last executing test programs: 51.807053757s ago: executing program 0 (id=286): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b41, 0x4000000000001) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0xe}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 49.406684503s ago: executing program 0 (id=290): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 47.382292941s ago: executing program 0 (id=295): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x9e7, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 45.446532658s ago: executing program 0 (id=301): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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") inotify_init1(0x0) r0 = inotify_init1(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) inotify_add_watch(r0, 0x0, 0x46) openat$ppp(0xffffffffffffff9c, 0x0, 0x484400, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000042, &(0x7f0000000cc0)={[{@nombcache}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noload}, {@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}]}, 0x3, 0x4ea, &(0x7f00000006c0)="$eJzs3UtvG1sdAPD/OPa9yW3AuYVFqURb+lCKoE7S9BGxKK3EY1UJUfZpSJwoihNXidM2UQXuJwChCpBYsWKDxAdAQv0ICKkS7FiwAlWQ0gUbZDR+tI1jh+TWjdvk95NO58w59fz/x4/xnJlRHMCRdSYibkbEQERciIh8sz3TLFFtlPT/vdh6NJuWJGq1O/9MImm2tW/zWPNhqe9/N+KHyc64axubSzOlUnF1e/PmpcXlmYXiQnFlcnLi2tT1qatT43scSZLdrXc4Im586+XPf/Kb79z4w9cf/G36Hxd/lKZ1t9nfaRy90Bh6LgZbDdV3EaV/0vdNtj5CAAA+BOcj4nhEnI2Ir0Y+BmLXw2gAAADgA1T75vDHrSoAAABwOGXq98YmmULzft/hyGQKhcY9vF+MTzKl8lrla/Pl9ZW5xj20I5HLzC+WiuPNe4VHIpek6xP1+uv1y23rkxHxaUQ8yQ+l6/U+AAAA4GAca5v/v8w35v8AAADAIeNiPAAAABx+5v8AAABw+Jn/AwAAwKH2vdu301J7sfWo/jsAc/c31pfK9y/NFdeWCsvrs4XZ8uq9wkK5vFAqFgb+//ZK5fK9K7Gy/nCskl2rjK1tbE4vl9dXKtP13/WeLh4/gDEBAAAA2316+ulfkoiofmOoXlIfNftyfc0MeI8k2baGu1/pUyZAT+zhlP52Z9bfTSLAgWv/TgeODnN8IGlvaDswGOx2qPDH/cdyzAEAAP0x+iXX/+GoyvQ7AaBvftrvBIC+cS4ejq7c/u8ABA6ZHdf/2wx269jz9f9abV8JAQAAPTfcWFSjeS1wODKZQuHVZcFkfrFUHI+Iz0fEn/O5j9P1iT7mCwAAAAAAAAAAAAAAAAAAAAAAAAAfolotiRoAAABwqEVk/p40f/9rNH9+uP38wEfJf/L1ZUQ8+NWdXzycqVRWJ9L2f71qr/yy2X65H2cwAAAA4CjK7drbmqe35vEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Esvth7NtspBxn1+K4ZipFP8bAzWl4ORi4hP/p1E9o3HJREx0IP41ccRcaJT/CRNK0aaWbTHz0TEUJ/jH+tBfDjKnt6KiJudPn+ZOFNfdv78ZZvlbT2/Vf+Qd4zf2v8NdNn/fW6PMU4++91Y1/iPI05mO+9/WvGTLvHP7TH+3R9sbnbrq/06YrTj90+yLdZYZfne2NrG5qXF5ZmF4kJxZXJy4trU9amrU+Nj84ulYvPfjjF+9uXfV590HX+mvnwzfmucI40Mf9xt/Of3OP7/Pnu49YVGNbczfsTFc51f/xP1ZefnP31PXGh+D6T9o616tVF/06nf/ulUt9zS+HNdnv/G65+vdRv/xb0Nf8eYAYD+WtvYXJoplYqrB1A5e6V3G0wOKGeVLpXB9yONg658+6230zocfpvt/LVn40rnDJ27+rxjAgAAeu71QX+/MwEAAAAAAAAAAAAAAAAAAICj6zP98bDT+3tUe8xqf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCr/wUAAP//GpnIcw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 44.065125243s ago: executing program 0 (id=306): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11, 0x10012, r2, 0x654b3000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(0x0, r3, &(0x7f0000000380)='./bus\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x2, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 42.773165646s ago: executing program 0 (id=309): socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x47cdc) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 41.878744711s ago: executing program 32 (id=309): socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x47cdc) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 11.67634257s ago: executing program 2 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x0, 0x2d, 0x4e, 0x3a, 0x2f, 0x0]}}}, 0x4e}]}) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000a700)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000002000)='#', 0x1}], 0x1}}], 0x1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:de', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/44, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getdents64(r3, 0xfffffffffffffffe, 0x29) 10.695158086s ago: executing program 1 (id=368): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000100850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 10.00692576s ago: executing program 1 (id=369): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 9.868301111s ago: executing program 3 (id=370): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @mcast2, 0x3}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x50}}, 0x0) 9.750705653s ago: executing program 2 (id=372): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x81ff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) read$FUSE(r3, &(0x7f0000003f80)={0x2020}, 0x2020) 9.68956235s ago: executing program 1 (id=373): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 9.233245615s ago: executing program 1 (id=375): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x6e45c, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c000000002c756e686964880ecafb19b839eaaff56dc1585afdb924b16a73b70fd8c704652c6e6f72f3636b2c6e6f6a6f6c6978742c6d6f64653d3878303030303030303030303030303830302c626c6f636b3d307830303030303030303030303030348d56589d", @ANYRESDEC], 0xff, 0x52c, &(0x7f0000000580)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x4812, &(0x7f0000000040)=ANY=[], 0x11, 0x6ae, &(0x7f0000000400)="$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") r2 = creat(&(0x7f0000000240)='./file1\x00', 0x5d) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x7ff, 0x8}, {0x7, 0x40}]}, 0x18, 0x2) write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x101) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000000500)={[{@gid={'gid', 0x3d, 0xee01}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$FUSE(r3, &(0x7f0000001780)={0x2020}, 0x2020) 8.29905554s ago: executing program 2 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000002c0)={0x0, 0x10000, 0x0, [], [0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x400000000000, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 6.368537167s ago: executing program 2 (id=378): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000010bd408205000000000000000109022400011b0000000904"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.02827377s ago: executing program 1 (id=380): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x400002, 0x55) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r1, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 5.828859178s ago: executing program 4 (id=381): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) 5.683074881s ago: executing program 3 (id=382): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c57, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf5, 0x2e6, &(0x7f0000000540)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000700)=0xe9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) dup2(r0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0xfecc) 5.441488113s ago: executing program 1 (id=383): creat(&(0x7f0000000240)='./bus\x00', 0xc2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socket$isdn(0x22, 0x2, 0x25) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 5.363061835s ago: executing program 3 (id=384): mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) io_pgetevents(0x0, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) 4.623874448s ago: executing program 33 (id=383): creat(&(0x7f0000000240)='./bus\x00', 0xc2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socket$isdn(0x22, 0x2, 0x25) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 4.353532998s ago: executing program 4 (id=386): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.219884122s ago: executing program 4 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.057486868s ago: executing program 2 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f0000000000)={[0x8]}) 3.966036359s ago: executing program 3 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_addrs=@l2={0x1f, 0x0, @fixed}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000701080000000000000007000000", @ANYRES32=r4, @ANYBLOB="e04f00000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x8004) 3.960040039s ago: executing program 4 (id=390): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x14102, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) getdents(0xffffffffffffffff, 0x0, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.552041816s ago: executing program 2 (id=391): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x20000000, 0x0, 0x0, 0x901000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x9, 0xf8, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x240020d4) 2.270143877s ago: executing program 4 (id=392): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.075800287s ago: executing program 3 (id=393): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000300), 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000010340), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000040)={0x28, 