last executing test programs: 2m39.220726398s ago: executing program 1 (id=2): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) 2m39.031656477s ago: executing program 1 (id=6): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m38.113471928s ago: executing program 1 (id=7): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="3204", 0x2}], 0x1}, 0x4040810) 2m37.896913036s ago: executing program 1 (id=8): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x208fa000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2m36.099151301s ago: executing program 1 (id=11): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f00000005c0), 0x0, 0x4fed0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x549543, 0x0) socket(0x1e, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) prlimit64(r2, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) 2m33.391731115s ago: executing program 1 (id=17): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10012, r3, 0x0) 2m17.226207449s ago: executing program 32 (id=17): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10012, r3, 0x0) 12.889995021s ago: executing program 4 (id=354): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcffffff0100000008000100", @ANYRES32=r1], 0x60}, 0x1, 0xf000, 0x0, 0x52c49f2796549d9f}, 0x0) 11.755979413s ago: executing program 5 (id=357): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11.682980449s ago: executing program 4 (id=358): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.349449234s ago: executing program 3 (id=359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 9.819408338s ago: executing program 0 (id=360): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000f9dbdf2520010000000000000000000000000000000000000000000000000000000000010000fffe0000000002"], 0xb8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private=0x2, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 9.56522627s ago: executing program 2 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x20000000008b}, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 'wlc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e2b, 0x2, 0x1, 0x12d5c, 0x12d5c}}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x44084) llistxattr(0x0, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8927, &(0x7f0000000240)={'team_slave_0\x00', @ifru_settings={0x2, 0x80000000, @sync=&(0x7f0000000140)={0x9, 0x6, 0x3}}}) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x722, 0x12) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = io_uring_setup(0x524e, &(0x7f0000000000)={0x0, 0xf001, 0x100, 0x1, 0x232}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x1c, &(0x7f0000002940)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) 9.441449365s ago: executing program 4 (id=362): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 9.370960516s ago: executing program 0 (id=363): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca66, 0x40, 0x1, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x1c}], 0x1) 9.28743694s ago: executing program 3 (id=364): syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f00000001c0)='.\x02\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="cd099bf46634ae0ef20ed2ba2228c7861d77eb8ee5d97ce7a0ac26cdadf7a684dc0ee6f5048a6a3e2e299d207a30c3fe1e73696eaac25bca2d9a44025207a0e36ed20b09f1d1d8752bbb15faa46ca426761546b6172b48665c39072e12cf803bf0b5bf916b8ae2d7e88dd90364d29921c836893f31f70c3e002757353d4a6cdcb9fe803e2ba2139c69b3f60a55aae07cdbbcd36af6fa6cb0368c73a7b97a89c035", @ANYRES16=0x0, @ANYBLOB="565c3d1a135dcfa3316f89263710cde4cfdcd5a74eea8949a429df95b42bb65e79848dce3ea160e362e643428d36716d0f17497310c5680569"], 0x6, 0x18f, &(0x7f0000000840)="$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") r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0xfb, 0x1000, &(0x7f0000000940)=""/4096}, &(0x7f00000000c0)='\b\x00\fj\bH', 0x0, 0x7, 0x0, 0x1, 0x0}) 8.929446065s ago: executing program 0 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 8.190903324s ago: executing program 2 (id=366): mount(0x0, 0x0, &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{}, {0xf}, 0xdd}) 8.055763307s ago: executing program 2 (id=367): socket(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.957492189s ago: executing program 3 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcffffff0100000008000100", @ANYRES32=r1], 0x60}, 0x1, 0xf000, 0x0, 0x52c49f2796549d9f}, 0x0) 7.956924541s ago: executing program 5 (id=369): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000700)='./bus\x00', 0x8c0, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES64, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") creat(0x0, 0x2) 7.953363356s ago: executing program 0 (id=370): r0 = socket$inet(0x10, 0x4, 0x7d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) 7.903883688s ago: executing program 2 (id=371): socket$inet6_sctp(0xa, 0x801, 0x84) creat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$netlink(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) geteuid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0), 0x8) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, 0x0, 0x13, 0x0, 0x0, {0x17}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xb00, 0x12) 5.986767024s ago: executing program 2 (id=372): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04e04020"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 5.844564921s ago: executing program 3 (id=373): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 5.758001114s ago: executing program 5 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 5.32538216s ago: executing program 0 (id=375): setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) close_range(r0, 0xffffffffffffffff, 0x0) 5.312711284s ago: executing program 4 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x20000000008b}, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 'wlc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e2b, 0x2, 0x1, 0x12d5c, 0x12d5c}}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x44084) llistxattr(0x0, 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8927, &(0x7f0000000240)={'team_slave_0\x00', @ifru_settings={0x2, 0x80000000, @sync=&(0x7f0000000140)={0x9, 0x6, 0x3}}}) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x722, 0x12) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = io_uring_setup(0x524e, &(0x7f0000000000)={0x0, 0xf001, 0x100, 0x1, 0x232}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x1c, &(0x7f0000002940)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) 5.089192898s ago: executing program 5 (id=377): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x5ae4, &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x191}) r4 = dup3(0xffffffffffffffff, r3, 0x0) epoll_pwait2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x15, &(0x7f0000000fc0)="c0f924ae269dee0f527d3115ef01345cf65abc2288", 0x9, 0x52, 0xb57, 0x8002, 0x9, 0x0, 0xd, 'syz0\x00'}) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x101091, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5.041427215s ago: executing program 3 (id=378): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@errors_remount}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000002480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006700000008000100000000000c00b10000008001230000000800c300"], 0x38}}, 0x10) 4.190581133s ago: executing program 4 (id=379): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.264305111s ago: executing program 5 (id=380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2.26397229s ago: executing program 2 (id=381): socket(0x2a, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 339.848129ms ago: executing program 0 (id=382): syz_open_dev$vim2m(0x0, 0x647, 0x2) r0 = io_uring_setup(0x30d1, &(0x7f00000005c0)={0x0, 0x0, 0x10003, 0x1, 0x1ba}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0xae, &(0x7f0000000280)=ANY=[], 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r4, 0x8, 0x0, 0x0, 0x82, 0x8, 0x15c2, 0x5886, 0x801, 0x1, 0xa8, 'syz1\x00'}) gettid() close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x1fffffff) 121.489891ms ago: executing program 4 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcffffff0100000008000100", @ANYRES32=r1], 0x60}, 0x1, 0xf000, 0x0, 0x52c49f2796549d9f}, 0x0) 120.974681ms ago: executing program 3 (id=384): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2100000, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000100)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x21071, &(0x7f0000001900)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYBLOB], 0x6, 0x2b5, &(0x7f00000007c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) 0s ago: executing program 5 (id=385): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 82.569691][ T5821] cgroup: Unknown subsys name 'net' [ 82.740388][ T5821] cgroup: Unknown subsys name 'cpuset' [ 82.749377][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.392327][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.419963][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.446863][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.454410][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.466480][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.477271][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.485108][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.486543][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.504708][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.517836][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.518208][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.525300][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.537603][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.539613][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.547700][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.554230][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.561013][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.576329][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.584502][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.584764][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.592657][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.601712][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.613904][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.622955][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.662594][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.672994][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.217777][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.288031][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 89.389100][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.468173][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.637391][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.645119][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.653280][ T5837] bridge_slave_0: entered allmulticast mode [ 89.661354][ T5837] bridge_slave_0: entered promiscuous mode [ 89.701244][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.708537][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.715677][ T5831] bridge_slave_0: entered allmulticast mode [ 89.723664][ T5831] bridge_slave_0: entered promiscuous mode [ 89.731954][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.739777][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.747171][ T5837] bridge_slave_1: entered allmulticast mode [ 89.754302][ T5837] bridge_slave_1: entered promiscuous mode [ 89.767386][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.797690][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.804850][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.812220][ T5831] bridge_slave_1: entered allmulticast mode [ 89.820612][ T5831] bridge_slave_1: entered promiscuous mode [ 89.921889][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.958233][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.965426][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.973096][ T5846] bridge_slave_0: entered allmulticast mode [ 89.981151][ T5846] bridge_slave_0: entered promiscuous mode [ 89.994217][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.002077][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.009756][ T5844] bridge_slave_0: entered allmulticast mode [ 90.018206][ T5844] bridge_slave_0: entered promiscuous mode [ 90.028091][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.055301][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.064827][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.072501][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.080327][ T5846] bridge_slave_1: entered allmulticast mode [ 90.088199][ T5846] bridge_slave_1: entered promiscuous mode [ 90.100477][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.107656][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.114803][ T5844] bridge_slave_1: entered allmulticast mode [ 90.122846][ T5844] bridge_slave_1: entered promiscuous mode [ 90.147603][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.218536][ T5831] team0: Port device team_slave_0 added [ 90.239739][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.265002][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.278121][ T5831] team0: Port device team_slave_1 added [ 90.299171][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.337905][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.361484][ T5837] team0: Port device team_slave_0 added [ 90.370367][ T5837] team0: Port device team_slave_1 added [ 90.389903][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.398803][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.406051][ T5832] bridge_slave_0: entered allmulticast mode [ 90.413235][ T5832] bridge_slave_0: entered promiscuous mode [ 90.476135][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.483111][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.509386][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.523893][ T5846] team0: Port device team_slave_0 added [ 90.530653][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.538218][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.545466][ T5832] bridge_slave_1: entered allmulticast mode [ 90.552813][ T5832] bridge_slave_1: entered promiscuous mode [ 90.566660][ T55] Bluetooth: hci0: command tx timeout [ 90.577953][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.584912][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.611163][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.624597][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.631811][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.658542][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.669359][ T55] Bluetooth: hci4: command tx timeout [ 90.684696][ T5846] team0: Port device team_slave_1 added [ 90.716285][ T5850] Bluetooth: hci1: command tx timeout [ 90.716292][ T5842] Bluetooth: hci3: command tx timeout [ 90.720557][ T55] Bluetooth: hci2: command tx timeout [ 90.742586][ T5844] team0: Port device team_slave_0 added [ 90.749336][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.756721][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.783295][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.817822][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.824809][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.850989][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.867518][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.880389][ T5844] team0: Port device team_slave_1 added [ 90.928314][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.935295][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.965157][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.987139][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.062963][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.070230][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.096801][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.114580][ T5837] hsr_slave_0: entered promiscuous mode [ 91.121348][ T5837] hsr_slave_1: entered promiscuous mode [ 91.133878][ T5831] hsr_slave_0: entered promiscuous mode [ 91.140432][ T5831] hsr_slave_1: entered promiscuous mode [ 91.147008][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.154779][ T5831] Cannot create hsr debugfs directory [ 91.187974][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.194972][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.221444][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.241676][ T5846] hsr_slave_0: entered promiscuous mode [ 91.248050][ T5846] hsr_slave_1: entered promiscuous mode [ 91.254143][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.261973][ T5846] Cannot create hsr debugfs directory [ 91.271674][ T5832] team0: Port device team_slave_0 added [ 91.312584][ T5832] team0: Port device team_slave_1 added [ 91.478363][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.485343][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.511974][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.529592][ T5844] hsr_slave_0: entered promiscuous mode [ 91.536191][ T5844] hsr_slave_1: entered promiscuous mode [ 91.542358][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.550082][ T5844] Cannot create hsr debugfs directory [ 91.587309][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.594281][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.621329][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.834755][ T5832] hsr_slave_0: entered promiscuous mode [ 91.841964][ T5832] hsr_slave_1: entered promiscuous mode [ 91.848380][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.856180][ T5832] Cannot create hsr debugfs directory [ 91.930656][ T24] cfg80211: failed to load regulatory.db [ 92.159339][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.202171][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.220751][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.245042][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.294750][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.311826][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.341896][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.352649][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.448639][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.460310][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.471314][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.505113][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.596062][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.629118][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.638438][ T55] Bluetooth: hci0: command tx timeout [ 92.654220][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.681884][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.717117][ T55] Bluetooth: hci4: command tx timeout [ 92.748889][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.796460][ T55] Bluetooth: hci2: command tx timeout [ 92.797218][ T5842] Bluetooth: hci1: command tx timeout [ 92.807632][ T5850] Bluetooth: hci3: command tx timeout [ 92.828990][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.852004][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.883125][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.893687][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.922130][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.942351][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.965731][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.973092][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.000362][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.012257][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.019470][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.035184][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.092233][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.099432][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.122927][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.135531][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.142708][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.154400][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.161528][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.218907][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.226198][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.308416][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.415298][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.467549][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.474715][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.513847][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.521443][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.630390][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.745222][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.779230][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.786440][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.862186][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.869367][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.962008][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.984738][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.011876][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.087223][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.105360][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.186870][ T5846] veth0_vlan: entered promiscuous mode [ 94.210143][ T5837] veth0_vlan: entered promiscuous mode [ 94.245769][ T5846] veth1_vlan: entered promiscuous mode [ 94.282598][ T5837] veth1_vlan: entered promiscuous mode [ 94.375013][ T5831] veth0_vlan: entered promiscuous mode [ 94.462182][ T5831] veth1_vlan: entered promiscuous mode [ 94.473471][ T5846] veth0_macvtap: entered promiscuous mode [ 94.484995][ T5837] veth0_macvtap: entered promiscuous mode [ 94.497296][ T5846] veth1_macvtap: entered promiscuous mode [ 94.518078][ T5837] veth1_macvtap: entered promiscuous mode [ 94.567747][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.580192][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.592027][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.603376][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.641189][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.653203][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.664015][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.675557][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.688743][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.700877][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.710552][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.720180][ T5850] Bluetooth: hci0: command tx timeout [ 94.726710][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.735766][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.764939][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.774102][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.782956][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.791794][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800902][ T5850] Bluetooth: hci4: command tx timeout [ 94.818304][ T5844] veth0_vlan: entered promiscuous mode [ 94.842038][ T5831] veth0_macvtap: entered promiscuous mode [ 94.877219][ T5842] Bluetooth: hci1: command tx timeout [ 94.877934][ T55] Bluetooth: hci2: command tx timeout [ 94.882708][ T5850] Bluetooth: hci3: command tx timeout [ 94.920943][ T5831] veth1_macvtap: entered promiscuous mode [ 94.935675][ T5844] veth1_vlan: entered promiscuous mode [ 94.995771][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.011940][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.023046][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.034150][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.048301][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.062071][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.070834][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.117401][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.128822][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.139226][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.150338][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.161650][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.180177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.190001][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.239948][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.249853][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.259364][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.268473][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.296978][ T5832] veth0_vlan: entered promiscuous mode [ 95.305583][ T5844] veth0_macvtap: entered promiscuous mode [ 95.318271][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.322439][ T5844] veth1_macvtap: entered promiscuous mode [ 95.333778][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.392137][ T5832] veth1_vlan: entered promiscuous mode [ 95.418347][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.434049][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.445375][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.455661][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.469856][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.480868][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.495444][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.506116][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.518449][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.550047][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.558653][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.579902][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.591884][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.603335][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.613208][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.623749][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.638443][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.693328][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.726203][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.734957][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.757980][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.795001][ T5922] loop0: detected capacity change from 0 to 1024 [ 95.851982][ T5832] veth0_macvtap: entered promiscuous mode [ 95.863750][ T5922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.873113][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.892501][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.907583][ T5832] veth1_macvtap: entered promiscuous mode [ 96.054202][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.080456][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.092865][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.100710][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.117585][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.140014][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.154316][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.174066][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.190449][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.201707][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.213778][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.227574][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.249515][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.251079][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.269134][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.275057][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.289951][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.301766][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.312177][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.323784][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.334580][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.346257][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.364673][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.393793][ T5929] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.1: missing EA_INODE flag [ 96.414135][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.432781][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.448524][ T5929] EXT4-fs (loop0): Remounting filesystem read-only [ 96.455693][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.468912][ T5929] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.479473][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.490878][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.512008][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.521616][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.540747][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 96.563742][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 96.587648][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.600327][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.611837][ T9] usb 3-1: Product: syz [ 96.625133][ T9] usb 3-1: Manufacturer: syz [ 96.684868][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 96.705407][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.722189][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 96.749013][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.789599][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 96.795581][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 96.806481][ T5850] Bluetooth: hci0: command tx timeout [ 96.876529][ T5850] Bluetooth: hci4: command tx timeout [ 96.956568][ T5850] Bluetooth: hci3: command tx timeout [ 96.957849][ T55] Bluetooth: hci1: command tx timeout [ 96.962009][ T5850] Bluetooth: hci2: command tx timeout [ 96.996893][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.004766][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.321103][ T5937] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 97.688576][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.721041][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.543603][ T9] usb 3-1: USB disconnect, device number 2 [ 100.496210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.516402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.548116][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.909007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.011517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.799832][ T5980] loop0: detected capacity change from 0 to 4096 [ 102.004518][ T5982] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.221069][ T5980] NILFS (loop0): corrupt root inode [ 102.301086][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 102.328607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.583988][ T5984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.855274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.059493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.161913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.226394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.264342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.754916][ T5986] ALSA: mixer_oss: invalid OSS volume 'u' [ 105.957041][ T6026] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19'. [ 107.026664][ T6037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.819214][ T6039] loop4: detected capacity change from 0 to 128 [ 108.826539][ T6039] loop4: detected capacity change from 0 to 32768 [ 108.847654][ T6039] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.24 (6039) [ 108.902127][ T6039] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 108.912703][ T6039] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 108.922323][ T6039] BTRFS info (device loop4): using free-space-tree [ 109.151255][ T6045] Zero length message leads to an empty skb [ 109.182904][ T6054] loop0: detected capacity change from 0 to 1024 [ 110.367511][ T6039] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 110.368601][ T6039] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 110.378914][ T6039] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 110.603500][ T6054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.783167][ T6039] BTRFS error (device loop4): open_ctree failed: -12 [ 110.893734][ T6075] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 112.045948][ T24] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 112.199082][ T6088] loop3: detected capacity change from 0 to 128 [ 112.266343][ T24] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 112.267550][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.297516][ T6088] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.330844][ T24] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 112.376317][ T24] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 112.386932][ T6088] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.426075][ T24] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 112.499297][ T24] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 112.553081][ T24] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 112.615944][ T24] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.624917][ T24] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 113.642710][ T24] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 113.799341][ T24] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 113.820417][ T24] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 114.018268][ T5832] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.055438][ T24] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 114.066640][ T24] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 114.078149][ T24] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 114.886515][ T24] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 114.894158][ T24] usb 5-1: can't read configurations, error -71 [ 115.083997][ T6117] netlink: 68 bytes leftover after parsing attributes in process `syz.4.38'. [ 116.445362][ T6131] netlink: 100 bytes leftover after parsing attributes in process `syz.4.41'. [ 117.607739][ T6150] overlayfs: overlapping lowerdir path [ 121.012009][ T6176] netlink: 100 bytes leftover after parsing attributes in process `syz.3.55'. [ 121.125068][ T6186] loop4: detected capacity change from 0 to 8 [ 121.555111][ T6191] capability: warning: `syz.4.57' uses deprecated v2 capabilities in a way that may be insecure [ 122.090905][ T6193] overlayfs: missing 'lowerdir' [ 123.563345][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.581393][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.596233][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.616131][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.628983][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.991562][ T6230] netlink: 100 bytes