last executing test programs: 42m45.317863393s ago: executing program 32 (id=839): syz_emit_ethernet(0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") mknodat$loop(0xffffffffffffff9c, 0x0, 0x4000, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) setns(0xffffffffffffffff, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 39m42.228062841s ago: executing program 33 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket(0x6, 0x2, 0xfffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x301c40a, &(0x7f0000000740)={[{@rodir}, {@shortname_winnt}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@shortname_win95}, {@fat=@check_strict}]}, 0x6, 0x2d5, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 37m37.920218785s ago: executing program 34 (id=1807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7ab19000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xae) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 37m17.005655997s ago: executing program 35 (id=1851): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) unshare(0x68040200) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x2007ffc) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='ip6erspan0\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") chdir(&(0x7f0000000240)='./file0\x00') 28m32.312894018s ago: executing program 36 (id=2980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_procfs(r0, 0x0) getegid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000041c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_DELETE(r4, 0x0, 0x29) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r6 = dup2(r5, r5) fadvise64(r6, 0x8, 0xb098, 0x0) 21m6.208618816s ago: executing program 37 (id=4063): r0 = socket$igmp(0x2, 0x3, 0x2) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 18m5.716149689s ago: executing program 38 (id=4415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x83be, 0x1046}) 14m57.517876884s ago: executing program 39 (id=4813): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10001, 0x80000100008b}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x4, 0x7cd, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x2, 0x0, 0x0, 0xfffffffc) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='./bus\x00') 13m19.700680414s ago: executing program 6 (id=5047): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) 13m18.927260907s ago: executing program 6 (id=5048): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x66e9, 0x0, 0x0, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0), 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) 13m16.307686233s ago: executing program 6 (id=5050): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000005000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) 13m15.706312707s ago: executing program 6 (id=5051): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 13m15.316360018s ago: executing program 6 (id=5053): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @broadcast}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 13m13.891547916s ago: executing program 6 (id=5056): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10001, 0x80000100008b}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x4, 0x7cd, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001800010002000000a6ce65a0f6000000000201232c"], 0x14}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x6a) futex(&(0x7f000000cffc)=0x1, 0x1, 0x2, 0x0, 0x0, 0xfffffffc) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='./bus\x00') 12m58.393843044s ago: executing program 40 (id=5056): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100), 0x2, 0x50e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10001, 0x80000100008b}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x4, 0x7cd, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001800010002000000a6ce65a0f6000000000201232c"], 0x14}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x6a) futex(&(0x7f000000cffc)=0x1, 0x1, 0x2, 0x0, 0x0, 0xfffffffc) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='./bus\x00') 8m49.403006825s ago: executing program 7 (id=5583): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) 8m47.782438789s ago: executing program 7 (id=5586): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000) 8m45.138365139s ago: executing program 7 (id=5588): syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1010052, &(0x7f00000000c0)={[{}, {@nodiscard}, {@errors_remount_ro}, {@norecovery}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 8m40.015374047s ago: executing program 7 (id=5596): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000440)={0x6, @local, 0x0, 0xfffffffc, 'lblc\x00'}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r6, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 8m38.501082392s ago: executing program 7 (id=5599): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r0, 0x47f6, 0x880e, 0x0, 0x0, 0x0) 8m36.447347701s ago: executing program 7 (id=5604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 8m21.030326006s ago: executing program 41 (id=5604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 7m27.474000491s ago: executing program 5 (id=5723): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @broadcast}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) 7m24.34791463s ago: executing program 5 (id=5729): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 7m22.915775138s ago: executing program 5 (id=5732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60ff040000442f00fc000000000000000000000000000000fe8000000000000000000000000000aa042022eb"], 0x0) 7m21.361082257s ago: executing program 5 (id=5734): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x400, 0xfffff001, {}, {0x4, 0xc, 0x7f, 0xde, 0x5, 0x81, "8ba6928f"}, 0x1944, 0x1, {0x0}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x210004, &(0x7f00000000c0)={[{@usrquota}, {@errors_continue}, {@nodiscard}, {@uid}, {@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@usrquota}, {@usrquota}, {@gid}]}, 0x3, 0x62b5, &(0x7f00000069c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) execve(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000640)='veno\x00', 0x5) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[], [], 0x2f}) chdir(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 7m18.401084696s ago: executing program 5 (id=5739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x535) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c600000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r4, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d03"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) 7m17.112560859s ago: executing program 5 (id=5740): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @broadcast}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) 6m59.167324704s ago: executing program 42 (id=5740): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @broadcast}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) 6m25.679959073s ago: executing program 3 (id=5805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000280)=',', 0x1, 0x3ed7, 0x0) 6m25.296281501s ago: executing program 3 (id=5808): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) shutdown(r1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x800000000000) 6m23.565575101s ago: executing program 3 (id=5811): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000300)=r9, 0x1) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0\x00'}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 5m52.063195013s ago: executing program 43 (id=5831): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x6ed0, &(0x7f0000000140)={0x0, 0xf844, 0x10003, 0x20002, 0xee}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0xffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000100)={'veth0_to_bond\x00', 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x3e20, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000300)=r9, 0x1) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0\x00'}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 2m19.700906684s ago: executing program 2 (id=6226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000180)='sys_exit\x00', r0}, 0x18) setresuid(0x0, 0x0, 0x0) 2m19.415135796s ago: executing program 2 (id=6228): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000e80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000001b40)="b9ff030f6044238cb89e14f089", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r4, 0x0, 0x0, 0x0) 2m18.07403922s ago: executing program 2 (id=6231): socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x20004004) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 2m16.327527244s ago: executing program 2 (id=6234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2m14.729909572s ago: executing program 2 (id=6238): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x80000001) syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0) 2m11.306026523s ago: executing program 2 (id=6245): socket$nl_rdma(0x10, 0x3, 0x14) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfeeb, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x20004004) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 2m6.946760187s ago: executing program 1 (id=6254): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000e80)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000001b40)="b9ff030f6044238cb89e14f089", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r4, 0x0, 0x0, 0x0) 2m3.345741544s ago: executing program 1 (id=6257): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = fanotify_init(0x200, 0x101000) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 2m2.119043679s ago: executing program 1 (id=6264): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086", 0xb3, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 2m0.702079926s ago: executing program 1 (id=6267): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000) 1m58.275357854s ago: executing program 1 (id=6270): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r5, 0x2008002) sendfile(r4, r5, 0x0, 0x80000001) syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0) 1m53.535134305s ago: executing program 1 (id=6273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) 1m37.347964542s ago: executing program 44 (id=6273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020) 18.774177114s ago: executing program 8 (id=6433): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) recvmmsg(r3, &(0x7f0000001240), 0x0, 0x0, 0x0) shutdown(r3, 0x2) socket(0x2, 0x80805, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 17.695029763s ago: executing program 9 (id=6435): syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1010052, &(0x7f00000000c0)={[{}, {@nodiscard}, {@errors_remount_ro}, {@norecovery}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) 12.98763106s ago: executing program 9 (id=6441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 12.233170591s ago: executing program 8 (id=6444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x6, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 11.944901854s ago: executing program 0 (id=6445): syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) chmod(&(0x7f0000000040)='./file0\x00', 0x100) 10.228173149s ago: executing program 8 (id=6448): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 10.008095608s ago: executing program 0 (id=6450): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = fanotify_init(0x200, 0x101000) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) 8.470333841s ago: executing program 9 (id=6453): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 8.401869632s ago: executing program 0 (id=6454): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x4002, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 8.213559841s ago: executing program 9 (id=6456): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1e3d50de03aa3d1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) 6.923766404s ago: executing program 0 (id=6459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x6, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 6.776767816s ago: executing program 9 (id=6460): unshare(0x22020600) r0 = fanotify_init(0x1, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x40000008, r1, 0x0) 6.73744833s ago: executing program 8 (id=6461): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x400, 0xfffff001, {}, {0x4, 0xc, 0x7f, 0xde, 0x5, 0x81, "8ba6928f"}, 0x1944, 0x1, {0x0}, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x210004, &(0x7f00000000c0)={[{@usrquota}, {@errors_continue}, {@nodiscard}, {@uid}, {@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@usrquota}, {@usrquota}, {@gid}]}, 0x3, 0x62b5, &(0x7f00000069c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) execve(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000640)='veno\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 6.619255563s ago: executing program 4 (id=6462): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 5.814468819s ago: executing program 4 (id=6463): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r1, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mount$overlay(0x0, &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 5.798508253s ago: executing program 9 (id=6464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 5.42668909s ago: executing program 8 (id=6465): syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1010052, &(0x7f00000000c0)={[{}, {@nodiscard}, {@errors_remount_ro}, {@norecovery}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{}], 0x1, 0x2000, 0x0, 0x3) 5.047410567s ago: executing program 0 (id=6466): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') openat$cgroup_int(r1, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x90) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') socket(0x22, 0x2, 0x1) lstat(&(0x7f0000007500)='./file0\x00', 0x0) 4.827449908s ago: executing program 4 (id=6467): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 1.77841283s ago: executing program 4 (id=6468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x535) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), 0x10) 1.561279218s ago: executing program 0 (id=6469): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x500f}}, {@nodecompose}, {}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'cp949'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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") open(0x0, 0x64842, 0x21) creat(&(0x7f0000000200)='./file1\x00', 0x2) 418.953716ms ago: executing program 4 (id=6470): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1e3d50de03aa3d1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) 282.706782ms ago: executing program 8 (id=6471): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 0s ago: executing program 4 (id=6472): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat(0xffffffffffffff9c, 0x0, 0x242, 0x4658b0e44181081a) kernel console output (not intermixed with test programs): batadv0: Adding interface: batadv_slave_1 [ 2562.340466][T25645] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 2562.372282][T25970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2562.373921][T26341] overlayfs: missing 'lowerdir' [ 2562.377311][T25970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2562.442028][T25645] CPU: 0 UID: 0 PID: 25645 Comm: kworker/u8:4 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 2562.442081][T25645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2562.442106][T25645] Workqueue: writeback wb_workfn (flush-7:9) [ 2562.442177][T25645] Call Trace: [ 2562.442191][T25645] [ 2562.442205][T25645] dump_stack_lvl+0x16c/0x1f0 [ 2562.442270][T25645] f2fs_handle_critical_error+0x621/0x9f0 [ 2562.442319][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.442364][T25645] ? f2fs_build_fault_attr+0x53/0x1f0 [ 2562.442414][T25645] f2fs_write_end_io+0x785/0xc20 [ 2562.442470][T25645] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 2562.442529][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.442591][T25645] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 2562.442639][T25645] bio_endio+0x70d/0x850 [ 2562.442682][T25645] submit_bio_noacct+0x56d/0x1eb0 [ 2562.442743][T25645] __submit_merged_bio+0x33c/0x770 [ 2562.442800][T25645] __submit_merged_write_cond+0x319/0x3f0 [ 2562.442864][T25645] f2fs_write_cache_pages+0x2067/0x2570 [ 2562.442956][T25645] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 2562.443018][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.443072][T25645] ? __pfx_f2fs_sync_meta_pages+0x10/0x10 [ 2562.443131][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.443292][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.443346][T25645] f2fs_write_data_pages+0x4ad/0xd90 [ 2562.443413][T25645] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 2562.443485][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.443529][T25645] ? __lock_acquire+0xb8a/0x1c90 [ 2562.443593][T25645] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 2562.443654][T25645] do_writepages+0x27a/0x600 [ 2562.443721][T25645] ? __pfx_do_writepages+0x10/0x10 [ 2562.443776][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.443820][T25645] ? reacquire_held_locks+0xcd/0x1f0 [ 2562.443881][T25645] ? writeback_sb_inodes+0x3a4/0xf90 [ 2562.443948][T25645] __writeback_single_inode+0x160/0xfb0 [ 2562.444012][T25645] ? __pfx___writeback_single_inode+0x10/0x10 [ 2562.444070][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.444114][T25645] ? do_raw_spin_unlock+0x172/0x230 [ 2562.444155][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.444208][T25645] writeback_sb_inodes+0x601/0xf90 [ 2562.444293][T25645] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 2562.444354][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.444398][T25645] ? mark_held_locks+0x49/0x80 [ 2562.444526][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.444570][T25645] ? rcu_is_watching+0x12/0xc0 [ 2562.444622][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.444665][T25645] ? queue_io+0x3f6/0x520 [ 2562.444724][T25645] wb_writeback+0x419/0xb70 [ 2562.444796][T25645] ? __pfx_wb_writeback+0x10/0x10 [ 2562.444850][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.444910][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.444954][T25645] ? mark_held_locks+0x49/0x80 [ 2562.445020][T25645] wb_workfn+0x14d/0xbe0 [ 2562.445086][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445130][T25645] ? try_to_wake_up+0x157/0x1680 [ 2562.445176][T25645] ? __pfx_wb_workfn+0x10/0x10 [ 2562.445241][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445291][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445342][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445386][T25645] ? rcu_is_watching+0x12/0xc0 [ 2562.445440][T25645] process_one_work+0x9cf/0x1b70 [ 2562.445502][T25645] ? __pfx_process_one_work+0x10/0x10 [ 2562.445543][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445606][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445650][T25645] ? assign_work+0x1a0/0x250 [ 2562.445718][T25645] worker_thread+0x6c8/0xf10 [ 2562.445769][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445817][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445860][T25645] ? __kthread_parkme+0x19e/0x250 [ 2562.445911][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.445960][T25645] ? __pfx_worker_thread+0x10/0x10 [ 2562.445999][T25645] kthread+0x3c5/0x780 [ 2562.446035][T25645] ? __pfx_kthread+0x10/0x10 [ 2562.446072][T25645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2562.446116][T25645] ? rcu_is_watching+0x12/0xc0 [ 2562.446162][T25645] ? __pfx_kthread+0x10/0x10 [ 2562.446200][T25645] ret_from_fork+0x5d7/0x6f0 [ 2562.446253][T25645] ? __pfx_kthread+0x10/0x10 [ 2562.446288][T25645] ret_from_fork_asm+0x1a/0x30 [ 2562.446357][T25645] [ 2562.470653][T25645] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 2562.652613][T26345] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.5947: Abort forced by user [ 2562.970837][T26345] EXT4-fs (loop2): Remounting filesystem read-only [ 2562.977389][T26345] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 2563.216114][T16241] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2563.461890][T25839] Bluetooth: hci7: command tx timeout [ 2563.940831][T26356] vivid-002: disconnect [ 2564.611507][T25970] hsr_slave_0: entered promiscuous mode [ 2564.617995][T25970] hsr_slave_1: entered promiscuous mode [ 2564.624389][T25970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2564.634001][T25970] Cannot create hsr debugfs directory [ 2564.726186][T26348] vivid-002: reconnect [ 2564.766890][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2564.766917][ T30] audit: type=1326 audit(2000001108.049:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.1.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2564.859243][ T30] audit: type=1326 audit(2000001108.049:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26348 comm="syz.1.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2566.044528][T25839] Bluetooth: hci7: command tx timeout [ 2566.455227][T26371] binder: 26368:26371 ioctl c0306201 0 returned -14 [ 2566.531882][T12229] hsr_slave_0: left promiscuous mode [ 2566.707779][T12229] hsr_slave_1: left promiscuous mode [ 2566.941902][T12229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2567.084902][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2567.169562][T12229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2567.198005][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2567.476553][T12229] hsr_slave_0: left promiscuous mode [ 2567.488674][T12229] hsr_slave_1: left promiscuous mode [ 2568.070487][T25839] Bluetooth: hci7: command tx timeout [ 2568.260604][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2568.321287][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2568.414674][T26387] loop2: detected capacity change from 0 to 1024 [ 2568.436662][T21139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2568.451071][T21139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2568.472561][T21139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2568.474019][T12229] veth1_macvtap: left promiscuous mode [ 2568.502447][T12229] veth0_macvtap: left promiscuous mode [ 2568.502483][T21139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2568.508186][T12229] veth1_vlan: left promiscuous mode [ 2568.613510][T21139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2568.717107][T26387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2568.775610][T12229] veth0_vlan: left promiscuous mode [ 2568.826943][T26387] overlayfs: missing 'lowerdir' [ 2568.873201][T26387] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.5959: Abort forced by user [ 2568.918630][T26387] EXT4-fs (loop2): Remounting filesystem read-only [ 2568.948583][T26387] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 2569.319865][T16241] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2570.642039][T25839] Bluetooth: hci7: command tx timeout [ 2570.923129][T25839] Bluetooth: hci4: command tx timeout [ 2573.211103][T25839] Bluetooth: hci4: command tx timeout [ 2575.270769][T25839] Bluetooth: hci4: command tx timeout [ 2576.666529][T12229] team0 (unregistering): Port device team_slave_1 removed [ 2576.949386][T12229] team0 (unregistering): Port device team_slave_0 removed [ 2577.060330][ T30] audit: type=1326 audit(2000001120.359:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.166981][ T30] audit: type=1326 audit(2000001120.359:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.360540][T25839] Bluetooth: hci4: command tx timeout [ 2577.375576][ T30] audit: type=1326 audit(2000001120.369:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.532919][ T30] audit: type=1326 audit(2000001120.369:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.698972][ T30] audit: type=1326 audit(2000001120.369:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.728824][ T30] audit: type=1326 audit(2000001120.369:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.753717][ T30] audit: type=1326 audit(2000001120.369:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.776898][ T30] audit: type=1326 audit(2000001120.369:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.799610][ T30] audit: type=1326 audit(2000001120.369:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2577.822295][ T30] audit: type=1326 audit(2000001120.369:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26445 comm="syz.2.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2578.619832][T12229] team0 (unregistering): Port device team_slave_1 removed [ 2578.668645][T12229] team0 (unregistering): Port device team_slave_0 removed [ 2578.881236][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2579.053098][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2579.087349][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2579.101863][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2579.126381][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2579.143854][ T9] usb 2-1: SerialNumber: syz [ 2579.415677][ T9] usb 2-1: 0:2 : does not exist [ 2579.460948][ T9] usb 2-1: USB disconnect, device number 58 [ 2580.342952][T26463] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2580.471866][T26222] chnl_net:caif_netlink_parms(): no params data found [ 2583.435831][T26336] chnl_net:caif_netlink_parms(): no params data found [ 2583.490266][T26480] loop9: detected capacity change from 0 to 1024 [ 2583.747523][T26480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2583.862395][T26480] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 2583.886630][T26480] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2584.000762][T26487] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.5981: Abort forced by user [ 2584.075618][T26487] EXT4-fs (loop9): Remounting filesystem read-only [ 2584.110546][T26487] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 2584.132528][T26222] bridge0: port 1(bridge_slave_0) entered blocking state [ 2584.182928][T26222] bridge0: port 1(bridge_slave_0) entered disabled state [ 2584.250997][T26222] bridge_slave_0: entered allmulticast mode [ 2584.291773][T26222] bridge_slave_0: entered promiscuous mode [ 2584.356408][T14359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2584.607724][T26222] bridge0: port 2(bridge_slave_1) entered blocking state [ 2584.620803][T26222] bridge0: port 2(bridge_slave_1) entered disabled state [ 2584.628348][T26222] bridge_slave_1: entered allmulticast mode [ 2584.649674][T26222] bridge_slave_1: entered promiscuous mode [ 2584.660770][T26388] chnl_net:caif_netlink_parms(): no params data found [ 2585.656277][T26498] loop9: detected capacity change from 0 to 256 [ 2585.902847][T26498] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2585.959366][T26498] FAT-fs (loop9): Directory bread(block 64) failed [ 2585.967271][T26498] FAT-fs (loop9): Directory bread(block 65) failed [ 2585.980296][T26498] FAT-fs (loop9): Directory bread(block 66) failed [ 2585.988802][T26498] FAT-fs (loop9): Directory bread(block 67) failed [ 2586.060737][T26498] FAT-fs (loop9): Directory bread(block 68) failed [ 2586.067366][T26498] FAT-fs (loop9): Directory bread(block 69) failed [ 2586.125818][T26498] FAT-fs (loop9): Directory bread(block 70) failed [ 2586.138049][T26336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2586.160585][T26498] FAT-fs (loop9): Directory bread(block 71) failed [ 2586.167305][T26498] FAT-fs (loop9): Directory bread(block 72) failed [ 2586.168613][T26336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.197425][T26336] bridge_slave_0: entered allmulticast mode [ 2586.205735][T26336] bridge_slave_0: entered promiscuous mode [ 2586.212105][T26498] FAT-fs (loop9): Directory bread(block 73) failed [ 2586.226628][T26222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2587.101206][ T30] audit: type=1326 audit(2000001129.829:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.154594][ T30] audit: type=1326 audit(2000001129.829:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.171039][T26336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2587.197456][T26336] bridge0: port 2(bridge_slave_1) entered disabled state [ 2587.204616][ T30] audit: type=1326 audit(2000001129.829:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.204696][ T30] audit: type=1326 audit(2000001129.829:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.258190][T26336] bridge_slave_1: entered allmulticast mode [ 2587.276421][T26336] bridge_slave_1: entered promiscuous mode [ 2587.350918][ T30] audit: type=1326 audit(2000001129.829:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.357374][T26222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2587.374101][ T30] audit: type=1326 audit(2000001129.829:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.374182][ T30] audit: type=1326 audit(2000001129.839:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.374256][ T30] audit: type=1326 audit(2000001129.839:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.457534][ T30] audit: type=1326 audit(2000001129.839:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.614787][ T30] audit: type=1326 audit(2000001129.839:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26502 comm="syz.2.5986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7ffc0000 [ 2587.644886][T26336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2587.752187][T26222] team0: Port device team_slave_0 added [ 2587.792650][T26336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2587.804772][T26222] team0: Port device team_slave_1 added [ 2588.698474][T26222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2588.716094][T26222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2588.851057][T26222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2588.882863][T26336] team0: Port device team_slave_0 added [ 2588.889331][T26388] bridge0: port 1(bridge_slave_0) entered blocking state [ 2588.909099][T26388] bridge0: port 1(bridge_slave_0) entered disabled state [ 2588.916661][T26388] bridge_slave_0: entered allmulticast mode [ 2588.936106][T26388] bridge_slave_0: entered promiscuous mode [ 2588.944622][T12229] bridge_slave_1: left allmulticast mode [ 2588.951638][T12229] bridge_slave_1: left promiscuous mode [ 2588.957543][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2588.977241][T12229] bridge_slave_0: left allmulticast mode [ 2588.990579][T12229] bridge_slave_0: left promiscuous mode [ 2589.009449][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.051690][T12229] bridge_slave_1: left allmulticast mode [ 2589.057369][T12229] bridge_slave_1: left promiscuous mode [ 2589.076896][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2589.099483][T12229] bridge_slave_0: left allmulticast mode [ 2589.105584][T12229] bridge_slave_0: left promiscuous mode [ 2589.127014][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.151134][T12229] bridge_slave_1: left allmulticast mode [ 2589.165855][T12229] bridge_slave_1: left promiscuous mode [ 2589.173047][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2589.197964][T12229] bridge_slave_0: left allmulticast mode [ 2589.236488][T12229] bridge_slave_0: left promiscuous mode [ 2589.259590][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2590.117571][T12229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2590.189653][T12229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2590.259046][T12229] bond0 (unregistering): Released all slaves [ 2590.817707][T12229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2590.834383][T12229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2590.846743][T12229] bond0 (unregistering): Released all slaves [ 2590.991298][T26533] loop2: detected capacity change from 0 to 2048 [ 2590.999567][T26533] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 2591.353110][T26533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2591.457455][T12229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2591.492601][T12229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2591.524518][T12229] bond0 (unregistering): Released all slaves [ 2591.563968][T26222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2591.571307][T26222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2591.600715][T26222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2591.636244][T26336] team0: Port device team_slave_1 added [ 2591.718698][T26388] bridge0: port 2(bridge_slave_1) entered blocking state [ 2591.739845][T26388] bridge0: port 2(bridge_slave_1) entered disabled state [ 2591.751300][T26388] bridge_slave_1: entered allmulticast mode [ 2591.759055][T26388] bridge_slave_1: entered promiscuous mode [ 2591.836116][T26336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2591.874047][T26336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2591.947917][T26336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2591.970079][T12229] hsr_slave_0: left promiscuous mode [ 2591.985183][T12229] hsr_slave_1: left promiscuous mode [ 2591.997263][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2592.011983][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2592.055525][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2592.098422][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2592.148488][T12229] hsr_slave_0: left promiscuous mode [ 2592.188001][T12229] hsr_slave_1: left promiscuous mode [ 2592.200448][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2592.209659][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2592.238856][T26537] binder: BINDER_SET_CONTEXT_MGR already set [ 2592.252861][T26537] binder: 26536:26537 ioctl 4018620d 200000000040 returned -16 [ 2593.468057][T12229] team0 (unregistering): Port device team_slave_1 removed [ 2593.598677][T12229] team0 (unregistering): Port device team_slave_0 removed [ 2595.791218][T26562] loop2: detected capacity