\x88q\xaf\a\xb5\b\xe3@\x12\x18\x10\x89\xe7\x97\x86G\x05.b\xd6\x0e\xa7\x1a\xc7J\tc\xf4\xb8p\xec\x9a\n\xe9\xa1\xbb\'', 0x40, 0x19, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_BMAP(r2, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8903, &(0x7f0000000080)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x60, 0x0, 0x0}) memfd_create(&(0x7f00000002c0)='\xd4\xb4y\x05F%v\xd5\xb2\xe0P(p\xe2\xbd%\x02\xe1\x89|\xe0u\x01\x00\x00\x00\xeb\x7ft\x92\xda\xce\x0f\x89=\xa9\xd8q\'\x00\x00\x00\xff\xff\xff\xff\x11\xf2\xd8f\xbe/\xcdn\xe6\x01\xa7\xfb\x16\xaa\x84\x05A\xa1B\xe1B\x12\xd6\xb7w\xd9\xc4`\x15\xf3\x90\x8e\xe5x\xfe\x93>\x1c\xb1\xde\xf7\xebu', 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x5452, 0x0) 7.544563406s ago: executing program 5 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={0x0, 0x50}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea0009058703", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000001b80)=""/4096, 0x1000) 7.419059255s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297d, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x0, @fd_index}) io_uring_enter(r4, 0x3332, 0x0, 0x0, 0x0, 0x0) 7.27181902s ago: executing program 4 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 5.279667176s ago: executing program 0 (id=57): r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') rename(&(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000a00)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="defdd6f24cb9acb7fe0b0dc92a093135912ebef426731ffe88138f2b03791edb32e2ba3924188f2c07da77a1d75290af3db49e3aeedbaabdfc897ff5feb67e05cb1f923278506034c99285994c8d2a07e7732f9e4666bedc57efbc75eda531e10945eab9810dce4df5cb4468fee9df15bad908ce6d2cf900c4541ebe94681428ac2202f0132ddfd00bb4d24ace8c513914431814c2", @ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000100)='.\x00', 0x1b6643c, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES8, @ANYRES16], 0x1, 0x0, &(0x7f0000000000)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0xa0002008}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000d2880)={{0x0, 0xfffffffffffffffb, 0x9, 0x1, 0x8, 0xfffffffffffffff7, 0xffffffffffffffff, 0x7, 0x26787ce5, 0x5, 0x81, 0x7429, 0x4, 0x1, 0x1}, 0x18, [0x0, 0x0, 0x0]}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.833054266s ago: executing program 1 (id=58): r0 = socket(0x10, 0x80803, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000080)={0x54, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x4c, 0x13, 0x1, 0x0, 0x0, {0xa}}, 0x4c}}, 0x0) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}}, 0x0) 3.792583609s ago: executing program 1 (id=59): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f00000001c0)='net/unix\x00') lseek(r3, 0xae7d, 0x0) 3.668220372s ago: executing program 4 (id=60): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) socket$key(0xf, 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2500, 0x0) 3.586875449s ago: executing program 0 (id=61): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000003040)=ANY=[@ANYBLOB="040e08002320032c"], 0xb) 2.28378288s ago: executing program 1 (id=62): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000200)=ANY=[@ANYRES16], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, @void, @value}, 0x90) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r2 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @broadcast}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[], 0xfd, 0x282, &(0x7f0000000480)="$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") r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x84001, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000a00)) syz_usb_connect(0x0, 0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000042ebf04021046c022f1f0000000109024000010000000009040000000202ff00052406000005240000000d240f01000000000000000000052406000005242000000d240f"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.974085883s ago: executing program 5 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) ioctl$VT_RESIZE(0xffffffffffffffff, 0x8902, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000004c0)={0x3c}) 255.510329ms ago: executing program 5 (id=64): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 126.27339ms ago: executing program 4 (id=65): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=66): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000680001000000000000000000020000000000000008000500", @ANYRES32=r1], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}]}, 0x24}}, 0x6000) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x14d5, &(0x7f00000015c0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. syzkaller login: [ 76.077163][ T5214] cgroup: Unknown subsys name 'net' [ 76.198843][ T5214] cgroup: Unknown subsys name 'cpuset' [ 76.207582][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.774602][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.255990][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.267021][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.294690][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.302126][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.312464][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.320061][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.328087][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.336231][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.343903][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.351305][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.356563][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.366070][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.374145][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.375901][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.389972][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.400759][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.408184][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.419976][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.427794][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.435875][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.460159][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.468216][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.475922][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.483512][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.490919][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.495629][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.499352][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.512342][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.514374][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.520466][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.527056][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.542128][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.550652][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.558078][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.566449][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.581616][ T4615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.075192][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 81.107138][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 81.187261][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 81.231826][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 81.355872][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 81.395665][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.403286][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.411445][ T5236] bridge_slave_0: entered allmulticast mode [ 81.418888][ T5236] bridge_slave_0: entered promiscuous mode [ 81.446591][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 81.460912][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.468162][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.475600][ T5226] bridge_slave_0: entered allmulticast mode [ 81.482537][ T5226] bridge_slave_0: entered promiscuous mode [ 81.491216][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.498734][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.506046][ T5236] bridge_slave_1: entered allmulticast mode [ 81.512917][ T5236] bridge_slave_1: entered promiscuous mode [ 81.558599][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.565954][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.573149][ T5226] bridge_slave_1: entered allmulticast mode [ 81.580772][ T5226] bridge_slave_1: entered promiscuous mode [ 81.711864][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.721519][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.728974][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.736710][ T5225] bridge_slave_0: entered allmulticast mode [ 81.743632][ T5225] bridge_slave_0: entered promiscuous mode [ 81.783548][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.796944][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.807102][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.819960][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.827359][ T5225] bridge_slave_1: entered allmulticast mode [ 81.834800][ T5225] bridge_slave_1: entered promiscuous mode [ 81.850139][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.857508][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.864976][ T5237] bridge_slave_0: entered allmulticast mode [ 81.871791][ T5237] bridge_slave_0: entered promiscuous mode [ 81.890640][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.940385][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.947991][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.955313][ T5237] bridge_slave_1: entered allmulticast mode [ 81.962135][ T5237] bridge_slave_1: entered promiscuous mode [ 82.006578][ T5236] team0: Port device team_slave_0 added [ 82.016121][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.073626][ T5226] team0: Port device team_slave_0 added [ 82.081593][ T5226] team0: Port device team_slave_1 added [ 82.089334][ T5236] team0: Port device team_slave_1 added [ 82.097406][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.118995][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.128490][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.135985][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.143259][ T5242] bridge_slave_0: entered allmulticast mode [ 82.150920][ T5242] bridge_slave_0: entered promiscuous mode [ 82.158655][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.166120][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.173286][ T5235] bridge_slave_0: entered allmulticast mode [ 82.181966][ T5235] bridge_slave_0: entered promiscuous mode [ 82.219517][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.229311][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.236647][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.244217][ T5242] bridge_slave_1: entered allmulticast mode [ 82.251353][ T5242] bridge_slave_1: entered promiscuous mode [ 82.267681][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.274893][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.282175][ T5235] bridge_slave_1: entered allmulticast mode [ 82.289509][ T5235] bridge_slave_1: entered promiscuous mode [ 