last executing test programs: 3m56.214270407s ago: executing program 4 (id=668): mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0x40044620, 0x0) 3m54.633374118s ago: executing program 4 (id=670): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$eJzs3E1sVEUcAPD/e/3i01bEDxC0ikbiR0vLhxy8aDTxoImJHjCealsIUqihNRFCFD3g0ZB4Nx5NvJt40otRD8bEq94NCTFcQE9rZve9sl12S8tuWXB/v+RtZ96bZua/86Y7O7PbAHrWaHrIIrZExB8RMVzLLi8wWvtx7cq56X+unJvOolJ58++sWu7qlXPTZdHy9zbXMpVKxFBKDjWp98I7EVNzc7Oni/z44sn3xxfOnH3u+MmpY7PHZk9NHj58YP/uwUOTB9uKLy9+priu7vxofteOV9+++Pr0kYvv/vxNau+W4np9HLckRdtgtPbsNno0PTzZVmV3lF/Tw9a6E1l/68Jjt6FBrF5fRKTuGqiO/+Hoi41L14bjlU+72jhgXVUqlUqz1+fC+QrwP5ZFt1sAdEf5Qp/e/5bHbZp63BEuv1h7A5TivlYctSv9S2sHAw3vbztpNCKOnP/3y3REJ9YhAABu4vs0/3m22fwvjwfqyt1T7KGMRMS9EbEtIu6LiO0RcX9EteyDEfHQGutv3CG5cf6TX7qlwFYpzf9eKPa2ls//ytlfjPQVua3V+Aeyo8fnZvcVz8neGBhK+YkV6vjh5d8/L9MbGq7Vz//Skeov54JFOy71NyzQzUwtTrUbd+nyJxE7+5vFn0W5jZNFxI6I2HmLdRx/+utdra7dPP4VrLDPtFqVryKeqvX/+VgW//WuylruT048f2jy4PiGmJvdN17eFTf65bcLb7Sqv634OyD1/6am9//SLvBItiFi4czZE9X92oW113Hhz8/qxvSy3eUUf/5txJrv/8HsrWp6sDj34dTi4umJiMHstRvPT17/3TJflk/x793TfPxvq2vxwxGRbuLdEfFIsYmb+u6xiHg8IvasEP9PLz3xXqtrrft/hVX5Dkrxz9ys/6O+/9ee6Dvx43drj7+U+v9ANbW3OLOav3+rbWA7zx0AAADcLfLqZ+CzfGwpnedjY7XP8G+PTfnc/MLiM0fnPzg1U/us/EgM5OVK13DdeuhEsTZc5icb8vuLdeMv+jZW82PT83Mz3Q4eetzmFuM/+auv260D1l0H9tGAu5TxD73L+IfeZfxD7zL+oXc1G/8fd6EdwO3n9R96l/EPvcv4h95l/ENPavnd+Lytr/x3OVH+74Q7pT1dSmxczyoi736APZHoX+/beKjppS7/YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//YKPiyQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 3m49.320160573s ago: executing program 4 (id=680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETLINK(r2, 0x400454cd, 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7fff, 0x0, r1, 0x165, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x9, 0x2b76d11d, 0x5}, 0x10, 0x19f0e, r0, 0x2, 0x0, &(0x7f0000000780)=[{0x0, 0x4, 0xe}, {}]}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x8, 0x6, 0x7ff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2m41.907266424s ago: executing program 5 (id=747): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_clone3(0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x880, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) 2m36.881980995s ago: executing program 5 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) syz_usbip_server_init(0x5) ioperm(0x0, 0xb2, 0x4) io_setup(0x80000000, &(0x7f0000000180)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010008000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="400202030121203eb30300"], 0x6) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x3c}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@broadcast, @local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x600, 0x0, 0x4, 0x0, @empty=0xd4b6, @multicast1}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) 2m34.950978635s ago: executing program 5 (id=756): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x3}, 0x20) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x72d57cb5528fe5f3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001439) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x2000000b) close(r3) close(r4) 2m34.063605277s ago: executing program 5 (id=760): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000a95a6e870200010000000008004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 2m32.801714097s ago: executing program 5 (id=763): mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000000) memfd_create(&(0x7f00000000c0)='.-&{\\---}\'^:\x00', 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, &(0x7f00000051c0)) io_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)) truncate(&(0x7f0000001980)='./file2\x00', 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) memfd_create(0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0xfffffffffffffffd, 0x58) 2m30.93244561s ago: executing program 5 (id=766): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8c3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x500, 0x0) 1m45.886235375s ago: executing program 3 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240), 0x0, 0x0, 0x0) 42.806412914s ago: executing program 0 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x4000000, {0x2, 0x1}, {0x2, 0x4, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x8000}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40042, 0x0) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) r2 = dup(0xffffffffffffffff) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 37.072943789s ago: executing program 0 (id=922): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000090) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000002240)=@updpolicy={0x1c8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {}, {0xfffffffffffffffe, 0x0, 0x8001}}, [@policy_type={0xa, 0x10, {0x1}}, @tmpl={0x104, 0x5, [{{@in=@dev, 0x0, 0x32}, 0x2, @in6=@private1, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in6=@loopback}, {{@in6=@remote, 0x0, 0x32}, 0x2, @in6=@private0, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@private0, 0x0, 0x1, 0x0, 0x0, 0x9}]}]}, 0x1c8}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0xd, 0x0, 0x1, 0x3, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x6c}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() syz_open_dev$sg(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 16.433751044s ago: executing program 0 (id=931): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x2}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) 10.236482625s ago: executing program 3 (id=842): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff3ae644850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x24, 0x7, @val=@iter={&(0x7f0000000140), 0x10}}, 0x40) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@link_local, @random="a10824cc01c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x2c, 0x0, @dev, @mcast2}}}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb8900180000fe8d0000000000000001fc02000000000000000000000000000000010000000000000401000101"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="000000000000000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0) 10.234898501s ago: executing program 0 (id=934): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x10000a007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfe6f) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0), 0xfea7) write$cgroup_subtree(r5, 0x0, 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r2}) 10.225006418s ago: executing program 1 (id=935): openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x4, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x5}, 0x1c}}], 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 10.217648134s ago: executing program 2 (id=936): r0 = socket$inet6(0xa, 0x806, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chmod(0x0, 0x0) listen(r0, 0x3) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) 8.931452881s ago: executing program 3 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20}, 0x20) sendfile(r1, r0, 0x0, 0x2c62) sched_setaffinity(0x0, 0x0, 0x0) getpid() 8.86603948s ago: executing program 2 (id=924): r0 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) syz_emit_vhci(0x0, 0x17) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x4028111, r4, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000000)={0x5f, 0x19, &(0x7f0000000240)="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"}) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) 8.865681283s ago: executing program 4 (id=692): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) eventfd(0x6) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000340)={[{@grpquota}, {@nojournal_checksum}, {@nodelalloc}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfb, 0x4b4, &(0x7f0000001640)="$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") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 7.712645999s ago: executing program 2 (id=925): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) pivot_root(&(0x7f0000000180)='./bus/file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 7.640702718s ago: executing program 3 (id=926): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64, @ANYRES32, @ANYBLOB="c1f2a76544c59866ac8c487b2dda29292062a54819bb2a570867a105a334323aae0fa2cbe24fe923d0833aa072cabbdaca17799f8e3361e58e58405b1eb4589aa06346b5ca447050557237ada791d9bdcee30f680870a9945af38ff5831e42da6a50310dda88975e5e1488c76da81842973f561be9cb897f2367509f6683fd4f8e6c4ff1bf629dee8d260810524ed5292b22f5061ca91c3fd4965d3984b423723daed71f6b54aebc36b480ba039f3925b46c865b765449e3803abb32b6a881dcee196ca1727afb3392", @ANYRESHEX], 0x1, 0x1a2, &(0x7f0000000000)="$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") bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 7.629779074s ago: executing program 1 (id=927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={0x0, 0x0}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r2}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000005c0)={r5, 0x4, 0x8c8c, 0x1}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000600)={r5, 0x81, 0x8, 0x0, 0x2c, 0x6}, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r6, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x58}}, 0x0) 7.078198645s ago: executing program 2 (id=928): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000018c0)=0x13) r6 = dup(r5) ioctl$TCXONC(r6, 0x540a, 0x2) 7.075639383s ago: executing program 1 (id=929): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021e00ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0x0, 'd'}, @global=@item_4={0x3, 0x1, 0x0, "05007948"}, @main=@item_4={0x3, 0x0, 0xb, "0577f5d2"}, @local=@item_012={0x2, 0x2, 0x0, "ddbc"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x4b49, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) gettid() getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}}, &(0x7f0000003ff6)='GPL\x00'}, 0x90) execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) 6.875792126s ago: executing program 4 (id=930): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000b80)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) 6.2018296s ago: executing program 0 (id=933): r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xd8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x5, 0xd00, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x2}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x0) r2 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x15) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x114, 0x0, &(0x7f0000000700), &(0x7f0000000340)) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000780), 0x2, 0x2) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000600)=""/24, 0x18}], 0x1) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) 4.20327075s ago: executing program 2 (id=937): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}}) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x0, 0xffffffff, 0xfffffff9}}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="738700000000000000000100000008000100000000000c0006000000000001"], 0x30}}, 0x0) 3.315967116s ago: executing program 1 (id=938): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/audio#\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x40, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6dd3c3d"}, 0x0, 0x1, {0x0}}) 3.313673229s ago: executing program 3 (id=939): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000140)='./bus/file0\x00', 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/105, 0x69) 1.942064922s ago: executing program 2 (id=940): r0 = bpf$PROG_LOAD(0x5, 0x0, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@filestreams}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb862, &(0x7f0000017140)="$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") openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x220140, 0x0) r1 = getpid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x31) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 1.935296034s ago: executing program 0 (id=941): socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r0 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\xba\x89#=2G0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x200401) fallocate(r0, 0x0, 0x0, 0x200401) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1.894764309s ago: executing program 1 (id=942): dup(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x2, 0x3, 0x21) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8004, 0x0) 109.087273ms ago: executing program 4 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20}, 0x20) sendfile(r1, r0, 0x0, 0x2c62) sched_setaffinity(0x0, 0x0, 0x0) getpid() 100.352846ms ago: executing program 3 (id=954): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2000, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$sndmidi(0x0, 0xca, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@mask_fadd={0x58, 0x10c, 0x8, {{}, 0x0, 0x0}}], 0x58}, 0x0) io_setup(0x0, 0x0) 0s ago: executing program 1 (id=944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e0b1ac9"], 0xe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000a80)={[{@min_batch_time={'min_batch_time', 0x3d, 0xeb92}}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@nolazytime}, {@errors_continue}]}, 0x9, 0x635, &(0x7f0000001a80)="$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") kernel console output (not intermixed with test programs): T9114] hpfs: bad mount options. [ 603.912321][ T8] f81534a_ctrl 2-1:0.0: failed to set register 0x116: -5 [ 603.927692][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.936264][ T8] f81534a_ctrl 2-1:0.0: failed to enable ports: -5 [ 603.942646][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.946217][ T8] f81534a_ctrl 2-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 603.988514][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.001253][ T9076] chnl_net:caif_netlink_parms(): no params data found [ 604.001579][ T8] usb 2-1: USB disconnect, device number 10 [ 604.046388][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.062719][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.109453][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.129452][ T8840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.142868][ T5257] Bluetooth: hci2: command tx timeout [ 604.154068][ T8840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.179976][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.187485][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.214189][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.430111][ T8978] hsr_slave_0: entered promiscuous mode [ 604.438988][ T8978] hsr_slave_1: entered promiscuous mode [ 604.447513][ T8978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.457062][ T8978] Cannot create hsr debugfs directory [ 604.661378][ T9119] loop1: detected capacity change from 0 to 764 [ 604.721532][ T9119] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 604.758342][ T9045] hsr_slave_0: entered promiscuous mode [ 604.776503][ T9045] hsr_slave_1: entered promiscuous mode [ 604.799249][ T9045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.812754][ T9045] Cannot create hsr debugfs directory [ 605.367010][ T5519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.035171][ T5519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.205859][ T5519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.222968][ T5257] Bluetooth: hci2: command tx timeout [ 606.235439][ T9076] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.242923][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.250296][ T9076] bridge_slave_0: entered allmulticast mode [ 606.259256][ T9076] bridge_slave_0: entered promiscuous mode [ 606.358580][ T5519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.379367][ T9076] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.390896][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.400589][ T9076] bridge_slave_1: entered allmulticast mode [ 606.411258][ T9076] bridge_slave_1: entered promiscuous mode [ 606.609797][ T9050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.798451][ T9076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.828724][ T9076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.990199][ T9050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.040762][ T9129] loop1: detected capacity change from 0 to 1024 [ 607.064405][ T9129] hfsplus: unable to parse mount options [ 607.169146][ T9076] team0: Port device team_slave_0 added [ 607.182303][ T9076] team0: Port device team_slave_1 added [ 607.289535][ T9050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.446238][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.462673][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.504621][ T9076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.533598][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.540584][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.569897][ T9076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.605609][ T9132] syz.1.734 (9132): attempted to duplicate a private mapping with mremap. This is not supported. [ 607.666161][ T9050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.679082][ T9134] exFAT-fs (nullb0): invalid boot record signature [ 607.689294][ T9134] exFAT-fs (nullb0): failed to read boot sector [ 607.702948][ T9134] exFAT-fs (nullb0): failed to recognize exfat type [ 607.855882][ T5519] bridge_slave_1: left allmulticast mode [ 607.873289][ T5519] bridge_slave_1: left promiscuous mode [ 607.879088][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.900692][ T5519] bridge_slave_0: left allmulticast mode [ 607.907168][ T5519] bridge_slave_0: left promiscuous mode [ 607.913221][ T5519] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.930097][ T9136] loop1: detected capacity change from 0 to 2048 [ 607.945425][ T9136] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 607.956158][ T5519] bridge_slave_1: left allmulticast mode [ 607.959314][ T9136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.961897][ T5519] bridge_slave_1: left promiscuous mode [ 608.013133][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.039075][ T5519] bridge_slave_0: left allmulticast mode [ 608.045249][ T5519] bridge_slave_0: left promiscuous mode [ 608.051187][ T5519] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.076581][ T5519] bridge_slave_1: left allmulticast mode [ 608.082256][ T5519] bridge_slave_1: left promiscuous mode [ 608.090414][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.120162][ T5519] bridge_slave_0: left allmulticast mode [ 608.126502][ T5519] bridge_slave_0: left promiscuous mode [ 608.143145][ T5519] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.881630][ T5519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.904311][ T5519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.917506][ T5519] bond0 (unregistering): Released all slaves [ 610.132973][ T5519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.153926][ T5519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.167080][ T5519] bond0 (unregistering): Released all slaves [ 610.355066][ T5519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.366986][ T5519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.379199][ T5519] bond0 (unregistering): Released all slaves [ 610.411623][ T9076] hsr_slave_0: entered promiscuous mode [ 610.447082][ T9076] hsr_slave_1: entered promiscuous mode [ 610.464947][ T9076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.472534][ T9076] Cannot create hsr debugfs directory [ 610.651642][ T8840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.609119][ T8840] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.715438][ T9050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 611.825692][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.832932][ T5524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.859362][ T9050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 611.882110][ T9050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 612.006331][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.013682][ T5524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.083817][ T9050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 612.149721][ T9150] loop1: detected capacity change from 0 to 512 [ 612.173460][ T9150] EXT4-fs: Ignoring removed mblk_io_submit option [ 612.193810][ T9150] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 612.242357][ T9150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 612.250563][ T9150] System zones: 1-12 [ 612.261563][ T9150] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.739: corrupted in-inode xattr: e_value size too large [ 612.281513][ T9150] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.739: couldn't read orphan inode 15 (err -117) [ 612.312029][ T9150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.055709][ T7713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.182405][ T9156] loop1: detected capacity change from 0 to 16 [ 613.215198][ T9156] erofs: (device loop1): mounted with root inode @ nid 36. [ 614.101278][ T5519] hsr_slave_0: left promiscuous mode [ 614.115566][ T5519] hsr_slave_1: left promiscuous mode [ 614.126202][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.134230][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.145391][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.153018][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.193124][ T5519] hsr_slave_0: left promiscuous mode [ 614.211496][ T5519] hsr_slave_1: left promiscuous mode [ 614.229782][ T9162] loop1: detected capacity change from 0 to 512 [ 614.242543][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.250421][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.273652][ T9162] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 614.273887][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.281055][ T9162] UDF-fs: Scanning with blocksize 512 failed [ 614.295966][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.311302][ T9162] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 614.320328][ T9162] UDF-fs: Scanning with blocksize 1024 failed [ 614.327313][ T9162] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 614.335042][ T9162] UDF-fs: Scanning with blocksize 2048 failed [ 614.341216][ T5519] hsr_slave_0: left promiscuous mode [ 614.342093][ T9162] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 614.356787][ T5519] hsr_slave_1: left promiscuous mode [ 614.364239][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.371689][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.371810][ T9162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 614.394913][ T5519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.402328][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.486689][ T5519] veth1_macvtap: left promiscuous mode [ 614.492284][ T5519] veth0_macvtap: left promiscuous mode [ 614.498105][ T5519] veth1_vlan: left promiscuous mode [ 614.503597][ T5519] veth0_vlan: left promiscuous mode [ 614.523530][ T5519] veth1_macvtap: left promiscuous mode [ 614.529094][ T5519] veth0_macvtap: left promiscuous mode [ 614.551203][ T5519] veth1_vlan: left promiscuous mode [ 614.556988][ T5519] veth0_vlan: left promiscuous mode [ 614.573747][ T5519] veth1_macvtap: left promiscuous mode [ 614.579324][ T5519] veth0_macvtap: left promiscuous mode [ 614.586188][ T5519] veth1_vlan: left promiscuous mode [ 614.591566][ T5519] veth0_vlan: left promiscuous mode [ 615.294513][ T29] audit: type=1326 audit(1725647211.318:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9164 comm="syz.1.742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x0 [ 615.894823][ T5519] team0 (unregistering): Port device team_slave_1 removed [ 615.968606][ T5519] team0 (unregistering): Port device team_slave_0 removed [ 616.557952][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 616.582486][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 616.602687][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 616.612496][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 616.625195][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 616.632680][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 617.407870][ T5519] team0 (unregistering): Port device team_slave_1 removed [ 617.482362][ T5519] team0 (unregistering): Port device team_slave_0 removed [ 618.657849][ T5519] team0 (unregistering): Port device team_slave_1 removed [ 618.708459][ T54] Bluetooth: hci3: command tx timeout [ 618.738313][ T5519] team0 (unregistering): Port device team_slave_0 removed [ 619.382991][ T9050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.512218][ T9050] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.546360][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.553974][ T5524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.584398][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.591647][ T5524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.275416][ T9045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 620.308499][ T9045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 620.324466][ T9045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 620.413066][ T9045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 620.487347][ T9050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.789241][ T54] Bluetooth: hci3: command tx timeout [ 620.856815][ T9050] veth0_vlan: entered promiscuous mode [ 620.892272][ T9050] veth1_vlan: entered promiscuous mode [ 620.905474][ T9168] chnl_net:caif_netlink_parms(): no params data found [ 621.144740][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.152017][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.160671][ T9168] bridge_slave_0: entered allmulticast mode [ 621.168776][ T9168] bridge_slave_0: entered promiscuous mode [ 621.180255][ T9168] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.188368][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.196085][ T9168] bridge_slave_1: entered allmulticast mode [ 621.204008][ T9168] bridge_slave_1: entered promiscuous mode [ 621.368292][ T9168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.381356][ T8978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 621.402113][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.436888][ T9168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.448529][ T8978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 621.466567][ T8978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 621.478175][ T8978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 621.509366][ T9050] veth0_macvtap: entered promiscuous mode [ 621.587395][ T9168] team0: Port device team_slave_0 added [ 621.617730][ T9050] veth1_macvtap: entered promiscuous mode [ 621.647408][ T9168] team0: Port device team_slave_1 added [ 621.742304][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.750309][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.777307][ T9168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.861936][ T9076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 621.877179][ T9168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.886598][ T9168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.918015][ T9168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.941523][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.958660][ T9076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 621.970505][ T9076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 622.044152][ T9076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 622.079771][ T2544] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.087027][ T2544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.134274][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.149622][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.159757][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.177010][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.187172][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.199172][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.211211][ T9050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.309241][ T2544] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.316489][ T2544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.342449][ T9168] hsr_slave_0: entered promiscuous mode [ 622.352860][ T9168] hsr_slave_1: entered promiscuous mode [ 622.359245][ T9168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.372621][ T9168] Cannot create hsr debugfs directory [ 622.395596][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.412988][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.423355][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.434188][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.444444][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.455277][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.468421][ T9050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.481189][ T9050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.490541][ T9050] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.503650][ T9050] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.515501][ T9050] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.863510][ T54] Bluetooth: hci3: command tx timeout [ 623.163787][ T5519] bridge_slave_1: left allmulticast mode [ 623.169510][ T5519] bridge_slave_1: left promiscuous mode [ 623.185471][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.200847][ T5519] bridge_slave_0: left allmulticast mode [ 623.207116][ T5519] bridge_slave_0: left promiscuous mode [ 623.214925][ T5519] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.693406][ T5519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.707283][ T5519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.723118][ T5519] bond0 (unregistering): Released all slaves [ 623.930159][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.989979][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.998175][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.014754][ T5519] hsr_slave_0: left promiscuous mode [ 624.020723][ T5519] hsr_slave_1: left promiscuous mode [ 624.034514][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.048413][ T5519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.456865][ T5519] team0 (unregistering): Port device team_slave_1 removed [ 624.517314][ T5519] team0 (unregistering): Port device team_slave_0 removed [ 624.944027][ T54] Bluetooth: hci3: command tx timeout [ 625.115935][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.128360][ T5512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.153251][ T9076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.161980][ T5512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.309761][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.401401][ T9076] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.430881][ T2571] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.438291][ T2571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.548451][ T2571] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.555777][ T2571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.601819][ T5526] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.609053][ T5526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.667949][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.675186][ T5503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.703614][ T5512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.749326][ T5512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.961021][ T29] audit: type=1326 audit(1725647221.978:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 626.012431][ T29] audit: type=1326 audit(1725647221.978:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 626.037771][ T29] audit: type=1326 audit(1725647221.978:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 626.084013][ T8978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.122806][ T29] audit: type=1326 audit(1725647221.978:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 626.199087][ T29] audit: type=1326 audit(1725647221.978:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 626.237426][ T9168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 626.292784][ T29] audit: type=1326 audit(1725647221.978:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 626.347734][ T5237] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 626.348521][ T9168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 626.384536][ T29] audit: type=1326 audit(1725647221.978:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 626.763118][ T29] audit: type=1326 audit(1725647221.988:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 627.013844][ T9045] veth0_vlan: entered promiscuous mode [ 627.060457][ T29] audit: type=1326 audit(1725647221.988:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 627.135941][ T9168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 627.167351][ T9168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 627.184565][ T29] audit: type=1326 audit(1725647221.988:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.3.