change from 0 to 256 [ 2595.799092][T26562] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2595.879427][T26562] FAT-fs (loop2): Directory bread(block 64) failed [ 2595.895809][T26562] FAT-fs (loop2): Directory bread(block 65) failed [ 2595.934673][T26562] FAT-fs (loop2): Directory bread(block 66) failed [ 2595.979735][T26562] FAT-fs (loop2): Directory bread(block 67) failed [ 2596.017063][T26562] FAT-fs (loop2): Directory bread(block 68) failed [ 2596.061051][T26562] FAT-fs (loop2): Directory bread(block 69) failed [ 2596.090162][T26562] FAT-fs (loop2): Directory bread(block 70) failed [ 2596.135268][T26562] FAT-fs (loop2): Directory bread(block 71) failed [ 2596.183373][T26562] FAT-fs (loop2): Directory bread(block 72) failed [ 2596.228090][T26562] FAT-fs (loop2): Directory bread(block 73) failed [ 2596.822266][T12229] team0 (unregistering): Port device team_slave_1 removed [ 2597.000519][T12229] team0 (unregistering): Port device team_slave_0 removed [ 2597.673775][T12229] team0 (unregistering): Port device team_slave_1 removed [ 2597.774805][T12229] team0 (unregistering): Port device team_slave_0 removed [ 2598.598082][T26336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2598.618609][T26336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2598.680482][T26336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2598.906353][T26568] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2599.041829][T26388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2599.116433][T26388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2599.250104][T26222] hsr_slave_0: entered promiscuous mode [ 2599.267321][T26222] hsr_slave_1: entered promiscuous mode [ 2600.001312][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2600.820121][T26388] team0: Port device team_slave_0 added [ 2600.911698][T26388] team0: Port device team_slave_1 added [ 2602.151312][T26336] hsr_slave_0: entered promiscuous mode [ 2602.221296][T26336] hsr_slave_1: entered promiscuous mode [ 2602.260559][T26336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2602.268174][T26336] Cannot create hsr debugfs directory [ 2602.296477][T26604] loop9: detected capacity change from 0 to 2048 [ 2602.305003][T26604] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=3932051, location=3932051 [ 2602.520020][T26604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2602.745995][T26388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2602.783154][T26388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2602.809099][ C0] vkms_vblank_simulate: vblank timer overrun [ 2602.969997][T26388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2603.076111][T26388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2603.127257][T26388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2603.203101][T26388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2603.596250][T26388] hsr_slave_0: entered promiscuous mode [ 2603.615664][T26388] hsr_slave_1: entered promiscuous mode [ 2603.641652][T26388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2603.641710][T21139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2603.649510][T26388] Cannot create hsr debugfs directory [ 2603.684501][T21139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2603.693568][T21139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2603.716794][T21139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2603.726892][T21139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2604.808707][T12229] bridge_slave_1: left allmulticast mode [ 2604.820528][T12229] bridge_slave_1: left promiscuous mode [ 2604.826375][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2604.881337][T12229] bridge_slave_0: left allmulticast mode [ 2604.904951][T12229] bridge_slave_0: left promiscuous mode [ 2604.930867][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2605.825951][T12229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2605.837815][T21139] Bluetooth: hci1: command tx timeout [ 2605.867015][T12229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2606.045544][T12229] bond0 (unregistering): Released all slaves [ 2606.521016][T12229] hsr_slave_0: left promiscuous mode [ 2606.530895][T12229] hsr_slave_1: left promiscuous mode [ 2606.549075][T26638] loop9: detected capacity change from 0 to 1024 [ 2606.549206][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2606.595580][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2607.387866][T12229] team0 (unregistering): Port device team_slave_1 removed [ 2607.703473][T12229] team0 (unregistering): Port device team_slave_0 removed [ 2607.940565][T21139] Bluetooth: hci1: command tx timeout [ 2610.120949][T21139] Bluetooth: hci1: command tx timeout [ 2611.705690][T26668] loop2: detected capacity change from 0 to 2048 [ 2611.752928][T26668] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 2611.889601][T26668] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2611.929424][T26610] chnl_net:caif_netlink_parms(): no params data found [ 2612.157857][T21139] Bluetooth: hci1: command tx timeout [ 2612.773027][T26610] bridge0: port 1(bridge_slave_0) entered blocking state [ 2612.791195][T26610] bridge0: port 1(bridge_slave_0) entered disabled state [ 2612.811090][T26610] bridge_slave_0: entered allmulticast mode [ 2612.819460][T26610] bridge_slave_0: entered promiscuous mode [ 2612.857968][T26336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2612.877209][T26610] bridge0: port 2(bridge_slave_1) entered blocking state [ 2612.892976][T26610] bridge0: port 2(bridge_slave_1) entered disabled state [ 2612.900323][T26610] bridge_slave_1: entered allmulticast mode [ 2612.918825][T26610] bridge_slave_1: entered promiscuous mode [ 2613.045932][T26610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2613.091775][T26388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2613.382324][T26686] binder: BINDER_SET_CONTEXT_MGR already set [ 2613.420776][T26686] binder: 26683:26686 ioctl 4018620d 200000000040 returned -16 [ 2613.464313][T26336] 8021q: adding VLAN 0 to HW filter on device team0 [ 2613.650580][T26610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2613.706210][T26388] 8021q: adding VLAN 0 to HW filter on device team0 [ 2613.749959][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2613.757198][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2613.778139][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 2613.785382][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2613.906508][T26610] team0: Port device team_slave_0 added [ 2613.967972][T26610] team0: Port device team_slave_1 added [ 2617.198416][T26610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2617.221123][T26610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2617.480482][T26610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2617.526580][T26610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2617.650560][T26610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2617.720155][T26610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2617.838026][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2617.845272][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2618.229625][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 2618.236947][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2618.888079][T26717] loop9: detected capacity change from 0 to 2048 [ 2618.904913][T26717] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=3932051, location=3932051 [ 2619.163886][T26717] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2619.871487][T26610] hsr_slave_0: entered promiscuous mode [ 2619.878561][T26610] hsr_slave_1: entered promiscuous mode [ 2621.074395][T26728] loop9: detected capacity change from 0 to 1024 [ 2621.162586][T26728] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2621.216227][T26728] overlayfs: missing 'workdir' [ 2621.316571][T26734] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.6049: Abort forced by user [ 2621.366469][T26734] EXT4-fs (loop9): Remounting filesystem read-only [ 2621.382048][T26734] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 2621.713916][T14359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2621.781645][T25839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2621.792927][T25839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2621.812073][T25839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2621.826136][T25839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2621.835898][T25839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2623.333721][T12229] bridge_slave_1: left allmulticast mode [ 2623.339468][T12229] bridge_slave_1: left promiscuous mode [ 2623.348105][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2623.363530][T12229] bridge_slave_0: left allmulticast mode [ 2623.369253][T12229] bridge_slave_0: left promiscuous mode [ 2623.375581][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2623.915307][T21139] Bluetooth: hci2: command tx timeout [ 2625.133891][T26770] loop9: detected capacity change from 0 to 2048 [ 2625.148639][T26770] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=3932051, location=3932051 [ 2625.344954][T26770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2625.934014][T26774] loop2: detected capacity change from 0 to 1024 [ 2625.985531][T26774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2625.998871][T21139] Bluetooth: hci2: command tx timeout [ 2626.224196][T26774] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.6059: Abort forced by user [ 2626.409747][T26774] EXT4-fs (loop2): Remounting filesystem read-only [ 2626.575532][T26774] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 2627.055020][T16241] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2628.081636][T21139] Bluetooth: hci2: command tx timeout [ 2628.102185][T12229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2628.134042][T25839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2628.161287][T25839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2628.173804][T25839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2628.182176][T12229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2628.192202][T25839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2628.214544][T12229] bond0 (unregistering): Released all slaves [ 2628.223656][T25839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2628.255628][T26794] loop2: detected capacity change from 0 to 512 [ 2630.150497][T25839] Bluetooth: hci2: command tx timeout [ 2630.319123][T25839] Bluetooth: hci5: command tx timeout [ 2630.704382][T26794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2630.717324][T26794] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2631.445091][T26610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2631.503378][T26801] __quota_error: 1 callbacks suppressed [ 2631.503402][T26801] Quota error (device loop2): do_check_range: Getting dqdh_next_free 327680 out of range 0-7 [ 2631.814603][T26801] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2632.480517][T25839] Bluetooth: hci5: command tx timeout [ 2632.680572][T26801] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.6061: Failed to acquire dquot type 1 [ 2633.584394][T12229] hsr_slave_0: left promiscuous mode [ 2633.630916][T12229] hsr_slave_1: left promiscuous mode [ 2633.637152][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2633.640764][T16241] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2633.693554][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2634.358056][T26822] loop9: detected capacity change from 0 to 128 [ 2634.371703][T26822] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2634.396325][T26822] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2634.410971][T26822] ext4 filesystem being mounted at /692/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2634.439988][T12229] team0 (unregistering): Port device team_slave_1 removed [ 2634.516895][T12229] team0 (unregistering): Port device team_slave_0 removed [ 2634.552730][T25839] Bluetooth: hci5: command tx timeout [ 2635.559476][T14359] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2635.950942][T26830] loop9: detected capacity change from 0 to 1024 [ 2636.107305][T26830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2636.226273][T26830] EXT4-fs error (device loop9): __ext4_remount:6736: comm syz.9.6071: Abort forced by user [ 2636.272826][T26830] EXT4-fs (loop9): Remounting filesystem read-only [ 2636.279421][T26830] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 2636.641730][T25839] Bluetooth: hci5: command tx timeout [ 2636.694048][T14359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2638.228782][T26851] loop9: detected capacity change from 0 to 128 [ 2638.236931][T26851] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2638.269271][T26851] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2638.294459][T26851] ext4 filesystem being mounted at /695/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2638.439785][T26610] 8021q: adding VLAN 0 to HW filter on device team0 [ 2638.515868][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 2638.523116][T12344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2639.204655][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 2639.211903][T12344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2639.356813][T26744] chnl_net:caif_netlink_parms(): no params data found [ 2639.522843][T14359] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2641.456348][T26744] bridge0: port 1(bridge_slave_0) entered blocking state [ 2641.480593][T26744] bridge0: port 1(bridge_slave_0) entered disabled state [ 2641.527714][T26744] bridge_slave_0: entered allmulticast mode [ 2641.569584][T26744] bridge_slave_0: entered promiscuous mode [ 2641.773023][T26610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2641.877369][T26744] bridge0: port 2(bridge_slave_1) entered blocking state [ 2641.885003][T26744] bridge0: port 2(bridge_slave_1) entered disabled state [ 2641.892571][T26744] bridge_slave_1: entered allmulticast mode [ 2641.937317][T26744] bridge_slave_1: entered promiscuous mode [ 2642.755474][T26893] vivid-002: disconnect [ 2642.893733][T26744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2642.911559][T26885] vivid-002: reconnect [ 2642.926632][ T30] audit: type=1326 audit(2000001186.209:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2642.975221][T26744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2642.997415][ T30] audit: type=1326 audit(2000001186.209:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.053508][ T30] audit: type=1326 audit(2000001186.209:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.082570][ T30] audit: type=1326 audit(2000001186.209:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.151360][ T30] audit: type=1326 audit(2000001186.209:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.220663][ T30] audit: type=1326 audit(2000001186.209:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.556163][ T30] audit: type=1326 audit(2000001186.209:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.567221][T26744] team0: Port device team_slave_0 added [ 2643.578939][ T30] audit: type=1326 audit(2000001186.209:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.579031][ T30] audit: type=1326 audit(2000001186.209:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.579101][ T30] audit: type=1326 audit(2000001186.209:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.1.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2643.610960][T26907] loop9: detected capacity change from 0 to 2048 [ 2643.613662][T26907] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=3932051, location=3932051 [ 2644.366489][T26907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2644.444511][T26744] team0: Port device team_slave_1 added [ 2644.774018][T26744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2644.806446][T26744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2644.860562][T26744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2644.872369][T12229] bridge_slave_1: left allmulticast mode [ 2644.878296][T12229] bridge_slave_1: left promiscuous mode [ 2644.904001][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2644.925174][T12229] bridge_slave_0: left allmulticast mode [ 2644.937397][T12229] bridge_slave_0: left promiscuous mode [ 2644.958758][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2647.740471][T26947] vivid-002: disconnect [ 2647.842555][T26946] Invalid source name [ 2647.846695][T26946] UBIFS error (pid: 26946): cannot open "./file0", error -22 [ 2648.225858][T26937] vivid-002: reconnect [ 2648.249978][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2648.250000][ T30] audit: type=1326 audit(2000001191.519:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.346961][ T30] audit: type=1326 audit(2000001191.519:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.374936][ T30] audit: type=1326 audit(2000001191.519:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.403153][ T30] audit: type=1326 audit(2000001191.519:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.466287][ T30] audit: type=1326 audit(2000001191.519:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.591015][ T30] audit: type=1326 audit(2000001191.519:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.613758][ T30] audit: type=1326 audit(2000001191.519:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.637416][ T30] audit: type=1326 audit(2000001191.519:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.671407][ T30] audit: type=1326 audit(2000001191.519:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.696181][ T30] audit: type=1326 audit(2000001191.519:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26937 comm="syz.1.