leftover after parsing attributes in process `syz.0.67'. [ 125.357785][ T6236] loop0: detected capacity change from 0 to 8 [ 125.597594][ T6239] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 125.731493][ T5850] Bluetooth: hci5: command tx timeout [ 126.458990][ T6239] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 127.768947][ T5850] Bluetooth: hci5: command tx timeout [ 127.814828][ T24] libceph: connect (1)[c::]:6789 error -101 [ 127.834757][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 128.372774][ T24] libceph: connect (1)[c::]:6789 error -101 [ 128.379242][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 128.441354][ T6252] ceph: No mds server is up or the cluster is laggy [ 128.886909][ T6278] netlink: 100 bytes leftover after parsing attributes in process `syz.3.79'. [ 128.995494][ T6207] chnl_net:caif_netlink_parms(): no params data found [ 129.199720][ T6286] loop3: detected capacity change from 0 to 128 [ 129.292835][ T6287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.400027][ T6286] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.616085][ T6286] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.604059][ T5850] Bluetooth: hci5: command tx timeout [ 131.345579][ T6305] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 131.371548][ T5832] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.426242][ T6305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.481989][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.513490][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.560520][ T6207] bridge_slave_0: entered allmulticast mode [ 131.588690][ T6207] bridge_slave_0: entered promiscuous mode [ 131.636264][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.682243][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.700399][ T6313] loop3: detected capacity change from 0 to 128 [ 131.703747][ T6207] bridge_slave_1: entered allmulticast mode [ 131.741984][ T6207] bridge_slave_1: entered promiscuous mode [ 131.803647][ T6313] FAT-fs (loop3): Directory bread(block 162) failed [ 131.835988][ T6313] FAT-fs (loop3): Directory bread(block 163) failed [ 131.842692][ T6313] FAT-fs (loop3): Directory bread(block 164) failed [ 131.909107][ T6313] FAT-fs (loop3): Directory bread(block 165) failed [ 131.920415][ T6313] FAT-fs (loop3): Directory bread(block 166) failed [ 131.939949][ T6313] FAT-fs (loop3): Directory bread(block 167) failed [ 131.958986][ T6313] FAT-fs (loop3): Directory bread(block 168) failed [ 131.975509][ T6313] FAT-fs (loop3): Directory bread(block 169) failed [ 132.882250][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889208][ T5850] Bluetooth: hci5: command tx timeout [ 132.894966][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.976842][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.990766][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 133.010194][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 133.577954][ T6320] ceph: No mds server is up or the cluster is laggy [ 133.594251][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.944218][ T6336] loop4: detected capacity change from 0 to 4096 [ 133.961231][ T6336] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 133.988786][ T6207] team0: Port device team_slave_0 added [ 134.017345][ T6207] team0: Port device team_slave_1 added [ 134.018907][ T6339] netlink: 100 bytes leftover after parsing attributes in process `syz.2.92'. [ 134.192612][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.230325][ T6336] evm: overlay not supported [ 134.235401][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.275513][ T6344] loop0: detected capacity change from 0 to 1024 [ 134.357677][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.370444][ T6344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.378266][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.399558][ T6348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.505009][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.551324][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.712941][ T6367] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.94: missing EA_INODE flag [ 135.766299][ T6367] EXT4-fs (loop0): Remounting filesystem read-only [ 135.823507][ T6207] hsr_slave_0: entered promiscuous mode [ 135.905573][ T6207] hsr_slave_1: entered promiscuous mode [ 135.946607][ T6207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.975382][ T6207] Cannot create hsr debugfs directory [ 136.442996][ T976] libceph: connect (1)[c::]:6789 error -101 [ 136.464502][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 136.759576][ T976] libceph: connect (1)[c::]:6789 error -101 [ 136.781733][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 136.973052][ T6381] ceph: No mds server is up or the cluster is laggy [ 137.657782][ T6207] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.722789][ T6207] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.774885][ T6207] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.821857][ T6207] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.951704][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.017124][ T6406] loop2: detected capacity change from 0 to 128 [ 138.056480][ T6406] FAT-fs (loop2): Directory bread(block 162) failed [ 138.073379][ T6406] FAT-fs (loop2): Directory bread(block 163) failed [ 138.096095][ T6406] FAT-fs (loop2): Directory bread(block 164) failed [ 138.133343][ T6406] FAT-fs (loop2): Directory bread(block 165) failed [ 138.160879][ T6406] FAT-fs (loop2): Directory bread(block 166) failed [ 138.196141][ T6406] FAT-fs (loop2): Directory bread(block 167) failed [ 138.202826][ T6406] FAT-fs (loop2): Directory bread(block 168) failed [ 138.256182][ T6406] FAT-fs (loop2): Directory bread(block 169) failed [ 139.462363][ T6207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.779222][ T6207] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.220842][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.228151][ T6419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.254078][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.261323][ T6419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.718043][ T6437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.230195][ T6207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.953319][ T6207] veth0_vlan: entered promiscuous mode [ 143.059410][ T6207] veth1_vlan: entered promiscuous mode [ 143.218671][ T6207] veth0_macvtap: entered promiscuous mode [ 143.299546][ T6207] veth1_macvtap: entered promiscuous mode [ 143.455608][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.492388][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.619223][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.639375][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.685148][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.741418][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.787539][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.129532][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.140122][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.150942][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.162834][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.174034][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.185323][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.412252][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.423050][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.434905][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.445740][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.459051][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.627792][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.794031][ T6207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.814735][ T6207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.827272][ T6207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.866657][ T6207] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.891100][ T6207] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.912325][ T6207] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.921518][ T6207] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.002033][ T6503] loop4: detected capacity change from 0 to 8 [ 146.145926][ T6505] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.171937][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.232598][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.397083][ T2995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.425297][ T2995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.014214][ T6535] netlink: 452 bytes leftover after parsing attributes in process `syz.5.49'. [ 149.899724][ T6544] loop3: detected