82.322201][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.333424][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.360322][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.383394][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.390502][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.416877][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.427915][ T4615] Bluetooth: hci2: command tx timeout [ 82.461073][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.473247][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.500173][ T4615] Bluetooth: hci1: command tx timeout [ 82.505833][ T5234] Bluetooth: hci0: command tx timeout [ 82.510457][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.531272][ T5225] team0: Port device team_slave_0 added [ 82.539450][ T5225] team0: Port device team_slave_1 added [ 82.546123][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.553086][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.579532][ T4615] Bluetooth: hci5: command tx timeout [ 82.579876][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.610467][ T5237] team0: Port device team_slave_0 added [ 82.621415][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.633927][ T5234] Bluetooth: hci3: command tx timeout [ 82.639563][ T4615] Bluetooth: hci4: command tx timeout [ 82.641993][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.657969][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.693328][ T5237] team0: Port device team_slave_1 added [ 82.703010][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.741923][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.749951][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.776498][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.789745][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.796869][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.822883][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.877862][ T5235] team0: Port device team_slave_0 added [ 82.886533][ T5235] team0: Port device team_slave_1 added [ 82.907651][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.914872][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.940928][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.954980][ T5242] team0: Port device team_slave_0 added [ 82.984851][ T5226] hsr_slave_0: entered promiscuous mode [ 82.991501][ T5226] hsr_slave_1: entered promiscuous mode [ 83.029488][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.036811][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.063366][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.081768][ T5242] team0: Port device team_slave_1 added [ 83.097538][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.104924][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.131182][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.161874][ T5225] hsr_slave_0: entered promiscuous mode [ 83.170286][ T5225] hsr_slave_1: entered promiscuous mode [ 83.177294][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.185524][ T5225] Cannot create hsr debugfs directory [ 83.227128][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.234223][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.260621][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.301060][ T5236] hsr_slave_0: entered promiscuous mode [ 83.308087][ T5236] hsr_slave_1: entered promiscuous mode [ 83.315135][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.322824][ T5236] Cannot create hsr debugfs directory [ 83.339600][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.346751][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.374189][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.424580][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.431584][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.457910][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.498780][ T5237] hsr_slave_0: entered promiscuous mode [ 83.506391][ T5237] hsr_slave_1: entered promiscuous mode [ 83.512567][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.520386][ T5237] Cannot create hsr debugfs directory [ 83.640335][ T5235] hsr_slave_0: entered promiscuous mode [ 83.647529][ T5235] hsr_slave_1: entered promiscuous mode [ 83.654135][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.661729][ T5235] Cannot create hsr debugfs directory [ 83.758589][ T5242] hsr_slave_0: entered promiscuous mode [ 83.766700][ T5242] hsr_slave_1: entered promiscuous mode [ 83.772954][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.781455][ T5242] Cannot create hsr debugfs directory [ 84.167296][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.177775][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.187702][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.202823][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.274259][ T5225] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.295874][ T5225] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.328705][ T5225] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.349071][ T5225] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.379495][ T5236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.399010][ T5236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.431812][ T5236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.445725][ T5236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.474304][ T4615] Bluetooth: hci2: command tx timeout [ 84.498214][ T5235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.526760][ T5235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.539182][ T5235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.554521][ T5234] Bluetooth: hci0: command tx timeout [ 84.560053][ T4615] Bluetooth: hci1: command tx timeout [ 84.570165][ T5235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.637187][ T4615] Bluetooth: hci5: command tx timeout [ 84.664535][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.671551][ T5237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.683304][ T5237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.697258][ T5237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.707802][ T5237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.714782][ T4615] Bluetooth: hci4: command tx timeout [ 84.720205][ T5234] Bluetooth: hci3: command tx timeout [ 84.852275][ T5242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.867085][ T5242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.884809][ T5242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.908568][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.923607][ T5242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.945965][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.966997][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.980364][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.987673][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.025385][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.032674][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.107352][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.117186][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.167033][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.174229][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.186981][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.194217][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.243468][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.250660][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.280326][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.307961][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.315104][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.341937][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.393158][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.417856][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.437632][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.444828][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.509237][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.516533][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.556302][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.563534][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.608639][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.615865][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.789951][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.840590][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.858940][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.958194][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.026655][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.033874][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.090385][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.097603][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.231718][ T5226] veth0_vlan: entered promiscuous mode [ 86.289648][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.381763][ T5226] veth1_vlan: entered promiscuous mode [ 86.529044][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.554883][ T5234] Bluetooth: hci2: command tx timeout [ 86.569042][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.586257][ T5226] veth0_macvtap: entered promiscuous mode [ 86.608623][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.627524][ T5226] veth1_macvtap: entered promiscuous mode [ 86.635407][ T5234] Bluetooth: hci1: command tx timeout [ 86.640852][ T5234] Bluetooth: hci0: command tx timeout [ 86.715324][ T5234] Bluetooth: hci5: command tx timeout [ 86.794332][ T5234] Bluetooth: hci3: command tx timeout [ 86.799829][ T5234] Bluetooth: hci4: command tx timeout [ 86.806363][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.850377][ T5236] veth0_vlan: entered promiscuous mode [ 86.888158][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.900649][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.910068][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.920652][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.944438][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.969978][ T5236] veth1_vlan: entered promiscuous mode [ 87.014693][ T5235] veth0_vlan: entered promiscuous mode [ 87.089632][ T5237] veth0_vlan: entered promiscuous mode [ 87.162221][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.205340][ T5235] veth1_vlan: entered promiscuous mode [ 87.230976][ T5237] veth1_vlan: entered promiscuous mode [ 87.352943][ T5236] veth0_macvtap: entered promiscuous mode [ 87.383605][ T5236] veth1_macvtap: entered promiscuous mode [ 87.490014][ T5235] veth0_macvtap: entered promiscuous mode [ 87.597336][ T5225] veth0_vlan: entered promiscuous mode [ 87.627510][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.653754][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.668850][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.699003][ T5235] veth1_macvtap: entered promiscuous mode [ 87.718342][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.736554][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.740805][ T5237] veth0_macvtap: entered promiscuous mode [ 87.771942][ T5225] veth1_vlan: entered promiscuous mode [ 87.817299][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.828667][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.847757][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.865396][ T5237] veth1_macvtap: entered promiscuous mode [ 