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aef8e929 code=0x7fc00000 [ 2648.847177][T12229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2648.877485][T12229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2648.899203][T12229] bond0 (unregistering): Released all slaves [ 2648.964173][T26744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2648.971552][T26744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2649.012723][T26744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2649.147387][T26790] chnl_net:caif_netlink_parms(): no params data found [ 2649.226982][T12229] hsr_slave_0: left promiscuous mode [ 2649.254680][T12229] hsr_slave_1: left promiscuous mode [ 2649.261375][T12229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2649.431861][T12229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2652.420055][T26975] cgroup: Unknown subsys name 'cpuset' [ 2654.481538][T26987] vivid-004: disconnect [ 2654.486828][T12229] team0 (unregistering): Port device team_slave_1 removed [ 2654.605885][T12229] team0 (unregistering): Port device team_slave_0 removed [ 2655.113914][T26984] vivid-004: reconnect [ 2655.128844][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 2655.128869][ T30] audit: type=1326 audit(2000001198.419:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.290513][ T30] audit: type=1326 audit(2000001198.419:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.324363][ T30] audit: type=1326 audit(2000001198.419:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.402765][ T30] audit: type=1326 audit(2000001198.419:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.480913][ T30] audit: type=1326 audit(2000001198.419:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.574378][ T30] audit: type=1326 audit(2000001198.419:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.661868][ T30] audit: type=1326 audit(2000001198.419:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.825154][ T30] audit: type=1326 audit(2000001198.419:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.893307][ T30] audit: type=1326 audit(2000001198.419:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2655.914988][T26992] loop9: detected capacity change from 0 to 256 [ 2655.939903][T26992] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2655.972414][ T30] audit: type=1326 audit(2000001198.419:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.2.6114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2656.159086][T26992] FAT-fs (loop9): Directory bread(block 64) failed [ 2656.184681][T26992] FAT-fs (loop9): Directory bread(block 65) failed [ 2656.260485][T26992] FAT-fs (loop9): Directory bread(block 66) failed [ 2656.272114][T26992] FAT-fs (loop9): Directory bread(block 67) failed [ 2656.278798][T26992] FAT-fs (loop9): Directory bread(block 68) failed [ 2656.303712][T26992] FAT-fs (loop9): Directory bread(block 69) failed [ 2656.311746][T26992] FAT-fs (loop9): Directory bread(block 70) failed [ 2656.344022][T26992] FAT-fs (loop9): Directory bread(block 71) failed [ 2656.404091][T26992] FAT-fs (loop9): Directory bread(block 72) failed [ 2656.446287][T26992] FAT-fs (loop9): Directory bread(block 73) failed [ 2656.559101][T26744] hsr_slave_0: entered promiscuous mode [ 2656.618032][T26744] hsr_slave_1: entered promiscuous mode [ 2656.629527][T26744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2656.659927][T26744] Cannot create hsr debugfs directory [ 2657.853196][T26610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2659.746591][T26790] bridge0: port 1(bridge_slave_0) entered blocking state [ 2659.868764][T26790] bridge0: port 1(bridge_slave_0) entered disabled state [ 2659.877017][T26790] bridge_slave_0: entered allmulticast mode [ 2659.885545][T26790] bridge_slave_0: entered promiscuous mode [ 2659.976200][T26790] bridge0: port 2(bridge_slave_1) entered blocking state [ 2660.011178][T26790] bridge0: port 2(bridge_slave_1) entered disabled state [ 2660.028910][T26790] bridge_slave_1: entered allmulticast mode [ 2660.052524][T26790] bridge_slave_1: entered promiscuous mode [ 2660.634354][T27020] loop2: detected capacity change from 0 to 128 [ 2661.437114][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2661.580064][T27026] loop9: detected capacity change from 0 to 16 [ 2661.612217][T26790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2661.640945][T27026] erofs (device loop9): mounted with root inode @ nid 36. [ 2661.663580][T26790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2661.942260][T26790] team0: Port device team_slave_0 added [ 2661.959903][T26790] team0: Port device team_slave_1 added [ 2662.062905][T26790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2662.069890][T26790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2662.140437][T26790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2662.162813][T26790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2662.169779][T26790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2662.195770][T26790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2662.619328][T27046] erofs (device loop9): readahead error at folio 86 @ nid 36 [ 2662.683181][T14041] bridge_slave_1: left allmulticast mode [ 2662.694113][T27046] erofs (device loop9): readahead error at folio 84 @ nid 36 [ 2662.750776][T14041] bridge_slave_1: left promiscuous mode [ 2662.758086][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 2662.776977][T14041] bridge_slave_0: left allmulticast mode [ 2662.782736][T14041] bridge_slave_0: left promiscuous mode [ 2662.788556][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 2662.902108][T27046] erofs (device loop9): readahead error at folio 80 @ nid 36 [ 2662.943627][T27046] erofs (device loop9): readahead error at folio 74 @ nid 36 [ 2662.998844][T27046] erofs (device loop9): readahead error at folio 72 @ nid 36 [ 2663.040951][T27046] erofs (device loop9): readahead error at folio 70 @ nid 36 [ 2663.074230][T27046] erofs (device loop9): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2663.336740][T27046] erofs (device loop9): readahead error at folio 63 @ nid 36 [ 2664.220483][T27046] erofs (device loop9): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2664.228916][T27046] erofs (device loop9): readahead error at folio 62 @ nid 36 [ 2664.383939][T27046] syz.9.6124: attempt to access beyond end of device [ 2664.383939][T27046] loop9: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 2664.419982][T27046] syz.9.6124: attempt to access beyond end of device [ 2664.419982][T27046] loop9: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 2664.689786][T27046] syz.9.6124: attempt to access beyond end of device [ 2664.689786][T27046] loop9: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 2664.789981][T27046] syz.9.6124: attempt to access beyond end of device [ 2664.789981][T27046] loop9: rw=524288, sector=24, nr_sectors = 16 limit=16 [ 2664.856006][T27046] syz.9.6124: attempt to access beyond end of device [ 2664.856006][T27046] loop9: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 2664.898728][T21139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2664.910004][T21139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2664.918394][T21139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2664.927812][T21139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2664.933754][T27046] syz.9.6124: attempt to access beyond end of device [ 2664.933754][T27046] loop9: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 2664.974619][T21139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2665.013210][T27046] syz.9.6124: attempt to access beyond end of device [ 2665.013210][T27046] loop9: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 2665.054555][T27046] syz.9.6124: attempt to access beyond end of device [ 2665.054555][T27046] loop9: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 2665.261199][T14041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2665.312029][T14041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2665.332998][T14041] bond0 (unregistering): Released all slaves [ 2665.434060][T26790] hsr_slave_0: entered promiscuous mode [ 2665.461901][T26790] hsr_slave_1: entered promiscuous mode [ 2665.473558][T26790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2665.495529][T26790] Cannot create hsr debugfs directory [ 2665.668193][T14041] hsr_slave_0: left promiscuous mode [ 2665.675785][T14041] hsr_slave_1: left promiscuous mode [ 2665.695616][T14041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2665.732243][T14041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2666.824218][T14041] team0 (unregistering): Port device team_slave_1 removed [ 2666.930033][T14041] team0 (unregistering): Port device team_slave_0 removed [ 2667.035776][T21139] Bluetooth: hci1: command tx timeout [ 2669.110620][T21139] Bluetooth: hci1: command tx timeout [ 2671.200940][T21139] Bluetooth: hci1: command tx timeout [ 2671.429151][T27095] loop9: detected capacity change from 0 to 16 [ 2671.461335][T27095] erofs (device loop9): mounted with root inode @ nid 36. [ 2672.038724][T26744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2672.606130][T26744] 8021q: adding VLAN 0 to HW filter on device team0 [ 2673.296903][T21139] Bluetooth: hci1: command tx timeout [ 2673.862041][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2673.869345][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2673.938010][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2673.945342][T14041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2674.016923][T27054] chnl_net:caif_netlink_parms(): no params data found [ 2675.611787][T27124] erofs (device loop9): readahead error at folio 86 @ nid 36 [ 2675.619351][T27124] erofs (device loop9): readahead error at folio 84 @ nid 36 [ 2675.787542][T27124] erofs (device loop9): readahead error at folio 80 @ nid 36 [ 2675.878665][T27124] erofs (device loop9): readahead error at folio 74 @ nid 36 [ 2675.967700][T27124] erofs (device loop9): readahead error at folio 72 @ nid 36 [ 2676.061262][T27124] erofs (device loop9): readahead error at folio 70 @ nid 36 [ 2676.068800][T27124] erofs (device loop9): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2676.162376][T27054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2676.172377][T27054] bridge0: port 1(bridge_slave_0) entered disabled state [ 2676.179678][T27054] bridge_slave_0: entered allmulticast mode [ 2676.190582][T27124] erofs (device loop9): readahead error at folio 63 @ nid 36 [ 2676.198056][T27124] erofs (device loop9): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2676.207203][T27124] erofs (device loop9): readahead error at folio 62 @ nid 36 [ 2676.212013][T27054] bridge_slave_0: entered promiscuous mode [ 2676.217391][T27124] syz.9.6143: attempt to access beyond end of device [ 2676.217391][T27124] loop9: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 2676.238552][T27124] syz.9.6143: attempt to access beyond end of device [ 2676.238552][T27124] loop9: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 2676.289608][T27054] bridge0: port 2(bridge_slave_1) entered blocking state [ 2676.299081][T27124] syz.9.6143: attempt to access beyond end of device [ 2676.299081][T27124] loop9: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 2676.309814][T27054] bridge0: port 2(bridge_slave_1) entered disabled state [ 2676.325044][T27054] bridge_slave_1: entered allmulticast mode [ 2676.343100][T27054] bridge_slave_1: entered promiscuous mode [ 2676.370270][T27124] syz.9.6143: attempt to access beyond end of device [ 2676.370270][T27124] loop9: rw=524288, sector=24, nr_sectors = 16 limit=16 [ 2676.443512][T27124] syz.9.6143: attempt to access beyond end of device [ 2676.443512][T27124] loop9: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 2676.480175][T27124] syz.9.6143: attempt to access beyond end of device [ 2676.480175][T27124] loop9: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 2676.521383][T27124] syz.9.6143: attempt to access beyond end of device [ 2676.521383][T27124] loop9: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 2676.541168][T27124] syz.9.6143: attempt to access beyond end of device [ 2676.541168][T27124] loop9: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 2676.653748][T27054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2676.710199][T26790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2676.755364][T27054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2677.029470][T26790] 8021q: adding VLAN 0 to HW filter on device team0 [ 2677.131935][T27054] team0: Port device team_slave_0 added [ 2677.198832][T14045] bridge0: port 1(bridge_slave_0) entered blocking state [ 2677.206188][T14045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2677.268911][T27054] team0: Port device team_slave_1 added [ 2677.366067][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 2677.373338][T12344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2678.484219][T27054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2678.526906][T27054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2678.552852][ C1] vkms_vblank_simulate: vblank timer overrun [ 2678.680826][T27054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2678.694222][T27054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2678.701496][T27054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2678.730082][T27054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2678.929468][T26744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2678.938912][T27147] vivid-004: disconnect [ 2679.179149][T27054] hsr_slave_0: entered promiscuous mode [ 2679.221987][T27054] hsr_slave_1: entered promiscuous mode [ 2679.611894][T27144] vivid-004: reconnect [ 2679.617828][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2679.617854][ T30] audit: type=1326 audit(2000001222.919:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2679.677222][ T30] audit: type=1326 audit(2000001222.919:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2679.731666][ T30] audit: type=1326 audit(2000001222.919:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2679.850951][ T30] audit: type=1326 audit(2000001222.919:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2679.919250][ T30] audit: type=1326 audit(2000001222.919:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2680.014182][ T30] audit: type=1326 audit(2000001222.919:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2680.111582][ T30] audit: type=1326 audit(2000001222.919:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2680.250759][ T30] audit: type=1326 audit(2000001222.919:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2680.355537][ T30] audit: type=1326 audit(2000001222.919:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2680.419242][ T30] audit: type=1326 audit(2000001222.919:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27144 comm="syz.2.6155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2681.707884][T27054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2681.861331][T27054] 8021q: adding VLAN 0 to HW filter on device team0 [ 2681.946980][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 2681.954280][T12344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2682.636101][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.643398][T12344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2684.026263][ T6138] bridge_slave_1: left allmulticast mode [ 2684.041412][ T6138] bridge_slave_1: left promiscuous mode [ 2684.047341][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 2684.094056][ T6138] bridge_slave_0: left allmulticast mode [ 2684.111742][T25839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2684.133159][T25839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2684.143214][T25839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2684.152199][T25839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2684.172445][T25839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2684.179925][ T6138] bridge_slave_0: left promiscuous mode [ 2684.187987][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 2684.704711][T27188] loop9: detected capacity change from 0 to 128 [ 