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 627.274086][ T9045] veth1_vlan: entered promiscuous mode [ 627.324998][ T5237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.354314][ T5237] usb 4-1: config 0 has no interfaces? [ 627.367484][ T5237] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.393977][ T5237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.413008][ T5237] usb 4-1: config 0 descriptor?? [ 627.576409][ T9045] veth0_macvtap: entered promiscuous mode [ 627.613774][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.629066][ T9045] veth1_macvtap: entered promiscuous mode [ 627.712092][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.723192][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.734758][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.745868][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.760589][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.782766][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.802690][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.823293][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.850804][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.900274][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.906631][ T9194] loop3: detected capacity change from 0 to 8192 [ 627.920690][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.941738][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.962721][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.981075][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.007093][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.019952][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.031582][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.053055][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.078637][ T9194] loop3: p1 < > p2 p3 p4 < p5 > [ 628.097154][ T9045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.118285][ T9194] loop3: p3 size 16744448 extends beyond EOD, truncated [ 628.132653][ T9045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.152784][ T9045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.166922][ T9045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.238497][ T7812] usb 4-1: USB disconnect, device number 8 [ 628.280094][ T9076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.410466][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.538573][ T9168] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.602054][ T2544] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.609294][ T2544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.671770][ T5528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.682309][ T5528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.692298][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.699548][ T5524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.731404][ T8978] veth0_vlan: entered promiscuous mode [ 628.776171][ T9076] veth0_vlan: entered promiscuous mode [ 628.787470][ T5528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.800152][ T5528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.830046][ T9076] veth1_vlan: entered promiscuous mode [ 628.887051][ T8978] veth1_vlan: entered promiscuous mode [ 629.243636][ T9076] veth0_macvtap: entered promiscuous mode [ 629.324207][ T9218] loop3: detected capacity change from 0 to 128 [ 629.353427][ T9076] veth1_macvtap: entered promiscuous mode [ 629.428992][ T8978] veth0_macvtap: entered promiscuous mode [ 629.485927][ T8978] veth1_macvtap: entered promiscuous mode [ 629.848341][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.881489][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.918288][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.987871][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.052264][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.073093][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.103454][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.123480][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.152642][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.166437][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.199239][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.219847][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.453617][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.482721][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.662630][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.792544][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.855036][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.172687][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.192688][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.257064][ T9076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.054913][ T9076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.093986][ T9076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.196003][ T9076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.278474][ T9076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.332930][ T9076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.422636][ T9076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.665616][ T9257] Bluetooth: MGMT ver 1.23 [ 636.712401][ T9255] loop3: detected capacity change from 0 to 8 [ 636.724003][ T9168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.748799][ T9246] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 636.755346][ T9246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 636.796275][ T9255] squashfs image failed sanity check [ 636.796375][ T9246] vhci_hcd vhci_hcd.0: Device attached [ 637.179090][ T5526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.191006][ T8] usb 20-1: SetAddress Request (2) to port 0 [ 637.207509][ T9259] vhci_hcd: connection closed [ 637.227396][ T2544] vhci_hcd: stop threads [ 637.243484][ T8] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 637.258307][ T5526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.288502][ T2544] vhci_hcd: release socket [ 637.300370][ T2544] vhci_hcd: disconnect device [ 637.608988][ T5257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.623775][ T5257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 637.647160][ T5257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.670283][ T5257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.678152][ T5257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.686262][ T5257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.857001][ T5524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.875859][ T9168] veth0_vlan: entered promiscuous mode [ 637.890359][ T5524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.374766][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 638.374789][ T29] audit: type=1326 audit(1725647234.398:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.408885][ T29] audit: type=1326 audit(1725647234.398:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.410326][ T9274] loop0: detected capacity change from 0 to 4096 [ 638.441875][ T29] audit: type=1326 audit(1725647234.468:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.470473][ T29] audit: type=1326 audit(1725647234.468:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.497955][ T9274] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 638.507862][ T9168] veth1_vlan: entered promiscuous mode [ 638.514003][ T29] audit: type=1326 audit(1725647234.468:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.609303][ T29] audit: type=1326 audit(1725647234.468:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.625482][ T9274] ntfs3: loop0: Failed to initialize $Secure::$SII (-22). [ 638.633519][ T29] audit: type=1326 audit(1725647234.468:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.662040][ T29] audit: type=1326 audit(1725647234.468:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.686118][ T9274] ntfs3: loop0: Failed to initialize $Secure (-22). [ 638.687605][ T29] audit: type=1326 audit(1725647234.468:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 638.760683][ T29] audit: type=1326 audit(1725647234.468:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9277 comm="syz.1.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 639.171844][ T9286] loop3: detected capacity change from 0 to 4096 [ 639.206375][ T9286] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 639.317827][ T9286] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 639.361705][ T9286] ntfs3: loop3: Failed to load $MFT (-22). [ 639.434770][ T9168] veth0_macvtap: entered promiscuous mode [ 639.564075][ T9168] veth1_macvtap: entered promiscuous mode [ 639.752171][ T5257] Bluetooth: hci0: command tx timeout [ 640.046334][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 640.329788][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.399378][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.439814][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.492952][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.524053][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.576946][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.534929][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.573188][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.579069][ T9306] loop5: detected capacity change from 0 to 2048 [ 641.614683][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.614994][ T9306] EXT4-fs: Ignoring removed mblk_io_submit option [ 641.653173][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.669952][ T9310] loop3: detected capacity change from 0 to 512 [ 641.695708][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.712886][ T9306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.767744][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.794012][ T9310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.821453][ T9306] EXT4-fs (loop5): shut down requested (0) [ 641.827916][ T5257] Bluetooth: hci0: command tx timeout [ 641.859790][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.872975][ T9310] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.874490][ T9316] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.763: bg 0: block 234: padding at end of block bitmap is not set [ 641.916035][ T9316] EXT4-fs (loop5): Remounting filesystem read-only [ 642.311814][ T9266] chnl_net:caif_netlink_parms(): no params data found [ 642.319401][ T8] usb 20-1: device descriptor read/8, error -110 [ 642.329979][ T9045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.460338][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.522646][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.558879][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.642230][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.675731][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.722770][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.770914][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.807405][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.837085][ T8] usb usb20-port1: attempt power cycle [ 643.101696][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.914597][ T5257] Bluetooth: hci0: command tx timeout [ 643.952037][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.963310][ T9168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.973893][ T9168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.986785][ T9168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.215155][ T9168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.232256][ T8] usb usb20-port1: unable to enumerate USB device [ 644.252976][ T9168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.339854][ T9168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.369141][ T9168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.468938][ T5526] bridge_slave_1: left allmulticast mode [ 644.475051][ T5526] bridge_slave_1: left promiscuous mode [ 644.480965][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.487612][ T9050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.501945][ T5526] bridge_slave_0: left allmulticast mode [ 644.515879][ T5526] bridge_slave_0: left promiscuous mode [ 644.525974][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.900849][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 645.735072][ T46] usb 2-1: config 0 has no interfaces? [ 645.740712][ T46] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 645.766821][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.823503][ T46] usb 2-1: config 0 descriptor?? [ 645.985033][ T5257] Bluetooth: hci0: command tx timeout [ 646.564325][ T9333] loop1: detected capacity change from 0 to 256 [ 646.736503][ T5360] usb 2-1: USB disconnect, device number 11 [ 647.041968][ T5526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.066831][ T5526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.098240][ T5526] bond0 (unregistering): Released all slaves [ 648.307259][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 648.307282][ T29] audit: type=1326 audit(1725647244.328:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 648.370109][ T9356] loop1: detected capacity change from 0 to 256 [ 648.656381][ T29] audit: type=1326 audit(1725647244.338:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 650.499548][ T29] audit: type=1326 audit(1725647244.338:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 650.723051][ T29] audit: type=1326 audit(1725647244.338:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 650.806079][ T9367] loop0: detected capacity change from 0 to 512 [ 650.822916][ T5526] hsr_slave_0: left promiscuous mode [ 650.835362][ T29] audit: type=1326 audit(1725647244.338:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 650.859554][ T29] audit: type=1326 audit(1725647244.338:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 650.889583][ T29] audit: type=1326 audit(1725647244.338:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 650.913370][ T29] audit: type=1326 audit(1725647244.678:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 650.942062][ T29] audit: type=1326 audit(1725647244.678:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 650.953024][ T9367] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 650.966510][ T5526] hsr_slave_1: left promiscuous mode [ 650.981866][ T29] audit: type=1326 audit(1725647244.678:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9350 comm="syz.3.