capacity change from 0 to 128 [ 149.951975][ T6544] FAT-fs (loop3): Directory bread(block 162) failed [ 149.974446][ T6544] FAT-fs (loop3): Directory bread(block 163) failed [ 150.001837][ T6544] FAT-fs (loop3): Directory bread(block 164) failed [ 150.032253][ T6544] FAT-fs (loop3): Directory bread(block 165) failed [ 150.096244][ T6544] FAT-fs (loop3): Directory bread(block 166) failed [ 150.263050][ T6544] FAT-fs (loop3): Directory bread(block 167) failed [ 150.408938][ T6544] FAT-fs (loop3): Directory bread(block 168) failed [ 150.446108][ T6544] FAT-fs (loop3): Directory bread(block 169) failed [ 150.860070][ T6553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.071159][ T6556] loop2: detected capacity change from 0 to 8 [ 155.245733][ T6604] ======================================================= [ 155.245733][ T6604] WARNING: The mand mount option has been deprecated and [ 155.245733][ T6604] and is ignored by this kernel. Remove the mand [ 155.245733][ T6604] option from the mount to silence this warning. [ 155.245733][ T6604] ======================================================= [ 155.757491][ T6610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.004113][ T6612] loop2: detected capacity change from 0 to 8 [ 156.088700][ T6614] loop4: detected capacity change from 0 to 128 [ 156.474920][ T6614] loop4: detected capacity change from 0 to 32768 [ 157.180273][ T6614] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.144 (6614) [ 157.202794][ T6614] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 157.213164][ T6614] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 157.222663][ T6614] BTRFS info (device loop4): using free-space-tree [ 157.316128][ T6630] loop2: detected capacity change from 0 to 512 [ 157.398701][ T6630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.572277][ T6630] EXT4-fs (loop2): 1 orphan inode deleted [ 157.618966][ T1338] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 157.636561][ T1338] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 157.641572][ T6630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.998480][ T6630] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.109807][ T30] audit: type=1800 audit(1744462731.084:2): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 158.318734][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.337338][ T6645] loop0: detected capacity change from 0 to 4096 [ 158.392099][ T6645] NILFS (loop0): invalid segment: Checksum error in segment payload [ 158.422657][ T5844] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 158.433400][ T6645] NILFS (loop0): trying rollback from an earlier position [ 158.472336][ T6645] NILFS (loop0): recovery complete [ 161.117607][ T6683] loop5: detected capacity change from 0 to 8 [ 162.355392][ T6697] loop3: detected capacity change from 0 to 512 [ 162.468737][ T6697] EXT4-fs (loop3): 1 orphan inode deleted [ 162.487672][ T1149] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.523201][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.556431][ T1149] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 162.629164][ T6697] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.786373][ T30] audit: type=1800 audit(1744462735.744:3): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.159" name="bus" dev="loop3" ino=16 res=0 errno=0 [ 162.867865][ T976] libceph: connect (1)[c::]:6789 error -101 [ 162.881537][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 162.907003][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.150302][ T976] libceph: connect (1)[c::]:6789 error -101 [ 163.284500][ T6707] ceph: No mds server is up or the cluster is laggy [ 163.342945][ T976] libceph: mon0 (1)[c::]:6789 connect error [ 166.340129][ T6731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.674045][ T6740] loop3: detected capacity change from 0 to 8 [ 166.927404][ T6743] loop4: detected capacity change from 0 to 512 [ 167.587312][ T6743] EXT4-fs (loop4): 1 orphan inode deleted [ 167.637854][ T6743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.676148][ T6419] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 167.726756][ T6743] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.732514][ T6419] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 167.807804][ T30] audit: type=1800 audit(1744462740.794:4): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.173" name="bus" dev="loop4" ino=16 res=0 errno=0 [ 168.380703][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.643451][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 168.671251][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 169.000118][ T6754] ceph: No mds server is up or the cluster is laggy [ 169.558143][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 169.786306][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 169.909552][ T6770] loop5: detected capacity change from 0 to 128 [ 171.012487][ T6778] loop5: detected capacity change from 0 to 256 [ 171.468646][ T6779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.664334][ T6784] loop4: detected capacity change from 0 to 8 [ 171.767265][ T6786] loop5: detected capacity change from 0 to 1024 [ 173.861192][ T5850] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 175.633618][ T5835] libceph: connect (1)[c::]:6789 error -101 [ 175.648514][ T5835] libceph: mon0 (1)[c::]:6789 connect error [ 176.001995][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 176.030238][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 176.036438][ T6809] ceph: No mds server is up or the cluster is laggy [ 177.314406][ T6824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.443768][ T6826] loop4: detected capacity change from 0 to 128 [ 177.759302][ T6826] loop4: detected capacity change from 0 to 32768 [ 178.107354][ T6826] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.197 (6826) [ 178.130702][ T6826] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 178.141663][ T6826] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 178.151201][ T6826] BTRFS info (device loop4): using free-space-tree [ 178.275658][ T6834] ip6gretap0: entered promiscuous mode [ 178.314528][ T6834] vlan2: entered promiscuous mode [ 179.409156][ T6859] loop5: detected capacity change from 0 to 8 [ 179.608020][ T5844] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 185.035139][ T6900] netlink: 'syz.3.215': attribute type 11 has an invalid length. [ 185.043054][ T6900] netlink: 224 bytes leftover after parsing attributes in process `syz.3.215'. [ 189.510011][ T6951] loop4: detected capacity change from 0 to 16 [ 189.601210][ T6951] erofs: Unknown parameter '' [ 190.072384][ T6954] loop3: detected capacity change from 0 to 2048 [ 190.218820][ T6959] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.278846][ T6954] NILFS (loop3): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 190.326037][ T6954] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=13) [ 190.377118][ T6954] Remounting filesystem read-only [ 190.421238][ T6954] NILFS (loop3): error -5 truncating bmap (ino=13) [ 190.461005][ T6962] loop0: detected capacity change from 0 to 8 [ 190.784334][ T5832] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 191.579426][ T6976] loop5: detected capacity change from 0 to 128 [ 191.607206][ T6976] FAT-fs (loop5): Directory bread(block 162) failed [ 191.613892][ T6976] FAT-fs (loop5): Directory bread(block 163) failed [ 191.639019][ T6976] FAT-fs (loop5): Directory bread(block 164) failed [ 191.666563][ T6976] FAT-fs (loop5): Directory bread(block 165) failed [ 191.701022][ T6976] FAT-fs (loop5): Directory bread(block 166) failed [ 191.710562][ T6979] netlink: 68 bytes leftover after parsing attributes in process `syz.3.235'. [ 191.729685][ T6976] FAT-fs (loop5): Directory bread(block 167) failed [ 191.868532][ T6976] FAT-fs (loop5): Directory bread(block 168) failed [ 192.276122][ T6976] FAT-fs (loop5): Directory bread(block 169) failed [ 194.327619][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.334088][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.376656][ T7019] loop4: detected capacity change from 0 to 8 [ 200.271018][ T7034] loop4: detected capacity change from 0 to 256 [ 200.512128][ T7034] FAT-fs (loop4): Directory bread(block 64) failed [ 200.573754][ T7034] FAT-fs (loop4): Directory bread(block 65) failed [ 200.601959][ T7034] FAT-fs (loop4): Directory bread(block 66) failed [ 200.737138][ T7034] FAT-fs (loop4): Directory bread(block 67) failed [ 200.917547][ T30] audit: type=1800 audit(1744462773.824:5): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.251" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 201.026111][ T7034] FAT-fs (loop4): Directory bread(block 68) failed [ 201.032721][ T7034] FAT-fs (loop4): Directory bread(block 69) failed [ 201.108084][ T7034] FAT-fs (loop4): Directory bread(block 70) failed [ 201.169606][ T7034] FAT-fs (loop4): Directory bread(block 71) failed [ 201.256733][ T7034] FAT-fs (loop4): Directory bread(block 72) failed [ 201.264702][ T7034] FAT-fs (loop4): Directory bread(block 73) failed [ 201.809142][ T7056] loop2: detected capacity change from 0 to 128 [ 201.934302][ T7056] FAT-fs (loop2): Directory bread(block 162) failed [ 201.992430][ T7056] FAT-fs (loop2): Directory bread(block 163) failed [ 202.115285][ T7056] FAT-fs (loop2): Directory bread(block 164) failed [ 202.335447][ T7056] FAT-fs (loop2): Directory bread(block 165) failed [ 202.567222][ T7056] FAT-fs (loop2): Directory bread(block 166) failed [ 202.616011][ T7056] FAT-fs (loop2): Directory bread(block 167) failed [ 202.658441][ T7056] FAT-fs (loop2): Directory bread(block 168) failed [ 202.716214][ T7056] FAT-fs (loop2): Directory bread(block 169) failed [ 203.141340][ T7073] loop0: detected capacity change from 0 to 8 [ 204.358431][ T7086] loop0: detected capacity change from 0 to 64 [ 205.739619][ T7086] overlay: filesystem on ./bus not supported [ 211.057675][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.254289][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 212.260764][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 212.309082][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 212.315294][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 213.654512][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.286'. [ 213.881631][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.334592][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.406870][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 214.417609][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.736058][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 214.901739][ T5889] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.937266][ T53] bridge_slave_1: left allmulticast mode [ 214.943147][ T53] bridge_slave_1: left promiscuous mode [ 214.947001][ T5889] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.965858][ T5889] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 215.002212][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.049422][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.051088][ T53] bridge_slave_0: left allmulticast mode [ 215.070512][ T5889] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 215.089126][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.116829][ T5889] usb 1-1: config 0 descriptor?? [ 215.157207][ T53] bridge_slave_0: left promiscuous mode [ 215.203017][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.395604][ T7196] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 215.616654][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 215.656033][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 215.736151][ T5889] usb 1-1: USB disconnect, device number 2 [ 219.273101][ T7227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.034485][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.175383][ T30] audit: type=1326 audit(1744462795.154:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 223.165453][ T30] audit: type=1326 audit(1744462795.184:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 223.190182][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.257272][ T30] audit: type=1326 audit(1744462795.184:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 223.315980][ T30] audit: type=1326 audit(1744462795.184:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 223.341837][ T53] bond0 (unregistering): Released all slaves [ 223.516005][ T30] audit: type=1326 audit(1744462795.184:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 223.969659][ T30] audit: type=1326 audit(1744462795.184:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 224.345963][ T30] audit: type=1326 audit(1744462795.184:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 224.417008][ T30] audit: type=1326 audit(1744462795.184:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 224.465912][ T30] audit: type=1326 audit(1744462795.184:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 224.591493][ T30] audit: type=1326 audit(1744462795.184:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f256478d169 code=0x7ffc0000 [ 225.866719][ T7278] netlink: 68 bytes leftover after parsing attributes in process `syz.3.315'. [ 226.795331][ T53] hsr_slave_0: left promiscuous mode [ 226.843163][ T53] hsr_slave_1: left promiscuous mode [ 226.866972][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.902543][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.952554][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.985201][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.094343][ T53] veth1_macvtap: left promiscuous mode [ 227.101284][ T53] veth0_macvtap: left promiscuous mode [ 227.112086][ T53] veth1_vlan: left promiscuous mode [ 227.123615][ T53] veth0_vlan: left promiscuous mode [ 229.117033][ T5852] Bluetooth: hci0: command 0x1003 tx timeout [ 229.123669][ T5836] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 229.824197][ T7322] loop2: detected capacity change from 0 to 512 [ 229.985760][ T7322] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.018540][ T7322] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 230.033843][ T7322] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 230.043682][ T7322] System zones: 0-2, 18-18, 34-34 [ 230.071244][ T7322] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 230.106881][ T7322] EXT4-fs (loop2): 1 truncate cleaned up [ 230.129768][ T7322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.304932][ T53] team0 (unregistering): Port device team_slave_1 removed [ 230.409411][ T53] team0 (unregistering): Port device team_slave_0 removed [ 230.424360][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.895489][ T7334] netlink: 68 bytes leftover after parsing attributes in process `syz.4.328'. [ 232.037543][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.045708][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.086724][ T7337] bridge0: entered allmulticast mode [ 232.153164][ T7338] bridge_slave_1: left allmulticast mode [ 233.560872][ T7342] loop2: detected capacity change from 0 to 262144 [ 233.595976][ T7342] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.331 (7342) [ 233.599858][ T7338] bridge_slave_1: left promiscuous mode [ 233.630532][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.666412][ T7342] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 233.678577][ T7342] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.688105][ T7342] BTRFS info (device loop2): using free-space-tree [ 234.004529][ T7338] bridge_slave_0: left allmulticast mode [ 234.010664][ T7338] bridge_slave_0: left promiscuous mode [ 234.021512][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.626081][ T7375] program syz.3.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.668985][ T5846] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 237.374236][ T7401] netlink: 'syz.2.336': attribute type 11 has an invalid length. [ 237.382254][ T7401] netlink: 224 bytes leftover after parsing attributes in process `syz.2.336'. [ 238.256838][ T7407] netlink: 68 bytes leftover after parsing attributes in process `syz.2.342'. [ 239.961209][ T7417] netlink: 'syz.2.344': attribute type 11 has an invalid length. [ 239.970240][ T7417] netlink: 224 bytes leftover after parsing attributes in process `syz.2.344'. [ 240.784314][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 240.784336][ T30] audit: type=1326 audit(1744462813.754:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 240.868490][ T7425] loop2: detected capacity change from 0 to 64 [ 240.916664][ T30] audit: type=1326 audit(1744462813.754:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 241.038679][ T30] audit: type=1326 audit(1744462813.754:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 241.151155][ T30] audit: type=1326 audit(1744462813.774:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 241.242150][ T30] audit: type=1326 audit(1744462813.794:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 241.296138][ T30] audit: type=1326 audit(1744462813.794:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 241.485615][ T30] audit: type=1326 audit(1744462813.794:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 242.554676][ T30] audit: type=1326 audit(1744462813.794:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 243.055906][ T30] audit: type=1326 audit(1744462813.834:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9e9018b9d7 code=0x7ffc0000 [ 243.083004][ T30] audit: type=1326 audit(1744462813.834:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.5.