2684.723285][T27188] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2684.745845][T27188] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2684.758742][T27188] ext4 filesystem being mounted at /718/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2685.588528][T27196] loop2: detected capacity change from 0 to 16 [ 2685.608501][T27196] erofs (device loop2): mounted with root inode @ nid 36. [ 2685.939274][T14359] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2686.236237][T25839] Bluetooth: hci2: command tx timeout [ 2686.613064][T27206] erofs (device loop2): readahead error at folio 86 @ nid 36 [ 2686.816207][T27206] erofs (device loop2): readahead error at folio 84 @ nid 36 [ 2686.837219][T27206] erofs (device loop2): readahead error at folio 80 @ nid 36 [ 2686.853977][T27206] erofs (device loop2): readahead error at folio 74 @ nid 36 [ 2686.884774][T27206] erofs (device loop2): readahead error at folio 72 @ nid 36 [ 2686.901933][T27206] erofs (device loop2): readahead error at folio 70 @ nid 36 [ 2686.934307][T27206] erofs (device loop2): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2686.982248][T27206] erofs (device loop2): readahead error at folio 63 @ nid 36 [ 2687.062664][T27206] erofs (device loop2): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2687.131745][T27206] erofs (device loop2): readahead error at folio 62 @ nid 36 [ 2687.168605][T21139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2687.188772][T21139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2687.198307][T21139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2687.208864][T21139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2687.216910][T21139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2687.286526][T27206] syz.2.6166: attempt to access beyond end of device [ 2687.286526][T27206] loop2: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 2687.350948][T27206] syz.2.6166: attempt to access beyond end of device [ 2687.350948][T27206] loop2: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 2687.366010][T27206] syz.2.6166: attempt to access beyond end of device [ 2687.366010][T27206] loop2: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 2687.380936][T27206] syz.2.6166: attempt to access beyond end of device [ 2687.380936][T27206] loop2: rw=524288, sector=24, nr_sectors = 16 limit=16 [ 2687.420885][T27206] syz.2.6166: attempt to access beyond end of device [ 2687.420885][T27206] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 2687.441136][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2687.481733][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2687.500734][T27206] syz.2.6166: attempt to access beyond end of device [ 2687.500734][T27206] loop2: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 2687.522785][ T6138] bond0 (unregistering): Released all slaves [ 2687.586302][T27206] syz.2.6166: attempt to access beyond end of device [ 2687.586302][T27206] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 2687.657301][T27206] syz.2.6166: attempt to access beyond end of device [ 2687.657301][T27206] loop2: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 2687.822016][ T6138] hsr_slave_0: left promiscuous mode [ 2687.840623][ T6138] hsr_slave_1: left promiscuous mode [ 2687.846918][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2687.896205][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2688.311705][T21139] Bluetooth: hci2: command tx timeout [ 2689.274139][T21139] Bluetooth: hci4: command tx timeout [ 2689.474362][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 2689.638836][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 2690.390825][T21139] Bluetooth: hci2: command tx timeout [ 2691.352171][T21139] Bluetooth: hci4: command tx timeout [ 2691.635648][T27214] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2692.470575][T21139] Bluetooth: hci2: command tx timeout [ 2692.636328][T27184] chnl_net:caif_netlink_parms(): no params data found [ 2693.434677][T21139] Bluetooth: hci4: command tx timeout [ 2693.470926][T27251] overlayfs: failed to resolve './file2': -2 [ 2694.265655][T27208] chnl_net:caif_netlink_parms(): no params data found [ 2694.317990][T27054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2695.550635][T21139] Bluetooth: hci4: command tx timeout [ 2696.358384][T27184] bridge0: port 1(bridge_slave_0) entered blocking state [ 2696.380538][T27184] bridge0: port 1(bridge_slave_0) entered disabled state [ 2696.407385][T27184] bridge_slave_0: entered allmulticast mode [ 2696.442719][T27184] bridge_slave_0: entered promiscuous mode [ 2696.478657][T27184] bridge0: port 2(bridge_slave_1) entered blocking state [ 2696.490063][T27184] bridge0: port 2(bridge_slave_1) entered disabled state [ 2696.527059][T27184] bridge_slave_1: entered allmulticast mode [ 2696.539181][T27184] bridge_slave_1: entered promiscuous mode [ 2696.724866][T27208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2696.762258][T27208] bridge0: port 1(bridge_slave_0) entered disabled state [ 2696.805940][T27208] bridge_slave_0: entered allmulticast mode [ 2697.411550][T27208] bridge_slave_0: entered promiscuous mode [ 2697.428840][ T6138] bridge_slave_1: left allmulticast mode [ 2697.439037][ T6138] bridge_slave_1: left promiscuous mode [ 2697.455537][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 2697.597433][ T6138] bridge_slave_0: left allmulticast mode [ 2697.604184][ T6138] bridge_slave_0: left promiscuous mode [ 2697.613138][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 2698.778213][T27299] loop9: detected capacity change from 0 to 8 [ 2698.982144][T27302] overlayfs: failed to resolve './file2': -2 [ 2702.008696][T27324] loop9: detected capacity change from 0 to 16 [ 2702.085703][T27324] erofs (device loop9): mounted with root inode @ nid 36. [ 2702.118179][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2702.141118][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2702.168720][ T6138] bond0 (unregistering): Released all slaves [ 2702.442060][T27208] bridge0: port 2(bridge_slave_1) entered blocking state [ 2702.453546][T27319] loop2: detected capacity change from 0 to 32768 [ 2702.464530][T27208] bridge0: port 2(bridge_slave_1) entered disabled state [ 2702.498986][T27208] bridge_slave_1: entered allmulticast mode [ 2702.510832][T27319] [ 2702.510832][T27319] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2702.510832][T27319] [ 2702.526355][T27208] bridge_slave_1: entered promiscuous mode [ 2702.558000][T27319] ERROR: (device loop2): dtSearch: stack overrun! [ 2702.558000][T27319] [ 2702.583996][T27319] ERROR: (device loop2): remounting filesystem as read-only [ 2702.596984][T27319] btstack dump: [ 2702.609092][T27319] bn = 0, index = 0 [ 2702.613366][T27319] bn = 0, index = 0 [ 2702.617415][T27319] bn = 0, index = 0 [ 2702.628265][T27319] bn = 0, index = 0 [ 2702.655709][ T6138] hsr_slave_0: left promiscuous mode [ 2702.655733][T27319] bn = 0, index = 0 [ 2702.666002][T27319] bn = 0, index = 0 [ 2702.670999][ T6138] hsr_slave_1: left promiscuous mode [ 2702.676530][T27319] bn = 0, index = 0 [ 2702.689207][T27319] bn = 0, index = 0 [ 2702.694700][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2702.702419][T27319] jfs_lookup: dtSearch returned -5 [ 2702.713430][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2702.990987][T27330] erofs (device loop9): readahead error at folio 86 @ nid 36 [ 2702.998891][T27330] erofs (device loop9): readahead error at folio 84 @ nid 36 [ 2703.006878][T27330] erofs (device loop9): readahead error at folio 80 @ nid 36 [ 2703.014591][T27330] erofs (device loop9): readahead error at folio 74 @ nid 36 [ 2703.022115][T27330] erofs (device loop9): readahead error at folio 72 @ nid 36 [ 2703.029777][T27330] erofs (device loop9): readahead error at folio 70 @ nid 36 [ 2703.037784][T27330] erofs (device loop9): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2703.046237][T27330] erofs (device loop9): readahead error at folio 63 @ nid 36 [ 2703.053814][T27330] erofs (device loop9): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2703.062287][T27330] erofs (device loop9): readahead error at folio 62 @ nid 36 [ 2703.070786][T27330] syz.9.6194: attempt to access beyond end of device [ 2703.070786][T27330] loop9: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 2703.085421][T27330] syz.9.6194: attempt to access beyond end of device [ 2703.085421][T27330] loop9: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 2703.100232][T27330] syz.9.6194: attempt to access beyond end of device [ 2703.100232][T27330] loop9: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 2703.114454][T27330] syz.9.6194: attempt to access beyond end of device [ 2703.114454][T27330] loop9: rw=524288, sector=24, nr_sectors = 16 limit=16 [ 2703.128304][T27330] syz.9.6194: attempt to access beyond end of device [ 2703.128304][T27330] loop9: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 2703.142234][T27330] syz.9.6194: attempt to access beyond end of device [ 2703.142234][T27330] loop9: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 2703.156451][T27330] syz.9.6194: attempt to access beyond end of device [ 2703.156451][T27330] loop9: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 2703.170194][T27330] syz.9.6194: attempt to access beyond end of device [ 2703.170194][T27330] loop9: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 2704.951351][T22356] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2704.971694][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 2705.165485][T22356] usb 3-1: Using ep0 maxpacket: 16 [ 2705.214629][T22356] usb 3-1: config 0 has no interfaces? [ 2705.245394][T22356] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2705.255731][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 2705.273348][T22356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2705.290472][T22356] usb 3-1: Product: syz [ 2705.294906][T22356] usb 3-1: Manufacturer: syz [ 2705.299576][T22356] usb 3-1: SerialNumber: syz [ 2705.313033][T22356] usb 3-1: config 0 descriptor?? [ 2705.731608][T27348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6198'. [ 2707.395967][T27184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2707.469313][T27184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2707.527088][T27208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2707.570900][T27208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2707.873384][T27184] team0: Port device team_slave_0 added [ 2707.886430][T27184] team0: Port device team_slave_1 added [ 2707.904432][T27208] team0: Port device team_slave_0 added [ 2707.966385][T27208] team0: Port device team_slave_1 added [ 2708.080444][T27208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2708.087444][T27208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2708.121249][T27208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2708.139124][T27184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2708.166640][T27184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2708.226785][T27184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2708.248487][T27184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2708.256835][T27184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2708.289233][T27184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2708.530960][T22296] usb 3-1: USB disconnect, device number 20 [ 2708.606352][T27208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2708.619904][T27208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2708.652587][T27208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2709.884239][T27054] veth0_vlan: entered promiscuous mode [ 2709.925867][T27054] veth1_vlan: entered promiscuous mode [ 2710.487991][T27208] hsr_slave_0: entered promiscuous mode [ 2710.533500][T27208] hsr_slave_1: entered promiscuous mode [ 2710.547938][T27208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2710.561023][T27208] Cannot create hsr debugfs directory [ 2710.588651][T27184] hsr_slave_0: entered promiscuous mode [ 2710.603646][T27184] hsr_slave_1: entered promiscuous mode [ 2710.613321][T27184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2710.636187][T27184] Cannot create hsr debugfs directory [ 2712.919570][T27054] veth0_macvtap: entered promiscuous mode [ 2713.386307][T27054] veth1_macvtap: entered promiscuous mode [ 2714.051218][T27404] vivid-004: disconnect [ 2714.272867][T27398] vivid-004: reconnect [ 2714.284403][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2714.284424][ T30] audit: type=1326 audit(2000001257.579:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.312976][ C1] vkms_vblank_simulate: vblank timer overrun [ 2714.331671][ T30] audit: type=1326 audit(2000001257.579:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.370441][ T30] audit: type=1326 audit(2000001257.579:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.430468][ T30] audit: type=1326 audit(2000001257.579:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.453885][ T30] audit: type=1326 audit(2000001257.579:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.518835][ T30] audit: type=1326 audit(2000001257.579:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.550095][ T30] audit: type=1326 audit(2000001257.579:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.584563][ T30] audit: type=1326 audit(2000001257.579:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.613041][ T30] audit: type=1326 audit(2000001257.579:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.647438][ T30] audit: type=1326 audit(2000001257.579:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27398 comm="syz.2.6219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2714.797322][T27054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2715.266137][T27054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2716.183690][T14046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2716.191829][T14046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2716.276007][T11236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2716.283276][T27184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2716.291970][T11236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2716.563600][T27184] 8021q: adding VLAN 0 to HW filter on device team0 [ 2716.621731][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2716.629099][T14041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2717.491133][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.498454][T14041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2717.574979][T27208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2717.606754][T27444] netlink: 'syz.0.5628': attribute type 1 has an invalid length. [ 2717.614634][T27444] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5628'. [ 2717.719841][T27208] 8021q: adding VLAN 0 to HW filter on device team0 [ 2717.784734][T11236] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.792017][T11236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2717.823722][T11236] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.831022][T11236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2717.907377][T27455] vivid-004: disconnect [ 2719.164773][T27450] vivid-004: reconnect [ 2720.939806][T27208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2721.071263][T27184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2722.901186][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2723.478258][T27208] veth0_vlan: entered promiscuous mode [ 2723.499263][T27208] veth1_vlan: entered promiscuous mode [ 2723.678151][T27184] veth0_vlan: entered promiscuous mode [ 2723.733859][T27208] veth0_macvtap: entered promiscuous mode [ 2724.346169][T27184] veth1_vlan: entered promiscuous mode [ 2724.421584][T27208] veth1_macvtap: entered promiscuous mode [ 2724.545197][T27208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2724.622084][T27208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2724.842624][T27184] veth0_macvtap: entered promiscuous mode [ 2725.144995][T27184] veth1_macvtap: entered promiscuous mode [ 2725.307564][T27184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2725.425552][T27184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2726.821118][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2726.829016][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2727.446339][T14045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2727.487084][T14045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2727.580545][ T6138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2727.588436][ T6138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2727.878066][T14046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2727.887090][T14046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2728.776376][T27548] vivid-004: disconnect [ 2728.901075][T27538] vivid-004: reconnect [ 2728.941579][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 2728.941647][ T30] audit: type=1326 