last executing test programs: 8m48.079432592s ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 8m47.332571894s ago: executing program 2 (id=8): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0301"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 8m41.551888616s ago: executing program 2 (id=11): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@nojournal_checksum}, {@sysvgroups}, {@nobarrier}, {@data_ordered}, {@test_dummy_encryption}, {@nogrpid}, {@debug}]}, 0xd, 0x607, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 8m40.093194205s ago: executing program 2 (id=16): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x101401) finit_module(r0, 0x0, 0x3) 8m38.511228643s ago: executing program 2 (id=19): syz_usb_connect(0x2, 0xb6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 8m36.257928887s ago: executing program 32 (id=19): syz_usb_connect(0x2, 0xb6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932c070000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 7m30.346681582s ago: executing program 5 (id=109): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r3, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000002880)=[{0x0}, {&(0x7f0000002780)="d5d9", 0x2}], 0x2}}], 0x400000000000216, 0xc0) 7m27.238911778s ago: executing program 5 (id=110): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[], 0x43, 0xa17, &(0x7f0000000e00)="$eJzs3U9sXNW9B/DvHduJn4lCgDxeHgIyCS9gIM+xnUd4EZuX2OPEPP9BtiMRVRWhJKmiWKWCIgGq1FSquipqF1UXdIfEpiskNrCpsmu33XRRqWLdHeoq6qKu7p1xbMcej504tgmfjzWe++d3z/mduXfuka9n7gnfZAsLC9XjLucv/G47k2X3OTv61SeffVQ+fnoje9KVl4ovkt4k9aQ7yaEkI6Mz05MdCrqeXEpyMymS7E3zeUMupfhl9i3N30zx26re0oW7bBgbssC32k4ffwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsBsVI6ODg0NFJsanLrxeb68aArzdytpSeV9Wo34XX3asNynKR3p7F4f6PnRwafXj5a+jebI592Q1IHl68+FDjx945bHu2uL26yS8Gf9sDYa86Q3f/eDD62/Oz195p836rlZz7jnDXepcY2p8dnp88sy5Rn18drp++tSpwRPnx2brY+MTjdmLs3ONyfrITOPM3PRMvX/k+frQ6dMn642Bi9MXps6NDkw0Fhe+/N/Dg4On6q8OvNY4MzM7PXXi1YHZkfPjExPjU+eqmHJ1GfNyeSD+//hcfa5xZrJev3pt/srJFRmt8VKXQUOdWlIGDXcKGh4cHh4aGh4eOvXS6ZdeHhzsXlrQlWrB4B2yapPbB232PbjHxbfQx7UNBJUnx/oWnr3h3tRa/X8mMp6pXMjrqa/5M5LRzGQ6k23Wtyz2/8dONNatd3n/v9jLH1pa/USq/v/p5tzT7fr/Nrls38+7+SAf5nrezHzmcyXvrFi79y5KXFhYu1Wf/qn5Wux0i1f+nEsjUxnPbKYznsmcqZbUW0vqOZ1TOZXBvJHzGcts6hnLeCbSyGwuZjZzaVRH1Ehm0siZzHU329ifkTyfeoZyOqdzMvU0MpCLmc6FTOVcRnOmKuVqrlWv+8l1crwdNLSRoOF1gtbp/1sLNtH/8y211adwuGsLrf5/zx3La6tD+0e2KykAAABgS/3nH7P/4KN/+GvSk6eqa+wAAADAg6b6uN6T5VNPOfVUirHxicbg6sD3tj83AAAAYGsU1XfsiiR9OdycWvwm1BoXAQAAAIBvour//0+XT33l1OEU/v4HAACAB03ne+x3jCiOp54b5ar65Wbk5VZE6z6/fWPjE42BkemJV4bybHWXgeqbBqtK68qBpPr6wQs50ow60td87ltZYm8ZNTTwylB6c7TVkP5nyqdn+teIHC4jX8hzzcjnFiN7syryZBkJAA+6o+v0xxvt/1/I8WbE8Seq27d3P7FGHzzY7Fl/skPtBACWdB5jp2NE8T+Lw/+0+fu/K1cPNz9SMJC38nbmcznHq28bVJ84aJWam0WWSu1b9jGE4x2uBvQtG+Hl+OL1gMP71rwe0LdsoJfjq64ItIs9ueZrV2z53gCA7XF0VT+8Tv+/sNCcWnX9f/2///t8pBAAdpXbI9jfx4k76+zZmaYCAC3te+l1dN3HhAAAAAAAAAAAAAAAAAAAAAAAAAAAAOABcD/v/19Lcn9HFriHiRtJdkEa2zzxt9ZuX7WqtfzGjme4bGJvVi7Zk82X07stI1x88N09u/hQv7uJHTwpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsG2KpGut5bVkb9I9mOTE9md1/9zY6QR2WHErt/J+9u90HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5rW/f9raT4/1FyU7lpyrBXynR1OcUvd2ukEdtiy+/+X+zwLRbqbuz1Fz8jozPRkufuzt1z/1SeffVQ+7qaesoCyhhWDS7RqaL/VI9VWfaNX3r3+o7d/WB89WyV5dm5sYnTy3Mz/LQU+Xnye1NN8LFrM98dF6yhe2fLPy5Z2rresZayqd3R1vf+x1ta36z32+1+1b9uSpTSuzV8ZLmuaa7w+994Prr2/LOjRHEme6U/6V9b0/fLRpqYj6Vmv3uLr4ufF/vwml6r9X6ZRLBTlLno42ZPav129Nn9l4K235y+3yelADie5nPRuPKfDq/fEouqoq/WUtQ5WQeWvgx3KW9dDXfsXFpolDrVpwyPVIdO3qTbU27eh0uF1b7XxZJuMHsuzm97Tz3aoseUfC03NueLr4i/F+fw5P1s2/ket3P/Vqb7ju7OMqSKXHSnt23xsqeXDy1e8cWdk23cl98Ev8r387+39X1t2/m/tqw2dj1pH39pH6WuftibWeV8sq/GO98XexZB7fl8US2Ut9kgH7+iRWmef9i9XlefBZlSbV+bf8+Lq7Trk+WKHM8oWvf9XKr4uPi768/fcMP4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw+xVJ11rLa8mxJAeSPFzO15OFraiv1ldsRTEbtGfVkhvbWPvuUbs9VdzKrbyf/TuaDgAAAAAAAABb5uzoV5989lH5qP4f35X/Kr5Iepv/6e9OcqD4dc/I6Mz0ZIeCepJLSW6W072by6HcLvuW5m+Wc4c23xYAYGP+FQAA//9wr24d") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) 7m16.611681137s ago: executing program 5 (id=121): r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 7m13.489161201s ago: executing program 5 (id=124): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004800}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x2df3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x205, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x7, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0xff, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0xba68, 0xd, 0x4df, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x103, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x0, 0x3, 0x7ff, 0x12b, 0x4, 0x8, 0x0, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x2006, 0x1, 0x4, 0x25], [0x800009, 0xbb37, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c17, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m13.145701793s ago: executing program 3 (id=126): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x2}, 0x1c) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x2000, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x53, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x1d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "020000"}, {0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendfile(r0, r1, 0x0, 0x11000002) 7m12.203271415s ago: executing program 3 (id=127): r0 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xa8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 7m11.595058111s ago: executing program 3 (id=128): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000300)='./bus\x00', 0x82342, 0x1d6) ftruncate(r0, 0x2007ffb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) 7m8.797113586s ago: executing program 5 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, 0x0, &(0x7f0000000100)=0x54) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) getsockopt$sock_timeval(r5, 0x1, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) sendmmsg(r3, 0x0, 0x0, 0x40840) 7m7.376028003s ago: executing program 5 (id=133): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[], 0x43, 0xa17, &(0x7f0000000e00)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000), 0x0) 6m59.686880047s ago: executing program 3 (id=141): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0xffff, 0x600}, 0x20) 6m59.133468338s ago: executing program 3 (id=142): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) waitid(0x2, r0, 0x0, 0x1000000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) 6m56.375049742s ago: executing program 3 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x2, 0x100, 0x14, 0x6, 0x7, '\x00\x00\b\x00'}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xfc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x5120400, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "d49693b0d4d1396d525833637224f007fa68bcccc2e1d89aba1278f03021234b586f31cd8777579a8cc3a3d8ff389546615b10cc28919fd905c1d9bca1fec081", 0x33}, 0x48, r3) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wg2\x00', {0x2, 0x480, @broadcast}}) 6m51.147977329s ago: executing program 33 (id=133): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[], 0x43, 0xa17, &(0x7f0000000e00)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000), 0x0) 6m40.279541903s ago: executing program 34 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x2, 0x100, 0x14, 0x6, 0x7, '\x00\x00\b\x00'}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xfc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x5120400, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "d49693b0d4d1396d525833637224f007fa68bcccc2e1d89aba1278f03021234b586f31cd8777579a8cc3a3d8ff389546615b10cc28919fd905c1d9bca1fec081", 0x33}, 0x48, r3) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wg2\x00', {0x2, 0x480, @broadcast}}) 5m50.78588035s ago: executing program 1 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 5m48.706644035s ago: executing program 1 (id=210): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xb, &(0x7f0000000540)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x405}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @tail_call], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 5m45.168047884s ago: executing program 1 (id=212): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m43.296228903s ago: executing program 1 (id=214): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40002000, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 5m39.791159252s ago: executing program 1 (id=217): syz_open_dev$sndctrl(0x0, 0x0, 0x100) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa00) 5m37.88366333s ago: executing program 1 (id=220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_read_part_table(0x5ed, &(0x7f0000000600)="$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") socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000900)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f581f9aeb01001800000001000000280000002800000002001000000000000000"], &(0x7f0000000000)=""/128, 0x42, 0x80, 0x1}, 0x28) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/72, 0x48}], 0x1, 0x10003, 0x1bf, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="08a75a787816f52df9f7c8bde583500000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0xc804) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffcec) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0x1ff, 0x0, {0x5, 0x0, 0x7, 0x0, 0x9, 0x3, 0x2fbc, 0x0, 0x0, 0xc000, 0x0, r7, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f00000006c0)='./file0/file0\x00', 0xc000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x32, 0x16, 0x2, 0xa, 0x5, "a69f31", 0x2b}}) close_range(r0, 0xffffffffffffffff, 0x0) 5m21.002369671s ago: executing program 35 (id=220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_read_part_table(0x5ed, &(0x7f0000000600)="$eJzs0zFok2kYB/A3wUtPQcSb3AzNEM8lQsbSAw3xowRMCR46HKKbN2TR6YbYguHEwXpDRHCpgyLUcMLpJCIIIm06FDKVlvaWtpQOR6FLr6XkSO/rcEeXHmnh4PeDEN7n/T/vw8v3fYH/tWT4o9PpJEIInb6Dd38/Ubw8lB6+WLkaQqJ7WPh5689fujuJOLF3an+8XozX+Q/Hqo8mogdjjZNn3qW3p5O71VQYDWH3t9J6dqMH1+OQnbt7/tPZzfbp96Xw/OswNXCiev12M/ttsjmz9fbSy/Srveee+2dbulfz3wx+OXW/fifqvj+zUW0pWk1urEdXno7nUo9HKtm1C3HuZq8G/kt151rq9YvPhfry8fxkqVxu/Dr/JFMrfqzfa7cyc5sPb8W5hf/wdQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPTO3T3/6Wyiffp9KTyf+m5q4ET1+u1mtjDSnBl+e+ll+lV/SOzmcoc0/83gl1P363eisZ8Gf5yNakvRanJjPbrydDyXejxSya5diHM39+lN9WB+deda6vWLz4X68vH8ZKlcbnwVnmRqxY/1e+1WZm7z4a3wzW+FUggLfT0ZBwAAAAAAAAAAAAAAAAAAAPsqXh5KD1+sXA0hEX4IIQyMD813652+v/cTca4//l+M6/kPx6qPJqIHY42TZ96lt6d/j+ujyRBGQwgrrWc3jvwyHNhfAQAA//84+IfQ") socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000900)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f581f9aeb01001800000001000000280000002800000002001000000000000000"], &(0x7f0000000000)=""/128, 0x42, 0x80, 0x1}, 0x28) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000340)=""/72, 0x48}], 0x1, 0x10003, 0x1bf, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="08a75a787816f52df9f7c8bde583500000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0xc804) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r5, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffcec) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0x1ff, 0x0, {0x5, 0x0, 0x7, 0x0, 0x9, 0x3, 0x2fbc, 0x0, 0x0, 0xc000, 0x0, r7, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f00000006c0)='./file0/file0\x00', 0xc000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x32, 0x16, 0x2, 0xa, 0x5, "a69f31", 0x2b}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m11.811592681s ago: executing program 4 (id=450): r0 = fanotify_init(0x0, 0x1000) fanotify_mark(r0, 0x1, 0x8009174, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 2m9.991056015s ago: executing program 4 (id=451): syz_extract_tcp_res(0x0, 0xd7, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x4e, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 2m8.645148111s ago: executing program 4 (id=452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$inet6(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) 2m6.486227733s ago: executing program 4 (id=455): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x53, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x1d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "020000"}, {0x18, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendfile(r0, r1, 0x0, 0x11000002) 2m4.856266322s ago: executing program 4 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7a224000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x3, 0x1, 0x89, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m2.116731908s ago: executing program 4 (id=457): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) 1m45.016275572s ago: executing program 36 (id=457): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001340)={0x2020}, 0x2020) 6.084967164s ago: executing program 0 (id=520): mmap(&(0x7f0000a53000/0x4000)=nil, 0x4000, 0x3000006, 0x4010, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000b00)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) symlink(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000059c0)='./file0\x00') mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socket$packet(0x11, 0x2, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCGPGRP(r3, 0x5437, 0x0) accept4(r1, 0x0, 0x0, 0x80000) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) 5.296325895s ago: executing program 0 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x98, &(0x7f0000000940)=""/152}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$inet6(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) 4.562288916s ago: executing program 0 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x10000, @local, 0xfffffffe}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710feffffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 3.086633347s ago: executing program 0 (id=523): syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, 0x0) poll(0x0, 0x0, 0x5) syz_open_dev$loop(&(0x7f00000001c0), 0x8, 0x503842) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r5, 0x2}, 0x20) 1.946106144s ago: executing program 0 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='.