87.902265][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.912160][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.922382][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.932116][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.957178][ T2873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.961314][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.976073][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.986033][ T2873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.994938][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.006584][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.029378][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.055067][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.065998][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.077056][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.088276][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.099583][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.110290][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.123818][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.176617][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.189172][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.199628][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.210449][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.223275][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.245250][ T5226] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.302155][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.333195][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.352104][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.363453][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.380509][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.399866][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.420380][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.436268][ T5225] veth0_macvtap: entered promiscuous mode [ 88.445688][ T5237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.454895][ T5237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.463646][ T5237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.488980][ T5237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.547051][ T5235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.557514][ T5235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.569560][ T5235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.580395][ T5235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.600928][ T5225] veth1_macvtap: entered promiscuous mode [ 88.635253][ T5234] Bluetooth: hci2: command tx timeout [ 88.654681][ T5242] veth0_vlan: entered promiscuous mode [ 88.670576][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.699488][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.714563][ T5234] Bluetooth: hci0: command tx timeout [ 88.716886][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.719974][ T4615] Bluetooth: hci1: command tx timeout [ 88.750197][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.765216][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.781408][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.794286][ T5234] Bluetooth: hci5: command tx timeout [ 88.797104][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.819059][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.835148][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.859402][ T2873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.874512][ T5234] Bluetooth: hci4: command tx timeout [ 88.879992][ T4615] Bluetooth: hci3: command tx timeout [ 88.880355][ T2873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.966057][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.983652][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.001913][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.014334][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.025794][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.042209][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.054463][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.066208][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.080831][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.157570][ T5242] veth1_vlan: entered promiscuous mode [ 89.177046][ T5225] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.186238][ T5225] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.196636][ T5225] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.212357][ T5225] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.243352][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.273621][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.479237][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.497100][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.637169][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.671658][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.706608][ T5341] loop3: detected capacity change from 0 to 2048 [ 89.777604][ T5242] veth0_macvtap: entered promiscuous mode [ 89.788224][ T5341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.840449][ T5242] veth1_macvtap: entered promiscuous mode [ 89.892652][ T5341] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.908874][ T5341] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 30 with error 28 [ 89.922220][ T5341] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.922220][ T5341] [ 89.932228][ T5341] EXT4-fs (loop3): Total free blocks count 0 [ 89.938412][ T5341] EXT4-fs (loop3): Free/Dirty block details [ 89.944611][ T5341] EXT4-fs (loop3): free_blocks=2415919104 [ 89.950402][ T5341] EXT4-fs (loop3): dirty_blocks=32 [ 89.955704][ T5341] EXT4-fs (loop3): Block reservation details [ 89.963746][ T5341] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 89.963839][ T29] audit: type=1800 audit(1727433799.477:2): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 89.971296][ T5347] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 90.017709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.034087][ T2873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.040226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.042163][ T2873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.069520][ T29] audit: type=1800 audit(1727433799.477:3): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 90.090498][ T29] audit: type=1800 audit(1727433799.487:4): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 90.166155][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.231903][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.242439][ T5350] loop1: detected capacity change from 0 to 256 [ 90.284297][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.301259][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.311508][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.335958][ T5350] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 90.378943][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.403873][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.440473][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.452986][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.456767][ T5350] Bluetooth: MGMT ver 1.23 [ 90.463663][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.483468][ T5350] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 90.499748][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.563955][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.590052][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.619218][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.660400][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.691544][ T5346] loop0: detected capacity change from 0 to 32768 [ 90.698402][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.713123][ T5352] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.721918][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.738660][ T5346] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7 (5346) [ 90.752332][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.764210][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.774090][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.793385][ T5346] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 90.815448][ T5346] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 90.817712][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.831791][ T5346] BTRFS info (device loop0): using free-space-tree [ 90.837363][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.852165][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.866948][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.878842][ T5242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.892207][ T5242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.901453][ T5242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.921322][ T5242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.047993][ T5352] warning: `syz.3.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.430404][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.508164][ T29] audit: type=1800 audit(1727433800.957:5): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 91.538874][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.561854][ T9] cfg80211: failed to load regulatory.db [ 92.768692][ T5306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.833841][ T5306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.128306][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.168132][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.226095][ T5382] netlink: 'syz.1.11': attribute type 29 has an invalid length. [ 93.287428][ T5226] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.334264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.348920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.358431][ T5387] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.450891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.487134][ T5387] 9pnet_fd: p9_fd_create_tcp (5387): problem connecting socket to 127.0.0.1 [ 93.594595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 94.304228][ T5291] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 95.294125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 95.709908][ T5291] usb 5-1: config 1 interface 0 has no altsetting 0 [ 95.726439][ T5291] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 95.736145][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.752090][ T5291] usb 5-1: Product: syz [ 95.782795][ T5291] usb 5-1: Manufacturer: syz [ 95.838376][ T5291] usb 5-1: SerialNumber: syz [ 96.109477][ T5410] loop5: detected capacity change from 0 to 256 [ 96.312498][ T5410] FAT-fs (loop5): Directory bread(block 64) failed [ 96.414257][ T5410] FAT-fs (loop5): Directory bread(block 65) failed [ 96.459592][ T5410] FAT-fs (loop5): Directory bread(block 66) failed [ 96.579338][ T5412] loop0: detected capacity change from 0 to 1024 [ 96.601387][ T5410] FAT-fs (loop5): Directory bread(block 67) failed [ 96.655712][ T5291] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 96.669024][ T5410] FAT-fs (loop5): Directory bread(block 68) failed [ 96.734073][ T5410] FAT-fs (loop5): Directory bread(block 69) failed [ 96.805385][ T5410] FAT-fs (loop5): Directory bread(block 70) failed [ 96.863414][ T5410] FAT-fs (loop5): Directory bread(block 71) failed [ 96.870346][ T5410] FAT-fs (loop5): Directory bread(block 72) failed [ 96.877096][ T5410] FAT-fs (loop5): Directory bread(block 