audit(2000001272.199:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2729.328048][T27550] loop8: detected capacity change from 0 to 4096 [ 2731.001383][ T30] audit: type=1326 audit(2000001272.199:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2731.024279][ T30] audit: type=1326 audit(2000001272.199:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2731.040440][T27552] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2731.047929][ T30] audit: type=1326 audit(2000001272.209:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2731.170470][ T30] audit: type=1326 audit(2000001272.209:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2731.427428][ T30] audit: type=1326 audit(2000001272.209:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2731.450165][ T30] audit: type=1326 audit(2000001272.209:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2732.244302][ T30] audit: type=1326 audit(2000001272.209:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2732.267856][ T30] audit: type=1326 audit(2000001272.209:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2732.350480][ T30] audit: type=1326 audit(2000001272.209:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27538 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5899f8e929 code=0x7fc00000 [ 2734.465502][T25839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2734.485387][T25839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2734.512257][T25839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2734.533680][T25839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2734.554480][T25839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2734.859664][T27583] netlink: 'syz.4.6262': attribute type 1 has an invalid length. [ 2734.867572][T27583] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6262'. [ 2736.883348][T25839] Bluetooth: hci5: command tx timeout [ 2738.980595][T25839] Bluetooth: hci5: command tx timeout [ 2739.597518][T27614] loop9: detected capacity change from 0 to 4096 [ 2742.163770][T25839] Bluetooth: hci5: command tx timeout [ 2742.305118][T27615] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2742.346339][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2742.346376][ T30] audit: type=1800 audit(2000001285.649:3767): pid=27614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6272" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 2744.231409][T25839] Bluetooth: hci5: command tx timeout [ 2744.424223][T12344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2745.158834][T12344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.372325][T27635] netlink: 'syz.4.6279': attribute type 1 has an invalid length. [ 2746.380138][T27635] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6279'. [ 2746.443027][T12344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2746.588458][T27580] chnl_net:caif_netlink_parms(): no params data found [ 2747.844097][T12344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2748.151012][T27650] loop8: detected capacity change from 0 to 16 [ 2748.210713][T27650] erofs (device loop8): mounted with root inode @ nid 36. [ 2748.536081][T27650] erofs (device loop8): readahead error at folio 86 @ nid 36 [ 2748.543853][T27650] erofs (device loop8): readahead error at folio 84 @ nid 36 [ 2748.551673][T27650] erofs (device loop8): readahead error at folio 80 @ nid 36 [ 2748.559286][T27650] erofs (device loop8): readahead error at folio 74 @ nid 36 [ 2748.568326][T27650] erofs (device loop8): readahead error at folio 72 @ nid 36 [ 2748.575999][T27650] erofs (device loop8): readahead error at folio 70 @ nid 36 [ 2748.583529][T27650] erofs (device loop8): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2748.591937][T27650] erofs (device loop8): readahead error at folio 63 @ nid 36 [ 2748.599345][T27650] erofs (device loop8): bogus lookback distance 1388 @ lcn 62 of nid 36 [ 2748.607753][T27650] erofs (device loop8): readahead error at folio 62 @ nid 36 [ 2748.615911][T27650] syz.8.6284: attempt to access beyond end of device [ 2748.615911][T27650] loop8: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 2748.630680][T27650] syz.8.6284: attempt to access beyond end of device [ 2748.630680][T27650] loop8: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 2748.645312][T27650] syz.8.6284: attempt to access beyond end of device [ 2748.645312][T27650] loop8: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 2748.659500][T27650] syz.8.6284: attempt to access beyond end of device [ 2748.659500][T27650] loop8: rw=524288, sector=24, nr_sectors = 16 limit=16 [ 2748.674898][T27650] syz.8.6284: attempt to access beyond end of device [ 2748.674898][T27650] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 2748.688806][T27650] syz.8.6284: attempt to access beyond end of device [ 2748.688806][T27650] loop8: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 2748.703044][T27650] syz.8.6284: attempt to access beyond end of device [ 2748.703044][T27650] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 2748.716691][T27650] syz.8.6284: attempt to access beyond end of device [ 2748.716691][T27650] loop8: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 2749.213745][T27656] loop8: detected capacity change from 0 to 4096 [ 2749.951089][T27658] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2750.012436][ T30] audit: type=1800 audit(2000001293.319:3768): pid=27656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6287" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 2750.665176][T27663] overlayfs: missing 'lowerdir' [ 2754.399885][T27580] bridge0: port 1(bridge_slave_0) entered blocking state [ 2754.408074][T27580] bridge0: port 1(bridge_slave_0) entered disabled state [ 2754.420621][T27580] bridge_slave_0: entered allmulticast mode [ 2754.428766][T27580] bridge_slave_0: entered promiscuous mode [ 2754.438588][T27580] bridge0: port 2(bridge_slave_1) entered blocking state [ 2754.462255][T27580] bridge0: port 2(bridge_slave_1) entered disabled state [ 2754.469619][T27580] bridge_slave_1: entered allmulticast mode [ 2754.610704][T27580] bridge_slave_1: entered promiscuous mode [ 2757.720585][T27690] netlink: 'syz.9.6294': attribute type 1 has an invalid length. [ 2757.728416][T27690] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6294'. [ 2758.347962][T27580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2758.577024][T12344] bridge_slave_1: left allmulticast mode [ 2758.663283][T12344] bridge_slave_1: left promiscuous mode [ 2758.716450][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2758.875878][T12344] bridge_slave_0: left allmulticast mode [ 2761.531398][T12344] bridge_slave_0: left promiscuous mode [ 2762.251132][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2766.142316][T27708] loop9: detected capacity change from 0 to 32768 [ 2768.558584][T21139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2768.572551][T21139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2768.583596][T21139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2768.640448][T21139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2768.653096][T21139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2771.071101][T21139] Bluetooth: hci0: command tx timeout [ 2773.790351][T21139] Bluetooth: hci0: command tx timeout [ 2774.466913][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2774.755930][T27764] loop8: detected capacity change from 0 to 32768 [ 2774.767677][T27764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6313 (27764) [ 2774.791240][T27764] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2774.801577][T27764] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 2774.810455][T27764] BTRFS info (device loop8): disk space caching is enabled [ 2774.817828][T27764] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2775.046069][T27766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6314'. [ 2775.172052][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2775.318216][T27764] BTRFS info (device loop8): rebuilding free space tree [ 2775.417634][T27764] BTRFS info (device loop8): disabling free space tree [ 2775.424782][T27764] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2775.435055][T27764] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2775.454243][T12344] bond0 (unregistering): Released all slaves [ 2775.785342][T27580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2775.831463][T21139] Bluetooth: hci0: command tx timeout [ 2777.519184][T27793] usb usb8: usbfs: process 27793 (syz.0.6317) did not claim interface 0 before use [ 2777.934853][T21139] Bluetooth: hci0: command tx timeout [ 2777.985097][T27797] overlayfs: failed to resolve './file1': -2 [ 2778.214526][T27184] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2778.460714][T27766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6314'. [ 2779.495469][T27580] team0: Port device team_slave_0 added [ 2779.559324][T27580] team0: Port device team_slave_1 added [ 2781.986745][T27826] overlayfs: missing 'lowerdir' [ 2784.104161][T27832] loop8: detected capacity change from 0 to 8 [ 2784.209738][T27830] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2784.318811][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2784.863415][T27580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2785.116621][T27839] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2785.128460][T27839] SQUASHFS error: Failed to read block 0x60: -5 [ 2785.143042][T27839] SQUASHFS error: Failed to read block 0x71: -5 [ 2785.157053][T27839] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2785.165957][T27839] SQUASHFS error: Failed to read block 0x60: -5 [ 2785.333298][T27580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2785.801470][T27580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2785.812053][ T30] audit: type=1800 audit(2000001328.479:3769): pid=27839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6326" name="file0" dev="loop8" ino=1 res=0 errno=0 [ 2786.800037][T12344] hsr_slave_0: left promiscuous mode [ 2786.822629][T12344] hsr_slave_1: left promiscuous mode [ 2786.836114][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2786.852182][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2786.914700][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2787.072016][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2787.493404][T12344] veth1_macvtap: left promiscuous mode [ 2787.513872][T12344] veth0_macvtap: left promiscuous mode [ 2787.540075][T12344] veth1_vlan: left promiscuous mode [ 2787.560426][T12344] veth0_vlan: left promiscuous mode [ 2790.648045][T27871] overlayfs: missing 'lowerdir' [ 2791.569404][T25839] Bluetooth: hci1: command 0x0406 tx timeout [ 2793.404030][T27882] loop9: detected capacity change from 0 to 8 [ 2796.019763][T27889] block device autoloading is deprecated and will be removed. [ 2796.055543][T27891] block device autoloading is deprecated and will be removed. [ 2797.046362][T25839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2797.060991][T25839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2797.072896][T25839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2797.145691][T25839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2797.155495][T25839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2797.633068][T27901] loop9: detected capacity change from 0 to 32768 [ 2797.646938][T27901] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6342 (27901) [ 2797.663114][T27901] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2797.673356][T27901] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm [ 2797.682199][T27901] BTRFS info (device loop9): disk space caching is enabled [ 2797.689417][T27901] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2797.815736][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2797.858651][T27901] BTRFS info (device loop9): rebuilding free space tree [ 2797.879755][T27901] BTRFS info (device loop9): disabling free space tree [ 2797.887648][T27901] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2797.897357][T27901] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2798.025473][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2798.412832][T14359] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2799.142673][T27919] loop9: detected capacity change from 0 to 32768 [ 2799.168835][T27919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.6343 (27919) [ 2799.187184][T27919] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2799.197532][T27919] BTRFS info (device loop9): using crc32c (crc32c-x86_64) checksum algorithm [ 2799.206415][T27919] BTRFS info (device loop9): disk space caching is enabled [ 2799.213656][T27919] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2799.228358][T25839] Bluetooth: hci3: command tx timeout [ 2799.359901][T27580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2799.367561][T27580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2799.406115][T27919] BTRFS info (device loop9): rebuilding free space tree [ 2799.425488][T27919] BTRFS info (device loop9): disabling free space tree [ 2799.433043][T27919] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2799.442782][T27919] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2799.470859][T27580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2799.649784][T27863] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 2799.701600][T27889] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2800.102046][T14359] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2800.779655][T27947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2801.740142][T25839] Bluetooth: hci3: command tx timeout [ 2802.516706][T27956] overlayfs: missing 'lowerdir' [ 2803.596837][T27960] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6349'. [ 2803.622960][T27960] xt_connbytes: Forcing CT accounting to be enabled [ 2803.629967][T27960] Cannot find add_set index 0 as target [ 2803.794237][T25839] Bluetooth: hci3: command tx timeout [ 2805.104484][T27968] loop8: detected capacity change from 0 to 256 [ 2805.400246][T27727] chnl_net:caif_netlink_parms(): no params data found [ 2805.500337][T27975] syz.9.6347: attempt to access beyond end of device [ 2805.500337][T27975] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2805.516278][T27975] efs: cannot read volume header [ 2805.834223][T21139] Bluetooth: hci3: command tx timeout [ 2806.085860][T27897] chnl_net:caif_netlink_parms(): no params data found [ 2806.335573][T27979] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6353'. [ 2806.509831][T27978] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6353'. [ 2806.588543][T27983] loop9: detected capacity change from 0 to 1024 [ 2806.613205][T27986] loop8: detected capacity change from 0 to 16 [ 2806.616843][T27983] EXT4-fs: Ignoring removed bh option [ 2806.637756][T27986] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 2806.654676][T27986] cramfs: empty filesystem [ 2806.682512][T27983] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2806.776972][T27727] bridge0: port 1(bridge_slave_0) entered blocking state [ 2806.790531][T27727] bridge0: port 1(bridge_slave_0) entered disabled state [ 2806.800573][T27727] bridge_slave_0: entered allmulticast mode [ 2806.818112][T27983] EXT4-fs error (device loop9): mb_free_blocks:1945: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 2806.819010][T27727] bridge_slave_0: entered promiscuous mode [ 2806.950997][T25839] Bluetooth: hci2: command 0x0406 tx timeout [ 2807.829402][T27727] bridge0: port 2(bridge_slave_1) entered blocking state [ 2807.839838][T14359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2807.843415][T27727] bridge0: port 2(bridge_slave_1) entered disabled state [ 2807.859062][T27727] bridge_slave_1: entered allmulticast mode [ 2807.867596][T27727] bridge_slave_1: entered promiscuous mode [ 2807.939927][T28001] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2807.959334][T27897] bridge0: port 1(bridge_slave_0) entered blocking state [ 2808.007414][T27897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2808.021895][T27897] bridge_slave_0: entered allmulticast mode [ 2808.057363][T27897] bridge_slave_0: entered promiscuous mode [ 2808.099604][T27897] bridge0: port 2(bridge_slave_1) entered blocking state [ 2808.127814][T27897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2808.201957][T27897] bridge_slave_1: entered allmulticast mode [ 2808.494335][T27897] bridge_slave_1: entered promiscuous mode [ 2809.053675][T28011] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2809.063040][T28011] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2809.873477][T27727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2810.288119][T28021] vivid-003: disconnect [ 2810.883625][ T30] audit: type=1326 audit(2000001354.189:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2810.969704][T28014] vivid-003: reconnect [ 2810.977837][T27727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2811.026232][ T30] audit: type=1326 audit(2000001354.189:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.049990][ T30] audit: type=1326 audit(2000001354.209:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.072885][ T30] audit: type=1326 audit(2000001354.209:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.096719][ T30] audit: type=1326 audit(2000001354.209:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.129696][ T30] audit: type=1326 audit(2000001354.209:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.214349][ T30] audit: type=1326 audit(2000001354.209:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.257933][T12344] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.272581][ T30] audit: type=1326 audit(2000001354.219:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.627426][ T30] audit: type=1326 audit(2000001354.219:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.756749][T27897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2811.864517][ T30] audit: type=1326 audit(2000001354.219:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28014 comm="syz.4.