\x00', 0x0, 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x8, 0xe9d9, 0x1101, 0xff}) 0s ago: executing program 0 (id=525): geteuid() lstat(0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000100)={0x0, 0x16}, 0x0) r0 = shmget$private(0x0, 0x7000, 0x4, &(0x7f0000ff8000/0x7000)=nil) shmctl$SHM_LOCK(r0, 0xb) kernel console output (not intermixed with test programs): e: batadv_slave_0 [ 339.552727][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.580111][ T7136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.667124][ T7136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.674486][ T7136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.704811][ T7136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.727179][ T5986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.098924][ T7136] hsr_slave_0: entered promiscuous mode [ 340.132542][ T7136] hsr_slave_1: entered promiscuous mode [ 340.145690][ T7136] debugfs: 'hsr0' already exists in 'hsr' [ 340.151749][ T7136] Cannot create hsr debugfs directory [ 343.770568][ T5986] bridge_slave_1: left allmulticast mode [ 343.776262][ T5986] bridge_slave_1: left promiscuous mode [ 343.799874][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.831433][ T5986] bridge_slave_0: left allmulticast mode [ 343.837115][ T5986] bridge_slave_0: left promiscuous mode [ 343.852276][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.881937][ T5986] bridge_slave_1: left allmulticast mode [ 343.889044][ T5986] bridge_slave_1: left promiscuous mode [ 343.910598][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.923638][ T5986] bridge_slave_0: left allmulticast mode [ 343.929313][ T5986] bridge_slave_0: left promiscuous mode [ 343.950591][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.981043][ T5986] bridge_slave_1: left allmulticast mode [ 343.986734][ T5986] bridge_slave_1: left promiscuous mode [ 343.995376][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.009199][ T5986] bridge_slave_0: left allmulticast mode [ 344.018334][ T5986] bridge_slave_0: left promiscuous mode [ 344.024538][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.036833][ T5986] bridge_slave_1: left allmulticast mode [ 344.042584][ T5986] bridge_slave_1: left promiscuous mode [ 344.048325][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.059821][ T5986] bridge_slave_0: left allmulticast mode [ 344.066014][ T5986] bridge_slave_0: left promiscuous mode [ 344.073544][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.098065][ T5986] bridge_slave_1: left allmulticast mode [ 344.104162][ T5986] bridge_slave_1: left promiscuous mode [ 344.109953][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.129383][ T5986] bridge_slave_0: left allmulticast mode [ 344.136956][ T5986] bridge_slave_0: left promiscuous mode [ 344.143355][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.418942][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.471369][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.486027][ T5986] bond0 (unregistering): Released all slaves [ 344.629436][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.644371][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.655926][ T5986] bond0 (unregistering): Released all slaves [ 344.787523][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.799428][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.810036][ T5986] bond0 (unregistering): Released all slaves [ 345.110137][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.124661][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.135566][ T5986] bond0 (unregistering): Released all slaves [ 345.233329][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.244676][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.255817][ T5986] bond0 (unregistering): Released all slaves [ 347.967690][ T7102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.046819][ T7102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.097424][ T7102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.474216][ T7102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 349.800370][ T5986] hsr_slave_0: left promiscuous mode [ 349.811940][ T5986] hsr_slave_1: left promiscuous mode [ 349.830804][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.881140][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.064080][ T5986] hsr_slave_0: left promiscuous mode [ 350.111410][ T5986] hsr_slave_1: left promiscuous mode [ 350.151216][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.181073][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.260320][ T5986] hsr_slave_0: left promiscuous mode [ 350.306847][ T5986] hsr_slave_1: left promiscuous mode [ 350.313791][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.380129][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.474573][ T5986] hsr_slave_0: left promiscuous mode [ 350.569635][ T5986] hsr_slave_1: left promiscuous mode [ 350.576208][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.583935][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.628108][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.660353][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.721310][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.891157][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.012660][ T5986] veth1_macvtap: left promiscuous mode [ 351.018248][ T5986] veth0_macvtap: left promiscuous mode [ 351.024799][ T5986] veth1_vlan: left promiscuous mode [ 351.030671][ T5986] veth0_vlan: left promiscuous mode [ 352.649219][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 352.692605][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 354.815726][ T7382] loop0: detected capacity change from 0 to 1024 [ 354.906458][ T7382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 355.040483][ T7382] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.056720][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 355.182117][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 356.671520][ T6088] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1286: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 356.717875][ T6088] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 356.740286][ T6088] EXT4-fs (loop0): This should not happen!! Data will be lost [ 356.740286][ T6088] [ 356.749944][ T6088] EXT4-fs (loop0): Total free blocks count 0 [ 356.765472][ T6088] EXT4-fs (loop0): Free/Dirty block details [ 356.786679][ T6088] EXT4-fs (loop0): free_blocks=4293918720 [ 356.810453][ T6088] EXT4-fs (loop0): dirty_blocks=16400 [ 356.826629][ T6088] EXT4-fs (loop0): Block reservation details [ 356.851368][ T6088] EXT4-fs (loop0): i_reserved_data_blocks=1025 [ 357.222066][ T6029] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4096 with max blocks 2048 with error 28 [ 357.690118][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 357.749996][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 357.868005][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.876984][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.885887][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.903302][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.931174][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 359.203071][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 359.262536][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 360.810355][ T51] Bluetooth: hci2: command tx timeout [ 361.769742][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 361.813574][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 362.860910][ T51] Bluetooth: hci2: command tx timeout [ 363.305760][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.760104][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.911884][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.919062][ T6078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.971727][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.978877][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.340600][ T7388] chnl_net:caif_netlink_parms(): no params data found [ 364.385289][ T7075] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 364.689972][ T7075] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 364.706865][ T7075] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 364.771588][ T7075] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 364.941606][ T51] Bluetooth: hci2: command tx timeout [ 365.136088][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.143481][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.159118][ T7388] bridge_slave_0: entered allmulticast mode [ 365.167867][ T7388] bridge_slave_0: entered promiscuous mode [ 365.211995][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.235529][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.244561][ T7388] bridge_slave_1: entered allmulticast mode [ 365.253479][ T7388] bridge_slave_1: entered promiscuous mode [ 365.636158][ T7388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.672829][ T7136] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 365.775360][ T7388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.061028][ T7388] team0: Port device team_slave_0 added [ 366.091317][ T7136] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 366.202400][ T7388] team0: Port device team_slave_1 added [ 366.425852][ T5884] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.437856][ T5884] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.447329][ T5884] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.463944][ T7136] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 366.471936][ T5884] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.488253][ T5884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.341068][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 367.490824][ T5884] Bluetooth: hci2: command tx timeout [ 368.010015][ T7136] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 368.562366][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.570088][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.617086][ T7388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.647057][ T7388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.657547][ T7388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.713761][ T7388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.869666][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.223300][ T7388] hsr_slave_0: entered promiscuous mode [ 369.247875][ T7388] hsr_slave_1: entered promiscuous mode [ 369.956645][ T7136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.032286][ T7136] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.060387][ T5886] Bluetooth: hci4: command tx timeout [ 370.061729][ T7492] loop0: detected capacity change from 0 to 2048 [ 372.150306][ T5886] Bluetooth: hci4: command tx timeout [ 372.877263][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.884474][ T6078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.816511][ T7510] loop4: detected capacity change from 0 to 512 [ 373.871608][ T7510] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.014282][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.021514][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.040591][ T7510] EXT4-fs (loop4): orphan cleanup on readonly fs [ 374.046956][ T7510] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 374.226928][ T7510] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.295: attempt to clear invalid blocks 2 len 1 [ 374.251181][ T5886] Bluetooth: hci4: command tx timeout [ 374.267698][ T7517] loop0: detected capacity change from 0 to 128 [ 374.274642][ T7510] EXT4-fs (loop4): Remounting filesystem read-only [ 374.302997][ T7510] EXT4-fs (loop4): 1 truncate cleaned up [ 374.372778][ T7510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.428832][ T7517] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.540679][ T7517] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.662163][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.671061][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.679543][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.687939][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.695800][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.735447][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.801507][ T5865] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.030594][ T7528] loop4: detected capacity change from 0 to 1024 [ 375.467920][ T7459] chnl_net:caif_netlink_parms(): no params data found [ 376.300557][ T5886] Bluetooth: hci4: command tx timeout [ 376.781591][ T5886] Bluetooth: hci5: command tx timeout [ 378.733091][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.759344][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.788235][ T7459] bridge_slave_0: entered allmulticast mode [ 378.806838][ T7459] bridge_slave_0: entered promiscuous mode [ 378.862081][ T5886] Bluetooth: hci5: command tx timeout [ 378.872521][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.879705][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.904588][ T7459] bridge_slave_1: entered allmulticast mode [ 378.913890][ T7459] bridge_slave_1: entered promiscuous mode [ 378.937047][ T7388] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 378.989531][ T7388] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 379.158166][ T7559] loop0: detected capacity change from 0 to 1024 [ 379.202150][ T7388] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 379.251221][ T7388] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 379.279248][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.311256][ T7559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 379.414444][ T7559] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.531464][ T7559] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.303: lblock 0 mapped to illegal pblock 0 (length 1) [ 379.579748][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.600279][ T7559] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 379.650164][ T7559] EXT4-fs (loop0): This should not happen!! Data will be lost [ 379.650164][ T7559] [ 379.654463][ T7575] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: comm syz.0.303: lblock 0 mapped to illegal pblock 0 (length 1) [ 379.675423][ T7136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.873754][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 379.924869][ T7459] team0: Port device team_slave_0 added [ 379.971752][ T7459] team0: Port device team_slave_1 added [ 381.320882][ T5886] Bluetooth: hci5: command tx timeout [ 381.503492][ T5986] bridge_slave_1: left allmulticast mode [ 381.509181][ T5986] bridge_slave_1: left promiscuous mode [ 381.540666][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.561552][ T5986] bridge_slave_0: left allmulticast mode [ 381.567223][ T5986] bridge_slave_0: left promiscuous mode [ 381.829651][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.843568][ T5986] bridge_slave_1: left allmulticast mode [ 381.849421][ T5986] bridge_slave_1: left promiscuous mode [ 381.855993][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.868348][ T5986] bridge_slave_0: left allmulticast mode [ 381.884515][ T5986] bridge_slave_0: left promiscuous mode [ 381.890403][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.755363][ T7593] loop4: detected capacity change from 0 to 512 [ 382.887756][ T7593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.918465][ T7593] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.184717][ T30] audit: type=1800 audit(1757722674.348:8): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.307" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 383.286345][ T7601] loop0: detected capacity change from 0 to 2048 [ 383.335283][ T7601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.345193][ T5886] Bluetooth: hci5: command tx timeout [ 383.418288][ T7601] /dev/loop0: Can't open blockdev [ 383.887757][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.955390][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.966758][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.013829][ T5986] bond0 (unregistering): Released all slaves [ 384.426858][ T7606] loop4: detected capacity change from 0 to 2048 [ 384.508108][ T7606] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 384.533648][ T7606] UDF-fs: Scanning with blocksize 512 failed [ 384.546868][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.579672][ T7606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.619289][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.655507][ T5986] bond0 (unregistering): Released all slaves [ 384.787858][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 384.801163][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 384.809219][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 384.819566][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 384.828259][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 384.860067][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.905799][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.960996][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.990133][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.997434][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.024327][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.230541][ T7605] UDF-fs: error (device loop4): udf_truncate_tail_extent: Extent after EOF in inode 818 [ 385.296891][ T5986] hsr_slave_0: left promiscuous mode [ 385.318447][ T5986] hsr_slave_1: left promiscuous mode [ 385.341834][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.382213][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.442400][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.442400][ T6093] loop4: rw=1, sector=2076, nr_sectors = 2 limit=2048 [ 385.457789][ T5986] hsr_slave_0: left promiscuous mode [ 385.486486][ T5986] hsr_slave_1: left promiscuous mode [ 385.494365][ T6093] Buffer I/O error on dev loop4, logical block 1038, lost async page write [ 385.511507][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.540614][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.540614][ T6093] loop4: rw=1, sector=2078, nr_sectors = 2 limit=2048 [ 385.555472][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.564631][ T6093] Buffer I/O error on dev loop4, logical block 1039, lost async page write [ 385.575403][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.575403][ T6093] loop4: rw=1, sector=2078, nr_sectors = 2 limit=2048 [ 385.603944][ T6093] Buffer I/O error on dev loop4, logical block 1039, lost async page write [ 385.619571][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.619571][ T6093] loop4: rw=1, sector=2078, nr_sectors = 2 limit=2048 [ 385.648127][ T6093] Buffer I/O error on dev loop4, logical block 1039, lost async page write [ 385.663744][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.663744][ T6093] loop4: rw=1, sector=2078, nr_sectors = 2 limit=2048 [ 385.703061][ T6093] Buffer I/O error on dev loop4, logical block 1039, lost async page write [ 385.718343][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.718343][ T6093] loop4: rw=1, sector=2080, nr_sectors = 2 limit=2048 [ 385.748423][ T6093] Buffer I/O error on dev loop4, logical block 1040, lost async page write [ 385.765024][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.765024][ T6093] loop4: rw=1, sector=2080, nr_sectors = 2 limit=2048 [ 385.808295][ T6093] Buffer I/O error on dev loop4, logical block 1040, lost async page write [ 385.856121][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.856121][ T6093] loop4: rw=1, sector=2080, nr_sectors = 2 limit=2048 [ 385.917233][ T6093] Buffer I/O error on dev loop4, logical block 1040, lost async page write [ 385.942244][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.942244][ T6093] loop4: rw=1, sector=2080, nr_sectors = 2 limit=2048 [ 385.956385][ T6093] Buffer I/O error on dev loop4, logical block 1040, lost async page write [ 385.970334][ T6093] kworker/u8:21: attempt to access beyond end of device [ 385.970334][ T6093] loop4: rw=1, sector=2082, nr_sectors = 2 limit=2048 [ 385.993078][ T6093] Buffer I/O error on dev loop4, logical block 1041, lost async page write [ 386.223338][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 386.305510][ T30] audit: type=1400 audit(1757722677.468:9): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7620 comm="syz.4.312" [ 386.363653][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 386.862089][ T5886] Bluetooth: hci6: command tx timeout [ 388.722118][ T7625] loop4: detected capacity change from 0 to 16 [ 389.082576][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.088939][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.095354][ T5886] Bluetooth: hci6: command tx timeout [ 389.109009][ T7625] erofs (device loop4): blkszbits 0 isn't supported [ 389.950848][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 390.034622][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 390.808036][ T7637] loop0: detected capacity change from 0 to 8 [ 390.847636][ T7459] hsr_slave_0: entered promiscuous mode [ 390.873998][ T7459] hsr_slave_1: entered promiscuous mode [ 390.901113][ T7459] debugfs: 'hsr0' already exists in 'hsr' [ 390.906887][ T7459] Cannot create hsr debugfs directory [ 390.937964][ T7522] chnl_net:caif_netlink_parms(): no params data found [ 391.181054][ T5886] Bluetooth: hci6: command tx timeout [ 391.432080][ T7645] loop0: detected capacity change from 0 to 2048 [ 391.485901][ T7645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.727562][ T7388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.882863][ T7649] loop4: detected capacity change from 0 to 8 [ 391.897361][ T7649] SQUASHFS error: zlib decompression failed, data probably corrupt [ 391.909489][ T7649] SQUASHFS error: Failed to read block 0x9b: -5 [ 391.915831][ T7649] SQUASHFS error: Unable to read metadata cache entry [99] [ 391.923834][ T7649] SQUASHFS error: Unable to read inode 0x127 [ 391.983872][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.045065][ T7522] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.108090][ T7522] bridge_slave_0: entered allmulticast mode [ 392.240581][ T7522] bridge_slave_0: entered promiscuous mode [ 392.282947][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.290115][ T7522] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.367986][ T7522] bridge_slave_1: entered allmulticast mode [ 392.408983][ T7522] bridge_slave_1: entered promiscuous mode [ 392.719433][ T7522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.740294][ T5945] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 392.747396][ T7522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.905579][ T7388] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.910313][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 392.929693][ T5945] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 392.948278][ T5945] usb 1-1: config 0 has no interface number 0 [ 392.958137][ T5945] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 392.967917][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.976338][ T5945] usb 1-1: Product: syz [ 392.983701][ T5945] usb 1-1: Manufacturer: syz [ 392.987336][ T7522] team0: Port device team_slave_0 added [ 392.988315][ T5945] usb 1-1: SerialNumber: syz [ 393.009506][ T5945] usb 1-1: config 0 descriptor?? [ 393.021523][ T5945] smsc95xx v2.0.0 [ 393.028433][ T7522] team0: Port device team_slave_1 added [ 393.190004][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.197320][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.246209][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.262698][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.293083][ T5886] Bluetooth: hci6: command tx timeout [ 393.299096][ T7522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.338431][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.345656][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.377159][ T7522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.385374][ T7522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.412962][ T7522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.441221][ T5945] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 393.471622][ T5945] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 393.598350][ T7522] hsr_slave_0: entered promiscuous mode [ 393.627533][ T7522] hsr_slave_1: entered promiscuous mode [ 393.638382][ T7522] debugfs: 'hsr0' already exists in 'hsr' [ 393.647065][ T7522] Cannot create hsr debugfs directory [ 396.290080][ T5945] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 396.306768][ T5945] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 396.338483][ T5945] usb 1-1: USB disconnect, device number 7 [ 396.825281][ T7613] chnl_net:caif_netlink_parms(): no params data found [ 397.589596][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.619631][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.632214][ T7613] bridge_slave_0: entered allmulticast mode [ 397.642703][ T7613] bridge_slave_0: entered promiscuous mode [ 397.689349][ T7682] loop0: detected capacity change from 0 to 8192 [ 397.729682][ T7682] bio_check_eod: 65 callbacks suppressed [ 397.729707][ T7682] syz.0.328: attempt to access beyond end of device [ 397.729707][ T7682] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 397.756949][ T7682] buffer_io_error: 65 callbacks suppressed [ 397.756972][ T7682] Buffer I/O error on dev loop0, logical block 57847, async page read [ 397.776953][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.784592][ T7682] syz.0.328: attempt to access beyond end of device [ 397.784592][ T7682] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 397.799428][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.807253][ T7613] bridge_slave_1: entered allmulticast mode [ 397.813580][ T7682] Buffer I/O error on dev loop0, logical block 57847, async page read [ 397.835837][ T7613] bridge_slave_1: entered promiscuous mode [ 397.861386][ T30] audit: type=1800 audit(1757722689.018:10): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.328" name="file2" dev="loop0" ino=1048614 res=0 errno=0 [ 397.945670][ T7459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 397.985799][ T7459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 398.143086][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.218454][ T7459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 398.256537][ T7459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 399.437901][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.556551][ T7388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.093539][ T7704] loop4: detected capacity change from 0 to 1024 [ 400.151867][ T7704] EXT4-fs: Ignoring removed i_version option [ 400.157982][ T7704] EXT4-fs: inline encryption not supported [ 400.205745][ T7704] EXT4-fs (loop4): Test dummy encryption mode enabled [ 400.311199][ T7704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.412058][ T7613] team0: Port device team_slave_0 added [ 401.164663][ T7613] team0: Port device team_slave_1 added [ 401.196632][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.423310][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.441508][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.487224][ T7613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.599305][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.618086][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.645192][ T7613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.919856][ T7613] hsr_slave_0: entered promiscuous mode [ 401.957231][ T7613] hsr_slave_1: entered promiscuous mode [ 401.971252][ T7613] debugfs: 'hsr0' already exists in 'hsr' [ 401.977004][ T7613] Cannot create hsr debugfs directory [ 402.139115][ T5986] bridge_slave_1: left allmulticast mode [ 402.157402][ T5986] bridge_slave_1: left promiscuous mode [ 402.169819][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.201494][ T5986] bridge_slave_0: left allmulticast mode [ 402.207170][ T5986] bridge_slave_0: left promiscuous mode [ 402.223638][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.253679][ T5986] bridge_slave_1: left allmulticast mode [ 402.260060][ T5986] bridge_slave_1: left promiscuous mode [ 402.280464][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.302786][ T5986] bridge_slave_0: left allmulticast mode [ 402.318621][ T5986] bridge_slave_0: left promiscuous mode [ 402.324794][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.790500][ T7731] loop4: detected capacity change from 0 to 16 [ 405.019640][ T7731] erofs (device loop4): mounted with root inode @ nid 36. [ 405.038042][ T7730] erofs (device loop4): read error -117 @ 8200 of nid 36 [ 405.046646][ T7730] erofs (device loop4): read error -117 @ 8200 of nid 36 [ 405.054885][ T7730] erofs (device loop4): read error -117 @ 8200 of nid 36 [ 405.493307][ T7733] loop0: detected capacity change from 0 to 1024 [ 405.543100][ T7733] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 405.766173][ T7733] loop0: detected capacity change from 0 to 8192 [ 405.814027][ T7687] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 405.829151][ T7687] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 405.841872][ T7687] loop0: unable to read partition table [ 405.869388][ T7733] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 405.897745][ T7733] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 405.932265][ T7733] loop0: unable to read partition table [ 405.950696][ T7733] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 406.010967][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.035892][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.058453][ T5986] bond0 (unregistering): Released all slaves [ 406.200464][ T5958] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 406.929707][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.942735][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.952585][ T5958] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.976022][ T5958] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.988299][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.031072][ T5958] usb 5-1: config 0 descriptor?? [ 407.179317][ T7746] loop0: detected capacity change from 0 to 128 [ 407.209937][ T7746] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 407.230472][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.265008][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.292924][ T5986] bond0 (unregistering): Released all slaves [ 407.383484][ T7388] veth0_vlan: entered promiscuous mode [ 407.537815][ T7388] veth1_vlan: entered promiscuous mode [ 407.577979][ T7459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.596554][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 407.604144][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 407.611618][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 407.620758][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 407.628958][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 407.638981][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 407.647573][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 407.656551][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 407.671316][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 408.342782][ T5958] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 408.400774][ T7388] veth0_macvtap: entered promiscuous mode [ 408.413245][ T7388] veth1_macvtap: entered promiscuous mode [ 408.434779][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.474624][ T5958] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 408.601122][ T5958] usb 5-1: USB disconnect, device number 8 [ 408.662170][ T7750] fido_id[7750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 408.691649][ T7388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.749490][ T5986] hsr_slave_0: left promiscuous mode [ 408.809314][ T5986] hsr_slave_1: left promiscuous mode [ 408.823390][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.872648][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.942205][ T5986] hsr_slave_0: left promiscuous mode [ 408.960642][ T5986] hsr_slave_1: left promiscuous mode [ 408.966962][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.989683][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.698534][ T7770] loop4: detected capacity change from 0 to 2048 [ 413.770923][ T7770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.869645][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 414.044900][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 414.079908][ T30] audit: type=1400 audit(1757722705.238:11): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7771 comm="syz.4.351" [ 416.488544][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 416.547362][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 416.924820][ T7459] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.039424][ T7522] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 417.082424][ T7522] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 417.117333][ T6981] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.274467][ T7522] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 417.329946][ T6981] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.351695][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.358885][ T6076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.581009][ T7522] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 417.620289][ T6981] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.629104][ T6981] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.855716][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.862882][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.968933][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.980942][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.989558][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.000047][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.007900][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.150555][ T6049] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 419.242573][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.324012][ T6049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64 [ 419.377071][ T7613] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 419.393759][ T7613] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 419.413672][ T6049] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 419.499443][ T7814] loop0: detected capacity change from 0 to 8 [ 419.865603][ T6049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.968937][ T7613] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 420.010861][ T6049] usb 5-1: config 0 descriptor?? [ 420.021213][ T7807] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 420.241200][ T7522] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.260654][ T7613] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 420.356515][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.363724][ T6076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.376409][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.383587][ T6076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.392991][ T7818] loop0: detected capacity change from 0 to 2048 [ 420.471536][ T7818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.499975][ T7818] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.515264][ T6049] hid_parser_main: 2 callbacks suppressed [ 420.515291][ T6049] logitech 0003:046D:C298.0004: unknown main item tag 0x0 [ 420.541804][ T6049] logitech 0003:046D:C298.0004: unknown global tag 0xe [ 420.549388][ T6049] logitech 0003:046D:C298.0004: item 0 0 1 14 parsing failed [ 420.561159][ T6049] logitech 0003:046D:C298.0004: parse failed [ 420.567333][ T6049] logitech 0003:046D:C298.0004: probe with driver logitech failed with error -22 [ 420.646534][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.689094][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.724065][ T5958] usb 5-1: USB disconnect, device number 9 [ 420.846764][ T7831] loop0: detected capacity change from 0 to 128 [ 420.896153][ T7831] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 421.003569][ T7831] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 421.050707][ T1022] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.102541][ T5886] Bluetooth: hci2: command tx timeout [ 421.339626][ T1022] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.579808][ T1022] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.794796][ T1022] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.228343][ T7522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.267962][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.664081][ T7808] chnl_net:caif_netlink_parms(): no params data found [ 422.815724][ T1022] bridge_slave_1: left allmulticast mode [ 422.826544][ T1022] bridge_slave_1: left promiscuous mode [ 422.836947][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.898939][ T1022] bridge_slave_0: left allmulticast mode [ 422.916247][ T1022] bridge_slave_0: left promiscuous mode [ 422.924121][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.180803][ T5886] Bluetooth: hci2: command tx timeout [ 425.455521][ T5886] Bluetooth: hci2: command tx timeout [ 427.500505][ T5886] Bluetooth: hci2: command tx timeout [ 427.688016][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.704215][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.718614][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.746087][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.754083][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 427.861127][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.946313][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.973859][ T1022] bond0 (unregistering): Released all slaves [ 428.128464][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.353775][ T7459] veth0_vlan: entered promiscuous mode [ 428.361234][ T7862] netlink: 1052 bytes leftover after parsing attributes in process `syz.4.368'. [ 428.581590][ T1022] hsr_slave_0: left promiscuous mode [ 428.600076][ T1022] hsr_slave_1: left promiscuous mode [ 428.633732][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.657657][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.688494][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.730474][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.858663][ T1022] veth1_macvtap: left promiscuous mode [ 428.890363][ T1022] veth0_macvtap: left promiscuous mode [ 428.930541][ T1022] veth1_vlan: left promiscuous mode [ 428.960889][ T1022] veth0_vlan: left promiscuous mode [ 430.238316][ T5886] Bluetooth: hci3: command tx timeout [ 433.155511][ T51] Bluetooth: hci3: command tx timeout [ 435.180575][ T5886] Bluetooth: hci3: command tx timeout [ 436.191532][ T7895] loop4: detected capacity change from 0 to 512 [ 436.344361][ T7895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.395981][ T7895] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.533328][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 436.552203][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.560810][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.569359][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.577531][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.587780][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.691825][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 437.138741][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.260381][ T5886] Bluetooth: hci3: command tx timeout [ 437.770541][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 437.957390][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.041160][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 438.072696][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.105431][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.120253][ T10] usb 5-1: Product: syz [ 438.124473][ T10] usb 5-1: Manufacturer: syz [ 438.159037][ T10] usb 5-1: SerialNumber: syz [ 438.420937][ T7903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 438.700332][ T5886] Bluetooth: hci4: command tx timeout [ 438.751905][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.759037][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.078833][ T7903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.241541][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.248717][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.392535][ T10] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 439.399018][ T10] cdc_ncm 5-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 439.440313][ T10] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 439.453011][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.470907][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.514776][ T7808] bridge_slave_0: entered allmulticast mode [ 439.538826][ T7808] bridge_slave_0: entered promiscuous mode [ 439.676629][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.713559][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.754818][ T7808] bridge_slave_1: entered allmulticast mode [ 439.780827][ T7808] bridge_slave_1: entered promiscuous mode [ 439.898888][ T10] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 439.972654][ T10] usb 5-1: USB disconnect, device number 10 [ 439.980165][ T10] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 440.459201][ T7808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.646294][ T7914] loop4: detected capacity change from 0 to 128 [ 440.780329][ T5886] Bluetooth: hci4: command tx timeout [ 440.865197][ T7808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.883913][ T7916] overlayfs: failed to resolve './file0': -2 [ 440.943625][ T7914] FAT-fs (loop4): Directory bread(block 32) failed [ 441.087538][ T7914] FAT-fs (loop4): Directory bread(block 33) failed [ 441.097121][ T7914] FAT-fs (loop4): Directory bread(block 34) failed [ 441.150450][ T7914] FAT-fs (loop4): Directory bread(block 35) failed [ 441.157465][ T7914] FAT-fs (loop4): Directory bread(block 36) failed [ 441.201507][ T7914] FAT-fs (loop4): Directory bread(block 37) failed [ 441.208128][ T7914] FAT-fs (loop4): Directory bread(block 38) failed [ 441.239690][ T7914] FAT-fs (loop4): Directory bread(block 39) failed [ 441.260362][ T7914] FAT-fs (loop4): Directory bread(block 40) failed [ 441.266934][ T7914] FAT-fs (loop4): Directory bread(block 41) failed [ 441.510612][ T7808] team0: Port device team_slave_0 added [ 441.519793][ T7808] team0: Port device team_slave_1 added [ 441.708527][ T7914] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 441.716913][ T7914] FAT-fs (loop4): Filesystem has been set read-only [ 442.862305][ T5886] Bluetooth: hci4: command tx timeout [ 442.930140][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.940246][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.966705][ T7808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.122638][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 443.147517][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 443.188136][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.199164][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 443.218387][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.330358][ T7808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.638033][ T7930] loop4: detected capacity change from 0 to 512 [ 443.744026][ T7930] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 443.803634][ T7930] System zones: 0-2, 18-18, 34-34 [ 443.901600][ T7930] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.382: bg 0: block 248: padding at end of block bitmap is not set [ 443.964807][ T7808] hsr_slave_0: entered promiscuous mode [ 443.985014][ T7808] hsr_slave_1: entered promiscuous mode [ 444.005254][ T7930] Quota error (device loop4): write_blk: dquota write failed [ 444.113513][ T7930] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 444.195663][ T7930] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.382: Failed to acquire dquot type 1 [ 444.356289][ T7930] EXT4-fs (loop4): 1 truncate cleaned up [ 444.382453][ T7930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.413654][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.477904][ T7930] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.580395][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.587604][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.641980][ T7870] bridge_slave_0: entered allmulticast mode [ 444.650074][ T7870] bridge_slave_0: entered promiscuous mode [ 444.703813][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.749765][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.779012][ T7870] bridge_slave_1: entered allmulticast mode [ 444.810854][ T7870] bridge_slave_1: entered promiscuous mode [ 444.943480][ T5886] Bluetooth: hci4: command tx timeout [ 445.056859][ T7899] chnl_net:caif_netlink_parms(): no params data found [ 445.111644][ T7944] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.382: deleted inode referenced: 12 [ 445.230039][ T7945] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.382: deleted inode referenced: 12 [ 445.578666][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.643188][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.963053][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.973147][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.990817][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.012271][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.023594][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 446.052930][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.322252][ T7870] team0: Port device team_slave_0 added [ 446.624536][ T7870] team0: Port device team_slave_1 added [ 446.884875][ T6049] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 447.087532][ T6049] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 447.456059][ T7956] fido_id[7956]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 447.737806][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.760393][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.786335][ T7899] bridge_slave_0: entered allmulticast mode [ 447.800504][ T7899] bridge_slave_0: entered promiscuous mode [ 447.854015][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.864185][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.931142][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.962680][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.969640][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.036009][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.075928][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.092246][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.095426][ T7963] loop0: detected capacity change from 0 to 512 [ 448.099584][ T7899] bridge_slave_1: entered allmulticast mode [ 448.115762][ T7899] bridge_slave_1: entered promiscuous mode [ 448.129781][ T7963] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.150945][ T51] Bluetooth: hci5: command tx timeout [ 448.175903][ T7963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.483588][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.496222][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.595624][ T7870] hsr_slave_0: entered promiscuous mode [ 448.633237][ T7870] hsr_slave_1: entered promiscuous mode [ 448.639617][ T7870] debugfs: 'hsr0' already exists in 'hsr' [ 448.656252][ T7870] Cannot create hsr debugfs directory [ 448.753469][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.949844][ T7899] team0: Port device team_slave_0 added [ 448.971178][ T5958] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 449.149324][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.213139][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.272798][ T5958] usb 1-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 449.311357][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.452737][ T5958] usb 1-1: config 0 descriptor?? [ 449.587623][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.594325][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.622949][ T7899] team0: Port device team_slave_1 added [ 450.122805][ T5958] usbhid 1-1:0.0: can't add hid device: -71 [ 450.154117][ T5958] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 450.194313][ T5958] usb 1-1: USB disconnect, device number 8 [ 450.220801][ T51] Bluetooth: hci5: command tx timeout [ 450.278193][ T7981] loop4: detected capacity change from 0 to 8 [ 450.777455][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.785333][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.817154][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.864320][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.871438][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.897575][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.715210][ T1022] bridge_slave_1: left allmulticast mode [ 451.737449][ T1022] bridge_slave_1: left promiscuous mode [ 451.744239][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.762496][ T1022] bridge_slave_0: left allmulticast mode [ 451.777220][ T1022] bridge_slave_0: left promiscuous mode [ 451.803125][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.893389][ T1022] bridge_slave_1: left allmulticast mode [ 451.899245][ T1022] bridge_slave_1: left promiscuous mode [ 451.983914][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.300423][ T51] Bluetooth: hci5: command tx timeout [ 452.353425][ T1022] bridge_slave_0: left allmulticast mode [ 452.359472][ T1022] bridge_slave_0: left promiscuous mode [ 452.395805][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.437231][ T7992] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.447104][ T7992] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.456554][ T7992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 453.467042][ T7992] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.476455][ T7992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 453.486024][ T7992] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 453.493699][ T7992] UDF-fs: Scanning with blocksize 512 failed [ 453.500822][ T7992] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.510386][ T7992] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.519740][ T7992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 453.531753][ T7992] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.541553][ T7992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 453.551141][ T7992] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 453.558762][ T7992] UDF-fs: Scanning with blocksize 1024 failed [ 453.565959][ T7992] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.640611][ T7992] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.660475][ T7992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 453.670681][ T7992] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.680144][ T7992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 453.690057][ T7992] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 453.697725][ T7992] UDF-fs: Scanning with blocksize 2048 failed [ 453.704321][ T7992] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 453.713819][ T7992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 453.770637][ T7992] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 453.780259][ T7992] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 453.787891][ T7992] UDF-fs: Scanning with blocksize 4096 failed [ 453.793983][ T7992] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 454.436497][ T51] Bluetooth: hci5: command tx timeout [ 456.000869][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.041091][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.052456][ T1022] bond0 (unregistering): Released all slaves [ 456.463935][ T8001] loop4: detected capacity change from 0 to 2048 [ 456.474873][ T8001] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 456.566743][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.597007][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.655843][ T1022] bond0 (unregistering): Released all slaves [ 458.000525][ T1022] hsr_slave_0: left promiscuous mode [ 458.032681][ T1022] hsr_slave_1: left promiscuous mode [ 458.046647][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.069380][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.098843][ T1022] hsr_slave_0: left promiscuous mode [ 458.110298][ T1022] hsr_slave_1: left promiscuous mode [ 458.116422][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.164471][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.187642][ T8012] loop0: detected capacity change from 0 to 8192 [ 458.246469][ T8014] loop4: detected capacity change from 0 to 1024 [ 458.256415][ T8014] EXT4-fs: inline encryption not supported [ 458.263282][ T1022] veth0_vlan: left promiscuous mode [ 458.285135][ T8014] EXT4-fs: Ignoring removed nobh option [ 458.300761][ T8014] EXT4-fs: Ignoring removed bh option [ 458.348112][ T8014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.403467][ T30] audit: type=1800 audit(1757722749.568:12): pid=8014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.403" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 458.452395][ T8014] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4182: comm syz.4.403: Allocating blocks 385-513 which overlap fs metadata [ 458.522197][ T8018] EXT4-fs (loop4): pa ffff888024194bc8: logic 16, phys. 129, len 24 [ 458.530485][ T8018] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5433: group 0, free 0, pa_free 8 [ 458.769349][ T5866] Trying to write to read-only block-device loop4 [ 458.809950][ T5866] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.016319][ T8023] capability: warning: `syz.0.404' uses deprecated v2 capabilities in a way that may be insecure [ 463.213616][ T8029] loop0: detected capacity change from 0 to 1024 [ 463.225748][ T8029] hfsplus: Bad value for 'type' [ 463.459957][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 463.532857][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 465.381925][ T8047] loop4: detected capacity change from 0 to 1024 [ 465.399568][ T8047] EXT4-fs: Ignoring removed bh option [ 465.412262][ T8047] EXT4-fs: Ignoring removed bh option [ 465.790525][ T8049] loop4: detected capacity change from 0 to 512 [ 466.373350][ T30] audit: type=1400 audit(1757722757.518:13): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8050 comm="syz.0.414" [ 467.405636][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 467.438095][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 467.747292][ T7899] hsr_slave_0: entered promiscuous mode [ 467.756329][ T7899] hsr_slave_1: entered promiscuous mode [ 467.763251][ T7899] debugfs: 'hsr0' already exists in 'hsr' [ 467.769100][ T7899] Cannot create hsr debugfs directory [ 467.792197][ T7947] chnl_net:caif_netlink_parms(): no params data found [ 470.553732][ T7808] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.788746][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.824401][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.833296][ T7947] bridge_slave_0: entered allmulticast mode [ 470.861504][ T7947] bridge_slave_0: entered promiscuous mode [ 470.906434][ T7808] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 470.963931][ T7808] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 471.098003][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.130679][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.137953][ T7947] bridge_slave_1: entered allmulticast mode [ 471.193435][ T7947] bridge_slave_1: entered promiscuous mode [ 471.280347][ T7808] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 471.900690][ T7947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.928946][ T7947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.249799][ T7947] team0: Port device team_slave_0 added [ 472.302850][ T7947] team0: Port device team_slave_1 added [ 472.580675][ T7947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.617116][ T7947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.041807][ T7947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.055075][ T7947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.062545][ T7947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.220590][ T7947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.547725][ T7947] hsr_slave_0: entered promiscuous mode [ 474.566056][ T7947] hsr_slave_1: entered promiscuous mode [ 474.596046][ T7947] debugfs: 'hsr0' already exists in 'hsr' [ 474.610248][ T7947] Cannot create hsr debugfs directory [ 474.732635][ T7870] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 474.768143][ T7870] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 474.930072][ T7870] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 475.069352][ T7870] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 481.576875][ T8132] loop0: detected capacity change from 0 to 164 [ 481.604976][ T8132] rock: directory entry would overflow storage [ 481.654857][ T8132] rock: sig=0x5053, size=7, remaining=4 [ 481.675719][ T8132] isofs_fill_super: root inode is not a directory. Corrupted media? [ 481.753339][ T1022] bridge_slave_1: left allmulticast mode [ 481.759035][ T1022] bridge_slave_1: left promiscuous mode [ 482.026076][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.092712][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.267430][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.277617][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.289557][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.298926][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.183835][ T1022] bridge_slave_0: left allmulticast mode [ 483.210380][ T1022] bridge_slave_0: left promiscuous mode [ 483.216287][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.460410][ T51] Bluetooth: hci2: command tx timeout [ 487.310317][ T51] Bluetooth: hci2: command tx timeout [ 487.894347][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.933664][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.938742][ T8175] loop4: detected capacity change from 0 to 512 [ 487.951262][ T1022] bond0 (unregistering): Released all slaves [ 487.969492][ T8175] EXT4-fs: Ignoring removed i_version option [ 488.001459][ T8175] ext4: Unknown parameter 'smackfsdef' [ 489.479080][ T51] Bluetooth: hci2: command tx timeout [ 489.814118][ T7899] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 490.130621][ T1022] hsr_slave_0: left promiscuous mode [ 490.171616][ T1022] hsr_slave_1: left promiscuous mode [ 490.177822][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.191406][ T5886] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 490.243444][ T5886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 490.262653][ T5886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 490.278833][ T5886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 490.287557][ T5886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 490.301095][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.500342][ T51] Bluetooth: hci2: command tx timeout [ 491.644530][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 492.714751][ T51] Bluetooth: hci6: command tx timeout [ 493.023794][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 493.131235][ T8205] loop4: detected capacity change from 0 to 8 [ 493.953203][ T8207] loop4: detected capacity change from 0 to 1024 [ 493.968227][ T8207] EXT4-fs: Ignoring removed i_version option [ 494.000509][ T8207] EXT4-fs: inline encryption not supported [ 494.949230][ T51] Bluetooth: hci6: command tx timeout [ 496.951603][ T30] audit: type=1400 audit(1757722788.108:14): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8217 comm="syz.4.442" [ 497.029505][ T51] Bluetooth: hci6: command tx timeout [ 498.472907][ T7899] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 498.500925][ T5886] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.510017][ T5886] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.518927][ T5886] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.527558][ T5886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.535321][ T5886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 499.129701][ T5886] Bluetooth: hci6: command tx timeout [ 501.573317][ T5886] Bluetooth: hci3: command tx timeout [ 504.251476][ T5886] Bluetooth: hci3: command tx timeout [ 504.414136][ T8240] loop4: detected capacity change from 0 to 512 [ 506.580301][ T5886] Bluetooth: hci3: command tx timeout [ 506.671542][ T8240] EXT4-fs: Ignoring removed i_version option [ 506.677608][ T8240] ext4: Unknown parameter 'smackfsdef' [ 508.625987][ T5886] Bluetooth: hci3: command tx timeout [ 509.553007][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.561305][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.569346][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.600358][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.652697][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 510.886157][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 511.057653][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.064046][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.483590][ T8226] chnl_net:caif_netlink_parms(): no params data found [ 511.736661][ T8184] chnl_net:caif_netlink_parms(): no params data found [ 511.743893][ T5886] Bluetooth: hci4: command tx timeout [ 511.829561][ T8280] loop4: detected capacity change from 0 to 8 [ 512.839767][ T8285] loop4: detected capacity change from 0 to 1024 [ 512.982593][ T8285] EXT4-fs: Ignoring removed i_version option [ 512.988664][ T8285] EXT4-fs: inline encryption not supported [ 514.240739][ T5886] Bluetooth: hci4: command tx timeout [ 516.435464][ T5886] Bluetooth: hci4: command tx timeout [ 516.829338][ T30] audit: type=1400 audit(1757722807.988:15): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8321 comm="syz.0.453" [ 517.759395][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.820557][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.827823][ T8226] bridge_slave_0: entered allmulticast mode [ 517.873271][ T8226] bridge_slave_0: entered promiscuous mode [ 518.095767][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.128838][ T8184] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.396561][ T8184] bridge_slave_0: entered allmulticast mode [ 518.472778][ T5886] Bluetooth: hci4: command tx timeout [ 518.500785][ T8184] bridge_slave_0: entered promiscuous mode [ 518.521304][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.539516][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.549514][ T8139] bridge_slave_0: entered allmulticast mode [ 518.575678][ T8139] bridge_slave_0: entered promiscuous mode [ 520.695801][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.786520][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.830681][ T8139] bridge_slave_1: entered allmulticast mode [ 520.887072][ T8139] bridge_slave_1: entered promiscuous mode [ 522.998841][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.027918][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.080574][ T8226] bridge_slave_1: entered allmulticast mode [ 523.088651][ T8226] bridge_slave_1: entered promiscuous mode [ 523.154320][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.163614][ T8184] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.172377][ T8184] bridge_slave_1: entered allmulticast mode [ 523.180087][ T8184] bridge_slave_1: entered promiscuous mode [ 523.906201][ T8339] loop0: detected capacity change from 0 to 512 [ 523.925490][ T8184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.965389][ T8184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.975837][ T8339] EXT4-fs: Ignoring removed i_version option [ 523.995917][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.010469][ T8339] ext4: Unknown parameter 'smackfsdef' [ 524.061689][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.101858][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.395973][ T8345] loop0: detected capacity change from 0 to 8 [ 528.425069][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.578592][ T8354] loop0: detected capacity change from 0 to 1024 [ 529.592619][ T8184] team0: Port device team_slave_0 added [ 529.612326][ T8184] team0: Port device team_slave_1 added [ 529.621636][ T8139] team0: Port device team_slave_0 added [ 529.622112][ T8354] EXT4-fs: Ignoring removed i_version option [ 529.664871][ T8139] team0: Port device team_slave_1 added [ 529.681128][ T8354] EXT4-fs: inline encryption not supported [ 529.688348][ T8354] EXT4-fs (loop0): Test dummy encryption mode enabled [ 529.754803][ T8354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.685165][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.997571][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.019689][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.510295][ T30] audit: type=1400 audit(1757722823.218:16): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8366 comm="syz.0.464" [ 532.553221][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.590377][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.597329][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.690303][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.735667][ T8226] team0: Port device team_slave_0 added [ 532.793042][ T8226] team0: Port device team_slave_1 added [ 535.028532][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.075270][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.323610][ T8184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.301826][ T8184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.308816][ T8184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.199047][ T8184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.362936][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.369926][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.568419][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.860291][ T8257] chnl_net:caif_netlink_parms(): no params data found [ 539.918404][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.950331][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.071016][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.892933][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 540.930414][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 540.938332][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 540.947105][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 540.960510][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 540.978929][ T8184] hsr_slave_0: entered promiscuous mode [ 541.329116][ T8393] loop0: detected capacity change from 0 to 8 [ 542.037398][ T8184] hsr_slave_1: entered promiscuous mode [ 542.061071][ T8184] debugfs: 'hsr0' already exists in 'hsr' [ 542.066821][ T8184] Cannot create hsr debugfs directory [ 542.325920][ T5886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.334374][ T5886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.343388][ T5886] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.351996][ T5886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.371531][ T5886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.303524][ T51] Bluetooth: hci5: command tx timeout [ 544.467105][ T51] Bluetooth: hci2: command tx timeout [ 544.858493][ T8226] hsr_slave_0: entered promiscuous mode [ 544.896681][ T8226] hsr_slave_1: entered promiscuous mode [ 545.170423][ T8226] debugfs: 'hsr0' already exists in 'hsr' [ 545.176196][ T8226] Cannot create hsr debugfs directory [ 545.340601][ T51] Bluetooth: hci5: command tx timeout [ 546.541108][ T51] Bluetooth: hci2: command tx timeout [ 546.586510][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.594986][ T8412] loop0: detected capacity change from 0 to 1024 [ 546.618775][ T8412] EXT4-fs: Ignoring removed i_version option [ 546.624940][ T8412] EXT4-fs: inline encryption not supported [ 546.624989][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.632105][ T8412] EXT4-fs (loop0): Test dummy encryption mode enabled [ 546.800485][ T8257] bridge_slave_0: entered allmulticast mode [ 546.850088][ T8257] bridge_slave_0: entered promiscuous mode [ 546.853376][ T8412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.067346][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.310497][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.841058][ T51] Bluetooth: hci5: command tx timeout [ 547.888863][ T8257] bridge_slave_1: entered allmulticast mode [ 547.902754][ T8257] bridge_slave_1: entered promiscuous mode [ 547.944539][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.841029][ T51] Bluetooth: hci2: command tx timeout [ 549.900505][ T5884] Bluetooth: hci5: command tx timeout [ 550.860869][ T5884] Bluetooth: hci2: command tx timeout [ 550.968867][ T8257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.993431][ T8257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.721980][ T8257] team0: Port device team_slave_0 added [ 551.802502][ T8257] team0: Port device team_slave_1 added [ 552.114121][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 552.130762][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 552.150834][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 552.162812][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 552.170782][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 553.217840][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.240509][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.290252][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.343920][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.391271][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.460320][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.310887][ T51] Bluetooth: hci1: command tx timeout [ 554.935528][ T8394] chnl_net:caif_netlink_parms(): no params data found [ 554.989998][ T8257] hsr_slave_0: entered promiscuous mode [ 555.022435][ T8257] hsr_slave_1: entered promiscuous mode [ 555.028769][ T8257] debugfs: 'hsr0' already exists in 'hsr' [ 555.060281][ T8257] Cannot create hsr debugfs directory [ 555.506225][ T30] audit: type=1400 audit(1757722846.668:17): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8433 comm="syz.0.475" [ 556.376822][ T8388] chnl_net:caif_netlink_parms(): no params data found [ 556.390592][ T51] Bluetooth: hci1: command tx timeout [ 557.918396][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.950551][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.957849][ T8394] bridge_slave_0: entered allmulticast mode [ 557.983633][ T5884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 558.001765][ T5884] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 558.020628][ T5884] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 558.028474][ T8394] bridge_slave_0: entered promiscuous mode [ 558.035089][ T5884] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 558.042893][ T5884] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 559.100587][ T51] Bluetooth: hci1: command tx timeout [ 559.388836][ T8426] chnl_net:caif_netlink_parms(): no params data found [ 559.411764][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.425017][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.432942][ T8388] bridge_slave_0: entered allmulticast mode [ 559.457934][ T8388] bridge_slave_0: entered promiscuous mode [ 559.519053][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.561016][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.568377][ T8394] bridge_slave_1: entered allmulticast mode [ 559.580644][ T8394] bridge_slave_1: entered promiscuous mode [ 559.741482][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.748676][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.758259][ T8388] bridge_slave_1: entered allmulticast mode [ 559.768761][ T8388] bridge_slave_1: entered promiscuous mode [ 559.812913][ T1022] bridge_slave_1: left allmulticast mode [ 559.818591][ T1022] bridge_slave_1: left promiscuous mode [ 559.825593][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.846668][ T1022] bridge_slave_0: left allmulticast mode [ 559.861575][ T1022] bridge_slave_0: left promiscuous mode [ 559.867338][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.924170][ T1022] bridge_slave_1: left allmulticast mode [ 559.929861][ T1022] bridge_slave_1: left promiscuous mode [ 559.936191][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.956216][ T1022] bridge_slave_0: left allmulticast mode [ 559.981096][ T1022] bridge_slave_0: left promiscuous mode [ 559.987007][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.000784][ T1022] bridge_slave_1: left allmulticast mode [ 560.006434][ T1022] bridge_slave_1: left promiscuous mode [ 560.020787][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.033830][ T1022] bridge_slave_0: left allmulticast mode [ 560.039474][ T1022] bridge_slave_0: left promiscuous mode [ 560.050750][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.070362][ T5884] Bluetooth: hci6: command tx timeout [ 560.517291][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.528411][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.581943][ T1022] bond0 (unregistering): Released all slaves [ 560.868876][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.886395][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.897272][ T1022] bond0 (unregistering): Released all slaves [ 561.080008][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.109664][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.133244][ T1022] bond0 (unregistering): Released all slaves [ 561.181515][ T5884] Bluetooth: hci1: command tx timeout [ 562.323887][ T5884] Bluetooth: hci6: command tx timeout [ 562.355552][ T8388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.366526][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.447457][ T1022] hsr_slave_0: left promiscuous mode [ 563.459347][ T1022] hsr_slave_1: left promiscuous mode [ 563.477893][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.499411][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.528062][ T1022] hsr_slave_0: left promiscuous mode [ 563.552736][ T1022] hsr_slave_1: left promiscuous mode [ 563.560798][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.580739][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.604299][ T1022] hsr_slave_0: left promiscuous mode [ 563.620409][ T1022] hsr_slave_1: left promiscuous mode [ 563.626595][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.650902][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.967103][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 564.033150][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 564.400299][ T51] Bluetooth: hci6: command tx timeout [ 565.542340][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 565.584580][ T8466] loop0: detected capacity change from 0 to 8 [ 565.961356][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 566.462308][ T51] Bluetooth: hci6: command tx timeout [ 566.787547][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 567.374016][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 567.708350][ T8388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.720955][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.896209][ T8426] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.913893][ T8426] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.921927][ T8426] bridge_slave_0: entered allmulticast mode [ 567.929978][ T8426] bridge_slave_0: entered promiscuous mode [ 567.942788][ T8426] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.949907][ T8426] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.957209][ T8426] bridge_slave_1: entered allmulticast mode [ 567.965081][ T8426] bridge_slave_1: entered promiscuous mode [ 567.974016][ T8388] team0: Port device team_slave_0 added [ 568.048562][ T8394] team0: Port device team_slave_0 added [ 568.083983][ T8394] team0: Port device team_slave_1 added [ 568.371800][ T8388] team0: Port device team_slave_1 added [ 568.605070][ T8426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.663049][ T8426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.856146][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.878650][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.921430][ T5884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 568.929163][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.941189][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 568.948990][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 568.957472][ T5884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 568.967752][ T5884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 571.042531][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.049517][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.139861][ T8388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.246063][ T8484] loop0: detected capacity change from 0 to 1024 [ 571.300393][ T8484] EXT4-fs: Ignoring removed i_version option [ 571.323779][ T8484] EXT4-fs: inline encryption not supported [ 571.370143][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.378165][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.400289][ T8484] EXT4-fs (loop0): Test dummy encryption mode enabled [ 571.413655][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.487901][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.534907][ T8484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.541025][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.797319][ T8388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.367378][ T51] Bluetooth: hci3: command tx timeout [ 572.412280][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.412465][ T8426] team0: Port device team_slave_0 added [ 572.467131][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.473759][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.715569][ T8388] hsr_slave_0: entered promiscuous mode [ 572.715959][ T30] audit: type=1400 