0x6}) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x228, &(0x7f0000000300)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiMwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1v9mjOH4hVjOKXcKufG3HWLF+Rapn6+7g0Dw8GozxMZGJcz7mdiYJgZtnMPsr/KG6CRwcDMwMCgwsDAwMTAwpCWmZNq4MHAyMAM5RiyQFXBVDMxcIAl9JLzc1LaGRjBSQCsbTkDC9wMw8cMrHCOETLH2KIBahJDO5RWgdIeUHo5lH4MpeXRkg0L2IR+KE+jgYGBjaEisaSkyJCNgQHKgosZwcWMBOA2M0FtncuE6rnjTAyjYBSMglEwCkbBKBgFo2AUjIJRMJIBIAAA///ZbLn7") 124.324349ms ago: executing program 4 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000500)={0x0, 0x2, {0x8000000000000000, @usage=0x1, 0x0, 0x4, 0xafd4, 0x8, 0x0, 0x7fff, 0x1a, @struct={0x3, 0xc}, 0x398ddeaa, 0x82, [0x7, 0x9, 0xffa3, 0x8000000000000000, 0x100, 0x80000000]}, {0x1, @usage=0x3, 0x0, 0x4f5, 0x81, 0xff, 0xfffffffffffffff7, 0x1b, 0x90, @struct={0x7fffffff, 0x5}, 0x3, 0x3, [0xf44a, 0x8, 0xcf, 0x0, 0x3, 0x6]}, {0x2, @usage, 0x0, 0xbb, 0x3dc, 0x3, 0x2, 0xffffffffffffff67, 0x200, @usage, 0xffffffac, 0x4, [0x100000000, 0x100000001, 0xa4, 0x2, 0xffff, 0x2420]}, {0xe, 0x8, 0x800}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x5}) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0189436, &(0x7f0000000140)) 0s ago: executing program 3 (id=395): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea0000000000010902240001000000000904000101030000000921000000012207000905810300000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0xfffffffffffffffe, 0x0, &(0x7f0000000180), &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7f, 0x1, {0x22, 0x44c}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x40, 0xa, 0x25, "4d5818ffd72edf0b8143b153387a49e3a29201617329ac2b94e4eef678eab46975d559ca07"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x73}, &(0x7f00000004c0)={0x20, 0x1, 0x28, "8cee9099b15fe09b77b2a31bd2405604444fc013735285cb2618232f92f8622704932fd5c9275e5d"}, 0x0}) syz_usb_disconnect(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fd, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x5, 0x3, 0x7, 0x0, 0x3, 0x2, 0x2000000000000000, 0x0, 0xaa4}) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @dev}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 90.537040][ T5820] cgroup: Unknown subsys name 'net' [ 90.650676][ T5820] cgroup: Unknown subsys name 'cpuset' [ 90.660585][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.660125][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.314796][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.321259][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.329449][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.337833][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.338080][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.354024][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.354991][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.369811][ T9] cfg80211: failed to load regulatory.db [ 97.374837][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.388865][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.396383][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.406960][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.417528][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.424747][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.428942][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.437686][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.444044][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.457037][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.462051][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.472745][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.483352][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.491624][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.501758][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.509334][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.516609][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.526398][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.533480][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.534777][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.544246][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.583343][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 97.598109][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.307946][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 98.349790][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 98.494857][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 98.581552][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 98.743245][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.754009][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.761852][ T5830] bridge_slave_0: entered allmulticast mode [ 98.769343][ T5830] bridge_slave_0: entered promiscuous mode [ 98.782196][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.789460][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.798358][ T5830] bridge_slave_1: entered allmulticast mode [ 98.805992][ T5830] bridge_slave_1: entered promiscuous mode [ 98.904204][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.911411][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.919524][ T5832] bridge_slave_0: entered allmulticast mode [ 98.927357][ T5832] bridge_slave_0: entered promiscuous mode [ 98.937357][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.944593][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.951924][ T5832] bridge_slave_1: entered allmulticast mode [ 98.959266][ T5832] bridge_slave_1: entered promiscuous mode [ 99.017861][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.050057][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 99.079592][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.087146][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.094593][ T5841] bridge_slave_0: entered allmulticast mode [ 99.102174][ T5841] bridge_slave_0: entered promiscuous mode [ 99.112822][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.179456][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.186766][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.194163][ T5841] bridge_slave_1: entered allmulticast mode [ 99.202387][ T5841] bridge_slave_1: entered promiscuous mode [ 99.243031][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.267352][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.274610][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.282701][ T5838] bridge_slave_0: entered allmulticast mode [ 99.290808][ T5838] bridge_slave_0: entered promiscuous mode [ 99.317894][ T5830] team0: Port device team_slave_0 added [ 99.328324][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.356582][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.363817][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.371533][ T5838] bridge_slave_1: entered allmulticast mode [ 99.379438][ T5838] bridge_slave_1: entered promiscuous mode [ 99.390624][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.404742][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.416249][ T5830] team0: Port device team_slave_1 added [ 99.477858][ T5840] Bluetooth: hci0: command tx timeout [ 99.539044][ T5841] team0: Port device team_slave_0 added [ 99.557011][ T5840] Bluetooth: hci4: command tx timeout [ 99.611191][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.618345][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.645146][ T5840] Bluetooth: hci3: command tx timeout [ 99.650589][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.650861][ T5839] Bluetooth: hci2: command tx timeout [ 99.665374][ T5848] Bluetooth: hci1: command tx timeout [ 99.673693][ T5841] team0: Port device team_slave_1 added [ 99.682954][ T5832] team0: Port device team_slave_0 added [ 99.692955][ T5832] team0: Port device team_slave_1 added [ 99.719221][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.734775][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.744869][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.752230][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.778500][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.838640][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.845986][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.854109][ T5842] bridge_slave_0: entered allmulticast mode [ 99.862075][ T5842] bridge_slave_0: entered promiscuous mode [ 99.928201][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.935730][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.943513][ T5842] bridge_slave_1: entered allmulticast mode [ 99.952292][ T5842] bridge_slave_1: entered promiscuous mode [ 99.980444][ T5838] team0: Port device team_slave_0 added [ 99.992686][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.999837][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.026273][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.038492][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.045683][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.072560][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.087024][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.094012][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.120335][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.148966][ T5838] team0: Port device team_slave_1 added [ 100.206278][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.213283][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.239849][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.294156][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.313859][ T5830] hsr_slave_0: entered promiscuous mode [ 100.320776][ T5830] hsr_slave_1: entered promiscuous mode [ 100.376019][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.383002][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.409499][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.427511][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.519060][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.526330][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.552682][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.622393][ T5832] hsr_slave_0: entered promiscuous mode [ 100.632523][ T5832] hsr_slave_1: entered promiscuous mode [ 100.639812][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.648638][ T5832] Cannot create hsr debugfs directory [ 100.666855][ T5842] team0: Port device team_slave_0 added [ 100.682961][ T5841] hsr_slave_0: entered promiscuous mode [ 100.690523][ T5841] hsr_slave_1: entered promiscuous mode [ 100.697666][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.705258][ T5841] Cannot create hsr debugfs directory [ 100.733393][ T5842] team0: Port device team_slave_1 added [ 100.843797][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.851176][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.877759][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.947672][ T5838] hsr_slave_0: entered promiscuous mode [ 100.954147][ T5838] hsr_slave_1: entered promiscuous mode [ 100.961595][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.969216][ T5838] Cannot create hsr debugfs directory [ 100.976216][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.983179][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.009403][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.302993][ T5842] hsr_slave_0: entered promiscuous mode [ 101.310378][ T5842] hsr_slave_1: entered promiscuous mode [ 101.317546][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.325143][ T5842] Cannot create hsr debugfs directory [ 101.555887][ T5848] Bluetooth: hci0: command tx timeout [ 101.609549][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.624433][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.641326][ T5848] Bluetooth: hci4: command tx timeout [ 101.653821][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.693172][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.716034][ T5848] Bluetooth: hci1: command tx timeout [ 101.721513][ T5848] Bluetooth: hci2: command tx timeout [ 101.727054][ T5839] Bluetooth: hci3: command tx timeout [ 101.845135][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.858940][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.871850][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.913251][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.027332][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.061727][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.090768][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.114591][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.199198][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.215854][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.249075][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.261878][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.417508][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.460799][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.474909][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.489463][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.513170][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.623672][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.654978][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.671822][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.679284][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.701970][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.709194][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.866793][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.893511][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.935276][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.942505][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.982066][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.991822][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.999098][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.053770][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.072084][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.115197][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.151141][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.158390][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.199735][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.206934][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.218235][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.225523][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.235138][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.242381][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.278046][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.351699][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.358945][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.440085][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.447333][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.637048][ T5848] Bluetooth: hci0: command tx timeout [ 103.716212][ T5848] Bluetooth: hci4: command tx timeout [ 103.793284][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.806060][ T5848] Bluetooth: hci2: command tx timeout [ 103.811537][ T5848] Bluetooth: hci3: command tx timeout [ 103.815463][ T5840] Bluetooth: hci1: command tx timeout [ 104.139436][ T5830] veth0_vlan: entered promiscuous mode [ 104.181354][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.298015][ T5830] veth1_vlan: entered promiscuous mode [ 104.393846][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.421893][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.489056][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.513605][ T5832] veth0_vlan: entered promiscuous mode [ 104.573434][ T5830] veth0_macvtap: entered promiscuous mode [ 104.584091][ T5832] veth1_vlan: entered promiscuous mode [ 104.651153][ T5830] veth1_macvtap: entered promiscuous mode [ 104.669265][ T5842] veth0_vlan: entered promiscuous mode [ 104.736688][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.751671][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.793489][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.810349][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.822206][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.834911][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.880556][ T5842] veth1_vlan: entered promiscuous mode [ 104.916889][ T5838] veth0_vlan: entered promiscuous mode [ 104.932828][ T5838] veth1_vlan: entered promiscuous mode [ 104.942597][ T5832] veth0_macvtap: entered promiscuous mode [ 104.988897][ T5832] veth1_macvtap: entered promiscuous mode [ 105.059169][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.071693][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.096217][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.166727][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.182267][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.195232][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.248796][ T5838] veth0_macvtap: entered promiscuous mode [ 105.264247][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.273242][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.283167][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.292370][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.308203][ T5842] veth0_macvtap: entered promiscuous mode [ 105.322161][ T5842] veth1_macvtap: entered promiscuous mode [ 105.333701][ T5838] veth1_macvtap: entered promiscuous mode [ 105.343899][ T5841] veth0_vlan: entered promiscuous mode [ 105.354408][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.373383][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.438152][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.449045][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.459614][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.470413][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.482904][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.512014][ T5841] veth1_vlan: entered promiscuous mode [ 