73) failed [ 96.972541][ T5414] fuse: Unknown parameter 'fd00000000000000000000' [ 97.358620][ T5321] usb 5-1: USB disconnect, device number 2 [ 97.464637][ T5419] process 'syz.5.18' launched './file0' with NULL argv: empty string added [ 97.478721][ T5419] syz.5.18: attempt to access beyond end of device [ 97.478721][ T5419] loop5: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 97.494182][ T5419] syz.5.18: attempt to access beyond end of device [ 97.494182][ T5419] loop5: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 98.497440][ T5423] loop0: detected capacity change from 0 to 16 [ 98.513878][ T5321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.552748][ T5422] 9pnet_fd: Insufficient options for proto=fd [ 98.575190][ T5423] erofs: (device loop0): mounted with root inode @ nid 36. [ 98.693956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.713839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.753969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.773759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.843743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.066081][ T5426] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 100.104556][ T5426] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 100.116474][ T5426] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 100.998625][ T5415] usblp0: removed [ 101.024926][ T5437] netlink: 'syz.5.23': attribute type 12 has an invalid length. [ 101.050221][ T5437] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.23'. [ 101.658847][ T5440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.666419][ T5440] IPv6: NLM_F_CREATE should be set when creating new route [ 103.945730][ T5461] loop2: detected capacity change from 0 to 2048 [ 104.006208][ T5461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.609055][ T5470] ======================================================= [ 104.609055][ T5470] WARNING: The mand mount option has been deprecated and [ 104.609055][ T5470] and is ignored by this kernel. Remove the mand [ 104.609055][ T5470] option from the mount to silence this warning. [ 104.609055][ T5470] ======================================================= [ 105.460745][ T5470] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 106.117668][ T5466] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.241500][ T5235] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.490230][ T5484] loop1: detected capacity change from 0 to 256 [ 107.857785][ T5484] FAT-fs (loop1): codepage cp946 not found [ 107.869162][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 107.914520][ T1170] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.922250][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 107.930170][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 107.939263][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 107.948887][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 107.956762][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.097411][ T1170] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.125497][ T1170] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.183078][ T1170] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.250663][ T1170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.271483][ T1170] usb 5-1: SerialNumber: syz [ 108.852370][ T5496] chnl_net:caif_netlink_parms(): no params data found [ 108.911194][ T5509] loop5: detected capacity change from 0 to 1024 [ 108.932890][ T5509] EXT4-fs: Ignoring removed orlov option [ 108.969085][ T5509] EXT4-fs: Ignoring removed bh option [ 109.035076][ T5509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.099602][ T2975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.142726][ T5511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.326954][ T2975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.347574][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.368632][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.406509][ T5496] bridge_slave_0: entered allmulticast mode [ 109.436636][ T5496] bridge_slave_0: entered promiscuous mode [ 109.482906][ T2975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.515021][ T55] Bluetooth: hci5: command 0x0405 tx timeout [ 109.534839][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.559963][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.574462][ T5496] bridge_slave_1: entered allmulticast mode [ 109.599969][ T5496] bridge_slave_1: entered promiscuous mode [ 109.643186][ T5225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.886409][ T2975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.939309][ T29] audit: type=1326 audit(1727433819.511:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5478 comm="syz.4.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1cc17df39 code=0x7fc00000 [ 110.007649][ T55] Bluetooth: hci6: command tx timeout [ 110.083542][ T5532] loop0: detected capacity change from 0 to 256 [ 110.279245][ T5532] FAT-fs (loop0): Directory bread(block 64) failed [ 110.286394][ T5532] FAT-fs (loop0): Directory bread(block 65) failed [ 110.293726][ T5532] FAT-fs (loop0): Directory bread(block 66) failed [ 110.300820][ T5532] FAT-fs (loop0): Directory bread(block 67) failed [ 110.308161][ T5532] FAT-fs (loop0): Directory bread(block 68) failed [ 110.315327][ T5532] FAT-fs (loop0): Directory bread(block 69) failed [ 110.322813][ T5532] FAT-fs (loop0): Directory bread(block 70) failed [ 110.329895][ T5532] FAT-fs (loop0): Directory bread(block 71) failed [ 110.337429][ T5532] FAT-fs (loop0): Directory bread(block 72) failed [ 110.344468][ T5532] FAT-fs (loop0): Directory bread(block 73) failed [ 111.099185][ T1170] usb 5-1: 0:2 : does not exist [ 111.168744][ T1170] usb 5-1: unit 32 not found! [ 111.259805][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.281181][ T1170] usb 5-1: USB disconnect, device number 4 [ 111.529679][ T5533] loop1: detected capacity change from 0 to 1024 [ 111.587389][ T4615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.595052][ T4615] Bluetooth: hci5: command 0x0405 tx timeout [ 111.602076][ T4615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.610175][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.667645][ T5286] udevd[5286]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.806825][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.818188][ T5533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.838315][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.857385][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.086796][ T5234] Bluetooth: hci6: command tx timeout [ 113.092044][ T5542] cgroup: fork rejected by pids controller in /syz4 [ 113.148960][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.195688][ T2975] bridge_slave_1: left allmulticast mode [ 113.243956][ T2975] bridge_slave_1: left promiscuous mode [ 113.294729][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.296709][ T5290] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.345141][ T2975] bridge_slave_0: left allmulticast mode [ 113.355481][ T2975] bridge_slave_0: left promiscuous mode [ 113.370498][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.455238][ T5290] usb 6-1: Using ep0 maxpacket: 32 [ 113.473829][ T5290] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 113.509612][ T5290] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 113.558898][ T5290] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 113.626410][ T5290] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 113.685209][ T5290] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 113.711809][ T5237] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.727190][ T5290] usb 6-1: config 0 interface 0 has no altsetting 0 [ 113.742614][ T5290] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 113.752225][ T5290] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 113.762721][ T5290] usb 6-1: Product: syz [ 113.767299][ T5290] usb 6-1: Manufacturer: syz [ 113.771949][ T5290] usb 6-1: SerialNumber: syz [ 113.779747][ T5290] usb 6-1: config 0 descriptor?? [ 113.787920][ T5536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 113.800031][ T5290] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.812181][ T5290] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.160309][ T5246] Bluetooth: hci6: command tx timeout [ 114.167270][ T55] Bluetooth: hci2: command tx timeout [ 114.270855][ T5288] usb 6-1: USB disconnect, device number 2 [ 114.280928][ T5288] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 114.350815][ T5583] loop0: detected capacity change from 0 to 32768 [ 114.409109][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.427066][ T5583] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.468928][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.487130][ T29] audit: type=1800 audit(1727433824.090:7): pid=5583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.57" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 114.519676][ T2975] bond0 (unregistering): Released all slaves [ 114.566112][ T5583] (syz.0.57,5583,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "017777777777777777777770177777777777777777777700000000000000000000000L * 15.&s+y29$" or missing value [ 114.659934][ T5583] (syz.0.57,5583,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option " Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 114.713989][ T5496] team0: Port device team_slave_0 added [ 115.248700][ T5226] ocfs2: Unmounting device (7,0) on (node local) [ 116.262012][ T55] Bluetooth: hci2: command tx timeout [ 116.267584][ T55] Bluetooth: hci6: command tx timeout [ 116.401817][ T5496] team0: Port device team_slave_1 added [ 116.517544][ T5594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.523773][ T5594] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.596413][ T5594] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.636602][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.657985][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.886862][ T5496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.576641][ T5594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.582625][ T5594] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.598179][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.616775][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.660465][ T5496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.673197][ T5594] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.703302][ T55] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 117.737487][ T5594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 117.760392][ T5594] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 117.779276][ T5616] loop1: detected capacity change from 0 to 128 [ 117.801499][ T5594] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 117.880915][ T5496] hsr_slave_0: entered promiscuous mode [ 117.955240][ T5496] hsr_slave_1: entered promiscuous mode [ 117.964615][ T5594] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 117.979991][ T5496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.000706][ T5594] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 118.007792][ T5496] Cannot create hsr debugfs directory [ 118.025069][ T5594] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 118.037580][ T5594] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 118.046268][ T5594] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 