audit(1757722863.868:18): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8489 comm="syz.0.484" [ 572.829175][ T8388] hsr_slave_1: entered promiscuous mode [ 573.155762][ T8426] team0: Port device team_slave_1 added [ 574.443036][ T51] Bluetooth: hci3: command tx timeout [ 575.701732][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.708690][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.791636][ T51] Bluetooth: hci3: command tx timeout [ 576.801603][ T8426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.805665][ T8394] hsr_slave_0: entered promiscuous mode [ 577.832059][ T8394] hsr_slave_1: entered promiscuous mode [ 577.871830][ T8394] debugfs: 'hsr0' already exists in 'hsr' [ 577.878351][ T8394] Cannot create hsr debugfs directory [ 578.097462][ T8426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.133826][ T8426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.190259][ T8426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.633635][ T8426] hsr_slave_0: entered promiscuous mode [ 578.650887][ T8426] hsr_slave_1: entered promiscuous mode [ 578.670763][ T8426] debugfs: 'hsr0' already exists in 'hsr' [ 578.676497][ T8426] Cannot create hsr debugfs directory [ 578.860482][ T51] Bluetooth: hci3: command tx timeout [ 579.159842][ T8449] chnl_net:caif_netlink_parms(): no params data found [ 581.069227][ T8514] loop0: detected capacity change from 0 to 8 [ 582.652738][ T8477] chnl_net:caif_netlink_parms(): no params data found [ 582.881125][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.888258][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.950079][ T8449] bridge_slave_0: entered allmulticast mode [ 582.958793][ T8449] bridge_slave_0: entered promiscuous mode [ 582.987163][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.000805][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.007973][ T8449] bridge_slave_1: entered allmulticast mode [ 583.023377][ T8449] bridge_slave_1: entered promiscuous mode [ 583.328735][ T8449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.354138][ T8449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.844629][ T8449] team0: Port device team_slave_0 added [ 583.874589][ T8449] team0: Port device team_slave_1 added [ 584.297298][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.309411][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.370495][ T8449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.496825][ T8477] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.511705][ T8477] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.518991][ T8477] bridge_slave_0: entered allmulticast mode [ 584.561765][ T8477] bridge_slave_0: entered promiscuous mode [ 584.589093][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.621047][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.720850][ T8449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.850626][ T8477] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.857858][ T8477] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.880715][ T8477] bridge_slave_1: entered allmulticast mode [ 584.888875][ T8477] bridge_slave_1: entered promiscuous mode [ 585.219582][ T8449] hsr_slave_0: entered promiscuous mode [ 585.241540][ T8449] hsr_slave_1: entered promiscuous mode [ 585.248777][ T8449] debugfs: 'hsr0' already exists in 'hsr' [ 585.270333][ T8449] Cannot create hsr debugfs directory [ 585.492525][ T8477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.392097][ T8477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.481218][ T8538] loop0: detected capacity change from 0 to 1024 [ 586.511388][ T8538] EXT4-fs: Ignoring removed i_version option [ 586.517447][ T8538] EXT4-fs: inline encryption not supported [ 586.536010][ T8538] EXT4-fs (loop0): Test dummy encryption mode enabled [ 586.609280][ T8477] team0: Port device team_slave_0 added [ 586.624161][ T8477] team0: Port device team_slave_1 added [ 586.742864][ T8538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.791326][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.798278][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.850294][ T8477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.226520][ T8477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.235315][ T8477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.410353][ T8477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.443097][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.860347][ T8394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 587.950996][ T8477] hsr_slave_0: entered promiscuous mode [ 587.953760][ T30] audit: type=1400 audit(1757722879.118:19): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8542 comm="syz.0.493" [ 587.957794][ T8477] hsr_slave_1: entered promiscuous mode [ 588.162885][ T8477] debugfs: 'hsr0' already exists in 'hsr' [ 588.192127][ T8477] Cannot create hsr debugfs directory [ 588.542308][ T8394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 588.574360][ T8394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.642757][ T8394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 591.484688][ T8388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 591.554237][ T8388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 591.875179][ T8388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 592.180876][ T8388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 594.115176][ T1022] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.393236][ T1022] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.753723][ T1022] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.085814][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.267972][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.463707][ T1022] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.628974][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.712576][ T8394] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.862436][ T8426] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 595.891490][ T8426] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 595.965132][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.972283][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.006139][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.013327][ T6080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.032291][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.039432][ T6080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.058620][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.065754][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.452018][ T8579] loop0: detected capacity change from 0 to 8 [ 597.230685][ T8426] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 597.368704][ T8426] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 598.246155][ T1022] bridge_slave_1: left allmulticast mode [ 598.264990][ T1022] bridge_slave_1: left promiscuous mode [ 598.300942][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.602814][ T1022] bridge_slave_0: left allmulticast mode [ 598.608519][ T1022] bridge_slave_0: left promiscuous mode [ 598.640689][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.701646][ T1022] bridge_slave_1: left allmulticast mode [ 598.738139][ T1022] bridge_slave_1: left promiscuous mode [ 598.750944][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.869157][ T1022] bridge_slave_0: left allmulticast mode [ 598.883981][ T1022] bridge_slave_0: left promiscuous mode [ 598.889759][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.075217][ T1022] bridge_slave_1: left allmulticast mode [ 599.110526][ T1022] bridge_slave_1: left promiscuous mode [ 599.116383][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.333562][ T1022] bridge_slave_0: left allmulticast mode [ 599.339257][ T1022] bridge_slave_0: left promiscuous mode [ 599.379287][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.513326][ T1022] bridge_slave_1: left allmulticast mode [ 599.519000][ T1022] bridge_slave_1: left promiscuous mode [ 599.542636][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.718211][ T1022] bridge_slave_0: left allmulticast mode [ 599.730245][ T1022] bridge_slave_0: left promiscuous mode [ 599.736042][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.912852][ T1022] bridge_slave_1: left allmulticast mode [ 599.940814][ T1022] bridge_slave_1: left promiscuous mode [ 599.946580][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.003005][ T1022] bridge_slave_0: left allmulticast mode [ 600.008663][ T1022] bridge_slave_0: left promiscuous mode [ 600.030461][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.143517][ T1022] bridge_slave_1: left allmulticast mode [ 600.149185][ T1022] bridge_slave_1: left promiscuous mode [ 600.176521][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.344442][ T1022] bridge_slave_0: left allmulticast mode [ 600.370978][ T1022] bridge_slave_0: left promiscuous mode [ 600.376766][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.215599][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 601.225567][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 601.233495][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 601.241686][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 601.249777][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 602.002332][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 602.011289][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 602.019416][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 602.028790][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 602.036507][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 602.297753][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.390033][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.422822][ T1022] bond0 (unregistering): Released all slaves [ 603.340600][ T5884] Bluetooth: hci4: command tx timeout [ 603.856637][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.868972][ T8650] loop0: detected capacity change from 0 to 1024 [ 603.954637][ T8650] EXT4-fs: Ignoring removed i_version option [ 603.963933][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.989387][ T8650] EXT4-fs: inline encryption not supported [ 604.025105][ T1022] bond0 (unregistering): Released all slaves [ 604.072320][ T8650] EXT4-fs (loop0): Test dummy encryption mode enabled [ 604.141085][ T5884] Bluetooth: hci7: command tx timeout [ 604.297437][ T8650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.436519][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.729652][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.766360][ T1022] bond0 (unregistering): Released all slaves [ 604.956183][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.421325][ T5884] Bluetooth: hci4: command tx timeout [ 605.449012][ T30] audit: type=1400 audit(1757722896.608:20): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8658 comm="syz.0.502" [ 606.221187][ T5884] Bluetooth: hci7: command tx timeout [ 606.372785][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.508619][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.572826][ T1022] bond0 (unregistering): Released all slaves [ 607.500578][ T5884] Bluetooth: hci4: command tx timeout [ 608.300787][ T5884] Bluetooth: hci7: command tx timeout [ 609.650545][ T5884] Bluetooth: hci4: command tx timeout [ 610.465112][ T51] Bluetooth: hci7: command tx timeout [ 610.955979][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.983213][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.172307][ T1022] bond0 (unregistering): Released all slaves [ 611.461324][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.493603][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.554929][ T1022] bond0 (unregistering): Released all slaves [ 612.297799][ T8449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 612.467074][ T8449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 612.633277][ T5884] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 612.652996][ T5884] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 612.669319][ T5884] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 612.677711][ T5884] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 612.685632][ T5884] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 613.132192][ T8449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.241780][ T8449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.928696][ T51] Bluetooth: hci8: command tx timeout [ 616.155668][ T1022] hsr_slave_0: left promiscuous mode [ 616.210014][ T1022] hsr_slave_1: left promiscuous mode [ 616.224378][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.261524][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.293751][ T1022] hsr_slave_0: left promiscuous mode [ 616.307544][ T1022] hsr_slave_1: left promiscuous mode [ 616.333835][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.359781][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.401599][ T1022] hsr_slave_0: left promiscuous mode [ 616.418546][ T1022] hsr_slave_1: left promiscuous mode [ 616.439154][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.455894][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.621191][ T1022] hsr_slave_0: left promiscuous mode [ 616.651980][ T1022] hsr_slave_1: left promiscuous mode [ 616.665508][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.674077][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.687031][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.699857][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.832596][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.844621][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.901755][ T1022] hsr_slave_0: left promiscuous mode [ 616.907916][ T1022] hsr_slave_1: left promiscuous mode [ 616.916618][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.929104][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.941749][ T51] Bluetooth: hci8: command tx timeout [ 616.982074][ T1022] veth1_macvtap: left promiscuous mode [ 616.987657][ T1022] veth0_macvtap: left promiscuous mode [ 616.995072][ T1022] veth1_vlan: left promiscuous mode [ 617.010578][ T1022] veth0_vlan: left promiscuous mode [ 617.699474][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 617.778734][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 619.080525][ T51] Bluetooth: hci8: command tx timeout [ 619.162377][ T8732] loop0: detected capacity change from 0 to 8 [ 619.251749][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 619.309537][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 619.830003][ T5884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 619.839327][ T5884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 619.848521][ T5884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 619.857764][ T5884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 619.866571][ T5884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 621.160295][ T51] Bluetooth: hci8: command tx timeout [ 621.341634][ T8740] loop0: detected capacity change from 0 to 1024 [ 621.349317][ T8740] EXT4-fs: Ignoring removed i_version option [ 621.355812][ T8740] EXT4-fs: inline encryption not supported [ 621.383708][ T8740] EXT4-fs (loop0): Test dummy encryption mode enabled [ 621.392151][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 621.424889][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 621.501266][ T8740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.980358][ T51] Bluetooth: hci1: command tx timeout [ 622.293934][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.549324][ T30] audit: type=1400 audit(1757722913.708:21): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8744 comm="syz.0.511" [ 624.520256][ T51] Bluetooth: hci1: command tx timeout [ 625.282222][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 625.438211][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 626.466021][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 626.506032][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 626.540352][ T51] Bluetooth: hci1: command tx timeout [ 629.023697][ T51] Bluetooth: hci1: command tx timeout [ 629.222103][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 629.291249][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 629.975511][ T8634] chnl_net:caif_netlink_parms(): no params data found [ 630.591593][ T5884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 630.599908][ T5884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 630.608109][ T5884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.617196][ T5884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.619552][ T8625] chnl_net:caif_netlink_parms(): no params data found [ 630.631267][ T5884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.218206][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.226024][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.234377][ T8634] bridge_slave_0: entered allmulticast mode [ 631.242659][ T8634] bridge_slave_0: entered promiscuous mode [ 631.258182][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.265720][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.273287][ T8634] bridge_slave_1: entered allmulticast mode [ 631.281487][ T8634] bridge_slave_1: entered promiscuous mode [ 631.977278][ T8634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.108384][ T8674] chnl_net:caif_netlink_parms(): no params data found [ 632.202649][ T8634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.414134][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.454116][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.462597][ T8625] bridge_slave_0: entered allmulticast mode [ 632.496832][ T8625] bridge_slave_0: entered promiscuous mode [ 632.780961][ T5884] Bluetooth: hci2: command tx timeout [ 632.851594][ T8634] team0: Port device team_slave_0 added [ 632.858705][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.881188][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.912678][ T8625] bridge_slave_1: entered allmulticast mode [ 632.967493][ T8625] bridge_slave_1: entered promiscuous mode [ 633.088488][ T8634] team0: Port device team_slave_1 added [ 633.362763][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.369743][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.470560][ T8634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.532154][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.686696][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.738885][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.770309][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.806037][ T8634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.917616][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.924021][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.412241][ T8625] team0: Port device team_slave_0 added [ 634.441742][ T8625] team0: Port device team_slave_1 added [ 634.585497][ T8674] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.598788][ T8674] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.624300][ T8674] bridge_slave_0: entered allmulticast mode [ 634.670468][ T8674] bridge_slave_0: entered promiscuous mode [ 634.689677][ T8674] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.717358][ T8674] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.724852][ T8674] bridge_slave_1: entered allmulticast mode [ 634.752859][ T8674] bridge_slave_1: entered promiscuous mode [ 634.940422][ T5884] Bluetooth: hci2: command tx timeout [ 635.117877][ T8790] loop0: detected capacity change from 0 to 8 [ 635.399957][ T8634] hsr_slave_0: entered promiscuous mode [ 635.424251][ T8634] hsr_slave_1: entered promiscuous mode [ 635.444965][ T8634] debugfs: 'hsr0' already exists in 'hsr' [ 635.463570][ T8634] Cannot create hsr debugfs directory [ 635.592323][ T8674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.757437][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.765077][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.826540][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.864354][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.910439][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.980904][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.047340][ T8674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.325547][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 637.020776][ T5884] Bluetooth: hci2: command tx timeout [ 637.178321][ T8765] chnl_net:caif_netlink_parms(): no params data found [ 637.437719][ T8799] loop0: detected capacity change from 0 to 1024 [ 637.464421][ T8799] EXT4-fs: Ignoring removed i_version option [ 637.471163][ T8799] EXT4-fs: inline encryption not supported [ 637.478160][ T8799] EXT4-fs (loop0): Test dummy encryption mode enabled [ 637.598083][ T8799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.633870][ T8674] team0: Port device team_slave_0 added [ 638.009084][ T8625] hsr_slave_0: entered promiscuous mode [ 638.019125][ T8625] hsr_slave_1: entered promiscuous mode [ 638.035834][ T8625] debugfs: 'hsr0' already exists in 'hsr' [ 638.048282][ T8625] Cannot create hsr debugfs directory [ 638.062255][ T8674] team0: Port device team_slave_1 added [ 638.275687][ T5865] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.412656][ T30] audit: type=1400 audit(1757722929.578:22): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8807 comm="syz.0.520" [ 639.110057][ T5884] Bluetooth: hci2: command tx timeout [ 639.126021][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.134236][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.377964][ T8674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.410139][ T8674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.427819][ T8674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.499545][ T8674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.709289][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.720537][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.728096][ T8765] bridge_slave_0: entered allmulticast mode [ 639.772394][ T8765] bridge_slave_0: entered promiscuous mode [ 640.001077][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.008314][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.214122][ T8765] bridge_slave_1: entered allmulticast mode [ 640.223473][ T8765] bridge_slave_1: entered promiscuous mode [ 641.591160][ T8733] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.598377][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.609028][ T8733] bridge_slave_0: entered allmulticast mode [ 641.617363][ T8733] bridge_slave_0: entered promiscuous mode [ 641.650541][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.658888][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.667451][ T8733] bridge_slave_1: entered allmulticast mode [ 642.425570][ T8733] bridge_slave_1: entered promiscuous mode [ 644.129900][ T8674] hsr_slave_0: entered promiscuous mode [ 644.147106][ T8674] hsr_slave_1: entered promiscuous mode [ 644.161441][ T8674] debugfs: 'hsr0' already exists in 'hsr' [ 644.170376][ T8674] Cannot create hsr debugfs directory [ 644.215352][ T8733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.288030][ T8765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.332797][ T8765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.416068][ T8733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.705232][ T8733] team0: Port device team_slave_0 added [ 644.784813][ T8765] team0: Port device team_slave_0 added [ 644.854441][ T8733] team0: Port device team_slave_1 added [ 644.964927][ T8765] team0: Port device team_slave_1 added [ 645.222223][ T8733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.229188][ T8733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.300246][ T8733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.425647][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.459053][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.510337][ T8765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.542548][ T1022] ------------[ cut here ]------------ [ 645.548321][ T1022] WARNING: CPU: 1 PID: 1022 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x289/0x310 [ 645.558114][ T1022] Modules linked in: [ 645.562460][ T1022] CPU: 1 UID: 0 PID: 1022 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 645.572088][ T1022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.582322][ T1022] Workqueue: netns cleanup_net [ 645.587182][ T1022] RIP: 0010:xfrm_state_fini+0x289/0x310 [ 645.592836][ T1022] Code: 8a f7 90 0f 0b 90 e9 e7 fe ff ff e8 01 06 8a f7 90 0f 0b 90 e9 39 ff ff ff e8 f3 05 8a f7 90 0f 0b 90 eb 8a e8 e8 05 8a f7 90 <0f> 0b 90 e9 d5 fd ff ff e8 da 6f ef f7 e9 f8 fd ff ff e8 00 70 ef [ 645.612527][ T1022] RSP: 0018:ffffc900037efaa0 EFLAGS: 00010293 [ 645.618628][ T1022] RAX: 0000000000000000 RBX: ffff8880340f2440 RCX: fffff520006fdf25 [ 645.626670][ T1022] RDX: ffff888027245a00 RSI: ffffffff8a319838 RDI: ffff888027245e44 [ 645.634932][ T1022] RBP: ffff8880340f38c0 R08: 0000000000000001 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 645.642997][ T1022] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900037efbe8 [ 645.651977][ T1022] R13: dffffc0000000000 R14: fffffbfff20a8da8 R15: ffffffff90546d20 [ 645.659967][ T1022] FS: 0000000000000000(0000) GS:ffff8881247b4000(0000) knlGS:0000000000000000 [ 645.669453][ T1022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.676394][ T1022] CR2: 00007f2168c336e5 CR3: 000000007ea09000 CR4: 0000000000350ef0 [ 645.684457][ T1022] Call Trace: [ 645.687740][ T1022] [ 645.690734][ T1022] ? __pfx_xfrm_net_exit+0x10/0x10 [ 645.695869][ T1022] xfrm_net_exit+0x2d/0x70 [ 645.700375][ T1022] ops_undo_list+0x2ee/0xab0 [ 645.704995][ T1022] ? __pfx_ops_undo_list+0x10/0x10 [ 645.710126][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.715832][ T1022] ? idr_destroy+0x62/0x2e0 [ 645.720453][ T1022] cleanup_net+0x408/0x890 [ 645.724896][ T1022] ? __pfx_cleanup_net+0x10/0x10 [ 645.729835][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.735555][ T1022] ? rcu_is_watching+0x12/0xc0 [ 645.740556][ T1022] process_one_work+0x9cf/0x1b70 [ 645.745537][ T1022] ? __pfx_cleanup_net+0x10/0x10 [ 645.750537][ T1022] ? __pfx_process_one_work+0x10/0x10 [ 645.755939][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.761680][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.767514][ T1022] ? assign_work+0x1a0/0x250 [ 645.772395][ T1022] worker_thread+0x6c8/0xf10 [ 645.777014][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.782721][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.788419][ T1022] ? __kthread_parkme+0x19e/0x250 [ 645.793533][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.799203][ T1022] ? __pfx_worker_thread+0x10/0x10 [ 645.804405][ T1022] kthread+0x3c5/0x780 [ 645.808482][ T1022] ? __pfx_kthread+0x10/0x10 [ 645.813132][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.818770][ T1022] ? rcu_is_watching+0x12/0xc0 [ 645.823860][ T1022] ? __pfx_kthread+0x10/0x10 [ 645.828451][ T1022] ret_from_fork+0x56d/0x730 [ 645.833087][ T1022] ? __pfx_kthread+0x10/0x10 [ 645.837686][ T1022] ret_from_fork_asm+0x1a/0x30 [ 645.842510][ T1022] [ 645.845524][ T1022] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 645.852792][ T1022] CPU: 1 UID: 0 PID: 1022 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 645.862241][ T1022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.872288][ T1022] Workqueue: netns cleanup_net [ 645.877053][ T1022] Call Trace: [ 645.880408][ T1022] [ 645.883326][ T1022] dump_stack_lvl+0x3d/0x1f0 [ 645.887934][ T1022] vpanic+0x6e8/0x7a0 [ 645.891927][ T1022] ? __pfx_vpanic+0x10/0x10 [ 645.896449][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 645.902089][ T1022] ? xfrm_state_fini+0x289/0x310 [ 645.907041][ T1022] panic+0xca/0xd0 [ 645.910770][ T1022] ? __pfx_panic+0x10/0x10 [ 645.915206][ T1022] ? check_panic_on_warn+0x1f/0xb0 [ 645.920312][ T1022] check_panic_on_warn+0xab/0xb0 [ 645.925242][ T1022] __warn+0xf6/0x3c0 [ 645.929125][ T1022] ? xfrm_state_fini+0x289/0x310 [ 645.934074][ T1022] report_bug+0x3c3/0x580 [ 645.938418][ T1022] ? xfrm_state_fini+0x289/0x310 [ 645.943371][ T1022] handle_bug+0x184/0x210 [ 645.947697][ T1022] exc_invalid_op+0x17/0x50 [ 645.952196][ T1022] asm_exc_invalid_op+0x1a/0x20 [ 645.957040][ T1022] RIP: 0010:xfrm_state_fini+0x289/0x310 [ 645.962597][ T1022] Code: 8a f7 90 0f 0b 90 e9 e7 fe ff ff e8 01 06 8a f7 90 0f 0b 90 e9 39 ff ff ff e8 f3 05 8a f7 90 0f 0b 90 eb 8a e8 e8 05 8a f7 90 <0f> 0b 90 e9 d5 fd ff ff e8 da 6f ef f7 e9 f8 fd ff ff e8 00 70 ef [ 645.982206][ T1022] RSP: 0018:ffffc900037efaa0 EFLAGS: 00010293 [ 645.988266][ T1022] RAX: 0000000000000000 RBX: ffff8880340f2440 RCX: fffff520006fdf25 [ 645.996224][ T1022] RDX: ffff888027245a00 RSI: ffffffff8a319838 RDI: ffff888027245e44 [ 646.004187][ T1022] RBP: ffff8880340f38c0 R08: 0000000000000001 R09: 0000000000000000 [ 646.012147][ T1022] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900037efbe8 [ 646.020113][ T1022] R13: dffffc0000000000 R14: fffffbfff20a8da8 R15: ffffffff90546d20 [ 646.028092][ T1022] ? xfrm_state_fini+0x288/0x310 [ 646.033049][ T1022] ? __pfx_xfrm_net_exit+0x10/0x10 [ 646.038849][ T1022] xfrm_net_exit+0x2d/0x70 [ 646.043257][ T1022] ops_undo_list+0x2ee/0xab0 [ 646.047845][ T1022] ? __pfx_ops_undo_list+0x10/0x10 [ 646.052947][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.058583][ T1022] ? idr_destroy+0x62/0x2e0 [ 646.063092][ T1022] cleanup_net+0x408/0x890 [ 646.067504][ T1022] ? __pfx_cleanup_net+0x10/0x10 [ 646.072439][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.078071][ T1022] ? rcu_is_watching+0x12/0xc0 [ 646.082842][ T1022] process_one_work+0x9cf/0x1b70 [ 646.087787][ T1022] ? __pfx_cleanup_net+0x10/0x10 [ 646.092751][ T1022] ? __pfx_process_one_work+0x10/0x10 [ 646.098121][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.103762][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.109395][ T1022] ? assign_work+0x1a0/0x250 [ 646.113984][ T1022] worker_thread+0x6c8/0xf10 [ 646.118596][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.124230][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.129860][ T1022] ? __kthread_parkme+0x19e/0x250 [ 646.134891][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.140523][ T1022] ? __pfx_worker_thread+0x10/0x10 [ 646.145630][ T1022] kthread+0x3c5/0x780 [ 646.149691][ T1022] ? __pfx_kthread+0x10/0x10 [ 646.154275][ T1022] ? srso_alias_return_thunk+0x5/0xfbef5 [ 646.159905][ T1022] ? rcu_is_watching+0x12/0xc0 [ 646.164670][ T1022] ? __pfx_kthread+0x10/0x10 [ 646.169253][ T1022] ret_from_fork+0x56d/0x730 [ 646.173832][ T1022] ? __pfx_kthread+0x10/0x10 [ 646.178418][ T1022] ret_from_fork_asm+0x1a/0x30 [ 646.183200][ T1022] [ 646.186481][ T1022] Kernel Offset: disabled [ 646.190797][ T1022] Rebooting in 86400 seconds..