105.525518][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.536893][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.546737][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.558735][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.569487][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.580526][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.590573][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.601070][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.612787][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.642511][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.660621][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.670931][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.681754][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.693759][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.715691][ T5840] Bluetooth: hci0: command tx timeout [ 105.738161][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.747183][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.756175][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.764979][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.782029][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.792631][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.802836][ T5840] Bluetooth: hci4: command tx timeout [ 105.820389][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.832975][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.844162][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.855172][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.868184][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.882054][ T5840] Bluetooth: hci1: command tx timeout [ 105.882074][ T5839] Bluetooth: hci3: command tx timeout [ 105.892130][ T5840] Bluetooth: hci2: command tx timeout [ 105.936730][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.967261][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.979004][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.988508][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.997659][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.086247][ T5841] veth0_macvtap: entered promiscuous mode [ 106.122748][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.141706][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.178033][ T5841] veth1_macvtap: entered promiscuous mode [ 106.226083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.365213][ T5915] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 106.435677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.767896][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.804449][ T5915] bond0: (slave team0): Enslaving as an active interface with an up link [ 106.892832][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.903634][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.928670][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.945352][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.975386][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.996996][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.016018][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.026862][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.089585][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.228350][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.543643][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.649099][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.694579][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.790222][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.801410][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.811548][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.822283][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.834049][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.847882][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.857495][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.927032][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.940606][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.951325][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.961092][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.972337][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.982384][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.173949][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.204168][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.270704][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.300713][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.302862][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.331284][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.819590][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.887396][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.321986][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.370751][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.513621][ T5939] loop1: detected capacity change from 0 to 47 [ 109.586794][ T5939] ======================================================= [ 109.586794][ T5939] WARNING: The mand mount option has been deprecated and [ 109.586794][ T5939] and is ignored by this kernel. Remove the mand [ 109.586794][ T5939] option from the mount to silence this warning. [ 109.586794][ T5939] ======================================================= [ 110.970033][ T5939] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.395938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.564771][ T5949] cgroup: noprefix used incorrectly [ 112.485983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 113.946327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.225763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 114.328023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.430613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.536344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.697167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.781882][ T5967] Bluetooth: MGMT ver 1.23 [ 116.439847][ T5969] loop0: detected capacity change from 0 to 4096 [ 116.647800][ T5975] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.839194][ T5979] netlink: 168 bytes leftover after parsing attributes in process `syz.3.16'. [ 116.901097][ T29] audit: type=1804 audit(1738832835.130:2): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13" name="/newroot/3/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.009133][ T29] audit: type=1804 audit(1738832835.130:3): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13" name="/newroot/3/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.179357][ T29] audit: type=1804 audit(1738832835.130:4): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.13" name="/newroot/3/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 117.223631][ T29] audit: type=1804 audit(1738832835.140:5): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.13" name="/newroot/3/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 119.046992][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.793650][ T6004] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 120.908011][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 122.561509][ T6018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27'. [ 122.615657][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 122.677476][ T6018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27'. [ 122.694959][ T6018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27'. [ 122.943644][ T6029] loop1: detected capacity change from 0 to 2048 [ 124.638202][ T6029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.812528][ T6036] loop2: detected capacity change from 0 to 2048 [ 126.727625][ T6052] loop3: detected capacity change from 0 to 8 [ 127.685498][ T6041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.33'. [ 127.868960][ T6052] SQUASHFS error: Unable to read inode 0x11f [ 132.584428][ T6084] loop0: detected capacity change from 0 to 2048 [ 133.484346][ T6084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.903446][ T6110] loop4: detected capacity change from 0 to 128 [ 136.064723][ T6110] Process accounting resumed [ 136.136147][ T5882] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.163888][ T6112] loop0: detected capacity change from 0 to 2048 [ 138.218246][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 138.229855][ T5882] usb 3-1: config 1 has no interface number 0 [ 138.236936][ T5882] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.257206][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.389353][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.405562][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.234567][ T5882] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 139.699939][ T5882] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 139.735705][ T5882] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 140.459704][ T5882] usb 3-1: string descriptor 0 read error: -71 [ 140.488795][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.523394][ T5882] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.746131][ T6138] loop1: detected capacity change from 0 to 2048 [ 140.794235][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.245660][ T6140] xt_nat: multiple ranges no longer supported [ 142.627322][ T6138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.633923][ T5882] usb 3-1: can't set config #1, error -71 [ 143.084535][ T5882] usb 3-1: USB disconnect, device number 2 [ 143.144343][ T6143] loop4: detected capacity change from 0 to 16 [ 143.258819][ T6143] erofs (device loop4): mounted with root inode @ nid 36. [ 143.339032][ T6143] tipc: Can't bind to reserved service type 1 [ 145.348718][ T6165] process 'syz.2.66' launched './file0' with NULL argv: empty string added [ 145.672001][ T6170] loop4: detected capacity change from 0 to 8 [ 150.267045][ T942] libceph: connect (1)[c::]:6789 error -101 [ 150.310757][ T942] libceph: mon0 (1)[c::]:6789 connect error [ 150.585951][ T6208] loop0: detected capacity change from 0 to 1024 [ 150.676938][ T942] libceph: connect (1)[c::]:6789 error -101 [ 150.702747][ T942] libceph: mon0 (1)[c::]:6789 connect error [ 150.975952][ T6198] ceph: No mds server is up or the cluster is laggy [ 151.791869][ T942] libceph: connect (1)[c::]:6789 error -101 [ 151.798203][ T942] libceph: mon0 (1)[c::]:6789 connect error [ 153.062262][ T5840] Bluetooth: Unexpected continuation frame (len 32) [ 156.441691][ T6247] loop0: detected capacity change from 0 to 8 [ 157.650591][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 160.023679][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.047318][ T6272] loop4: detected capacity change from 0 to 47 [ 162.549890][ T6295] mmap: syz.3.98 (6295) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.433485][ T6299] kvm: vcpu 0: requested 12 ns lapic timer period limited to 200000 ns [ 166.445454][ T6315] loop0: detected capacity change from 0 to 2048 [ 166.460965][ T6315] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 166.476016][ T6315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.805243][ T6322] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.814639][ T6322] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.823720][ T6322] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.832610][ T6322] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.934524][ T6322] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 168.678581][ T6330] tipc: Started in network mode [ 168.684794][ T6330] tipc: Node identity 7e7c9cad3699, cluster identity 4711 [ 168.708644][ T6330] tipc: Enabled bearer , priority 0 [ 168.721934][ T6330] syzkaller0: entered promiscuous mode [ 168.734176][ T6330] syzkaller0: entered allmulticast mode [ 168.955217][ T6330] tipc: Resetting bearer [ 169.717090][ T25] tipc: Node number set to 1223007405 [ 169.781700][ T6327] tipc: Resetting bearer [ 170.356518][ T6327] tipc: Disabling bearer [ 172.457124][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 174.605360][ T6366] block nbd2: Device being setup by another task [ 174.639322][ T6359] orangefs_mount: mount request failed with -4 [ 175.636214][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 175.645423][ T6375] netlink: 32 bytes leftover after parsing attributes in process `syz.1.122'. [ 175.772377][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c88c00: rx timeout, send abort [ 176.281981][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c88c00: abort rx timeout. Force session deactivation [ 177.615511][ T6366] block nbd2: shutting down sockets [ 179.145441][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.128'. [ 179.362665][ T6414] loop0: detected capacity change from 0 to 256 [ 179.708861][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 180.059408][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 180.818750][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.842949][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.827032][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.851697][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.861314][ T9] usb 3-1: Product: syz [ 182.355320][ T9] usb 3-1: Manufacturer: syz [ 182.365828][ T9] usb 3-1: SerialNumber: syz [ 182.539747][ T6429] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 182.634962][ T9] usb 3-1: can't set config #1, error -71 [ 182.731237][ T9] usb 3-1: USB disconnect, device number 3 [ 182.832380][ T6434] loop3: detected capacity change from 0 to 16 [ 182.869755][ T6436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 182.889592][ T6434] erofs: Unknown parameter '01777777777777777777777ÿ' [ 182.993836][ T6434] loop3: detected capacity change from 0 to 512 [ 183.763205][ T6434] loop3: detected capacity change from 0 to 2048 [ 183.955504][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 184.045443][ T5934] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 184.145610][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 184.179467][ T5883] usb 1-1: config 2 has an invalid interface number: 78 but max is 0 [ 184.209352][ T5883] usb 1-1: config 2 has no interface number 0 [ 184.246825][ T5883] usb 1-1: config 2 interface 78 has no altsetting 0 [ 184.269784][ T5934] usb 3-1: config index 0 descriptor too short (expected 9318, got 36) [ 184.275018][ T5883] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff70, bcdDevice=82.1b [ 184.289445][ T5934] usb 3-1: config 82 has too many interfaces: 201, using maximum allowed: 32 [ 184.316592][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.328081][ T5934] usb 3-1: config 82 has 1 interface, different from the descriptor's value: 201 [ 184.809315][ T5883] usb 1-1: Product: syz [ 184.823738][ T5934] usb 3-1: config 82 has no interface number 0 [ 184.827304][ T5883] usb 1-1: Manufacturer: syz [ 184.830838][ T5934] usb 3-1: config 82 interface 113 has no altsetting 0 [ 185.026930][ T5934] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 185.065401][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.073472][ T5934] usb 3-1: Product: syz [ 185.088159][ T5883] usb 1-1: SerialNumber: syz [ 185.589848][ T5934] usb 3-1: Manufacturer: syz [ 185.594526][ T5934] usb 3-1: SerialNumber: syz [ 187.293059][ C1] usb 3-1: NFC: Urb failure (status -71) [ 187.302021][ C1] usb 3-1: NFC: Urb failure (status -71) [ 187.360649][ T5934] usb 3-1: NFC: Unable to get FW version [ 187.421661][ T5934] pn533_usb 3-1:82.113: probe with driver pn533_usb failed with error -71 [ 187.792738][ T5934] usb 3-1: USB disconnect, device number 4 [ 187.794435][ T5883] option 1-1:2.78: GSM modem (1-port) converter detected [ 188.038334][ T5883] usb 1-1: USB disconnect, device number 2 [ 188.070056][ T5883] option 1-1:2.78: device disconnected [ 190.370126][ T6490] loop3: detected capacity change from 0 to 512 [ 190.383059][ T6492] loop2: detected capacity change from 0 to 256 [ 190.393474][ T6490] EXT4-fs (loop3): invalid first ino: 1 [ 191.151211][ T6494] xt_l2tp: missing protocol rule (udp|l2tpip) [ 192.843341][ T6504] loop3: detected capacity change from 0 to 1024 [ 192.888793][ T6501] loop2: detected capacity change from 0 to 1024 [ 192.891847][ T6505] loop0: detected capacity change from 0 to 128 [ 192.931879][ T6501] hfsplus: failed to load attributes file [ 192.961573][ T6505] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 193.787954][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 193.983447][ T29] audit: type=1800 audit(1738832911.960:6): pid=6510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.161" name="bus" dev="loop0" ino=115 res=0 errno=0 [ 194.003680][ C0] vkms_vblank_simulate: vblank timer overrun [ 194.298449][ T6507] loop4: detected capacity change from 0 to 4096 [ 194.437842][ T6320] hfsplus: b-tree write err: -5, ino 4 [ 194.454082][ T6505] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 194.496550][ T6512] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.833688][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.840333][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.120683][ T6535] loop0: detected capacity change from 0 to 1024 [ 200.134751][ T6535] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.372582][ T6535] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 200.382362][ T6535] EXT4-fs (loop0): too many log groups per flexible block group [ 200.390663][ T6535] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 200.397754][ T6535] EXT4-fs (loop0): mount failed [ 204.126956][ T3013] Bluetooth: hci5: Frame reassembly failed (-84) [ 204.340715][ T6555] loop1: detected capacity change from 0 to 64 [ 204.553076][ T6555] hfs: unable to locate alternate MDB [ 204.570914][ T6555] hfs: continuing without an alternate MDB [ 206.062837][ T5934] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 206.116439][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 206.135409][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 206.835379][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.846316][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.085508][ T5934] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.115391][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.123457][ T5934] usb 4-1: SerialNumber: syz [ 208.289368][ T6573] loop1: detected capacity change from 0 to 128 [ 208.339112][ T5934] usb 4-1: can't set config #1, error -71 [ 208.356081][ T5934] usb 4-1: USB disconnect, device number 2 [ 210.194087][ T6585] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.860989][ T6593] loop4: detected capacity change from 0 to 512 [ 210.900697][ T6592] loop2: detected capacity change from 0 to 128 [ 210.916492][ T6593] EXT4-fs: Ignoring removed nobh option [ 210.973095][ T6599] loop3: detected capacity change from 0 to 2048 [ 211.015170][ T6599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.015801][ T6593] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 211.034252][ T6593] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 211.048091][ T6593] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #13: comm syz.4.184: casefold flag without casefold feature [ 211.145200][ T6593] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.184: couldn't read orphan inode 13 (err -117) [ 211.492538][ T6603] hub 2-0:1.0: USB hub found [ 211.501958][ T6603] hub 2-0:1.0: 1 port detected [ 212.285781][ T6593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.348137][ T5933] Bluetooth: hci5: Frame reassembly failed (-84) [ 212.986109][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 213.467114][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 213.497407][ T6615] block nbd1: NBD_DISCONNECT [ 213.535463][ T6615] block nbd1: Disconnected due to user request. [ 213.546807][ T46] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.561110][ T6615] block nbd1: shutting down sockets [ 214.355403][ T5840] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 214.359857][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 215.218914][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.294555][ T9] usb 5-1: no configurations [ 215.307587][ T9] usb 5-1: can't read configurations, error -22 [ 215.391586][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.471918][ T6639] kvm: kvm [6638]: vcpu0, guest rIP: 0x227 Unhandled WRMSR(0x11e) = 0x0 [ 220.589186][ T6671] netlink: 'syz.3.205': attribute type 2 has an invalid length. [ 222.821139][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 222.824549][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 222.827243][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 222.833253][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 223.042399][ T6682] vlan2: entered promiscuous mode [ 223.063538][ T6682] vlan2: entered allmulticast mode [ 223.068932][ T6682] hsr_slave_1: entered allmulticast mode [ 223.290206][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 225.609085][ T6682] hsr_slave_1 (unregistering): left allmulticast mode [ 226.256218][ T6696] loop4: detected capacity change from 0 to 128 [ 226.311289][ T6696] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 226.833535][ T6682] hsr_slave_1 (unregistering): left promiscuous mode [ 226.855630][ T6696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.471128][ T6719] loop3: detected capacity change from 0 to 1024 [ 229.802749][ T6721] loop1: detected capacity change from 0 to 32768 [ 229.842957][ T6721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.222 (6721) [ 229.885805][ T6721] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.896239][ T6721] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 229.905036][ T6721] BTRFS info (device loop1): disk space caching is enabled [ 229.912462][ T6721] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 231.011334][ T6730] loop2: detected capacity change from 0 to 8 [ 231.097514][ T6730] SQUASHFS error: lzo decompression failed, data probably corrupt [ 231.186700][ T6721] BTRFS info (device loop1): rebuilding free space tree [ 231.211979][ T6730] SQUASHFS error: Failed to read block 0x91: -5 [ 231.249310][ T6721] BTRFS info (device loop1): disabling free space tree [ 231.256404][ T6721] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 231.266554][ T6721] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 231.546166][ T6730] SQUASHFS error: Unable to read metadata cache entry [8f] [ 231.579290][ T6730] SQUASHFS error: Unable to read inode 0x11f [ 232.609042][ T5838] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.064163][ T2946] hfsplus: b-tree write err: -5, ino 4 [ 234.515930][ T5890] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 235.701036][ T6787] loop1: detected capacity change from 0 to 256 [ 236.121416][ T5890] usb 3-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config [ 236.177831][ T5890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.335103][ T5890] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.433062][ T6787] FAT-fs (loop1): Directory bread(block 64) failed [ 236.455628][ T6787] FAT-fs (loop1): Directory bread(block 65) failed [ 236.480198][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.491413][ T6787] FAT-fs (loop1): Directory bread(block 66) failed [ 236.526779][ T6787] FAT-fs (loop1): Directory bread(block 67) failed [ 236.550926][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.613683][ T5890] usb 3-1: Product: syz [ 236.644875][ T5890] usb 3-1: Manufacturer: syz [ 236.645675][ T6787] FAT-fs (loop1): Directory bread(block 68) failed [ 236.743510][ T5890] usb 3-1: SerialNumber: syz [ 237.126276][ T5890] usb 3-1: can't set config #1, error -71 [ 237.135499][ T6787] FAT-fs (loop1): Directory bread(block 69) failed [ 237.142218][ T6787] FAT-fs (loop1): Directory bread(block 70) failed [ 237.149648][ T6793] loop4: detected capacity change from 0 to 512 [ 237.200614][ T5890] usb 3-1: USB disconnect, device number 5 [ 237.215981][ T6787] FAT-fs (loop1): Directory bread(block 71) failed [ 237.235975][ T6787] FAT-fs (loop1): Directory bread(block 72) failed [ 237.252023][ T6793] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 237.257072][ T6787] FAT-fs (loop1): Directory bread(block 73) failed [ 237.383306][ T6793] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 238.760886][ T6793] EXT4-fs (loop4): 1 truncate cleaned up [ 239.179913][ T6793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.387080][ T6807] loop2: detected capacity change from 0 to 256 [ 239.408730][ T6807] vfat: Unknown parameter 'eocharset' [ 239.480571][ T6807] loop2: detected capacity change from 0 to 512 [ 239.488110][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.792808][ T6807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.907183][ T6807] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.746720][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.035376][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 243.485952][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 243.537641][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 243.605298][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.939949][ T5890] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.963227][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.047503][ T6848] No such timeout policy "syz1" [ 244.923517][ T5890] usb 1-1: Product: syz [ 244.927807][ T5890] usb 1-1: Manufacturer: syz [ 244.932425][ T5890] usb 1-1: SerialNumber: syz [ 245.100296][ T5890] usb 1-1: config 0 descriptor?? [ 245.711223][ T5890] usb 1-1: can't set config #0, error -71 [ 245.755987][ T5890] usb 1-1: USB disconnect, device number 3 [ 248.980801][ T6889] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 251.902327][ T6894] loop0: detected capacity change from 0 to 16 [ 251.970161][ T6894] erofs (device loop0): mounted with root inode @ nid 36. [ 252.188725][ T6894] erofs (device loop0): invalid logical cluster 0 at nid 36 [ 252.263595][ T6894] syz.0.264: attempt to access beyond end of device [ 252.263595][ T6894] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 252.351078][ T6894] erofs (device loop0): read error -5 @ 0 of nid 36 [ 252.370243][ T6894] erofs (device loop0): fail to readdir of logical block 0 of nid 36 [ 253.400775][ T6906] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 254.052010][ T6906] erofs (device loop0): failed to decompress -6 in[55, 4041] out[1851] [ 254.103976][ T6906] erofs (device loop0): read error -117 @ 43 of nid 36 [ 255.155328][ T5839] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 258.023050][ T6948] bridge1: entered promiscuous mode [ 258.035531][ T6948] bridge1: entered allmulticast mode [ 258.073385][ T6951] loop2: detected capacity change from 0 to 64 [ 258.174599][ T6951] hfs: unable to open extent tree [ 258.211344][ T6951] hfs: can't find a HFS filesystem on dev loop2 [ 258.220120][ T6952] loop0: detected capacity change from 0 to 2048 [ 258.235836][ T6955] loop4: detected capacity change from 0 to 256 [ 258.291368][ T6955] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 258.918995][ T6952] loop0: unable to read partition table [ 258.965872][ T6948] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.987262][ T6952] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 259.082958][ T6948] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 259.186196][ T6948] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.212345][ T6948] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.291818][ T6948] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 259.386622][ T6948] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.416951][ T6948] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 260.985587][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 261.236523][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 261.242621][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 261.297026][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.303412][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.396519][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 261.762000][ T6986] syz.4.287 (6986) used greatest stack depth: 18384 bytes left [ 262.020846][ T29] audit: type=1804 audit(1738832980.290:7): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.288" name="/newroot/54/bus/file0" dev="overlay" ino=328 res=1 errno=0 [ 263.063050][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 263.316926][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 263.476946][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 263.918876][ T7002] loop4: detected capacity change from 0 to 64 [ 265.458035][ T7014] loop2: detected capacity change from 0 to 2048 [ 265.661399][ T7014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.909701][ T7014] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 266.006921][ T7014] EXT4-fs (loop2): Remounting filesystem read-only [ 266.023539][ T7023] loop1: detected capacity change from 0 to 2048 [ 266.077491][ T7023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.766775][ T29] audit: type=1800 audit(1738832985.040:8): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.298" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 267.002854][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.044096][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.076054][ T7033] loop0: detected capacity change from 0 to 16 [ 267.102704][ T7033] erofs (device loop0): mounted with root inode @ nid 36. [ 267.846677][ T5839] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 268.707034][ T5830] syz-executor (5830) used greatest stack depth: 18160 bytes left [ 269.094692][ T7057] loop4: detected capacity change from 0 to 1024 [ 269.100920][ T5933] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.129708][ T7061] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 269.152465][ T7057] EXT4-fs: Ignoring removed nobh option [ 269.196124][ T7057] EXT4-fs: Ignoring removed bh option [ 269.220551][ T7056] kvm: pic: non byte read [ 269.228909][ T7056] kvm: pic: non byte read [ 269.236189][ T7056] kvm: pic: single mode not supported [ 269.237901][ T7056] kvm: pic: level sensitive irq not supported [ 269.243992][ T7056] kvm: pic: non byte read [ 269.274937][ T7057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.333230][ T7056] kvm: pic: non byte read [ 269.338744][ T5933] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.339309][ T7056] kvm: pic: non byte read [ 269.364591][ T7056] kvm: pic: non byte read [ 269.371073][ T7056] kvm: pic: non byte read [ 269.385480][ T7056] kvm: pic: single mode not supported [ 269.385580][ T7056] kvm: pic: non byte read [ 269.412477][ T7056] kvm: pic: non byte read [ 269.424509][ T7056] kvm: pic: single mode not supported [ 269.424535][ T7056] kvm: pic: level sensitive irq not supported [ 269.434388][ T7056] kvm: pic: non byte read [ 269.588029][ T5933] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.694753][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.963019][ T7070] loop3: detected capacity change from 0 to 2048 [ 270.038735][ T7070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.054883][ T5933] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.945647][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.285425][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.296779][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.304889][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.316761][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.296973][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.355865][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.442750][ T5933] bridge_slave_1: left allmulticast mode [ 275.449831][ T5933] bridge_slave_1: left promiscuous mode [ 275.526134][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.609866][ T7099] loop3: detected capacity change from 0 to 256 [ 275.655157][ T5933] bridge_slave_0: left allmulticast mode [ 275.701933][ T5933] bridge_slave_0: left promiscuous mode [ 275.797427][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.818195][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.322'. [ 277.477315][ T5843] Bluetooth: hci0: command tx timeout [ 277.484315][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.502723][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.514372][ T5933] bond0 (unregistering): (slave team0): Releasing backup interface [ 277.526860][ T5933] bond0 (unregistering): Released all slaves [ 279.557030][ T5843] Bluetooth: hci0: command tx timeout [ 281.885544][ T5843] Bluetooth: hci0: command tx timeout [ 282.661148][ T5933] hsr_slave_0: left promiscuous mode [ 282.719715][ T5933] hsr_slave_1: left promiscuous mode [ 282.743674][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.760931][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.985425][ T5843] Bluetooth: hci0: command tx timeout [ 284.713198][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.777558][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.802587][ T7172] loop4: detected capacity change from 0 to 64 [ 285.026333][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 285.055142][ T5933] veth1_macvtap: left promiscuous mode [ 285.104309][ T5933] veth0_macvtap: left promiscuous mode [ 285.111424][ T5933] veth1_vlan: left promiscuous mode [ 285.123245][ T5933] veth0_vlan: left promiscuous mode [ 288.707466][ T7211] loop4: detected capacity change from 0 to 256 [ 288.874717][ T7213] loop2: detected capacity change from 0 to 512 [ 288.889434][ T7214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.345'. [ 288.900308][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.345'. [ 288.900910][ T7213] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 289.035886][ T7213] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #17: comm syz.2.346: corrupted in-inode xattr: e_name out of bounds [ 289.069522][ T7213] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.346: couldn't read orphan inode 17 (err -117) [ 289.090125][ T7213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.077891][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.163571][ T7225] loop1: detected capacity change from 0 to 128 [ 290.314007][ T7223] Zero length message leads to an empty skb [ 290.413012][ T7225] 9pnet: Could not find request transport: f [ 290.496420][ T7225] syz.1.350: attempt to access beyond end of device [ 290.496420][ T7225] loop1: rw=2049, sector=145, nr_sectors = 352 limit=128 [ 290.788270][ T7235] loop2: detected capacity change from 0 to 512 [ 290.939275][ T7237] loop1: detected capacity change from 0 to 1024 [ 290.984154][ T7235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.996983][ T7235] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.021618][ T5933] team0 (unregistering): Port device team_slave_1 removed [ 291.093359][ T5843] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 291.233357][ T5933] team0 (unregistering): Port device team_slave_0 removed [ 291.773028][ T6695] hfsplus: b-tree write err: -5, ino 4 [ 292.396833][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.535024][ T7274] loop1: detected capacity change from 0 to 764 [ 296.616043][ T7274] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 299.920749][ T7297] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 300.855414][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 302.037206][ T7312] loop2: detected capacity change from 0 to 2048 [ 302.057963][ T29] audit: type=1326 audit(1738833020.340:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 302.119565][ T7312] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.177958][ T29] audit: type=1326 audit(1738833020.