118.064646][ T2975] hsr_slave_0: left promiscuous mode [ 118.092707][ T2975] hsr_slave_1: left promiscuous mode [ 118.100606][ T5594] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 118.108047][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.131298][ T5594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.136025][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.153447][ T5594] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.169768][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.178015][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.179908][ T5594] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.240673][ T2975] veth1_macvtap: left promiscuous mode [ 118.300323][ T2975] veth0_macvtap: left promiscuous mode [ 118.306023][ T2975] veth1_vlan: left promiscuous mode [ 118.311481][ T2975] veth0_vlan: left promiscuous mode [ 118.473878][ T5288] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.556710][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.660943][ T5288] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 118.677434][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.698471][ T5288] usb 2-1: config 0 descriptor?? [ 118.712576][ T5288] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 118.728117][ T5288] usb 2-1: bad CDC descriptors [ 118.740602][ T5288] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 118.772422][ T5631] loop0: detected capacity change from 0 to 256 [ 118.835500][ T5631] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d) [ 118.941287][ T5288] usb 2-1: USB disconnect, device number 2 [ 119.260778][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 119.303372][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 119.506350][ T5626] ================================================================== [ 119.514470][ T5626] BUG: KASAN: slab-use-after-free in iov_iter_advance+0x677/0x6c0 [ 119.522324][ T5626] Read of size 8 at addr ffff88801219e520 by task syz.4.65/5626 [ 119.529961][ T5626] [ 119.532296][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz.4.65 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 119.542492][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.552562][ T5626] Call Trace: [ 119.555873][ T5626] [ 119.558821][ T5626] dump_stack_lvl+0x116/0x1f0 [ 119.563566][ T5626] print_report+0xc3/0x620 [ 119.568052][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.573741][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.579435][ T5626] ? __phys_addr+0xc6/0x150 [ 119.583995][ T5626] kasan_report+0xd9/0x110 [ 119.588475][ T5626] ? iov_iter_advance+0x677/0x6c0 [ 119.593553][ T5626] ? iov_iter_advance+0x677/0x6c0 [ 119.598635][ T5626] iov_iter_advance+0x677/0x6c0 [ 119.603541][ T5626] netfs_write_folio+0x745/0x18f0 [ 119.608619][ T5626] netfs_writepages+0x2ba/0xb90 [ 119.613517][ T5626] ? __pfx_netfs_writepages+0x10/0x10 [ 119.618933][ T5626] ? __pfx___lock_acquire+0x10/0x10 [ 119.624196][ T5626] ? bpf_ksym_find+0x124/0x1c0 [ 119.629026][ T5626] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 119.635231][ T5626] ? __pfx_netfs_writepages+0x10/0x10 [ 119.640648][ T5626] do_writepages+0x1a6/0x7f0 [ 119.645294][ T5626] ? __pfx_do_writepages+0x10/0x10 [ 119.650457][ T5626] ? __pfx_lock_acquire+0x10/0x10 [ 119.655555][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.661241][ T5626] ? do_raw_spin_lock+0x12d/0x2c0 [ 119.666314][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.671999][ T5626] ? do_raw_spin_unlock+0x172/0x230 [ 119.677244][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.682932][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 119.687822][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.693505][ T5626] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 119.699543][ T5626] filemap_fdatawrite_wbc+0x148/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.704970][ T5626] __filemap_fdatawrite_range+0xb3/0xf0 [ 119.710583][ T5626] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 119.716892][ T5626] ? kmem_cache_free+0x31d/0x4b0 [ 119.721921][ T5626] v9fs_dir_release+0x429/0x590 [ 119.726818][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.732506][ T5626] ? __pfx_v9fs_dir_release+0x10/0x10 [ 119.737929][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.743625][ T5626] ? __pfx___might_resched+0x10/0x10 [ 119.748957][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 119.754644][ T5626] ? __pfx_v9fs_dir_release+0x10/0x10 [ 119.760063][ T5626] __fput+0x3f9/0xb60 [ 119.764109][ T5626] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.769352][ T5626] task_work_run+0x151/0x250 [ 119.774005][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 119.779189][ T5626] syscall_exit_to_user_mode+0x27b/0x2a0 [ 119.784909][ T5626] do_syscall_64+0xda/0x250 [ 119.789467][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.795426][ T5626] RIP: 0033:0x7fe1cc17df39 [ 119.799898][ T5626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.819579][ T5626] RSP: 002b:00007ffc23a03658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 119.828057][ T5626] RAX: 0000000000000000 RBX: 00007fe1cc337a80 RCX: 00007fe1cc17df39 [ 119.836086][ T5626] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 119.844107][ T5626] RBP: 00007fe1cc337a80 R08: 0000000000000006 R09: 00007ffc23a0394f [ 119.852118][ T5626] R10: 00000000005e2378 R11: 0000000000000246 R12: 000000000001d223 [ 119.860123][ T5626] R13: 00007ffc23a03760 R14: 0000000000000032 R15: ffffffffffffffff [ 119.868136][ T5626] [ 119.871159][ T5626] [ 119.873476][ T5626] Allocated by task 5626: [ 119.877804][ T5626] kasan_save_stack+0x33/0x60 [ 119.882503][ T5626] kasan_save_track+0x14/0x30 [ 119.887214][ T5626] __kasan_kmalloc+0xaa/0xb0 [ 119.891831][ T5626] netfs_buffer_append_folio+0x181/0x750 [ 119.897493][ T5626] netfs_write_folio+0x542/0x18f0 [ 119.902538][ T5626] netfs_writepages+0x2ba/0xb90 [ 119.907404][ T5626] do_writepages+0x1a6/0x7f0 [ 119.912010][ T5626] filemap_fdatawrite_wbc+0x148/0x1c0 [ 119.917403][ T5626] __filemap_fdatawrite_range+0xb3/0xf0 [ 119.922972][ T5626] v9fs_dir_release+0x429/0x590 [ 119.927833][ T5626] __fput+0x3f9/0xb60 [ 119.931835][ T5626] task_work_run+0x151/0x250 [ 119.936453][ T5626] syscall_exit_to_user_mode+0x27b/0x2a0 [ 119.942100][ T5626] do_syscall_64+0xda/0x250 [ 119.946632][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.952571][ T5626] [ 119.954888][ T5626] Freed by task 53: [ 119.958693][ T5626] kasan_save_stack+0x33/0x60 [ 119.963393][ T5626] kasan_save_track+0x14/0x30 [ 119.968091][ T5626] kasan_save_free_info+0x3b/0x60 [ 119.973142][ T5626] __kasan_slab_free+0x51/0x70 [ 119.977949][ T5626] kfree+0x14f/0x4b0 [ 119.981859][ T5626] netfs_delete_buffer_head+0xa6/0x100 [ 119.987340][ T5626] netfs_write_collection_worker+0x20f9/0x4f80 [ 119.993501][ T5626] process_one_work+0x9c8/0x1ba0 [ 119.998466][ T5626] worker_thread+0x6c8/0xf00 [ 120.003082][ T5626] kthread+0x2c4/0x3a0 [ 120.007165][ T5626] ret_from_fork+0x48/0x80 [ 120.011605][ T5626] ret_from_fork_asm+0x1a/0x30 [ 120.016392][ T5626] [ 120.018713][ T5626] The buggy address belongs to the object at ffff88801219e400 [ 120.018713][ T5626] which belongs to the cache kmalloc-512 of size 512 [ 120.032767][ T5626] The buggy address is located 288 bytes inside of [ 120.032767][ T5626] freed 512-byte region [ffff88801219e400, ffff88801219e600) [ 120.046574][ T5626] [ 120.048891][ T5626] The buggy address belongs to the physical page: [ 120.055292][ T5626] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1219c [ 120.064059][ T5626] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.072564][ T5626] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 120.080115][ T5626] page_type: f5(slab) [ 120.084104][ T5626] raw: 00fff00000000040 ffff88801b041c80 ffffea0001f8bf00 dead000000000002 [ 120.092697][ T5626] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 120.101291][ T5626] head: 00fff00000000040 ffff88801b041c80 ffffea0001f8bf00 dead000000000002 [ 120.109977][ T5626] head: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 120.118662][ T5626] head: 00fff00000000002 ffffea0000486701 ffffffffffffffff 0000000000000000 [ 120.127348][ T5626] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 120.136026][ T5626] page dumped because: kasan: bad access detected [ 120.142461][ T5626] page_owner tracks the page as allocated [ 120.148177][ T5626] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5236, tgid 5236 (syz-executor), ts 85590249903, free_ts 85475345943 [ 120.169559][ T5626] post_alloc_hook+0x2d1/0x350 [ 120.174346][ T5626] get_page_from_freelist+0x101e/0x3070 [ 120.179925][ T5626] __alloc_pages_noprof+0x223/0x25c0 [ 120.185234][ T5626] alloc_pages_mpol_noprof+0x275/0x610 [ 120.190703][ T5626] new_slab+0x28b/0x3f0 [ 120.194877][ T5626] ___slab_alloc+0xd1d/0x16f0 [ 120.199594][ T5626] __slab_alloc.constprop.0+0x56/0xb0 [ 120.204995][ T5626] __kmalloc_noprof+0x367/0x400 [ 120.209882][ T5626] fib6_info_alloc+0x40/0x160 [ 120.214589][ T5626] ip6_route_info_create+0x337/0x1910 [ 120.219997][ T5626] ip6_route_add+0x26/0x1c0 [ 120.224531][ T5626] addrconf_add_mroute+0x1de/0x350 [ 120.229677][ T5626] addrconf_add_dev+0x14e/0x1c0 [ 120.234645][ T5626] inet6_addr_add+0x1a8/0xbc0 [ 120.239365][ T5626] inet6_rtm_newaddr+0x11d1/0x1aa0 [ 120.244502][ T5626] rtnetlink_rcv_msg+0x3ca/0xea0 [ 120.249476][ T5626] page last free pid 5293 tgid 5293 stack trace: [ 120.255800][ T5626] free_unref_page+0x5f4/0xdc0 [ 120.260597][ T5626] qlist_free_all+0x4e/0x120 [ 120.265209][ T5626] kasan_quarantine_reduce+0x192/0x1e0 [ 120.270691][ T5626] __kasan_slab_alloc+0x69/0x90 [ 120.275570][ T5626] __kmalloc_noprof+0x199/0x400 [ 120.280452][ T5626] tomoyo_realpath_from_path+0xb9/0x720 [ 120.286016][ T5626] tomoyo_path_perm+0x273/0x450 [ 120.290893][ T5626] security_inode_getattr+0x116/0x290 [ 120.296296][ T5626] vfs_fstat+0x53/0xd0 [ 120.300400][ T5626] vfs_fstatat+0x146/0x160 [ 120.304868][ T5626] __do_sys_newfstatat+0xa2/0x130 [ 120.309944][ T5626] do_syscall_64+0xcd/0x250 [ 120.314472][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.320407][ T5626] [ 120.322753][ T5626] Memory state around the buggy address: [ 120.328391][ T5626] ffff88801219e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.336461][ T5626] ffff88801219e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.344524][ T5626] >ffff88801219e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.352589][ T5626] ^ [ 120.357697][ T5626] ffff88801219e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.365758][ T5626] ffff88801219e600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.373819][ T5626] ================================================================== [ 120.384163][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.392494][ T5246] Bluetooth: hci5: command 0x0405 tx timeout [ 120.398690][ T5234] Bluetooth: hci6: command 0x0c1a tx timeout [ 120.404790][ T5234] Bluetooth: hci2: command 0x0419 tx timeout [ 120.406322][ T5626] Disabling lock debugging due to kernel taint [ 120.427533][ T5626] ================================================================== [ 120.435632][ T5626] BUG: KASAN: slab-use-after-free in iov_iter_advance+0x677/0x6c0 [ 120.443490][ T5626] Read of size 8 at addr ffff888027919920 by task syz.4.65/5626 [ 120.451234][ T5626] [ 120.453557][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: syz.4.65 Tainted: G B 