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342858e929 code=0x7fc00000 [ 2811.941401][T28031] loop9: detected capacity change from 0 to 8 [ 2811.964241][T27727] team0: Port device team_slave_0 added [ 2811.990627][T21139] Bluetooth: hci4: command 0x0406 tx timeout [ 2811.998062][T28033] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6367'. [ 2812.301591][T12344] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.242329][T27897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2813.409942][T27727] team0: Port device team_slave_1 added [ 2813.552162][T12344] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2814.731577][T28046] loop4: detected capacity change from 0 to 32768 [ 2814.880710][T28049] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2814.889950][T28049] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2815.377944][T27897] team0: Port device team_slave_0 added [ 2816.079869][T28043] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2816.215458][T12344] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2816.280021][T27897] team0: Port device team_slave_1 added [ 2816.352340][T27727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2816.381436][T27727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2816.438400][T27727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2816.749255][T27727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2816.764238][T27727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2816.816578][T28066] loop8: detected capacity change from 0 to 64 [ 2816.955119][T27727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2817.014709][T27897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2817.056408][T27897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2817.123659][T28072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6377'. [ 2817.135291][T27897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2817.156208][T27897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2817.166581][T27897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2817.270167][T27897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2817.653283][T28079] netlink: 'syz.8.6378': attribute type 1 has an invalid length. [ 2817.661197][T28079] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6378'. [ 2818.356657][T28083] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6381'. [ 2818.489126][T27727] hsr_slave_0: entered promiscuous mode [ 2818.512476][T27727] hsr_slave_1: entered promiscuous mode [ 2818.523989][T27727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2818.531637][T27727] Cannot create hsr debugfs directory [ 2818.537753][T28084] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6379'. [ 2819.021265][T27897] hsr_slave_0: entered promiscuous mode [ 2819.028155][T27897] hsr_slave_1: entered promiscuous mode [ 2819.108021][T28092] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2819.118811][T28092] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2819.863938][T27897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2819.910430][T27897] Cannot create hsr debugfs directory [ 2819.949394][T28094] loop0: detected capacity change from 0 to 32768 [ 2820.017398][T28081] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6379'. [ 2820.030458][T28085] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6379'. [ 2822.109650][T12344] bridge_slave_1: left allmulticast mode [ 2822.119581][T12344] bridge_slave_1: left promiscuous mode [ 2822.146261][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2822.217694][T12344] bridge_slave_0: left allmulticast mode [ 2822.247112][T12344] bridge_slave_0: left promiscuous mode [ 2822.274078][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2822.335852][T12344] bridge_slave_0: left allmulticast mode [ 2822.359613][T12344] bridge_slave_0: left promiscuous mode [ 2822.383026][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2822.537514][T28109] loop9: detected capacity change from 0 to 64 [ 2822.563837][T21139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2822.582333][T21139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2822.592180][T21139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2822.602879][T21139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2822.613248][T21139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2822.742616][T28115] loop4: detected capacity change from 0 to 128 [ 2822.772333][T28115] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 2822.850640][T28115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2822.918707][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2822.932131][T28117] loop0: detected capacity change from 0 to 256 [ 2823.127843][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2823.193065][T12344] bond0 (unregistering): Released all slaves [ 2823.443057][T28125] 9pnet_fd: Insufficient options for proto=fd [ 2823.625324][T28128] netlink: 'syz.9.6393': attribute type 1 has an invalid length. [ 2823.633310][T28128] netlink: 17 bytes leftover after parsing attributes in process `syz.9.6393'. [ 2824.585355][T28131] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6396'. [ 2824.710430][T21139] Bluetooth: hci5: command tx timeout [ 2826.193373][T28144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6400'. [ 2826.792125][T21139] Bluetooth: hci5: command tx timeout [ 2827.482468][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6404'. [ 2828.949045][T21139] Bluetooth: hci5: command tx timeout [ 2829.325515][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2829.351035][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2829.374315][T12344] bond0 (unregistering): Released all slaves [ 2829.611252][T28154] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6404'. [ 2829.624235][T28164] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2830.147947][T28175] loop9: detected capacity change from 0 to 2048 [ 2830.855781][T28175] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2831.029067][T28171] loop0: detected capacity change from 0 to 32768 [ 2831.035773][T21139] Bluetooth: hci5: command tx timeout [ 2831.062230][T28171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6410 (28171) [ 2831.108267][T28171] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2831.127307][T28171] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 2831.138519][T28171] BTRFS info (device loop0): disk space caching is enabled [ 2831.146595][T28171] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2831.293524][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2831.319298][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2831.354395][T12344] hsr_slave_0: left promiscuous mode [ 2831.373783][T12344] hsr_slave_1: left promiscuous mode [ 2831.379897][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2831.380212][T28171] BTRFS info (device loop0): rebuilding free space tree [ 2831.447157][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2831.485033][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2831.492922][T28171] BTRFS info (device loop0): disabling free space tree [ 2831.499863][T28171] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2831.520360][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2831.550176][T14359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2831.570338][T28171] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2831.580084][T12344] veth1_macvtap: left promiscuous mode [ 2831.611769][T12344] veth0_macvtap: left promiscuous mode [ 2831.617498][T12344] veth1_vlan: left promiscuous mode [ 2831.650866][T12344] veth0_vlan: left promiscuous mode [ 2833.075809][T28224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6422'. [ 2833.263321][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2833.306581][T27054] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2833.396685][T28208] loop8: detected capacity change from 0 to 32768 [ 2833.400081][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2833.909712][T28233] loop0: detected capacity change from 0 to 64 [ 2834.711312][T28239] loop0: detected capacity change from 0 to 256 [ 2834.769381][T28239] FAT-fs (loop0): Directory bread(block 64) failed [ 2834.791863][T28239] FAT-fs (loop0): Directory bread(block 65) failed [ 2834.809031][T28239] FAT-fs (loop0): Directory bread(block 66) failed [ 2834.826292][T28239] FAT-fs (loop0): Directory bread(block 67) failed [ 2834.844898][T28239] FAT-fs (loop0): Directory bread(block 68) failed [ 2834.878436][T28239] FAT-fs (loop0): Directory bread(block 69) failed [ 2834.900687][T28239] FAT-fs (loop0): Directory bread(block 70) failed [ 2834.920482][T28239] FAT-fs (loop0): Directory bread(block 71) failed [ 2835.091126][T28239] FAT-fs (loop0): Directory bread(block 72) failed [ 2835.104542][T28239] FAT-fs (loop0): Directory bread(block 73) failed [ 2835.197284][T28246] netlink: 'syz.8.6429': attribute type 1 has an invalid length. [ 2835.205213][T28246] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6429'. [ 2836.457360][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2836.546675][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2837.299449][T28224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6422'. [ 2838.891864][T27897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2838.960205][T27897] 8021q: adding VLAN 0 to HW filter on device team0 [ 2839.019853][T11236] bridge0: port 1(bridge_slave_0) entered blocking state [ 2839.027120][T11236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2839.294633][T28276] loop9: detected capacity change from 0 to 4096 [ 2841.714342][T27773] bridge0: port 2(bridge_slave_1) entered blocking state [ 2841.721600][T27773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2841.770443][T28110] chnl_net:caif_netlink_parms(): no params data found [ 2841.841130][T28277] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2842.013364][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2842.013392][ T30] audit: type=1800 audit(2000001385.309:3837): pid=28275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6435" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 2842.376631][T21139] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 2842.705709][T28110] bridge0: port 1(bridge_slave_0) entered blocking state [ 2842.735395][T28110] bridge0: port 1(bridge_slave_0) entered disabled state [ 2842.765833][T28110] bridge_slave_0: entered allmulticast mode [ 2842.818474][T28110] bridge_slave_0: entered promiscuous mode [ 2842.890629][T28110] bridge0: port 2(bridge_slave_1) entered blocking state [ 2842.897836][T28110] bridge0: port 2(bridge_slave_1) entered disabled state [ 2842.948774][T28110] bridge_slave_1: entered allmulticast mode [ 2842.998909][T28110] bridge_slave_1: entered promiscuous mode [ 2843.474111][T28110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2843.583435][T28110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2843.755501][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6444'. [ 2844.474035][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6444'. [ 2845.474768][T28110] team0: Port device team_slave_0 added [ 2845.483014][T28315] 9pnet_fd: Insufficient options for proto=fd [ 2845.489658][T12344] bridge_slave_1: left allmulticast mode [ 2845.540435][T12344] bridge_slave_1: left promiscuous mode [ 2845.561338][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2845.611605][T12344] bridge_slave_0: left allmulticast mode [ 2845.617318][T12344] bridge_slave_0: left promiscuous mode [ 2845.640659][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2845.670679][T14045] Bluetooth: hci0: Frame reassembly failed (-84) [ 2845.780979][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2846.582270][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2846.640957][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2846.656640][T12344] bond0 (unregistering): Released all slaves [ 2846.716728][T28110] team0: Port device team_slave_1 added [ 2846.806634][T27897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2846.973259][T12344] hsr_slave_0: left promiscuous mode [ 2847.009028][T12344] hsr_slave_1: left promiscuous mode [ 2847.016617][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2847.044268][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2847.379632][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2847.507605][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2847.670504][T25839] Bluetooth: hci0: command 0x1003 tx timeout [ 2847.770468][T21139] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2849.318147][T28351] loop8: detected capacity change from 0 to 32768 [ 2849.818104][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6459'. [ 2849.993862][T28363] netlink: 'syz.4.6463': attribute type 7 has an invalid length. [ 2850.010491][T28363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6463'. [ 2850.450776][T28110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2850.472519][T28110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2850.553021][T28110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2850.588912][T28349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6459'. [ 2850.677776][T28110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2850.713281][T28110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2850.813108][T28110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2851.198506][T28372] loop8: detected capacity change from 0 to 4096 [ 2851.901050][T28374] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2851.952306][ T30] audit: type=1800 audit(2000001395.259:3838): pid=28372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6465" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 2855.348321][T28110] hsr_slave_0: entered promiscuous mode [ 2855.406104][T28110] hsr_slave_1: entered promiscuous mode [ 2855.451236][T28110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2855.470585][T28110] Cannot create hsr debugfs directory [ 2855.590911][T28387] loop0: detected capacity change from 0 to 1024 [ 2855.824356][T12229] Bluetooth: hci0: Frame reassembly failed (-84) [ 2856.037344][T28387] [ 2856.039736][T28387] ============================================ [ 2856.045908][T28387] WARNING: possible recursive locking detected [ 2856.052078][T28387] 6.16.0-rc2-syzkaller #0 Not tainted [ 2856.057472][T28387] -------------------------------------------- [ 2856.063633][T28387] syz.0.6469/28387 is trying to acquire lock: [ 2856.069719][T28387] ffff88803128cb48 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_get_block+0x272/0x9d0 [ 2856.080703][T28387] [ 2856.080703][T28387] but task is already holding lock: [ 2856.088077][T28387] ffff888031289c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x203/0xb70 [ 2856.099274][T28387] [ 2856.099274][T28387] other info that might help us debug this: [ 2856.107343][T28387] Possible unsafe locking scenario: [ 2856.107343][T28387] [ 2856.114801][T28387] CPU0 [ 2856.118082][T28387] ---- [ 2856.121362][T28387] lock(&HFSPLUS_I(inode)->extents_lock); [ 2856.127190][T28387] lock(&HFSPLUS_I(inode)->extents_lock); [ 2856.133017][T28387] [ 2856.133017][T28387] *** DEADLOCK *** [ 2856.133017][T28387] [ 2856.141164][T28387] May be due to missing lock nesting notation [ 2856.141164][T28387] [ 2856.149488][T28387] 4 locks held by syz.0.6469/28387: [ 2856.154701][T28387] #0: ffff88803a7a6428 (sb_writers#24){.+.+}-{0:0}, at: path_openat+0x22f4/0x2cb0 [ 2856.164110][T28387] #1: ffff888031289df8 (&sb->s_type->i_mutex_key#41){+.+.}-{4:4}, at: do_truncate+0x146/0x230 [ 2856.174560][T28387] #2: ffff888031289c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x203/0xb70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2856.186237][T28387] #3: ffff888028f198f8 (&sbi->alloc_mutex){+.+.