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 302.275472][ T29] audit: type=1326 audit(1738833020.360:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 302.318858][ T7091] chnl_net:caif_netlink_parms(): no params data found [ 302.395398][ T29] audit: type=1326 audit(1738833020.360:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 302.479476][ T29] audit: type=1326 audit(1738833020.360:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 302.505282][ T29] audit: type=1326 audit(1738833020.360:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 303.161692][ T7329] loop1: detected capacity change from 0 to 164 [ 303.291683][ T29] audit: type=1326 audit(1738833020.360:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 303.388121][ T29] audit: type=1326 audit(1738833020.360:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 303.415796][ T29] audit: type=1326 audit(1738833020.370:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 303.438849][ T7329] loop1: detected capacity change from 0 to 1024 [ 303.439283][ T29] audit: type=1326 audit(1738833020.370:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd4d8cde9 code=0x7ffc0000 [ 303.905449][ T7343] bad cache= option: none [ 303.905449][ T7343] [ 303.905733][ T7343] CIFS: VFS: bad cache= option: none [ 304.623998][ T7339] hfsplus: cannot replace xattr [ 305.250312][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.305779][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.336155][ T7091] bridge_slave_0: entered allmulticast mode [ 305.395555][ T7091] bridge_slave_0: entered promiscuous mode [ 305.424967][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.445458][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.452793][ T7091] bridge_slave_1: entered allmulticast mode [ 305.467217][ T7091] bridge_slave_1: entered promiscuous mode [ 305.785312][ T5883] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 305.861383][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.888895][ T7363] loop3: detected capacity change from 0 to 128 [ 305.900598][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.993559][ T5883] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 306.012294][ T5883] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 306.056534][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.325272][ T5883] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 306.325703][ T7367] netlink: 'syz.3.384': attribute type 10 has an invalid length. [ 306.346273][ T7091] team0: Port device team_slave_0 added [ 306.454698][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.480519][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.571522][ T7091] team0: Port device team_slave_1 added [ 306.668409][ T5883] usb 3-1: USB disconnect, device number 6 [ 306.688907][ T7367] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 307.198021][ T7368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.213438][ T7368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.274961][ T7368] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 307.300291][ T7368] bond0 (unregistering): Released all slaves [ 307.432802][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.492753][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.509493][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.524568][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.538933][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.547268][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 307.554764][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 307.706253][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.718908][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.759141][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.804026][ T7380] bridge_slave_1: left allmulticast mode [ 307.820558][ T7380] bridge_slave_1: left promiscuous mode [ 307.830548][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.998011][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.956509][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.144978][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.199952][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.213377][ T7388] bridge_slave_0: left allmulticast mode [ 309.243235][ T7388] bridge_slave_0: left promiscuous mode [ 309.254179][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.952782][ T5843] Bluetooth: hci2: command tx timeout [ 310.585985][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.686274][ T7403] loop3: detected capacity change from 0 to 8 [ 311.442038][ T7091] hsr_slave_0: entered promiscuous mode [ 311.448083][ T7405] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI [ 311.448111][ T7405] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 311.448136][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.4.394 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 311.448161][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 311.448179][ T7405] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 311.448225][ T7405] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 311.448243][ T7405] RSP: 0018:ffffc90003437958 EFLAGS: 00010206 [ 311.448266][ T7405] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 311.448281][ T7405] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88802fe59510 [ 311.448296][ T7405] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 311.448312][ T7405] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff88802fe59500 [ 311.448329][ T7405] R13: ffff88802fe59520 R14: 1ffff11003a58d00 R15: ffff88801d2c6800 [ 311.486133][ T7091] hsr_slave_1: entered promiscuous mode [ 311.489441][ T7405] FS: 00007fecb082d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 311.575298][ T7405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.581889][ T7405] CR2: 0000200000001000 CR3: 000000003071c000 CR4: 00000000003526f0 [ 311.589862][ T7405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.597834][ T7405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.605805][ T7405] Call Trace: [ 311.609082][ T7405] [ 311.612017][ T7405] ? __die_body+0x5f/0xb0 [ 311.616360][ T7405] ? die_addr+0xb0/0xe0 [ 311.620525][ T7405] ? exc_general_protection+0x3dd/0x5d0 [ 311.626092][ T7405] ? asm_exc_general_protection+0x26/0x30 [ 311.631821][ T7405] ? clone_private_mount+0x184/0x3e0 [ 311.637109][ T7405] ? clone_private_mount+0x83/0x3e0 [ 311.642309][ T7405] ? _raw_spin_unlock+0x28/0x50 [ 311.647251][ T7405] ovl_fill_super+0xe4c/0x3560 [ 311.652098][ T7405] ? shrinker_register+0x118/0x230 [ 311.657227][ T7405] ? __pfx_lock_release+0x10/0x10 [ 311.662274][ T7405] ? __pfx_ovl_fill_super+0x10/0x10 [ 311.667478][ T7405] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 311.673309][ T7405] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.679308][ T7405] ? sget_fc+0x909/0x9c0 [ 311.683558][ T7405] ? __pfx_set_anon_super_fc+0x10/0x10 [ 311.689024][ T7405] ? __pfx_ovl_fill_super+0x10/0x10 [ 311.694225][ T7405] get_tree_nodev+0xb7/0x140 [ 311.698825][ T7405] vfs_get_tree+0x90/0x2b0 [ 311.703273][ T7405] do_new_mount+0x2be/0xb40 [ 311.707780][ T7405] ? __pfx_do_new_mount+0x10/0x10 [ 311.712809][ T7405] __se_sys_mount+0x2d6/0x3c0 [ 311.717490][ T7405] ? __pfx___se_sys_mount+0x10/0x10 [ 311.722689][ T7405] ? do_syscall_64+0x100/0x230 [ 311.727455][ T7405] ? __x64_sys_mount+0x20/0xc0 [ 311.732244][ T7405] do_syscall_64+0xf3/0x230 [ 311.736770][ T7405] ? clear_bhb_loop+0x35/0x90 [ 311.741480][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.747394][ T7405] RIP: 0033:0x7fecaf98cde9 [ 311.751823][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.771543][ T7405] RSP: 002b:00007fecb082d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.779966][ T7405] RAX: ffffffffffffffda RBX: 00007fecafba5fa0 RCX: 00007fecaf98cde9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 311.787940][ T7405] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 311.795922][ T7405] RBP: 00007fecafa0e2a0 R08: 0000200000000900 R09: 0000000000000000 [ 311.803917][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.811983][ T7405] R13: 0000000000000000 R14: 00007fecafba5fa0 R15: 00007fff0cee99b8 [ 311.819974][ T7405] [ 311.823015][ T7405] Modules linked in: [ 311.827944][ T7405] ---[ end trace 0000000000000000 ]--- [ 312.039076][ T7405] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 312.047871][ T5839] Bluetooth: hci2: command tx timeout [ 312.071068][ T7405] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 312.137680][ T7405] RSP: 0018:ffffc90003437958 EFLAGS: 00010206 [ 312.205353][ T7405] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 312.213388][ T7405] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88802fe59510 [ 312.238669][ T35] bridge_slave_1: left allmulticast mode [ 312.244359][ T35] bridge_slave_1: left promiscuous mode [ 312.265580][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.273633][ T7405] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 312.295241][ T7405] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff88802fe59500 [ 312.303271][ T7405] R13: ffff88802fe59520 R14: 1ffff11003a58d00 R15: ffff88801d2c6800 [ 312.333657][ T7405] FS: 00007fecb082d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 312.366784][ T7405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.385251][ T7405] CR2: 00007ffd3dc57908 CR3: 000000003071c000 CR4: 00000000003526f0 [ 312.393371][ T7405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.403965][ T35] bridge_slave_0: left allmulticast mode [ 312.418892][ T35] bridge_slave_0: left promiscuous mode [ 312.424657][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.471929][ T7405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 312.496048][ T7405] Kernel panic - not syncing: Fatal exception [ 312.502772][ T7405] Kernel Offset: disabled [ 312.507096][ T7405] Rebooting in 86400 seconds..