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 120.465223][ T5626] Tainted: [B]=BAD_PAGE [ 120.469383][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.479456][ T5626] Call Trace: [ 120.482748][ T5626] [ 120.485693][ T5626] dump_stack_lvl+0x116/0x1f0 [ 120.490421][ T5626] print_report+0xc3/0x620 [ 120.494876][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.500531][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.506184][ T5626] ? __phys_addr+0xc6/0x150 [ 120.510726][ T5626] kasan_report+0xd9/0x110 [ 120.515261][ T5626] ? iov_iter_advance+0x677/0x6c0 [ 120.520320][ T5626] ? iov_iter_advance+0x677/0x6c0 [ 120.525367][ T5626] iov_iter_advance+0x677/0x6c0 [ 120.530244][ T5626] netfs_write_folio+0x745/0x18f0 [ 120.535307][ T5626] netfs_writepages+0x2ba/0xb90 [ 120.540203][ T5626] ? __pfx_netfs_writepages+0x10/0x10 [ 120.545614][ T5626] ? __pfx___lock_acquire+0x10/0x10 [ 120.550869][ T5626] ? bpf_ksym_find+0x124/0x1c0 [ 120.555685][ T5626] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.561890][ T5626] ? __pfx_netfs_writepages+0x10/0x10 [ 120.567305][ T5626] do_writepages+0x1a6/0x7f0 [ 120.571941][ T5626] ? __pfx_do_writepages+0x10/0x10 [ 120.577090][ T5626] ? __pfx_lock_acquire+0x10/0x10 [ 120.582166][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.587840][ T5626] ? do_raw_spin_lock+0x12d/0x2c0 [ 120.592982][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.598650][ T5626] ? do_raw_spin_unlock+0x172/0x230 [ 120.603881][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.609553][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 120.614427][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.620098][ T5626] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 120.626127][ T5626] filemap_fdatawrite_wbc+0x148/0x1c0 [ 120.631549][ T5626] __filemap_fdatawrite_range+0xb3/0xf0 [ 120.637157][ T5626] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 120.643455][ T5626] ? kmem_cache_free+0x31d/0x4b0 [ 120.648492][ T5626] v9fs_dir_release+0x429/0x590 [ 120.653392][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.659069][ T5626] ? __pfx_v9fs_dir_release+0x10/0x10 [ 120.664474][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.670151][ T5626] ? __pfx___might_resched+0x10/0x10 [ 120.675467][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 120.681138][ T5626] ? __pfx_v9fs_dir_release+0x10/0x10 [ 120.686546][ T5626] __fput+0x3f9/0xb60 [ 120.690577][ T5626] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.695807][ T5626] task_work_run+0x151/0x250 [ 120.700457][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 120.705634][ T5626] syscall_exit_to_user_mode+0x27b/0x2a0 [ 120.711317][ T5626] do_syscall_64+0xda/0x250 [ 120.715866][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.721816][ T5626] RIP: 0033:0x7fe1cc17df39 [ 120.726263][ T5626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.745901][ T5626] RSP: 002b:00007ffc23a03658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 120.754436][ T5626] RAX: 0000000000000000 RBX: 00007fe1cc337a80 RCX: 00007fe1cc17df39 [ 120.762429][ T5626] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 120.770422][ T5626] RBP: 00007fe1cc337a80 R08: 0000000000000006 R09: 00007ffc23a0394f [ 120.778413][ T5626] R10: 00000000005e2378 R11: 0000000000000246 R12: 000000000001d223 [ 120.786411][ T5626] R13: 00007ffc23a03760 R14: 0000000000000032 R15: ffffffffffffffff [ 120.794421][ T5626] [ 120.797454][ T5626] [ 120.799790][ T5626] Allocated by task 5626: [ 120.804129][ T5626] kasan_save_stack+0x33/0x60 [ 120.808861][ T5626] kasan_save_track+0x14/0x30 [ 120.813586][ T5626] __kasan_kmalloc+0xaa/0xb0 [ 120.818213][ T5626] netfs_buffer_append_folio+0x181/0x750 [ 120.823887][ T5626] netfs_write_folio+0x542/0x18f0 [ 120.828934][ T5626] netfs_writepages+0x2ba/0xb90 [ 120.833807][ T5626] do_writepages+0x1a6/0x7f0 [ 120.838427][ T5626] filemap_fdatawrite_wbc+0x148/0x1c0 [ 120.843836][ T5626] __filemap_fdatawrite_range+0xb3/0xf0 [ 120.849428][ T5626] v9fs_dir_release+0x429/0x590 [ 120.854305][ T5626] __fput+0x3f9/0xb60 [ 120.858326][ T5626] task_work_run+0x151/0x250 [ 120.862963][ T5626] syscall_exit_to_user_mode+0x27b/0x2a0 [ 120.868632][ T5626] do_syscall_64+0xda/0x250 [ 120.873172][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.879096][ T5626] [ 120.881424][ T5626] Freed by task 11: [ 120.885237][ T5626] kasan_save_stack+0x33/0x60 [ 120.889966][ T5626] kasan_save_track+0x14/0x30 [ 120.894694][ T5626] kasan_save_free_info+0x3b/0x60 [ 120.899753][ T5626] __kasan_slab_free+0x51/0x70 [ 120.904566][ T5626] kfree+0x14f/0x4b0 [ 120.908494][ T5626] netfs_delete_buffer_head+0xa6/0x100 [ 120.913993][ T5626] netfs_write_collection_worker+0x20f9/0x4f80 [ 120.920170][ T5626] process_one_work+0x9c8/0x1ba0 [ 120.925155][ T5626] worker_thread+0x6c8/0xf00 [ 120.929791][ T5626] kthread+0x2c4/0x3a0 [ 120.933888][ T5626] ret_from_fork+0x48/0x80 [ 120.938348][ T5626] ret_from_fork_asm+0x1a/0x30 [ 120.943157][ T5626] [ 120.945485][ T5626] The buggy address belongs to the object at ffff888027919800 [ 120.945485][ T5626] which belongs to the cache kmalloc-512 of size 512 [ 120.959575][ T5626] The buggy address is located 288 bytes inside of [ 120.959575][ T5626] freed 512-byte region [ffff888027919800, ffff888027919a00) [ 120.973427][ T5626] [ 120.975767][ T5626] The buggy address belongs to the physical page: [ 120.982192][ T5626] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27918 [ 120.990974][ T5626] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.999495][ T5626] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 121.007061][ T5626] page_type: f5(slab) [ 121.011064][ T5626] raw: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 121.019675][ T5626] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 121.028289][ T5626] head: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 121.036982][ T5626] head: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 121.045764][ T5626] head: 00fff00000000002 ffffea00009e4601 ffffffffffffffff 0000000000000000 [ 121.054460][ T5626] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 121.063174][ T5626] page dumped because: kasan: bad access detected [ 121.069595][ T5626] page_owner tracks the page as allocated [ 121.075312][ T5626] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4678, tgid 4678 (udevadm), ts 33990386955, free_ts 33974383475 [ 121.096278][ T5626] post_alloc_hook+0x2d1/0x350 [ 121.101088][ T5626] get_page_from_freelist+0x101e/0x3070 [ 121.106679][ T5626] __alloc_pages_noprof+0x223/0x25c0 [ 121.112006][ T5626] alloc_pages_mpol_noprof+0x275/0x610 [ 121.117491][ T5626] new_slab+0x28b/0x3f0 [ 121.121678][ T5626] ___slab_alloc+0xd1d/0x16f0 [ 121.126388][ T5626] __slab_alloc.constprop.0+0x56/0xb0 [ 121.131803][ T5626] __kmalloc_cache_noprof+0x2b4/0x300 [ 121.137211][ T5626] kernfs_fop_open+0x28b/0xdb0 [ 121.142007][ T5626] do_dentry_open+0x6cd/0x1530 [ 121.147239][ T5626] vfs_open+0x82/0x3f0 [ 121.151347][ T5626] path_openat+0x1e6a/0x2d60 [ 121.155977][ T5626] do_filp_open+0x1dc/0x430 [ 121.160565][ T5626] do_sys_openat2+0x17a/0x1e0 [ 121.165286][ T5626] __x64_sys_openat+0x175/0x210 [ 121.170182][ T5626] do_syscall_64+0xcd/0x250 [ 121.174717][ T5626] page last free pid 4677 tgid 4677 stack trace: [ 121.181054][ T5626] free_unref_page+0x5f4/0xdc0 [ 121.185858][ T5626] __put_partials+0x14c/0x170 [ 121.190574][ T5626] qlist_free_all+0x4e/0x120 [ 121.195198][ T5626] kasan_quarantine_reduce+0x192/0x1e0 [ 121.200695][ T5626] __kasan_slab_alloc+0x69/0x90 [ 121.205593][ T5626] kmem_cache_alloc_noprof+0x121/0x2f0 [ 121.211097][ T5626] getname_flags.part.0+0x4c/0x550 [ 121.216256][ T5626] getname+0x8d/0xe0 [ 121.220179][ T5626] do_sys_openat2+0x104/0x1e0 [ 121.224896][ T5626] __x64_sys_openat+0x175/0x210 [ 121.229876][ T5626] do_syscall_64+0xcd/0x250 [ 121.234408][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.240328][ T5626] [ 121.242657][ T5626] Memory state around the buggy address: [ 121.248295][ T5626] ffff888027919800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.256465][ T5626] ffff888027919880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.264556][ T5626] >ffff888027919900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.272627][ T5626] ^ [ 121.277747][ T5626] ffff888027919980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 121.285831][ T5626] ffff888027919a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 121.293902][ T5626] ================================================================== [ 121.328947][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.445771][ T5626] ================================================================== [ 121.453911][ T5626] BUG: KASAN: slab-use-after-free in iov_iter_advance+0x677/0x6c0 [ 121.461740][ T5626] Read of size 8 at addr ffff88802fcf6520 by task syz.4.65/5626 [ 121.469382][ T5626] [ 121.471712][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: syz.4.65 Tainted: G B 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 121.483366][ T5626] Tainted: [B]=BAD_PAGE [ 121.487514][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.497573][ T5626] Call Trace: [ 121.500850][ T5626] [ 121.503785][ T5626] dump_stack_lvl+0x116/0x1f0 [ 121.508493][ T5626] print_report+0xc3/0x620 [ 121.512939][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.518591][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.524240][ T5626] ? __phys_addr+0xc6/0x150 [ 121.528769][ T5626] kasan_report+0xd9/0x110 [ 121.533207][ T5626] ? iov_iter_advance+0x677/0x6c0 [ 121.538251][ T5626] ? iov_iter_advance+0x677/0x6c0 [ 121.543298][ T5626] iov_iter_advance+0x677/0x6c0 [ 121.548165][ T5626] netfs_write_folio+0x745/0x18f0 [ 121.553206][ T5626] netfs_writepages+0x2ba/0xb90 [ 121.558068][ T5626] ? __pfx_netfs_writepages+0x10/0x10 [ 121.563451][ T5626] ? __pfx___lock_acquire+0x10/0x10 [ 121.568692][ T5626] ? bpf_ksym_find+0x124/0x1c0 [ 121.573496][ T5626] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 121.579670][ T5626] ? __pfx_netfs_writepages+0x10/0x10 [ 121.585051][ T5626] do_writepages+0x1a6/0x7f0 [ 121.589663][ T5626] ? __pfx_do_writepages+0x10/0x10 [ 121.594799][ T5626] ? __pfx_lock_acquire+0x10/0x10 [ 121.599849][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.605510][ T5626] ? do_raw_spin_lock+0x12d/0x2c0 [ 121.610561][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.616223][ T5626] ? do_raw_spin_unlock+0x172/0x230 [ 121.621433][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.627081][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 121.631941][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.637611][ T5626] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 121.643633][ T5626] filemap_fdatawrite_wbc+0x148/0x1c0 [ 121.649038][ T5626] __filemap_fdatawrite_range+0xb3/0xf0 [ 121.654627][ T5626] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 121.660909][ T5626] ? kmem_cache_free+0x31d/0x4b0 [ 121.665898][ T5626] v9fs_dir_release+0x429/0x590 [ 121.670771][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.676420][ T5626] ? __pfx_v9fs_dir_release+0x10/0x10 [ 121.681807][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.687473][ T5626] ? __pfx___might_resched+0x10/0x10 [ 121.692810][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 121.698471][ T5626] ? __pfx_v9fs_dir_release+0x10/0x10 [ 121.703862][ T5626] __fput+0x3f9/0xb60 [ 121.707876][ T5626] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.713103][ T5626] task_work_run+0x151/0x250 [ 121.717729][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 121.722871][ T5626] syscall_exit_to_user_mode+0x27b/0x2a0 [ 121.728522][ T5626] do_syscall_64+0xda/0x250 [ 121.733043][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.738947][ T5626] RIP: 0033:0x7fe1cc17df39 [ 121.743366][ T5626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.762981][ T5626] RSP: 002b:00007ffc23a03658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 121.771405][ T5626] RAX: 0000000000000000 RBX: 00007fe1cc337a80 RCX: 00007fe1cc17df39 [ 121.779388][ T5626] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 121.786222][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 121.787346][ T5626] RBP: 00007fe1cc337a80 R08: 0000000000000006 R09: 00007ffc23a0394f [ 121.795625][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 121.803573][ T5626] R10: 00000000005e2378 R11: 0000000000000246 R12: 000000000001d223 [ 121.803610][ T5626] R13: 00007ffc23a03760 R14: 0000000000000032 R15: ffffffffffffffff [ 121.803647][ T5626] [ 121.803661][ T5626] [ 121.803670][ T5626] Allocated by task 5626: [ 121.812397][ T55] Bluetooth: hci1: hardware error 0x00 [ 121.818347][ T5626] kasan_save_stack+0x33/0x60 [ 121.818406][ T5626] kasan_save_track+0x14/0x30 [ 121.818459][ T5626] __kasan_kmalloc+0xaa/0xb0 [ 121.818512][ T5626] netfs_buffer_append_folio+0x181/0x750 [ 121.818578][ T5626] netfs_write_folio+0x542/0x18f0 [ 121.818618][ T5626] netfs_writepages+0x2ba/0xb90 [ 121.818658][ T5626] do_writepages+0x1a6/0x7f0 [ 121.818707][ T5626] filemap_fdatawrite_wbc+0x148/0x1c0 [ 121.818760][ T5626] __filemap_fdatawrite_range+0xb3/0xf0 [ 121.818824][ T5626] v9fs_dir_release+0x429/0x590 [ 121.818867][ T5626] __fput+0x3f9/0xb60 [ 121.818925][ T5626] task_work_run+0x151/0x250 [ 121.818987][ T5626] syscall_exit_to_user_mode+0x27b/0x2a0 [ 121.819035][ T5626] do_syscall_64+0xda/0x250 [ 121.819080][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.916249][ T5626] [ 121.918579][ T5626] Freed by task 2873: [ 121.922570][ T5626] kasan_save_stack+0x33/0x60 [ 121.927361][ T5626] kasan_save_track+0x14/0x30 [ 121.932054][ T5626] kasan_save_free_info+0x3b/0x60 [ 121.937089][ T5626] __kasan_slab_free+0x51/0x70 [ 121.941869][ T5626] kfree+0x14f/0x4b0 [ 121.945777][ T5626] netfs_delete_buffer_head+0xa6/0x100 [ 121.951255][ T5626] netfs_write_collection_worker+0x20f9/0x4f80 [ 121.957416][ T5626] process_one_work+0x9c8/0x1ba0 [ 121.962376][ T5626] worker_thread+0x6c8/0xf00 [ 121.966990][ T5626] kthread+0x2c4/0x3a0 [ 121.971330][ T5626] ret_from_fork+0x48/0x80 [ 121.975771][ T5626] ret_from_fork_asm+0x1a/0x30 [ 121.980560][ T5626] [ 121.982877][ T5626] The buggy address belongs to the object at ffff88802fcf6400 [ 121.982877][ T5626] which belongs to the cache kmalloc-512 of size 512 [ 121.996932][ T5626] The buggy address is located 288 bytes inside of [ 121.996932][ T5626] freed 512-byte region [ffff88802fcf6400, ffff88802fcf6600) [ 122.010751][ T5626] [ 122.013074][ T5626] The buggy address belongs to the physical page: [ 122.019492][ T5626] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fcf4 [ 122.028360][ T5626] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 122.036867][ T5626] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 122.044846][ T5626] page_type: f5(slab) [ 122.048833][ T5626] raw: 00fff00000000040 ffff88801b041c80 0000000000000000 dead000000000001 [ 122.057421][ T5626] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 122.066008][ T5626] head: 00fff00000000040 ffff88801b041c80 0000000000000000 dead000000000001 [ 122.074685][ T5626] head: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 122.083362][ T5626] head: 00fff00000000002 ffffea0000bf3d01 ffffffffffffffff 0000000000000000 [ 122.092125][ T5626] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 122.100789][ T5626] page dumped because: kasan: bad access detected [ 122.107197][ T5626] page_owner tracks the page as allocated [ 122.112907][ T5626] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4691, tgid 4691 (udevadm), ts 38489493974, free_ts 38024711775 [ 122.133866][ T5626] post_alloc_hook+0x2d1/0x350 [ 122.138656][ T5626] get_page_from_freelist+0x101e/0x3070 [ 122.144223][ T5626] __alloc_pages_noprof+0x223/0x25c0 [ 122.149531][ T5626] alloc_pages_mpol_noprof+0x275/0x610 [ 122.155019][ T5626] new_slab+0x28b/0x3f0 [ 122.159200][ T5626] ___slab_alloc+0xd1d/0x16f0 [ 122.163909][ T5626] __slab_alloc.constprop.0+0x56/0xb0 [ 122.169319][ T5626] __kmalloc_cache_noprof+0x2b4/0x300 [ 122.174720][ T5626] kernfs_fop_open+0x28b/0xdb0 [ 122.179503][ T5626] do_dentry_open+0x6cd/0x1530 [ 122.184284][ T5626] vfs_open+0x82/0x3f0 [ 122.188372][ T5626] path_openat+0x1e6a/0x2d60 [ 122.192978][ T5626] do_filp_open+0x1dc/0x430 [ 122.197507][ T5626] do_sys_openat2+0x17a/0x1e0 [ 122.202212][ T5626] __x64_sys_openat+0x175/0x210 [ 122.207098][ T5626] do_syscall_64+0xcd/0x250 [ 122.211613][ T5626] page last free pid 4708 tgid 4708 stack trace: [ 122.217951][ T5626] free_unref_page+0x5f4/0xdc0 [ 122.222736][ T5626] qlist_free_all+0x4e/0x120 [ 122.227363][ T5626] kasan_quarantine_reduce+0x192/0x1e0 [ 122.232880][ T5626] __kasan_slab_alloc+0x69/0x90 [ 122.237755][ T5626] kmem_cache_alloc_noprof+0x121/0x2f0 [ 122.243252][ T5626] vm_area_alloc+0x1f/0x230 [ 122.247777][ T5626] mmap_region+0xf22/0x2a60 [ 122.252310][ T5626] do_mmap+0xc00/0xfc0 [ 122.256411][ T5626] vm_mmap_pgoff+0x1ba/0x360 [ 122.261040][ T5626] ksys_mmap_pgoff+0x7d/0x5c0 [ 122.265748][ T5626] __x64_sys_mmap+0x125/0x190 [ 122.270442][ T5626] do_syscall_64+0xcd/0x250 [ 122.274968][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.280882][ T5626] [ 122.283204][ T5626] Memory state around the buggy address: [ 122.288856][ T5626] ffff88802fcf6400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.297099][ T5626] ffff88802fcf6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.305169][ T5626] >ffff88802fcf6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.313320][ T5626] ^ [ 122.318456][ T5626] ffff88802fcf6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.326608][ T5626] ffff88802fcf6600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.334691][ T5626] ================================================================== [ 122.375511][ T5626] ================================================================== [ 122.383640][ T5626] BUG: KASAN: slab-use-after-free in iov_iter_advance+0x677/0x6c0 [ 122.391496][ T5626] Read of size 8 at addr ffff888025536120 by task syz.4.65/5626 [ 122.399164][ T5626] [ 122.401510][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: syz.4.65 Tainted: G B 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 122.413200][ T5626] Tainted: [B]=BAD_PAGE [ 122.417354][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.427434][ T5626] Call Trace: [ 122.430744][ T5626] [ 122.433703][ T5626] dump_stack_lvl+0x116/0x1f0 [ 122.438443][ T5626] print_report+0xc3/0x620 [ 122.442896][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.448561][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.454230][ T5626] ? __phys_addr+0xc6/0x150 [ 122.458806][ T5626] kasan_report+0xd9/0x110 [ 122.463259][ T5626] ? iov_iter_advance+0x677/0x6c0 [ 122.468302][ T5626] ? iov_iter_advance+0x677/0x6c0 [ 122.473346][ T5626] iov_iter_advance+0x677/0x6c0 [ 122.478233][ T5626] netfs_write_folio+0x745/0x18f0 [ 122.483300][ T5626] netfs_writepages+0x2ba/0xb90 [ 122.488180][ T5626] ? __pfx_netfs_writepages+0x10/0x10 [ 122.493578][ T5626] ? __pfx___lock_acquire+0x10/0x10 [ 122.498820][ T5626] ? bpf_ksym_find+0x124/0x1c0 [ 122.503630][ T5626] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 122.509815][ T5626] ? __pfx_netfs_writepages+0x10/0x10 [ 122.515212][ T5626] do_writepages+0x1a6/0x7f0 [ 122.519839][ T5626] ? __pfx_do_writepages+0x10/0x10 [ 122.524983][ T5626] ? __pfx_lock_acquire+0x10/0x10 [ 122.530088][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.535763][ T5626] ? do_raw_spin_lock+0x12d/0x2c0 [ 122.540819][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.546487][ T5626] ? do_raw_spin_unlock+0x172/0x230 [ 122.551716][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.557381][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 122.562254][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.567919][ T5626] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 122.573936][ T5626] filemap_fdatawrite_wbc+0x148/0x1c0 [ 122.579347][ T5626] __filemap_fdatawrite_range+0xb3/0xf0 [ 122.584939][ T5626] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 122.591224][ T5626] ? kmem_cache_free+0x31d/0x4b0 [ 122.596233][ T5626] v9fs_dir_release+0x429/0x590 [ 122.601111][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.606781][ T5626] ? __pfx_v9fs_dir_release+0x10/0x10 [ 122.612183][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.617849][ T5626] ? __pfx___might_resched+0x10/0x10 [ 122.623163][ T5626] ? srso_alias_return_thunk+0x5/0xfbef5 [ 122.628831][ T5626] ? __pfx_v9fs_dir_release+0x10/0x10 [ 122.634232][ T5626] __fput+0x3f9/0xb60 [ 122.638261][ T5626] ? _raw_spin_unlock_irq+0x23/0x50 [ 122.643485][ T5626] task_work_run+0x151/0x250 [ 122.648126][ T5626] ? __pfx_task_work_run+0x10/0x10 [ 122.653285][ T5626] syscall_exit_to_user_mode+0x27b/0x2a0 [ 122.658947][ T5626] do_syscall_64+0xda/0x250 [ 122.663483][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.669409][ T5626] RIP: 0033:0x7fe1cc17df39 [ 122.673843][ T5626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.693475][ T5626] RSP: 002b:00007ffc23a03658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 122.701919][ T5626] RAX: 0000000000000000 RBX: 00007fe1cc337a80 RCX: 00007fe1cc17df39 [ 122.709905][ T5626] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 122.717892][ T5626] RBP: 00007fe1cc337a80 R08: 0000000000000006 R09: 00007ffc23a0394f [ 122.725878][ T5626] R10: 00000000005e2378 R11: 0000000000000246 R12: 000000000001d223 [ 122.733869][ T5626] R13: 00007ffc23a03760 R14: 0000000000000032 R15: ffffffffffffffff [ 122.741869][ T5626] [ 122.744895][ T5626] [ 122.747222][ T5626] Allocated by task 5626: [ 122.751555][ T5626] kasan_save_stack+0x33/0x60 [ 122.756285][ T5626] kasan_save_track+0x14/0x30 [ 122.761041][ T5626] __kasan_kmalloc+0xaa/0xb0 [ 122.765676][ T5626] netfs_buffer_append_folio+0x181/0x750 [ 122.771493][ T5626] netfs_write_folio+0x542/0x18f0 [ 122.776555][ T5626] netfs_writepages+0x2ba/0xb90 [ 122.781434][ T5626] do_writepages+0x1a6/0x7f0 [ 122.786061][ T5626] filemap_fdatawrite_wbc+0x148/0x1c0 [ 122.791477][ T5626] __filemap_fdatawrite_range+0xb3/0xf0 [ 122.797083][ T5626] v9fs_dir_release+0x429/0x590 [ 122.801961][ T5626] __fput+0x3f9/0xb60 [ 122.805981][ T5626] task_work_run+0x151/0x250 [ 122.810621][ T5626] syscall_exit_to_user_mode+0x27b/0x2a0 [ 122.816286][ T5626] do_syscall_64+0xda/0x250 [ 122.820819][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.826738][ T5626] [ 122.829068][ T5626] Freed by task 53: [ 122.832885][ T5626] kasan_save_stack+0x33/0x60 [ 122.837606][ T5626] kasan_save_track+0x14/0x30 [ 122.842333][ T5626] kasan_save_free_info+0x3b/0x60 [ 122.847404][ T5626] __kasan_slab_free+0x51/0x70 [ 122.852218][ T5626] kfree+0x14f/0x4b0 [ 122.856151][ T5626] netfs_delete_buffer_head+0xa6/0x100 [ 122.861672][ T5626] netfs_write_collection_worker+0x20f9/0x4f80 [ 122.867869][ T5626] process_one_work+0x9c8/0x1ba0 [ 122.872855][ T5626] worker_thread+0x6c8/0xf00 [ 122.877494][ T5626] kthread+0x2c4/0x3a0 [ 122.881594][ T5626] ret_from_fork+0x48/0x80 [ 122.886056][ T5626] ret_from_fork_asm+0x1a/0x30 [ 122.890865][ T5626] [ 122.893194][ T5626] The buggy address belongs to the object at ffff888025536000 [ 122.893194][ T5626] which belongs to the cache kmalloc-512 of size 512 [ 122.907265][ T5626] The buggy address is located 288 bytes inside of [ 122.907265][ T5626] freed 512-byte region [ffff888025536000, ffff888025536200) [ 122.921109][ T5626] [ 122.923531][ T5626] The buggy address belongs to the physical page: [ 122.929950][ T5626] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25534 [ 122.938736][ T5626] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 122.947281][ T5626] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 122.954852][ T5626] page_type: f5(slab) [ 122.958858][ T5626] raw: 00fff00000000040 ffff88801b041c80 ffffea000077a700 dead000000000002 [ 122.967493][ T5626] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 122.976099][ T5626] head: 00fff00000000040 ffff88801b041c80 ffffea000077a700 dead000000000002 [ 122.984796][ T5626] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 122.993490][ T5626] head: 00fff00000000002 ffffea0000954d01 ffffffffffffffff 0000000000000000 [ 123.002200][ T5626] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 123.010908][ T5626] page dumped because: kasan: bad access detected [ 123.017334][ T5626] page_owner tracks the page as allocated [ 123.023052][ T5626] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22, tgid 22 (cpuhp/1), ts 14151251834, free_ts 14134303735 [ 123.043695][ T5626] post_alloc_hook+0x2d1/0x350 [ 123.048525][ T5626] get_page_from_freelist+0x101e/0x3070 [ 123.054122][ T5626] __alloc_pages_noprof+0x223/0x25c0 [ 123.059454][ T5626] alloc_pages_mpol_noprof+0x275/0x610 [ 123.064938][ T5626] new_slab+0x28b/0x3f0 [ 123.069133][ T5626] ___slab_alloc+0xd1d/0x16f0 [ 123.073840][ T5626] __slab_alloc.constprop.0+0x56/0xb0 [ 123.079247][ T5626] __kmalloc_cache_noprof+0x2b4/0x300 [ 123.084664][ T5626] device_add+0xccf/0x1a70 [ 123.089111][ T5626] cpu_device_create+0x25f/0x2d0 [ 123.094098][ T5626] cacheinfo_cpu_online+0x3f4/0x9a0 [ 123.099328][ T5626] cpuhp_invoke_callback+0x438/0xbe0 [ 123.104643][ T5626] cpuhp_thread_fun+0x480/0x6f0 [ 123.109704][ T5626] smpboot_thread_fn+0x664/0xa10 [ 123.114681][ T5626] kthread+0x2c4/0x3a0 [ 123.118783][ T5626] ret_from_fork+0x48/0x80 [ 123.123275][ T5626] page last free pid 1 tgid 1 stack trace: [ 123.129092][ T5626] free_unref_page+0x5f4/0xdc0 [ 123.133899][ T5626] stack_depot_save_flags+0x2da/0x8f0 [ 123.139318][ T5626] kasan_save_stack+0x42/0x60 [ 123.144047][ T5626] kasan_save_track+0x14/0x30 [ 123.148764][ T5626] __kasan_slab_alloc+0x89/0x90 [ 123.153662][ T5626] kmem_cache_alloc_noprof+0x121/0x2f0 [ 123.159163][ T5626] __kernfs_new_node+0xd3/0x890 [ 123.164058][ T5626] kernfs_new_node+0x186/0x240 [ 123.168847][ T5626] __kernfs_create_file+0x53/0x350 [ 123.173994][ T5626] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 123.179410][ T5626] sysfs_create_file_ns+0x13e/0x1d0 [ 123.184656][ T5626] driver_create_file+0x4a/0x70 [ 123.189543][ T5626] bus_add_driver+0x357/0x690 [ 123.194261][ T5626] driver_register+0x15c/0x4b0 [ 123.199046][ T5626] bochs_pci_driver_init+0x67/0x80 [ 123.204184][ T5626] do_one_initcall+0x12b/0x700 [ 123.208989][ T5626] [ 123.211315][ T5626] Memory state around the buggy address: [ 123.216952][ T5626] ffff888025536000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.225028][ T5626] ffff888025536080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.233107][ T5626] >ffff888025536100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.241182][ T5626] ^ [ 123.246316][ T5626] ffff888025536180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.254425][ T5626] ffff888025536200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.262526][ T5626] ================================================================== [ 123.275531][ T5234] Bluetooth: hci4: command 0x0c1a tx timeout [ 123.281624][ T5246] Bluetooth: hci2: command 0x0419 tx timeout [ 123.281671][ T5246] Bluetooth: hci5: command 0x0405 tx timeout [ 123.281708][ T5246] Bluetooth: hci6: command 0x0c1a tx timeout [ 123.368061][ T5234] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.846844][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 124.333400][ T2975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.383939][ T2975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.464537][ T2975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.514819][ T2975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.611431][ T2975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.654128][ T2975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.726167][ T2975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.778987][ T2975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.886983][ T2975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.933649][ T2975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.004451][ T2975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.079858][ T2975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.181632][ T2975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.223075][ T2975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.274316][ T2975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.352179][ T2975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.446369][ T2975] bridge_slave_1: left allmulticast mode [ 125.456705][ T2975] bridge_slave_1: left promiscuous mode [ 125.462452][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.475002][ T2975] bridge_slave_0: left allmulticast mode [ 125.481364][ T2975] bridge_slave_0: left promiscuous mode [ 125.487441][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.497319][ T2975] bridge_slave_1: left allmulticast mode [ 125.503303][ T2975] bridge_slave_1: left promiscuous mode [ 125.512419][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.523762][ T2975] bridge_slave_0: left allmulticast mode [ 125.529717][ T2975] bridge_slave_0: left promiscuous mode [ 125.535425][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.545371][ T2975] bridge_slave_1: left allmulticast mode [ 125.551467][ T2975] bridge_slave_1: left promiscuous mode [ 125.557311][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.566024][ T2975] bridge_slave_0: left allmulticast mode [ 125.574648][ T2975] bridge_slave_0: left promiscuous mode [ 125.581090][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.590508][ T2975] bridge_slave_1: left allmulticast mode [ 125.596186][ T2975] bridge_slave_1: left promiscuous mode [ 125.607737][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.615899][ T2975] bridge_slave_0: left allmulticast mode [ 125.622121][ T2975] bridge_slave_0: left promiscuous mode [ 125.628085][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.638022][ T2975] bridge_slave_1: left allmulticast mode [ 125.643702][ T2975] bridge_slave_1: left promiscuous mode [ 125.651645][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.660692][ T2975] bridge_slave_0: left allmulticast mode [ 125.666367][ T2975] bridge_slave_0: left promiscuous mode [ 125.672932][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.223946][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.234646][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.245448][ T2975] bond0 (unregistering): Released all slaves [ 126.260082][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.271115][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.283020][ T2975] bond0 (unregistering): Released all slaves [ 126.295808][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.308596][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.318761][ T2975] bond0 (unregistering): Released all slaves [ 126.329839][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.342149][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.353475][ T2975] bond0 (unregistering): Released all slaves [ 126.366884][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.378021][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.390998][ T2975] bond0 (unregistering): Released all slaves [ 126.984995][ T2975] hsr_slave_0: left promiscuous mode [ 126.991592][ T2975] hsr_slave_1: left promiscuous mode [ 126.999006][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.006516][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.018718][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.026239][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.041576][ T2975] hsr_slave_0: left promiscuous mode [ 127.048527][ T2975] hsr_slave_1: left promiscuous mode [ 127.054412][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.064229][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.072970][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.085453][ T2975] hsr_slave_0: left promiscuous mode [ 127.092760][ T2975] hsr_slave_1: left promiscuous mode [ 127.104778][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.113757][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.124148][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.131677][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.140774][ T2975] hsr_slave_0: left promiscuous mode [ 127.146697][ T2975] hsr_slave_1: left promiscuous mode [ 127.152819][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.161941][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.173697][ T2975] hsr_slave_0: left promiscuous mode [ 127.179778][ T2975] hsr_slave_1: left promiscuous mode [ 127.185767][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.193387][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.201726][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.209577][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.225889][ T2975] veth1_macvtap: left promiscuous mode [ 127.231838][ T2975] veth0_macvtap: left promiscuous mode [ 127.237547][ T2975] veth1_vlan: left promiscuous mode [ 127.242833][ T2975] veth0_vlan: left promiscuous mode [ 127.249173][ T2975] veth1_macvtap: left promiscuous mode [ 127.254680][ T2975] veth0_macvtap: left promiscuous mode [ 127.260374][ T2975] veth1_vlan: left promiscuous mode [ 127.265706][ T2975] veth0_vlan: left promiscuous mode [ 127.271989][ T2975] veth1_macvtap: left promiscuous mode [ 127.277633][ T2975] veth0_macvtap: left promiscuous mode [ 127.283221][ T2975] veth1_vlan: left promiscuous mode [ 127.288700][ T2975] veth0_vlan: left promiscuous mode [ 127.294809][ T2975] veth1_macvtap: left promiscuous mode [ 127.300464][ T2975] veth0_macvtap: left promiscuous mode [ 127.306303][ T2975] veth1_vlan: left promiscuous mode [ 127.311885][ T2975] veth0_vlan: left promiscuous mode [ 127.629840][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 127.642799][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 127.850085][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 127.876073][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 128.074506][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 128.094661][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 128.221430][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 128.236590][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 128.393603][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 128.415266][ T2975] team0 (unregistering): Port device team_slave_0 removed