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc737cef9 code=0x7ffc0000 [ 651.005366][ T5526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.023563][ T9367] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 651.034206][ T5526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.068846][ T5526] veth1_macvtap: left promiscuous mode [ 651.075582][ T5526] veth0_macvtap: left promiscuous mode [ 651.081312][ T5526] veth1_vlan: left promiscuous mode [ 651.087532][ T5526] veth0_vlan: left promiscuous mode [ 651.150029][ T9369] loop1: detected capacity change from 0 to 2048 [ 651.191587][ T9369] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 651.221426][ T9369] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 651.302899][ T9372] loop0: detected capacity change from 0 to 8 [ 651.357985][ T9372] squashfs image failed sanity check [ 653.001926][ T9385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 654.715499][ T9395] dccp_invalid_packet: P.Data Offset(224) too large [ 657.052031][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.212972][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.224571][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.306597][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.316236][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 657.330387][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 658.239903][ T54] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 658.252546][ T54] Bluetooth: hci7: Injecting HCI hardware error event [ 658.265104][ T5257] Bluetooth: hci7: hardware error 0x00 [ 658.643332][ T5526] team0 (unregistering): Port device team_slave_1 removed [ 658.712875][ T5526] team0 (unregistering): Port device team_slave_0 removed [ 659.310954][ T9266] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.322871][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.330145][ T9266] bridge_slave_0: entered allmulticast mode [ 659.348783][ T9266] bridge_slave_0: entered promiscuous mode [ 659.586714][ T9266] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.821451][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.851983][ T9266] bridge_slave_1: entered allmulticast mode [ 659.905346][ T9266] bridge_slave_1: entered promiscuous mode [ 660.772866][ T8991] Bluetooth: hci4: command tx timeout [ 660.782685][ T5257] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 660.841364][ T9266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.997783][ T9266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.064574][ T5528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.103204][ T5528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.390347][ T9266] team0: Port device team_slave_0 added [ 661.465806][ T9266] team0: Port device team_slave_1 added [ 661.684981][ T5528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.700451][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.723132][ T5528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.739496][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.845040][ T9266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.952849][ T9266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.959857][ T9266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.023879][ T9266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.783030][ T5257] Bluetooth: hci4: command tx timeout [ 662.905424][ T9266] hsr_slave_0: entered promiscuous mode [ 662.966228][ T9266] hsr_slave_1: entered promiscuous mode [ 663.007676][ T5526] bridge_slave_1: left allmulticast mode [ 663.023976][ T5526] bridge_slave_1: left promiscuous mode [ 663.066268][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.130059][ T5526] bridge_slave_0: left allmulticast mode [ 663.144666][ T5526] bridge_slave_0: left promiscuous mode [ 663.177185][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.865978][ T5257] Bluetooth: hci4: command tx timeout [ 664.926099][ T9440] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 666.949758][ T5257] Bluetooth: hci4: command tx timeout [ 670.056917][ T9467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.807958][ T5526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.914834][ T5526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.122038][ T5526] bond0 (unregistering): Released all slaves [ 673.536543][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 674.808506][ T9483] loop0: detected capacity change from 0 to 2048 [ 674.866010][ T9483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 675.212964][ T9487] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 676.018080][ T5257] Bluetooth: hci1: unexpected event for opcode 0x202a [ 676.537524][ T9505] loop3: detected capacity change from 0 to 128 [ 678.842148][ T9505] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 678.948555][ T9505] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 679.026557][ T5526] hsr_slave_0: left promiscuous mode [ 679.069416][ T5526] hsr_slave_1: left promiscuous mode [ 679.117895][ T5526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.167137][ T5526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.203071][ T5526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.224813][ T5526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.314524][ T5526] veth1_macvtap: left promiscuous mode [ 679.320115][ T5526] veth0_macvtap: left promiscuous mode [ 679.330363][ T5526] veth1_vlan: left promiscuous mode [ 679.330521][ T5526] veth0_vlan: left promiscuous mode [ 679.343248][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 679.404438][ T9516] misc userio: Can't change port type on an already running userio instance [ 679.440098][ T9523] binder: 9518:9523 ioctl 4018620d 0 returned -22 [ 679.749970][ T9050] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 680.154139][ T5257] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 680.167534][ T5257] Bluetooth: hci1: Injecting HCI hardware error event [ 680.186965][ T5257] Bluetooth: hci1: hardware error 0x00 [ 680.777889][ T9535] xt_TCPMSS: Only works on TCP SYN packets [ 680.915659][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 680.915684][ T29] audit: type=1800 audit(1725647276.928:621): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.817" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 682.462790][ T5257] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 683.425770][ T5526] team0 (unregistering): Port device team_slave_1 removed [ 684.993688][ T5526] team0 (unregistering): Port device team_slave_0 removed [ 685.443398][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.450094][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.736888][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.764735][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.836943][ T9397] bridge_slave_0: entered allmulticast mode [ 688.860545][ T9397] bridge_slave_0: entered promiscuous mode [ 688.897932][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.925066][ T9589] vivid-004: disconnect [ 688.964907][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.077781][ T9397] bridge_slave_1: entered allmulticast mode [ 689.134271][ T9582] vivid-004: reconnect [ 689.150553][ T9397] bridge_slave_1: entered promiscuous mode [ 689.183384][ T9576] netlink: 'syz.1.826': attribute type 21 has an invalid length. [ 689.217924][ T9576] IPv6: NLM_F_CREATE should be specified when creating new route [ 689.232873][ T9576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 689.240863][ T9576] IPv6: NLM_F_CREATE should be set when creating new route [ 689.248201][ T9576] IPv6: NLM_F_CREATE should be set when creating new route [ 689.255481][ T9576] IPv6: NLM_F_CREATE should be set when creating new route [ 691.443924][ T9607] loop0: detected capacity change from 0 to 128 [ 691.496576][ T9607] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 691.505142][ T9607] FAT-fs (loop0): Filesystem has been set read-only [ 692.303956][ T9609] loop2: detected capacity change from 0 to 64 [ 692.344268][ T9597] loop1: detected capacity change from 0 to 4096 [ 693.417327][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.545892][ T9597] EXT4-fs: error -4 creating inode table initialization thread [ 693.558323][ T9597] EXT4-fs (loop1): mount failed [ 693.954609][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 695.204824][ T29] audit: type=1326 audit(1725647291.228:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x0 [ 695.255241][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.285840][ T29] audit: type=1326 audit(1725647291.308:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9621 comm="syz.1.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x0 [ 695.712081][ T9397] team0: Port device team_slave_0 added [ 695.757696][ T9397] team0: Port device team_slave_1 added [ 696.002533][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.011540][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.075498][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.160582][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.227683][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.372731][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.289316][ T9643] loop0: detected capacity change from 0 to 2048 [ 698.360300][ T9643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.533220][ T9647] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 699.754610][ T5526] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 699.793481][ T9397] hsr_slave_0: entered promiscuous mode [ 699.822964][ T5526] EXT4-fs (loop0): This should not happen!! Data will be lost [ 699.822964][ T5526] [ 699.834925][ T9397] hsr_slave_1: entered promiscuous mode [ 700.081042][ T5526] EXT4-fs (loop0): Total free blocks count 0 [ 700.112346][ T9397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.152795][ T5526] EXT4-fs (loop0): Free/Dirty block details [ 700.220771][ T9397] Cannot create hsr debugfs directory [ 700.234527][ T5526] EXT4-fs (loop0): free_blocks=2415919104 [ 700.288689][ T5526] EXT4-fs (loop0): dirty_blocks=16 [ 700.355212][ T5526] EXT4-fs (loop0): Block reservation details [ 700.736950][ T5526] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 700.781133][ T9076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.865764][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 700.878697][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 700.888539][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 700.900641][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 700.908986][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 700.916829][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 701.457864][ T9661] Cannot find del_set index 0 as target [ 702.232930][ T9664] loop0: detected capacity change from 0 to 512 [ 702.284374][ T9664] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 702.329734][ T9660] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 702.355679][ T5257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 702.367825][ T5257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 702.373084][ T9664] UDF-fs: Scanning with blocksize 512 failed [ 702.381471][ T5257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 702.399513][ T5257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 702.408445][ T5257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 702.417820][ T5257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 702.418056][ T9664] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 702.551552][ T9664] UDF-fs: Scanning with blocksize 1024 failed [ 702.584117][ T9664] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 702.605158][ T9664] UDF-fs: Scanning with blocksize 2048 failed [ 702.668404][ T9664] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 702.822303][ T9664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 702.898838][ T9669] loop2: detected capacity change from 0 to 4096 [ 703.023082][ T5257] Bluetooth: hci6: command tx timeout [ 703.259245][ T9673] loop1: detected capacity change from 0 to 2048 [ 704.841365][ T5257] Bluetooth: hci0: command tx timeout [ 704.912927][ T9674] loop1: p1 < > p4 [ 705.078249][ T2544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.108993][ T9674] loop1: p4 size 8388608 extends beyond EOD, truncated [ 705.153773][ T9673] loop1: p1 < > p4 [ 705.159252][ T9673] loop1: p4 size 8388608 extends beyond EOD, truncated [ 705.463975][ T9543] udevd[9543]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 705.485090][ T9669] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 705.514804][ T9244] udevd[9244]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 705.805934][ T5257] Bluetooth: hci6: command tx timeout [ 705.815406][ T9669] ntfs3: loop2: failed to convert "0000" to iso8859-3 [ 706.868170][ T9262] udevd[9262]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 707.140224][ T5257] Bluetooth: hci0: command tx timeout [ 707.434341][ T9543] udevd[9543]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 707.834113][ T5257] Bluetooth: hci6: command tx timeout [ 707.872482][ T2544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.182783][ T5257] Bluetooth: hci0: command tx timeout [ 709.519506][ T2544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.903409][ T5257] Bluetooth: hci6: command tx timeout [ 710.687897][ T2544] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.263817][ T5257] Bluetooth: hci0: command tx timeout [ 712.011511][ T9711] loop1: detected capacity change from 0 to 512 [ 712.230014][ T9711] EXT4-fs: quotafile must be on filesystem root [ 712.387879][ T9711] Bluetooth: MGMT ver 1.23 [ 712.970381][ T9397] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.102725][ T5257] Bluetooth: hci5: command 0x0406 tx timeout [ 714.548160][ T9397] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.614811][ T2544] bridge_slave_1: left allmulticast mode [ 714.620525][ T2544] bridge_slave_1: left promiscuous mode [ 714.643362][ T2544] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.667492][ T2544] bridge_slave_0: left allmulticast mode [ 714.684345][ T2544] bridge_slave_0: left promiscuous mode [ 714.704536][ T5257] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 714.712364][ T2544] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.725507][ T5257] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 714.742136][ T5257] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 714.759852][ T5257] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 714.769917][ T5257] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 714.783124][ T5257] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 715.287307][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.305692][ T9739] loop2: detected capacity change from 0 to 2048 [ 715.338264][ T29] audit: type=1326 audit(1725647311.358:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 715.411942][ T9739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.046829][ T29] audit: type=1326 audit(1725647311.358:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.071395][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.238474][ T29] audit: type=1326 audit(1725647311.358:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.323723][ T29] audit: type=1326 audit(1725647311.358:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.399146][ T29] audit: type=1326 audit(1725647311.358:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.634288][ T29] audit: type=1326 audit(1725647311.358:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.688354][ T29] audit: type=1326 audit(1725647311.358:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.727534][ T29] audit: type=1326 audit(1725647311.358:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.753557][ T29] audit: type=1326 audit(1725647311.358:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.785532][ T29] audit: type=1326 audit(1725647311.358:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.1.