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9018d169 code=0x7ffc0000 [ 246.831808][ T7482] loop3: detected capacity change from 0 to 8 [ 247.816028][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 247.995961][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 248.001161][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 248.018250][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.056231][ T976] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.074420][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.223341][ T7504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.819022][ T7507] loop5: detected capacity change from 0 to 128 [ 249.821777][ T976] usb 5-1: config 0 descriptor?? [ 250.598197][ T976] usb 5-1: can't set config #0, error -71 [ 250.613117][ T7512] loop2: detected capacity change from 0 to 256 [ 250.626284][ T976] usb 5-1: USB disconnect, device number 4 [ 250.693109][ T7512] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 250.981125][ T5836] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 253.778509][ T7534] loop3: detected capacity change from 0 to 512 [ 254.478484][ T7534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.633960][ T7534] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.778395][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785398][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.008493][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.168906][ T7561] [ 256.171386][ T7561] ====================================================== [ 256.178445][ T7561] WARNING: possible circular locking dependency detected [ 256.185573][ T7561] 6.15.0-rc1-next-20250411-syzkaller #0 Not tainted [ 256.192275][ T7561] ------------------------------------------------------ [ 256.199304][ T7561] syz.5.385/7561 is trying to acquire lock: [ 256.205197][ T7561] ffffffff90103248 (rtnl_mutex){+.+.}-{4:4}, at: start_sync_thread+0xde/0x2d60 [ 256.214199][ T7561] [ 256.214199][ T7561] but task is already holding lock: [ 256.221563][ T7561] ffff88807bd28aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 256.231679][ T7561] [ 256.231679][ T7561] which lock already depends on the new lock. [ 256.231679][ T7561] [ 256.242087][ T7561] [ 256.242087][ T7561] the existing dependency chain (in reverse order) is: [ 256.251116][ T7561] [ 256.251116][ T7561] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 256.259753][ T7561] lock_acquire+0x116/0x2f0 [ 256.264803][ T7561] __mutex_lock+0x1a5/0x10c0 [ 256.269922][ T7561] smc_switch_to_fallback+0x35/0xda0 [ 256.275736][ T7561] smc_sendmsg+0x11f/0x530 [ 256.280692][ T7561] __sock_sendmsg+0x221/0x270 [ 256.285901][ T7561] __sys_sendto+0x365/0x4c0 [ 256.290937][ T7561] __x64_sys_sendto+0xde/0x100 [ 256.296241][ T7561] do_syscall_64+0xf3/0x230 [ 256.301285][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.307718][ T7561] [ 256.307718][ T7561] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 256.315384][ T7561] lock_acquire+0x116/0x2f0 [ 256.320427][ T7561] lock_sock_nested+0x48/0x100 [ 256.325717][ T7561] do_ip_setsockopt+0x17e9/0x39c0 [ 256.331273][ T7561] ip_setsockopt+0x63/0x100 [ 256.336301][ T7561] do_sock_setsockopt+0x3b1/0x710 [ 256.341856][ T7561] __x64_sys_setsockopt+0x1ea/0x270 [ 256.347584][ T7561] do_syscall_64+0xf3/0x230 [ 256.352615][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.359037][ T7561] [ 256.359037][ T7561] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 256.366262][ T7561] validate_chain+0xa69/0x24e0 [ 256.371643][ T7561] __lock_acquire+0xad5/0xd80 [ 256.376845][ T7561] lock_acquire+0x116/0x2f0 [ 256.381879][ T7561] __mutex_lock+0x1a5/0x10c0 [ 256.386996][ T7561] start_sync_thread+0xde/0x2d60 [ 256.392458][ T7561] do_ip_vs_set_ctl+0x48e/0xe50 [ 256.397833][ T7561] nf_setsockopt+0x295/0x2c0 [ 256.402947][ T7561] smc_setsockopt+0x25c/0xd50 [ 256.408144][ T7561] do_sock_setsockopt+0x3b1/0x710 [ 256.413694][ T7561] __x64_sys_setsockopt+0x1ea/0x270 [ 256.419419][ T7561] do_syscall_64+0xf3/0x230 [ 256.424452][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.430870][ T7561] [ 256.430870][ T7561] other info that might help us debug this: [ 256.430870][ T7561] [ 256.441114][ T7561] Chain exists of: [ 256.441114][ T7561] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 256.441114][ T7561] [ 256.454703][ T7561] Possible unsafe locking scenario: [ 256.454703][ T7561] [ 256.462159][ T7561] CPU0 CPU1 [ 256.467530][ T7561] ---- ---- [ 256.472894][ T7561] lock(&smc->clcsock_release_lock); [ 256.478277][ T7561] lock(sk_lock-AF_INET); [ 256.485235][ T7561] lock(&smc->clcsock_release_lock); [ 256.493131][ T7561] lock(rtnl_mutex); [ 256.497120][ T7561] [ 256.497120][ T7561] *** DEADLOCK *** [ 256.497120][ T7561] [ 256.505289][ T7561] 1 lock held by syz.5.385/7561: [ 256.510234][ T7561] #0: ffff88807bd28aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 256.520934][ T7561] [ 256.520934][ T7561] stack backtrace: [ 256.526878][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.5.385 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 256.526904][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.526918][ T7561] Call Trace: [ 256.526928][ T7561] [ 256.526936][ T7561] dump_stack_lvl+0x241/0x360 [ 256.526971][ T7561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.526996][ T7561] ? __pfx__printk+0x10/0x10 [ 256.527020][ T7561] ? print_lock+0x171/0x1a0 [ 256.527041][ T7561] print_circular_bug+0x2e1/0x300 [ 256.527063][ T7561] check_noncircular+0x142/0x160 [ 256.527085][ T7561] validate_chain+0xa69/0x24e0 [ 256.527126][ T7561] __lock_acquire+0xad5/0xd80 [ 256.527147][ T7561] lock_acquire+0x116/0x2f0 [ 256.527171][ T7561] ? start_sync_thread+0xde/0x2d60 [ 256.527194][ T7561] __mutex_lock+0x1a5/0x10c0 [ 256.527213][ T7561] ? start_sync_thread+0xde/0x2d60 [ 256.527232][ T7561] ? sched_clock_cpu+0x77/0x4d0 [ 256.527250][ T7561] ? start_sync_thread+0xde/0x2d60 [ 256.527268][ T7561] ? __pfx___mutex_lock+0x10/0x10 [ 256.527296][ T7561] start_sync_thread+0xde/0x2d60 [ 256.527315][ T7561] ? lockdep_hardirqs_on+0x9d/0x150 [ 256.527334][ T7561] ? rcu_is_watching+0x15/0xb0 [ 256.527353][ T7561] ? trace_sched_exit_tp+0x3c/0x120 [ 256.527377][ T7561] ? __schedule+0x1bb8/0x5250 [ 256.527404][ T7561] ? __pfx_start_sync_thread+0x10/0x10 [ 256.527436][ T7561] do_ip_vs_set_ctl+0x48e/0xe50 [ 256.527460][ T7561] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 256.527488][ T7561] ? __mutex_unlock_slowpath+0x229/0x800 [ 256.527511][ T7561] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.527533][ T7561] ? __pfx___mutex_lock+0x10/0x10 [ 256.527557][ T7561] nf_setsockopt+0x295/0x2c0 [ 256.527578][ T7561] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 256.527597][ T7561] smc_setsockopt+0x25c/0xd50 [ 256.527616][ T7561] ? __pfx_aa_sk_perm+0x10/0x10 [ 256.527631][ T7561] ? __pfx_smc_setsockopt+0x10/0x10 [ 256.527647][ T7561] ? aa_sock_opt_perm+0xfd/0x1b0 [ 256.527667][ T7561] ? __pfx_smc_setsockopt+0x10/0x10 [ 256.527683][ T7561] do_sock_setsockopt+0x3b1/0x710 [ 256.527710][ T7561] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 256.527731][ T7561] ? __fget_files+0x2a/0x420 [ 256.527758][ T7561] ? __fget_files+0x39d/0x420 [ 256.527782][ T7561] ? __fget_files+0x2a/0x420 [ 256.527810][ T7561] __x64_sys_setsockopt+0x1ea/0x270 [ 256.527835][ T7561] do_syscall_64+0xf3/0x230 [ 256.527855][ T7561] ? clear_bhb_loop+0x45/0xa0 [ 256.527874][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.527895][ T7561] RIP: 0033:0x7f9e9018d169 [ 256.527915][ T7561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.527930][ T7561] RSP: 002b:00007f9e90f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.527949][ T7561] RAX: ffffffffffffffda RBX: 00007f9e903a5fa0 RCX: 00007f9e9018d169 [ 256.527962][ T7561] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 256.527972][ T7561] RBP: 00007f9e9020e990 R08: 0000000000000018 R09: 0000000000000000 [ 256.527983][ T7561] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.527993][ T7561] R13: 0000000000000000 R14: 00007f9e903a5fa0 R15: 00007ffdb74401b8 [ 256.528012][ T7561] [ 256.920183][ T7565] loop3: detected capacity change from 0 to 128 [ 256.932331][ T7567] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 257.153598][ T7565] loop3: detected capacity change from 0 to 32768 [ 257.163916][ T7565] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.384 (7565) [ 257.182556][ T7565] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 257.192943][ T7565] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 257.202425][ T7565] BTRFS info (device loop3): using free-space-tree [ 257.321354][ T5832] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8