}-{4:4}, at: hfsplus_block_free+0xdc/0x5f0 [ 2856.196349][T28387] [ 2856.196349][T28387] stack backtrace: [ 2856.202258][T28387] CPU: 1 UID: 0 PID: 28387 Comm: syz.0.6469 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 2856.202303][T28387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2856.202326][T28387] Call Trace: [ 2856.202338][T28387] [ 2856.202350][T28387] dump_stack_lvl+0x116/0x1f0 [ 2856.202413][T28387] print_deadlock_bug+0x1e9/0x240 [ 2856.202467][T28387] __lock_acquire+0x1106/0x1c90 [ 2856.202530][T28387] lock_acquire+0x179/0x350 [ 2856.202583][T28387] ? hfsplus_get_block+0x272/0x9d0 [ 2856.202638][T28387] ? __pfx___might_resched+0x10/0x10 [ 2856.202683][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.202729][T28387] ? register_lock_class+0x41/0x4c0 [ 2856.202794][T28387] __mutex_lock+0x199/0xb90 [ 2856.202827][T28387] ? hfsplus_get_block+0x272/0x9d0 [ 2856.202880][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.202923][T28387] ? __lock_acquire+0xb8a/0x1c90 [ 2856.202978][T28387] ? hfsplus_get_block+0x272/0x9d0 [ 2856.203031][T28387] ? __pfx___mutex_lock+0x10/0x10 [ 2856.203064][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.203113][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.203157][T28387] ? do_raw_spin_lock+0x12c/0x2b0 [ 2856.203194][T28387] ? find_held_lock+0x2b/0x80 [ 2856.203236][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.203283][T28387] ? hfsplus_get_block+0x272/0x9d0 [ 2856.203335][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.203378][T28387] hfsplus_get_block+0x272/0x9d0 [ 2856.203437][T28387] block_read_full_folio+0x457/0x850 [ 2856.203490][T28387] ? __pfx_hfsplus_get_block+0x10/0x10 [ 2856.203546][T28387] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 2856.203594][T28387] filemap_read_folio+0xc8/0x2a0 [ 2856.203635][T28387] ? __pfx_filemap_read_folio+0x10/0x10 [ 2856.203675][T28387] ? __filemap_get_folio+0x32b/0xc30 [ 2856.203727][T28387] do_read_cache_folio+0x263/0x5c0 [ 2856.203776][T28387] ? __pfx_hfsplus_read_folio+0x10/0x10 [ 2856.203828][T28387] read_cache_page+0x5b/0x160 [ 2856.203874][T28387] hfsplus_block_free+0x13e/0x5f0 [ 2856.203924][T28387] hfsplus_free_extents+0x3b4/0x530 [ 2856.203979][T28387] hfsplus_file_truncate+0x8da/0xb70 [ 2856.204034][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.204077][T28387] ? __up_read+0x1f8/0x750 [ 2856.204116][T28387] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 2856.204174][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.204221][T28387] ? inode_newsize_ok+0x13b/0x200 [ 2856.204255][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.204304][T28387] hfsplus_setattr+0x19f/0x320 [ 2856.204353][T28387] ? __pfx_hfsplus_setattr+0x10/0x10 [ 2856.204400][T28387] notify_change+0x6a9/0x1230 [ 2856.204439][T28387] do_truncate+0x1d7/0x230 [ 2856.204479][T28387] ? __pfx_do_truncate+0x10/0x10 [ 2856.204518][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.204569][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.204618][T28387] path_openat+0x2678/0x2cb0 [ 2856.204667][T28387] ? __pfx_path_openat+0x10/0x10 [ 2856.204710][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.204763][T28387] do_filp_open+0x20b/0x470 [ 2856.204804][T28387] ? __pfx_do_filp_open+0x10/0x10 [ 2856.204862][T28387] ? _raw_spin_unlock+0x28/0x50 [ 2856.204911][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.204954][T28387] ? alloc_fd+0x471/0x7d0 [ 2856.205000][T28387] do_sys_openat2+0x11b/0x1d0 [ 2856.205052][T28387] ? __pfx_do_sys_openat2+0x10/0x10 [ 2856.205107][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.205151][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.205194][T28387] ? __x64_sys_futex+0x1e9/0x4c0 [ 2856.205252][T28387] __x64_sys_creat+0xcc/0x120 [ 2856.205306][T28387] ? __pfx___x64_sys_creat+0x10/0x10 [ 2856.205363][T28387] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2856.205408][T28387] ? rcu_is_watching+0x12/0xc0 [ 2856.205452][T28387] ? do_syscall_64+0x91/0x4c0 [ 2856.205487][T28387] do_syscall_64+0xcd/0x4c0 [ 2856.205521][T28387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2856.205558][T28387] RIP: 0033:0x7f2cbb98e929 [ 2856.205585][T28387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2856.205621][T28387] RSP: 002b:00007f2cbc87a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 2856.205654][T28387] RAX: ffffffffffffffda RBX: 00007f2cbbbb5fa0 RCX: 00007f2cbb98e929 [ 2856.205678][T28387] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000200 [ 2856.205701][T28387] RBP: 00007f2cbba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 2856.205724][T28387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2856.205754][T28387] R13: 0000000000000000 R14: 00007f2cbbbb5fa0 R15: 00007ffcab9424e8 [ 2856.205789][T28387] [ 2856.805061][T28387] hfsplus: unable to mark blocks free: error -4 [ 2856.812661][T28387] hfsplus: can't free extent [ 2857.140189][T26229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2857.165549][T26229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2857.273974][T26229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2857.412210][T26229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2857.440644][T26229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2857.834432][T21139] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2858.085768][T12344] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2858.198693][T12344] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2858.408009][T12344] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2858.529633][T28396] chnl_net:caif_netlink_parms(): no params data found [ 2858.595088][T12344] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2858.633697][T28396] bridge0: port 1(bridge_slave_0) entered blocking state [ 2858.641179][T28396] bridge0: port 1(bridge_slave_0) entered disabled state [ 2858.648870][T28396] bridge_slave_0: entered allmulticast mode [ 2858.656216][T28396] bridge_slave_0: entered promiscuous mode [ 2858.664510][T28396] bridge0: port 2(bridge_slave_1) entered blocking state [ 2858.671727][T28396] bridge0: port 2(bridge_slave_1) entered disabled state [ 2858.678917][T28396] bridge_slave_1: entered allmulticast mode [ 2858.685737][T28396] bridge_slave_1: entered promiscuous mode [ 2858.710573][T28396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2858.725778][T28396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2858.766438][T28396] team0: Port device team_slave_0 added [ 2858.772619][T12344] bridge_slave_1: left allmulticast mode [ 2858.778304][T12344] bridge_slave_1: left promiscuous mode [ 2858.784898][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2858.797184][T12344] bridge_slave_0: left allmulticast mode [ 2858.803248][T12344] bridge_slave_0: left promiscuous mode [ 2858.808987][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2858.818986][T12344] bridge_slave_1: left allmulticast mode [ 2858.824986][T12344] bridge_slave_1: left promiscuous mode [ 2858.830797][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2858.839422][T12344] bridge_slave_0: left promiscuous mode [ 2858.845279][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2858.975760][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2858.986103][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2858.995950][T12344] bond0 (unregistering): Released all slaves [ 2859.226738][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2859.237203][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2859.247440][T12344] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2859.261394][T12344] bond0 (unregistering): Released all slaves [ 2859.273951][T28396] team0: Port device team_slave_1 added [ 2859.301505][T28396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2859.308469][T28396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2859.334715][T28396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2859.346847][T28396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2859.354817][T28396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2859.381657][T28396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2859.396494][T12344] tipc: Disabling bearer [ 2859.406568][T12344] tipc: Left network mode [ 2859.426110][T28396] hsr_slave_0: entered promiscuous mode [ 2859.433093][T28396] hsr_slave_1: entered promiscuous mode [ 2859.439170][T28396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2859.447689][T28396] Cannot create hsr debugfs directory [ 2859.510489][T26229] Bluetooth: hci7: command tx timeout [ 2859.554243][T12344] hsr_slave_0: left promiscuous mode [ 2859.560048][T12344] hsr_slave_1: left promiscuous mode [ 2859.566982][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2859.574853][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2859.585913][T12344] hsr_slave_0: left promiscuous mode [ 2859.592699][T12344] hsr_slave_1: left promiscuous mode [ 2859.598362][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2859.605864][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2859.614061][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2859.621517][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2859.635238][T12344] veth1_macvtap: left promiscuous mode [ 2859.640830][T12344] veth0_macvtap: left promiscuous mode [ 2859.646383][T12344] veth1_vlan: left promiscuous mode [ 2859.797660][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2859.819547][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2860.013326][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2860.026812][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2860.194344][T28396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2860.218870][T28396] 8021q: adding VLAN 0 to HW filter on device team0 [ 2860.229402][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 2860.236537][T12229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2860.251110][T14046] bridge0: port 2(bridge_slave_1) entered blocking state [ 2860.258206][T14046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2860.436240][T28396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2860.677856][T28396] veth0_vlan: entered promiscuous mode [ 2860.697527][T28396] veth1_vlan: entered promiscuous mode [ 2860.705310][T12344] bridge_slave_1: left allmulticast mode [ 2860.711361][T12344] bridge_slave_1: left promiscuous mode [ 2860.717043][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.725275][T12344] bridge_slave_0: left allmulticast mode [ 2860.733361][T12344] bridge_slave_0: left promiscuous mode [ 2860.739073][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2860.748384][T12344] bridge_slave_1: left allmulticast mode [ 2860.754126][T12344] bridge_slave_1: left promiscuous mode [ 2860.759804][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.768498][T12344] bridge_slave_0: left allmulticast mode [ 2860.774325][T12344] bridge_slave_0: left promiscuous mode [ 2860.780020][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2860.801409][T12344] bridge_slave_1: left allmulticast mode [ 2860.807112][T12344] bridge_slave_1: left promiscuous mode [ 2860.813429][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.822498][T12344] bridge_slave_0: left allmulticast mode [ 2860.828172][T12344] bridge_slave_0: left promiscuous mode [ 2860.834061][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2860.844932][T12344] bridge_slave_1: left allmulticast mode [ 2860.850761][T12344] bridge_slave_1: left promiscuous mode [ 2860.856464][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.865487][T12344] bridge_slave_0: left allmulticast mode [ 2860.871648][T12344] bridge_slave_0: left promiscuous mode [ 2860.877383][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2861.037584][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2861.047975][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2861.057765][T12344] bond0 (unregistering): Released all slaves [ 2861.156415][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2861.169224][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2861.179510][T12344] bond0 (unregistering): Released all slaves [ 2861.376726][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2861.386909][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2861.396640][T12344] bond0 (unregistering): Released all slaves [ 2861.487382][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2861.497746][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2861.507564][T12344] bond0 (unregistering): Released all slaves [ 2861.561302][T28396] veth0_macvtap: entered promiscuous mode [ 2861.575660][T28396] veth1_macvtap: entered promiscuous mode [ 2861.600270][T26229] Bluetooth: hci7: command tx timeout [ 2861.635811][T28396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2861.648975][T28396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2861.679300][T28396] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 2861.714279][T14041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2861.716684][T28396] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 2861.724338][T14041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2861.769455][T12229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2861.777787][T12229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2861.987795][T12344] hsr_slave_0: left promiscuous mode [ 2861.995356][T12344] hsr_slave_1: left promiscuous mode [ 2862.001265][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2862.008954][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2862.021754][T12344] hsr_slave_0: left promiscuous mode [ 2862.027926][T12344] hsr_slave_1: left promiscuous mode [ 2862.038641][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2862.046148][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2862.054086][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2862.061977][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2862.073873][T12344] hsr_slave_0: left promiscuous mode [ 2862.079682][T12344] hsr_slave_1: left promiscuous mode [ 2862.086466][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2862.094863][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2862.102971][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2862.110626][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2862.122626][T12344] hsr_slave_0: left promiscuous mode [ 2862.128969][T12344] hsr_slave_1: left promiscuous mode [ 2862.135673][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2862.143194][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2862.151131][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2862.158562][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2862.179124][T12344] veth1_macvtap: left promiscuous mode [ 2862.184724][T12344] veth0_macvtap: left promiscuous mode [ 2862.190874][T12344] veth1_vlan: left promiscuous mode [ 2862.196191][T12344] veth0_vlan: left promiscuous mode [ 2862.202608][T12344] veth1_macvtap: left promiscuous mode [ 2862.208148][T12344] veth0_macvtap: left promiscuous mode [ 2862.213802][T12344] veth1_vlan: left promiscuous mode [ 2862.219162][T12344] veth0_vlan: left promiscuous mode [ 2862.226096][T12344] veth1_macvtap: left promiscuous mode [ 2862.232452][T12344] veth0_macvtap: left promiscuous mode [ 2862.238104][T12344] veth1_vlan: left promiscuous mode [ 2862.245356][T12344] veth0_vlan: left promiscuous mode [ 2862.484428][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2862.500780][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2862.692269][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2862.719517][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2862.912922][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2862.947969][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2863.158547][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2863.194853][T12344] team0 (unregistering): Port device team_slave_0 removed [ 2864.147509][T12344] bridge_slave_1: left allmulticast mode [ 2864.153422][T12344] bridge_slave_1: left promiscuous mode [ 2864.159160][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2864.167769][T12344] bridge_slave_0: left allmulticast mode [ 2864.173840][T12344] bridge_slave_0: left promiscuous mode [ 2864.179725][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2864.295007][T12344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2864.305159][T12344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2864.315116][T12344] bond0 (unregistering): Released all slaves [ 2864.547381][T12344] hsr_slave_0: left promiscuous mode [ 2864.553375][T12344] hsr_slave_1: left promiscuous mode [ 2864.559092][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2864.566878][T12344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2864.575997][T12344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2864.583470][T12344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2864.594439][T12344] veth1_macvtap: left promiscuous mode [ 2864.599947][T12344] veth0_macvtap: left promiscuous mode [ 2864.605698][T12344] veth1_vlan: left promiscuous mode [ 2864.611034][T12344] veth0_vlan: left promiscuous mode [ 2864.738559][T12344] team0 (unregistering): Port device team_slave_1 removed [ 2864.750210][T12344] team0 (unregistering): Port device team_slave_0 removed