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189477cef9 code=0x7ffc0000 [ 716.808843][ T2578] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 716.830814][ T2578] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 716.845887][ T2578] EXT4-fs (loop2): This should not happen!! Data will be lost [ 716.845887][ T2578] [ 716.858477][ T2578] EXT4-fs (loop2): Total free blocks count 0 [ 716.867317][ T2578] EXT4-fs (loop2): Free/Dirty block details [ 716.873642][ T2578] EXT4-fs (loop2): free_blocks=2415919104 [ 716.879398][ T2578] EXT4-fs (loop2): dirty_blocks=16 [ 716.884207][ T5257] Bluetooth: hci7: command tx timeout [ 716.885275][ T2578] EXT4-fs (loop2): Block reservation details [ 716.896983][ T2578] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 716.930185][ T9168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.222246][ T2544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.236929][ T2544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.249424][ T2544] bond0 (unregistering): Released all slaves [ 717.272036][ T9655] chnl_net:caif_netlink_parms(): no params data found [ 717.389271][ T9397] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.678330][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 717.779847][ T9764] loop1: detected capacity change from 0 to 256 [ 717.879301][ T9764] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x02a07125, utbl_chksum : 0xe619d30d) [ 718.001317][ T9397] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.136536][ T5257] Bluetooth: hci7: command tx timeout [ 720.025167][ T9655] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.053796][ T9655] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.090440][ T9655] bridge_slave_0: entered allmulticast mode [ 720.115203][ T9655] bridge_slave_0: entered promiscuous mode [ 721.116689][ T9792] loop0: detected capacity change from 0 to 128 [ 721.127025][ T2544] hsr_slave_0: left promiscuous mode [ 721.137354][ T2544] hsr_slave_1: left promiscuous mode [ 721.182868][ T5257] Bluetooth: hci7: command tx timeout [ 721.193803][ T2544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.201276][ T2544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.218141][ T9792] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 721.233422][ T2544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.250700][ T2544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.260384][ T9800] loop2: detected capacity change from 0 to 512 [ 721.276997][ T9792] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.288471][ T9800] EXT4-fs: Ignoring removed mblk_io_submit option [ 721.387164][ T9800] EXT4-fs: Ignoring removed bh option [ 721.402405][ T9800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 721.445558][ T2544] veth1_macvtap: left promiscuous mode [ 721.466421][ T2544] veth0_macvtap: left promiscuous mode [ 721.497709][ T9800] EXT4-fs (loop2): 1 truncate cleaned up [ 721.510090][ T9800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.523993][ T2544] veth1_vlan: left promiscuous mode [ 721.529454][ T2544] veth0_vlan: left promiscuous mode [ 721.732507][ T9806] loop1: detected capacity change from 0 to 64 [ 721.760556][ T9168] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.095646][ T9076] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 723.268573][ T5257] Bluetooth: hci7: command tx timeout [ 723.275539][ T8991] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 723.356329][ T5257] Bluetooth: hci2: command 0x0406 tx timeout [ 723.547276][ T5237] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 723.746669][ T5237] usb 1-1: Using ep0 maxpacket: 16 [ 723.766165][ T5237] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 723.777541][ T5237] usb 1-1: config 0 has no interface number 0 [ 723.792839][ T5237] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.833635][ T5237] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 723.861473][ T5237] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 723.875937][ T5237] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 723.904753][ T5237] usb 1-1: Product: syz [ 723.909110][ T5237] usb 1-1: SerialNumber: syz [ 723.922369][ T5237] usb 1-1: config 0 descriptor?? [ 723.960466][ T5237] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 723.994687][ T5237] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8 [ 725.825040][ T9824] loop1: detected capacity change from 0 to 128 [ 726.874875][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.891969][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.899224][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.906721][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.913942][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.923329][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.930458][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.937582][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.945071][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.952201][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 726.967145][ T5255] usb 1-1: USB disconnect, device number 8 [ 726.973065][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 726.986348][ T5255] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 727.221206][ T9831] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.890'. [ 729.010149][ T9831] loop0: detected capacity change from 0 to 1024 [ 729.017927][ T9831] hfsplus: unable to parse mount options [ 729.125461][ T2544] team0 (unregistering): Port device team_slave_1 removed [ 729.636823][ T2544] team0 (unregistering): Port device team_slave_0 removed [ 733.675735][ T9852] loop1: detected capacity change from 0 to 128 [ 733.695087][ T9852] ext4: Unknown parameter 'hash' [ 733.773220][ T9855] loop2: detected capacity change from 0 to 64 [ 733.824248][ T9855] hfs: file_umask requires a value [ 733.830363][ T9855] hfs: unable to parse mount options [ 735.329200][ T9655] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.337798][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.348261][ T9655] bridge_slave_1: entered allmulticast mode [ 735.355898][ T9655] bridge_slave_1: entered promiscuous mode [ 735.432758][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 735.544730][ T9655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.576499][ T9666] chnl_net:caif_netlink_parms(): no params data found [ 735.615450][ T9655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.643057][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 735.650601][ T8] usb 2-1: config 0 has an invalid interface number: 206 but max is 1 [ 735.660175][ T8] usb 2-1: config 0 has no interface number 1 [ 735.679806][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 735.692329][ T8] usb 2-1: config 0 interface 206 has no altsetting 0 [ 735.734551][ T8] usb 2-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 735.745349][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.755978][ T8] usb 2-1: Product: syz [ 735.760476][ T8] usb 2-1: Manufacturer: syz [ 735.767046][ T8] usb 2-1: SerialNumber: syz [ 735.774367][ T9870] loop2: detected capacity change from 0 to 8 [ 735.788626][ T8] usb 2-1: config 0 descriptor?? [ 735.851469][ T9870] squashfs image failed sanity check [ 735.899274][ T9655] team0: Port device team_slave_0 added [ 735.927923][ T9655] team0: Port device team_slave_1 added [ 738.115606][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.138888][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.181887][ T7812] usb 2-1: USB disconnect, device number 12 [ 738.219784][ T9655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.253610][ T9655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.260802][ T9655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.291159][ T9655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.362856][ T9890] loop0: detected capacity change from 0 to 1024 [ 739.441669][ T35] bridge_slave_1: left allmulticast mode [ 739.460743][ T35] bridge_slave_1: left promiscuous mode [ 739.467491][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.470947][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.485754][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.496496][ T35] bridge_slave_0: left allmulticast mode [ 739.502189][ T35] bridge_slave_0: left promiscuous mode [ 739.519511][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.519703][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.527892][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.549200][ T35] bridge_slave_1: left allmulticast mode [ 739.555998][ T35] bridge_slave_1: left promiscuous mode [ 739.561783][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.565130][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.579787][ T35] bridge_slave_0: left allmulticast mode [ 739.585999][ T35] bridge_slave_0: left promiscuous mode [ 739.587408][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.591798][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.671422][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.692665][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.739327][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.747977][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.812413][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 739.821865][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.091255][ T9896] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.111364][ T9896] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.165763][ T9895] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.824395][ T9895] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.859020][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.871398][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.921403][ T9896] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.938515][ T9896] hfsplus: request for non-existent node 33423360 in B*Tree [ 740.968434][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.986927][ T9895] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.013551][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.039615][ T9895] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.064470][ T35] bond0 (unregistering): Released all slaves [ 741.076780][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.112097][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.126510][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.150392][ T9895] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.180230][ T9895] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.188744][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.210066][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.225486][ T9890] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.245997][ T35] bond0 (unregistering): Released all slaves [ 741.272763][ T9895] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.280116][ T9895] hfsplus: request for non-existent node 33423360 in B*Tree [ 741.401362][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.430591][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.440674][ T9666] bridge_slave_0: entered allmulticast mode [ 741.475842][ T9900] loop1: detected capacity change from 0 to 256 [ 741.481230][ T9666] bridge_slave_0: entered promiscuous mode [ 741.528884][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.562272][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.574419][ T9666] bridge_slave_1: entered allmulticast mode [ 741.582204][ T9666] bridge_slave_1: entered promiscuous mode [ 741.637405][ T9903] loop0: detected capacity change from 0 to 512 [ 741.801874][ T9903] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 741.943894][ T9905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.576392][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.658160][ T9903] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.906: iget: bad i_size value: -67835469387268086 [ 742.694235][ T9655] hsr_slave_0: entered promiscuous mode [ 742.705106][ T9903] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.906: couldn't read orphan inode 15 (err -117) [ 742.713788][ T9655] hsr_slave_1: entered promiscuous mode [ 742.738518][ T9903] EXT4-fs (loop0): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.750899][ T9655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.758345][ T9903] ext2 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.769271][ T9655] Cannot create hsr debugfs directory [ 742.904566][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.840372][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 744.054278][ T35] hsr_slave_0: left promiscuous mode [ 744.061641][ T35] hsr_slave_1: left promiscuous mode [ 744.078481][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.092458][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.165765][ T35] hsr_slave_0: left promiscuous mode [ 744.172467][ T35] hsr_slave_1: left promiscuous mode [ 744.190890][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.222217][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.396373][ T5300] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 744.713472][ T5300] usb 2-1: Using ep0 maxpacket: 8 [ 744.775113][ T5300] usb 2-1: config 7 has an invalid interface number: 122 but max is 1 [ 744.830409][ T5300] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 744.874589][ T5300] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 744.915969][ T5300] usb 2-1: config 7 has no interface number 0 [ 744.975775][ T5300] usb 2-1: config 7 interface 122 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 745.018775][ T5300] usb 2-1: config 7 interface 122 has no altsetting 0 [ 745.061573][ T5300] usb 2-1: New USB device found, idVendor=04e2, idProduct=1400, bcdDevice=65.13 [ 745.102120][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.142417][ T35] team0 (unregistering): Port device team_slave_1 removed [ 745.158557][ T5300] usb 2-1: Product: syz [ 745.172073][ T5300] usb 2-1: Manufacturer: syz [ 745.202746][ T5300] usb 2-1: SerialNumber: syz [ 745.296811][ T35] team0 (unregistering): Port device team_slave_0 removed [ 745.636822][ T9076] EXT4-fs (loop0): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 746.242822][ T5237] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 746.468165][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 746.499679][ T5237] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 746.517836][ T35] team0 (unregistering): Port device team_slave_1 removed [ 746.536216][ T5237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 746.574005][ T5237] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 746.605078][ T5237] usb 1-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 746.618610][ T5237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.635369][ T35] team0 (unregistering): Port device team_slave_0 removed [ 746.650685][ T5237] usb 1-1: Product: syz [ 746.657103][ T5237] usb 1-1: Manufacturer: syz [ 746.671089][ T5237] usb 1-1: SerialNumber: syz [ 746.693804][ T5237] usb 1-1: config 0 descriptor?? [ 746.735887][ T5237] ti_usb_3410_5052 1-1:0.0: TI USB 3410 1 port adapter converter detected [ 746.799418][ T5237] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 746.884634][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.894823][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.987717][ T9916] delete_channel: no stack [ 747.037486][ T5300] usb 2-1: USB disconnect, device number 13 [ 747.091841][ T58] usb 1-1: USB disconnect, device number 9 [ 747.154007][ T58] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 747.191070][ T9922] loop1: detected capacity change from 0 to 8 [ 747.198447][ T58] ti_usb_3410_5052 1-1:0.0: device disconnected [ 747.257925][ T9922] squashfs image failed sanity check [ 747.694129][ T9666] team0: Port device team_slave_0 added [ 748.184516][ T9928] netlink: 68 bytes leftover after parsing attributes in process `syz.0.912'. [ 749.296147][ T9666] team0: Port device team_slave_1 added [ 750.158959][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.173638][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.182384][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.202777][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 750.213164][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 750.220645][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 750.392206][ T9732] chnl_net:caif_netlink_parms(): no params data found [ 751.406063][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.431126][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.459729][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.580109][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.590618][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.648654][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.415689][ T5257] Bluetooth: hci4: command tx timeout [ 752.685035][ T9666] hsr_slave_0: entered promiscuous mode [ 752.692244][ T9666] hsr_slave_1: entered promiscuous mode [ 753.056469][ T9956] loop1: detected capacity change from 0 to 512 [ 753.126237][ T9956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.237115][ T9956] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.320927][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.339500][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.348489][ T9732] bridge_slave_0: entered allmulticast mode [ 753.362317][ T7713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.374672][ T9732] bridge_slave_0: entered promiscuous mode [ 753.439241][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.466146][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.483054][ T9732] bridge_slave_1: entered allmulticast mode [ 753.531744][ T9732] bridge_slave_1: entered promiscuous mode [ 753.629585][ T9961] loop1: detected capacity change from 0 to 128 [ 753.647683][ T9961] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 753.673989][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.899894][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.473162][ T5257] Bluetooth: hci4: command tx timeout [ 754.643805][ T9732] team0: Port device team_slave_0 added [ 754.754807][ T9732] team0: Port device team_slave_1 added [ 756.189978][ T9655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 756.209656][ T9655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 756.235062][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.242431][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.273896][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.295777][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.303710][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.333366][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.413269][ T9655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 756.542914][ T5257] Bluetooth: hci4: command tx timeout [ 756.900598][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 756.912254][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 756.935379][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 756.982920][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 757.002923][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.002981][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 757.031109][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 757.149595][ T9732] hsr_slave_0: entered promiscuous mode [ 757.164854][ T9732] hsr_slave_1: entered promiscuous mode [ 757.172159][ T9732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.180079][ T9732] Cannot create hsr debugfs directory [ 757.332366][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.520852][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.570162][ T9932] chnl_net:caif_netlink_parms(): no params data found [ 757.691806][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.830437][ T9666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 757.889003][ T9666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 757.904435][ T9666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 757.963209][ T9666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 758.143498][ T5257] Bluetooth: hci0: command tx timeout [ 758.170528][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.178841][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.187999][ T9932] bridge_slave_0: entered allmulticast mode [ 758.196686][ T9932] bridge_slave_0: entered promiscuous mode [ 758.302887][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.310086][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.333059][ T9932] bridge_slave_1: entered allmulticast mode [ 758.353753][ T9932] bridge_slave_1: entered promiscuous mode [ 758.406344][ T35] bridge_slave_1: left allmulticast mode [ 758.412082][ T35] bridge_slave_1: left promiscuous mode [ 758.443006][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.456168][ T35] bridge_slave_0: left allmulticast mode [ 758.461891][ T35] bridge_slave_0: left promiscuous mode [ 758.482923][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.623141][ T5257] Bluetooth: hci4: command tx timeout [ 759.036806][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 759.067093][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 759.078996][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 759.089976][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 759.105713][ T54] Bluetooth: hci3: command tx timeout [ 759.113799][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 759.121540][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 759.516544][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.534229][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.554496][ T35] bond0 (unregistering): Released all slaves [ 759.758141][ T9932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.864940][ T9932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.079951][ T9932] team0: Port device team_slave_0 added [ 760.155267][ T9932] team0: Port device team_slave_1 added [ 760.205377][ T9979] chnl_net:caif_netlink_parms(): no params data found [ 760.277540][ T35] hsr_slave_0: left promiscuous mode [ 760.285313][ T35] hsr_slave_1: left promiscuous mode [ 760.291659][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.299701][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.314666][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.322183][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.353846][ T35] veth1_macvtap: left promiscuous mode [ 760.359697][ T35] veth0_macvtap: left promiscuous mode [ 760.365620][ T35] veth1_vlan: left promiscuous mode [ 760.370976][ T35] veth0_vlan: left promiscuous mode [ 761.183771][ T5257] Bluetooth: hci0: command tx timeout [ 761.213164][ T54] Bluetooth: hci3: command tx timeout [ 761.452887][ T35] team0 (unregistering): Port device team_slave_1 removed [ 761.556155][ T35] team0 (unregistering): Port device team_slave_0 removed [ 762.889935][ T9732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 762.982972][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.989995][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.017035][ T9932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.078981][ T9732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 763.114907][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.121940][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.173764][ T9932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.246015][ T9732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 763.280653][ T5257] Bluetooth: hci0: command tx timeout [ 763.284294][ T54] Bluetooth: hci3: command tx timeout [ 763.375567][ T9732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 763.556774][ T9979] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.565304][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.574801][ T9979] bridge_slave_0: entered allmulticast mode [ 763.583165][ T9979] bridge_slave_0: entered promiscuous mode [ 763.610288][ T9932] hsr_slave_0: entered promiscuous mode [ 763.621957][ T9932] hsr_slave_1: entered promiscuous mode [ 763.629822][ T9932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.637581][ T9932] Cannot create hsr debugfs directory [ 763.692009][ T9979] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.699734][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.707770][ T9979] bridge_slave_1: entered allmulticast mode [ 763.717121][ T9979] bridge_slave_1: entered promiscuous mode [ 763.807439][ T9979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.822284][ T9979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.935055][ T9987] chnl_net:caif_netlink_parms(): no params data found [ 763.958535][ T9979] team0: Port device team_slave_0 added [ 764.006655][ T9979] team0: Port device team_slave_1 added [ 764.188819][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.196525][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.225827][ T9979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.240479][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.248193][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.276740][ T9979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.596893][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.610444][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.621686][ T9987] bridge_slave_0: entered allmulticast mode [ 764.634810][ T9987] bridge_slave_0: entered promiscuous mode [ 764.656024][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.663503][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.670912][ T9987] bridge_slave_1: entered allmulticast mode [ 764.679875][ T9987] bridge_slave_1: entered promiscuous mode [ 764.832367][ T9979] hsr_slave_0: entered promiscuous mode [ 764.841789][ T9979] hsr_slave_1: entered promiscuous mode [ 764.849790][ T9979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.857821][ T9979] Cannot create hsr debugfs directory [ 764.953545][ T9987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.039520][ T9987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.200816][ T9987] team0: Port device team_slave_0 added [ 765.295760][ T9987] team0: Port device team_slave_1 added [ 765.342989][ T54] Bluetooth: hci3: command tx timeout [ 765.353050][ T54] Bluetooth: hci0: command tx timeout [ 765.397097][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.406171][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.414047][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.452629][ T9987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.467069][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.474739][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.507745][ T9987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.627331][ T9932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 765.690392][ T9987] hsr_slave_0: entered promiscuous mode [ 765.697391][ T9987] hsr_slave_1: entered promiscuous mode [ 765.704448][ T9987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.717474][ T9987] Cannot create hsr debugfs directory [ 765.723573][ T9932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 765.744416][ T9932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 765.766378][ T9932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 765.929641][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.170041][ T2578] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.177441][ T2578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.213574][ T2578] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.220825][ T2578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.645310][ T35] bridge_slave_1: left allmulticast mode [ 766.651120][ T35] bridge_slave_1: left promiscuous mode [ 766.672891][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.688961][ T35] bridge_slave_0: left allmulticast mode [ 766.698298][ T35] bridge_slave_0: left promiscuous mode [ 766.723024][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.741846][ T35] bridge_slave_1: left allmulticast mode [ 766.748982][ T35] bridge_slave_1: left promiscuous mode [ 766.757353][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.768370][ T35] bridge_slave_0: left allmulticast mode [ 766.777010][ T35] bridge_slave_0: left promiscuous mode [ 766.782870][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.795132][ T35] bridge_slave_1: left allmulticast mode [ 766.800883][ T35] bridge_slave_1: left promiscuous mode [ 766.808209][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.819339][ T35] bridge_slave_0: left allmulticast mode [ 766.825401][ T35] bridge_slave_0: left promiscuous mode [ 766.831137][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.423243][ T54] Bluetooth: hci0: command tx timeout [ 767.682342][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.696029][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.708627][ T35] bond0 (unregistering): Released all slaves [ 767.729117][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.757278][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.771233][ T35] bond0 (unregistering): Released all slaves [ 768.101008][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.117395][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.131366][ T35] bond0 (unregistering): Released all slaves [ 768.264889][ T9932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.529655][ T9932] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.574828][ T5515] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.582127][ T5515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.691684][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.698959][ T5524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.736961][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.032702][ T35] hsr_slave_0: left promiscuous mode [ 769.039251][ T35] hsr_slave_1: left promiscuous mode [ 769.048450][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.059113][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.079691][ T35] hsr_slave_0: left promiscuous mode [ 769.093235][ T35] hsr_slave_1: left promiscuous mode [ 769.108680][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.120365][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.142009][ T35] hsr_slave_0: left promiscuous mode [ 769.153444][ T35] hsr_slave_1: left promiscuous mode [ 769.159668][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.167754][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.178625][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.186599][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.221125][ T35] veth1_macvtap: left promiscuous mode [ 769.226817][ T35] veth0_macvtap: left promiscuous mode [ 769.232465][ T35] veth1_vlan: left promiscuous mode [ 769.237957][ T35] veth0_vlan: left promiscuous mode [ 769.690465][ T35] team0 (unregistering): Port device team_slave_1 removed [ 769.748470][ T35] team0 (unregistering): Port device team_slave_0 removed [ 770.328846][ T35] team0 (unregistering): Port device team_slave_1 removed [ 770.374489][ T35] team0 (unregistering): Port device team_slave_0 removed [ 771.307340][ T35] team0 (unregistering): Port device team_slave_1 removed [ 771.382559][ T35] team0 (unregistering): Port device team_slave_0 removed [ 772.434342][ T9987] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 772.556768][ T9987] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 772.615993][ T9987] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 772.672513][ T9987] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 772.695605][ T9732] veth0_vlan: entered promiscuous mode [ 772.701762][ T9979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 772.722339][ T9979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 772.749114][ T9979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 772.770624][ T9979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 772.806523][ T9732] veth1_vlan: entered promiscuous mode [ 772.884432][ T9932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.042473][ T9732] veth0_macvtap: entered promiscuous mode [ 773.135824][ T9732] veth1_macvtap: entered promiscuous mode [ 773.258821][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.290055][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.302933][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.324243][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.341774][ T9732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.353465][ T9732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.390139][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.429717][ T9932] veth0_vlan: entered promiscuous mode [ 773.566040][ T9932] veth1_vlan: entered promiscuous mode [ 773.614348][ T9987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.677963][ T9979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.808362][ T9987] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.830466][ T9979] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.904151][ T2571] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.911350][ T2571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.928430][ T5257] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 773.939128][ T5257] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 773.951268][ T5257] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 773.955134][ T2571] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.965485][ T2571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.991617][ T5257] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 774.031853][ T5257] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 774.059485][ T5257] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 774.120181][ T9932] veth0_macvtap: entered promiscuous mode [ 774.136763][ T9932] veth1_macvtap: entered promiscuous mode [ 774.181200][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.188457][ T5503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.201563][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.208797][ T5503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.325307][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.337732][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.349192][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.360834][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.370905][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.381686][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.392297][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.403093][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.419800][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.471434][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.483517][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.493655][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.504213][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.514110][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.525629][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.537371][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.718297][ T9932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.737989][ T9932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.747711][ T9932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.756853][ T9932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.331626][ T9979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.375876][ T5524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.390215][T10019] chnl_net:caif_netlink_parms(): no params data found [ 775.401668][ T5524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.547050][ T9987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.614462][ T35] bridge_slave_1: left allmulticast mode [ 775.620163][ T35] bridge_slave_1: left promiscuous mode [ 775.643130][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.665929][ T35] bridge_slave_0: left allmulticast mode [ 775.671632][ T35] bridge_slave_0: left promiscuous mode [ 775.690463][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.157187][ T54] Bluetooth: hci6: command tx timeout [ 776.318994][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.331044][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.351221][ T35] bond0 (unregistering): Released all slaves [ 776.378260][ T2544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.413295][ T2544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.011665][ T35] hsr_slave_0: left promiscuous mode [ 777.019966][ T35] hsr_slave_1: left promiscuous mode [ 777.030469][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.039226][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.050890][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.050999][T10049] loop1: detected capacity change from 0 to 256 [ 778.247404][ T35] veth1_macvtap: left promiscuous mode [ 778.267688][ T35] veth0_macvtap: left promiscuous mode [ 778.282982][ T54] Bluetooth: hci6: command tx timeout [ 778.292508][ T35] veth1_vlan: left promiscuous mode [ 778.312068][ T35] veth0_vlan: left promiscuous mode [ 779.508296][ T35] team0 (unregistering): Port device team_slave_1 removed [ 779.605906][ T35] team0 (unregistering): Port device team_slave_0 removed [ 780.313146][ T54] Bluetooth: hci6: command tx timeout [ 780.392241][ T9987] veth0_vlan: entered promiscuous mode [ 780.401640][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.418499][T10019] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.426527][T10019] bridge_slave_0: entered allmulticast mode [ 780.441174][T10019] bridge_slave_0: entered promiscuous mode [ 780.452157][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.460990][T10019] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.469028][T10019] bridge_slave_1: entered allmulticast mode [ 780.480314][T10019] bridge_slave_1: entered promiscuous mode [ 780.677009][ T9987] veth1_vlan: entered promiscuous mode [ 780.732557][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.776877][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.848109][ T9979] veth0_vlan: entered promiscuous mode [ 780.932388][T10019] team0: Port device team_slave_0 added [ 780.943442][T10019] team0: Port device team_slave_1 added [ 780.991618][T10019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.998809][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.027549][T10019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.045911][T10019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.053012][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.080723][T10019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.147295][ T9979] veth1_vlan: entered promiscuous mode [ 781.168306][T10019] hsr_slave_0: entered promiscuous mode [ 781.177824][T10019] hsr_slave_1: entered promiscuous mode [ 781.317409][ T9987] veth0_macvtap: entered promiscuous mode [ 781.355931][ T9987] veth1_macvtap: entered promiscuous mode [ 781.498940][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.519153][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.529177][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.542123][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.552018][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.563030][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.574780][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.587231][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.599700][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.679024][ T9979] veth0_macvtap: entered promiscuous mode [ 781.716906][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.733407][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.746015][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.757888][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.767826][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.780142][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.791745][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 781.805054][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.816958][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.832293][ T9979] veth1_macvtap: entered promiscuous mode [ 781.894914][ T9987] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.904130][ T9987] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.914065][ T9987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.924706][ T9987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.966144][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 781.976936][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 781.988474][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.000361][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.010833][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.021718][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.031818][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.042757][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.053482][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.066966][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.079918][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.095245][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.105928][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.116393][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.127722][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.137621][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.150599][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.161104][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.171838][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.182162][ T9979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.201853][ T9979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.214538][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.246884][ T9979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.263905][ T9979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.281811][ T9979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.293474][ T9979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.410702][ T54] Bluetooth: hci6: command tx timeout [ 782.583096][T10019] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 782.590384][ T2571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.616860][ T2571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.631401][T10019] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 782.650811][T10019] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 782.664210][T10019] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 782.750948][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.763835][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.777851][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.786329][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.923694][ T5503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.945419][ T5503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.989634][T10058] loop0: detected capacity change from 0 to 512 [ 783.379498][T10058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.525409][T10058] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.378966][T10076] loop3: detected capacity change from 0 to 2048 [ 784.462455][T10076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.509893][T10078] loop4: detected capacity change from 0 to 512 [ 785.213425][T10019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.265836][T10078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 785.304160][T10078] EXT4-fs (loop4): Test dummy encryption mode enabled [ 785.353090][T10078] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.692: iget: bogus i_mode (0) [ 785.365093][T10078] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.692: couldn't read orphan inode 17 (err -117) [ 785.397385][T10078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.473861][ T5524] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 785.525740][T10019] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.585598][ T5524] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 785.619624][ T5524] EXT4-fs (loop3): This should not happen!! Data will be lost [ 785.619624][ T5524] [ 785.634233][ T5524] EXT4-fs (loop3): Total free blocks count 0 [ 785.640873][ T5524] EXT4-fs (loop3): Free/Dirty block details [ 785.644830][ T5515] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.654762][ T5515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.763702][ T5524] EXT4-fs (loop3): free_blocks=2415919104 [ 785.787257][ T5524] EXT4-fs (loop3): dirty_blocks=16 [ 785.799172][ T5524] EXT4-fs (loop3): Block reservation details [ 785.806852][ T5524] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 785.856797][ T9987] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.946759][ T5515] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.954124][ T5515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.070891][T10078] fscrypt (loop4): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 786.324537][ T9979] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.341701][T10099] loop3: detected capacity change from 0 to 8 [ 786.476342][T10100] netlink: 'syz.1.929': attribute type 30 has an invalid length. [ 788.535493][T10108] loop4: detected capacity change from 0 to 16 [ 788.628373][T10108] erofs: (device loop4): mounted with root inode @ nid 36. [ 788.721693][ T9076] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.422394][ T5360] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 789.741468][ T5360] usb 2-1: device descriptor read/all, error -71 [ 790.091482][T10019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.096517][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 790.270587][T10129] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 790.313041][T10127] vivid-001: ================= START STATUS ================= [ 790.325503][T10127] vivid-001: Radio HW Seek Mode: Bounded [ 790.333389][T10127] vivid-001: Radio Programmable HW Seek: false [ 790.340648][T10127] vivid-001: RDS Rx I/O Mode: Block I/O [ 790.375655][T10127] vivid-001: Generate RBDS Instead of RDS: false [ 790.392364][T10127] vivid-001: RDS Reception: true [ 790.399515][T10127] vivid-001: RDS Program Type: 0 inactive [ 790.408376][T10127] vivid-001: RDS PS Name: inactive [ 790.542142][T10127] vivid-001: RDS Radio Text: inactive [ 790.549207][T10127] vivid-001: RDS Traffic Announcement: false inactive [ 790.563233][T10127] vivid-001: RDS Traffic Program: false inactive [ 790.584307][T10127] vivid-001: RDS Music: false inactive [ 790.590792][T10127] vivid-001: ================== END STATUS ================== [ 791.979404][T10140] loop2: detected capacity change from 0 to 65536 [ 792.105351][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 792.105409][ T29] audit: type=1326 audit(1725647388.028:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f1717cef9 code=0x0 [ 792.417257][T10140] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 792.740552][ T29] audit: type=1326 audit(1725647388.078:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f2f171aefe5 code=0x0 [ 792.820518][ T29] audit: type=1326 audit(1725647388.828:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f1717cef9 code=0x0 [ 792.884656][T10140] XFS (loop2): Ending clean mount [ 792.907411][T10140] XFS (loop2): Quotacheck needed: Please wait. [ 793.149274][T10140] XFS (loop2): Quotacheck: Done. [ 794.279458][ T30] INFO: task syz-executor:9045 blocked for more than 144 seconds. [ 794.314199][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 794.603849][T10172] loop1: detected capacity change from 0 to 1024 [ 795.059138][T10162] loop4: detected capacity change from 0 to 2048 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 795.450223][T10172] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 795.461721][T10172] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 795.553927][T10172] jbd2_journal_init_inode: Cannot locate journal superblock [ 795.561410][T10172] EXT4-fs (loop1): Could not load journal inode [ 795.714377][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 795.886040][T10162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.912960][ T30] task:syz-executor state:D stack:20992 pid:9045 tgid:9045 ppid:1 flags:0x00004006 [ 795.949735][ T30] Call Trace: [ 795.958785][ T30] [ 795.972666][ T30] __schedule+0x1800/0x4a60 [ 795.977267][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 796.103024][ T30] ? __pfx___schedule+0x10/0x10 [ 796.107975][ T30] ? __pfx_lock_release+0x10/0x10 [ 796.212716][ T30] ? schedule+0x90/0x320 [ 796.217078][ T30] schedule+0x14b/0x320 [ 796.221302][ T30] schedule_timeout+0xb0/0x310 [ 796.304590][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 796.310083][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 796.372711][ T30] ? wait_for_completion+0x2fe/0x620 [ 796.378107][ T30] ? wait_for_completion+0x2fe/0x620 [ 796.405483][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 796.410782][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 796.470541][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 796.503127][ T30] ? wait_for_completion+0x2fe/0x620 [ 796.508507][ T30] wait_for_completion+0x355/0x620 [ 796.531235][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 796.558519][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 796.571888][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 796.602414][ T30] ? kthread_unpark+0x17b/0x210 [ 796.613759][ T30] kthread_stop+0x19e/0x640 [ 796.618321][ T30] ext4_stop_mmpd+0x47/0xb0 [ 796.627395][ T30] ext4_put_super+0x753/0xd50 [ 796.632221][ T30] ? __pfx_ext4_put_super+0x10/0x10 [ 796.638679][ T30] generic_shutdown_super+0x138/0x2d0 [ 796.644829][ T30] kill_block_super+0x44/0x90 [ 796.649556][ T30] ext4_kill_sb+0x68/0xa0 [ 796.654483][ T30] deactivate_locked_super+0xc6/0x130 [ 796.659982][ T30] cleanup_mnt+0x41f/0x4b0 [ 796.664995][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 796.670676][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 796.676438][ T30] task_work_run+0x251/0x310 [ 796.681075][ T30] ? __pfx_task_work_run+0x10/0x10 [ 796.686918][ T30] ? __x64_sys_umount+0x123/0x170 [ 796.692148][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 796.707849][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 796.717666][ T30] do_syscall_64+0x100/0x230 [ 796.722308][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.733445][ T30] RIP: 0033:0x7f5bee17e227 [ 796.740846][ T30] RSP: 002b:00007ffe52a1b148 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 796.759863][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5bee17e227 [ 796.769432][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe52a1b200 [ 796.782924][ T30] RBP: 00007ffe52a1b200 R08: 0000000000000000 R09: 0000000000000000 [ 796.791204][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe52a1c280 [ 796.809092][ T30] R13: 00007f5bee1eeebc R14: 000000000009c5b4 R15: 00007ffe52a1c2c0 [ 796.819844][ T30] [ 796.828855][ T30] INFO: task kmmpd-loop5:9311 blocked for more than 146 seconds. [ 796.852946][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 796.855533][ T9932] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 796.860600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 796.860617][ T30] task:kmmpd-loop5 state:D stack:27680 pid:9311 tgid:9311 ppid:2 flags:0x00024000 [ 796.901021][ T30] Call Trace: [ 796.904892][ T30] [ 796.907859][ T30] __schedule+0x1800/0x4a60 [ 796.912422][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 796.948933][ T30] ? __pfx___schedule+0x10/0x10 [ 796.954111][ T30] ? __pfx_lock_release+0x10/0x10 [ 796.959189][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 796.972645][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 796.979037][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 796.985001][ T30] ? schedule+0x90/0x320 [ 796.989322][ T30] schedule+0x14b/0x320 [ 796.993622][ T30] ? percpu_rwsem_wait+0x34c/0x450 [ 796.998965][ T30] percpu_rwsem_wait+0x3c2/0x450 [ 797.006443][ T30] ? __pfx_percpu_rwsem_wait+0x10/0x10 [ 797.011959][ T30] ? __pfx_percpu_rwsem_wake_function+0x10/0x10 [ 797.025459][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.031162][ T30] ? rcu_is_watching+0x15/0xb0 [ 797.036476][ T30] __percpu_down_read+0xee/0x130 [ 797.041471][ T30] ? kmmpd+0x26d/0xaa0 [ 797.046789][ T30] write_mmp_block+0x2f2/0x3a0 [ 797.051605][ T30] kmmpd+0x26d/0xaa0 [ 797.057002][ T30] ? __pfx_kmmpd+0x10/0x10 [ 797.061461][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.067168][ T30] ? __kthread_parkme+0x169/0x1d0 [ 797.072241][ T30] ? __pfx_kmmpd+0x10/0x10 [ 797.076850][ T30] kthread+0x2f2/0x390 [ 797.080953][ T30] ? __pfx_kmmpd+0x10/0x10 [ 797.085531][ T30] ? __pfx_kthread+0x10/0x10 [ 797.090161][ T30] ret_from_fork+0x4d/0x80 [ 797.094762][ T30] ? __pfx_kthread+0x10/0x10 [ 797.099547][ T30] ret_from_fork_asm+0x1a/0x30 [ 797.104521][ T30] [ 797.107610][ T30] [ 797.107610][ T30] Showing all locks held in the system: [ 797.147446][ T30] 1 lock held by pool_workqueue_/3: [ 797.166876][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 797.186492][ T30] 3 locks held by kworker/u8:0/11: [ 797.191657][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 797.402732][ T30] #1: ffffc90000107d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 797.450812][ T30] #2: ffffffff8e7d2610 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 797.513031][ T30] 3 locks held by kworker/1:0/25: [ 797.518140][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 797.572736][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 797.612938][ T30] #2: ffff8880b892a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 797.622401][ T30] 1 lock held by khungtaskd/30: [ 797.642707][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 797.677657][ T30] 2 locks held by getty/4986: [ 797.682406][ T30] #0: ffff8880305350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 797.717657][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 797.744271][ T30] 3 locks held by kworker/0:4/5300: [ 797.749535][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 797.802853][ T30] #1: ffffc900047c7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 797.829931][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 797.851369][ T30] 1 lock held by syz-executor/9045: [ 797.857008][ T30] #0: ffff88805c4160e0 (&type->s_umount_key#32){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 797.881783][ T30] 3 locks held by syz-executor/9076: [ 797.887745][ T30] #0: ffff888031e08d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 797.898479][ T30] #1: ffff888031e08078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 797.917494][ T30] #2: ffffffff8fdf7968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 797.927830][ T30] 1 lock held by kmmpd-loop5/9311: [ 797.936700][ T30] #0: ffff88805c416420 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x26d/0xaa0 [ 797.945372][ T30] 3 locks held by syz-executor/9932: [ 797.950678][ T30] #0: ffff888029bf8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 797.960743][ T30] #1: ffff888029bf8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 797.974566][ T30] #2: ffffffff8fdf7968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 797.985343][ T30] 3 locks held by syz-executor/9987: [ 797.990663][ T30] #0: ffff88805ab68d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 798.001090][ T30] #1: ffff88805ab68078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 798.010982][ T30] #2: ffffffff8fdf7968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 798.021170][ T30] 3 locks held by syz-executor/10019: [ 798.026657][ T30] #0: ffff88804a3b0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 798.036749][ T30] #1: ffff88804a3b0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 798.050007][ T30] #2: ffffffff8fdf7968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 798.060199][ T30] 3 locks held by syz.4.943/10162: [ 798.075172][ T30] #0: ffff88806b8e4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 798.085346][ T30] #1: ffff88806b8e4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 798.095244][ T30] #2: ffffffff8fdf7968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 798.105539][ T30] [ 798.125662][ T30] ============================================= [ 798.125662][ T30] [ 798.158961][ T30] NMI backtrace for cpu 1 [ 798.163360][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 798.173882][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 798.183949][ T30] Call Trace: [ 798.187228][ T30] [ 798.190162][ T30] dump_stack_lvl+0x241/0x360 [ 798.194858][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.200063][ T30] ? __pfx__printk+0x10/0x10 [ 798.204658][ T30] ? vprintk_emit+0x667/0x7c0 [ 798.209345][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 798.214399][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 798.219384][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 798.224879][ T30] ? _printk+0xd5/0x120 [ 798.229068][ T30] ? __pfx__printk+0x10/0x10 [ 798.233682][ T30] ? __wake_up_klogd+0xcc/0x110 [ 798.238548][ T30] ? __pfx__printk+0x10/0x10 [ 798.243150][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.248803][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 798.253842][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 798.259841][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 798.265844][ T30] watchdog+0xff4/0x1040 [ 798.270139][ T30] ? watchdog+0x1ea/0x1040 [ 798.274607][ T30] ? __pfx_watchdog+0x10/0x10 [ 798.279312][ T30] kthread+0x2f2/0x390 [ 798.283399][ T30] ? __pfx_watchdog+0x10/0x10 [ 798.288098][ T30] ? __pfx_kthread+0x10/0x10 [ 798.292700][ T30] ret_from_fork+0x4d/0x80 [ 798.297224][ T30] ? __pfx_kthread+0x10/0x10 [ 798.301819][ T30] ret_from_fork_asm+0x1a/0x30 [ 798.306620][ T30] [ 798.312035][ T30] Sending NMI from CPU 1 to CPUs 0: [ 798.318718][ C0] NMI backtrace for cpu 0 [ 798.318734][ C0] CPU: 0 UID: 0 PID: 5526 Comm: kworker/u8:24 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 798.318761][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 798.318776][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 798.318816][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc/0x140 [ 798.318860][ C0] Code: 2c 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 e4 e0 48 83 ec 60 49 89 f7 48 89 fb 65 48 8b [ 798.318880][ C0] RSP: 0018:ffffc900041b6be0 EFLAGS: 00000046 [ 798.318899][ C0] RAX: 0000000000000000 RBX: 1ffff11006622609 RCX: 0000000000000000 [ 798.318916][ C0] RDX: ffffc900041b0000 RSI: 0000000000000246 RDI: ffffffff9a5db740 [ 798.318933][ C0] RBP: ffffc900041b6bf0 R08: 0000000000000003 R09: fffff52000836d5c [ 798.318950][ C0] R10: dffffc0000000000 R11: ffffffff81787510 R12: ffff888033113048 [ 798.318967][ C0] R13: 1ffff92000836d88 R14: dffffc0000000000 R15: ffff888033113038 [ 798.318989][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 798.319009][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.319025][ C0] CR2: 0000559f7876c4c8 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 798.319043][ C0] Call Trace: [ 798.319053][ C0] [ 798.319062][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 798.319094][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 798.319132][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 798.319163][ C0] ? nmi_handle+0x2a/0x5a0 [ 798.319201][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 798.319231][ C0] ? nmi_handle+0x151/0x5a0 [ 798.319254][ C0] ? nmi_handle+0x2a/0x5a0 [ 798.319278][ C0] ? _raw_spin_unlock_irqrestore+0xc/0x140 [ 798.319316][ C0] ? default_do_nmi+0x63/0x160 [ 798.319349][ C0] ? exc_nmi+0x123/0x1f0 [ 798.319379][ C0] ? end_repeat_nmi+0xf/0x53 [ 798.319421][ C0] ? __pfx_rcuhead_is_static_object+0x10/0x10 [ 798.319466][ C0] ? _raw_spin_unlock_irqrestore+0xc/0x140 [ 798.319504][ C0] ? _raw_spin_unlock_irqrestore+0xc/0x140 [ 798.319545][ C0] ? _raw_spin_unlock_irqrestore+0xc/0x140 [ 798.319583][ C0] [ 798.319591][ C0] [ 798.319601][ C0] debug_object_activate+0x3e4/0x510 [ 798.319640][ C0] ? worker_thread+0x86d/0xd10 [ 798.319674][ C0] ? kthread+0x2f2/0x390 [ 798.319698][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 798.319739][ C0] ? stack_depot_save_flags+0x29/0x830 [ 798.319768][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.319802][ C0] ? mark_lock+0x9a/0x350 [ 798.319839][ C0] kvfree_call_rcu+0x99/0x790 [ 798.319876][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.319911][ C0] ? __lock_acquire+0x137a/0x2040 [ 798.319948][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 798.319986][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.320027][ C0] cfg80211_update_known_bss+0xb39/0x1500 [ 798.320063][ C0] ? cmp_bss+0x8c7/0xea0 [ 798.320091][ C0] __cfg80211_bss_update+0x153/0x2170 [ 798.320118][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.320152][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 798.320181][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 798.320217][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 798.320243][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.320279][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 798.320306][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.320340][ C0] ? cfg80211_inform_single_bss_data+0xd3d/0x2030 [ 798.320373][ C0] cfg80211_inform_single_bss_data+0xd51/0x2030 [ 798.320407][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.320441][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 798.320485][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.320519][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 798.320556][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 798.320601][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 798.320638][ C0] ? __kernel_text_address+0xd/0x40 [ 798.320663][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 798.320698][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 798.320730][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 798.320779][ C0] ? __pfx_validate_chain+0x10/0x10 [ 798.320827][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 798.320862][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.320896][ C0] ? mark_lock+0x9a/0x350 [ 798.320934][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.320968][ C0] ? __lock_acquire+0x137a/0x2040 [ 798.321026][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 798.321059][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 798.321102][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 798.321139][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 798.321176][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 798.321218][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 798.321278][ C0] ? __pfx_lock_release+0x10/0x10 [ 798.321310][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.321352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.321398][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 798.321448][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 798.321484][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 798.321524][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.321562][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.321596][ C0] ? mark_lock+0x9a/0x350 [ 798.321634][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.321668][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 798.321705][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 798.321739][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.321774][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 798.321817][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 798.321864][ C0] cfg80211_wiphy_work+0x2dd/0x490 [ 798.321902][ C0] ? process_scheduled_works+0x945/0x1830 [ 798.321935][ C0] process_scheduled_works+0xa2e/0x1830 [ 798.321991][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 798.322031][ C0] ? assign_work+0x364/0x3d0 [ 798.322066][ C0] worker_thread+0x86d/0xd10 [ 798.322112][ C0] ? __kthread_parkme+0x169/0x1d0 [ 798.322149][ C0] ? __pfx_worker_thread+0x10/0x10 [ 798.322182][ C0] kthread+0x2f2/0x390 [ 798.322202][ C0] ? __pfx_worker_thread+0x10/0x10 [ 798.322235][ C0] ? __pfx_kthread+0x10/0x10 [ 798.322257][ C0] ret_from_fork+0x4d/0x80 [ 798.322291][ C0] ? __pfx_kthread+0x10/0x10 [ 798.322312][ C0] ret_from_fork_asm+0x1a/0x30 [ 798.322360][ C0] [ 798.362801][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 798.362828][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 798.362859][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 798.362876][ T30] Call Trace: [ 798.362888][ T30] [ 798.362900][ T30] dump_stack_lvl+0x241/0x360 [ 798.362944][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.362975][ T30] ? __pfx__printk+0x10/0x10 [ 798.363001][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 798.363051][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.363092][ T30] ? vscnprintf+0x5d/0x90 [ 798.363130][ T30] panic+0x349/0x860 [ 798.363156][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.363198][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 798.363238][ T30] ? __pfx_panic+0x10/0x10 [ 798.363262][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 798.363295][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.363335][ T30] ? __irq_work_queue_local+0x137/0x410 [ 798.363376][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.363421][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 798.363452][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 798.363489][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 798.363528][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.363567][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 798.363609][ T30] watchdog+0x1033/0x1040 [ 798.363651][ T30] ? watchdog+0x1ea/0x1040 [ 798.363698][ T30] ? __pfx_watchdog+0x10/0x10 [ 798.363737][ T30] kthread+0x2f2/0x390 [ 798.363765][ T30] ? __pfx_watchdog+0x10/0x10 [ 798.363803][ T30] ? __pfx_kthread+0x10/0x10 [ 798.363830][ T30] ret_from_fork+0x4d/0x80 [ 798.363870][ T30] ? __pfx_kthread+0x10/0x10 [ 798.363896][ T30] ret_from_fork_asm+0x1a/0x30 [ 798.363954][ T30] [ 798.380909][ T30] Kernel Offset: disabled [ 799.133142][ T30] Rebooting in 86400 seconds..