last executing test programs: 4m34.291507979s ago: executing program 2 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') read$dsp(r1, 0x0, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000180)={0x0, 0x8001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a3200000000140000"], 0x78}}, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@userptr={0x7, 0x8, 0x4, 0x70000, 0xac33, {}, {0x5, 0xc, 0x1, 0x66, 0x1d, 0x6, "beb5d4da"}, 0x40, 0x2, {0x0}, 0x10000}) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 4m32.958414686s ago: executing program 2 (id=172): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000b04000/0x1000)=nil, 0x1000, 0x16) write$proc_mixer(r1, 0x0, 0x34) 4m31.628706566s ago: executing program 2 (id=179): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) gettid() timer_settime(0x0, 0x5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001840)={0x0, 0x7d6a}) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x1c, 0x22, "201a7b024ef8bf02b098d4059bccc9cae593ce57cbb2077e"}, @IFLA_MTU={0x8, 0x4, 0x3ff}]}, 0x44}}, 0x0) 4m30.357555321s ago: executing program 2 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000ef000ef800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000400)={0x980901, 0x4003, @name="b6ae8e0f0376fa7d4eac0abd15418b9c7d97029e735ede962403968545b1c117"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@ifindex, r0, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) fchmodat(r2, &(0x7f0000000400)='./file2\x00', 0x108) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0x45) r3 = socket(0x2, 0x4, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x2b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10008084}, 0x4044034) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc00, &(0x7f0000000300)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8, @ANYRES32, @ANYBLOB="30a38e0e5b82f591596ae8b1f0320bff1e7adcec26b17942841c33f6a67731a8c62bfd47d61f0ba39a753d30927a4b12050b9d3d46fe2b48a309762fc31d2d77d22bce58cd7c99be2c5d1a6e4a6b349ef3c299f32916cd0e84c23dee16d05625dafb69caf41d0a21e297059c0cf779cac091fbe7c141f273dec4193650be448fef485d6545f3f31218e03cffb4f0ae15d01dcf8c6f365966", @ANYRESHEX, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0], 0x21, 0x6190, &(0x7f0000001b00)="$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") r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0}) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x60, r10, 0x8, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}]}, 0x60}, 0x1, 0xf000, 0x0, 0x8040}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 4m28.784048767s ago: executing program 2 (id=189): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/134) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_emit_vhci(&(0x7f00000013c0)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x7}]}}}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x42013, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000001400), 0x2, 0x800) 4m27.564965157s ago: executing program 2 (id=197): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x6}}}}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x54}}, 0x0) setresgid(0xee00, 0xee01, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setgroups(0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r8, &(0x7f0000000280)='./file0\x00', 0x200) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 4m27.400887237s ago: executing program 32 (id=197): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x2, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x6}}}}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x54}}, 0x0) setresgid(0xee00, 0xee01, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setgroups(0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r8, &(0x7f0000000280)='./file0\x00', 0x200) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 2m19.358129536s ago: executing program 4 (id=620): unshare(0x68040200) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2m18.860931832s ago: executing program 4 (id=629): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 2m18.513384859s ago: executing program 4 (id=630): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8000, @local, 0x8}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) 2m17.620338462s ago: executing program 4 (id=642): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) 2m17.307958756s ago: executing program 4 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x600d0}, 0x0) 2m17.191875509s ago: executing program 4 (id=646): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xffffff77, 0x6, '9P2000'}, 0x13) 2m2.016480004s ago: executing program 33 (id=646): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48850}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$P9_RVERSION(r2, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0xffffff77, 0x6, '9P2000'}, 0x13) 30.561790815s ago: executing program 1 (id=1027): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 27.513189503s ago: executing program 5 (id=1043): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f0404011104"], 0x7) 27.496154276s ago: executing program 5 (id=1044): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) writev(r0, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1) 27.385709471s ago: executing program 5 (id=1047): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 27.293782212s ago: executing program 5 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 27.292882789s ago: executing program 6 (id=1052): socket$kcm(0xf, 0x3, 0x2) memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) read(r3, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003ec0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x48, &(0x7f0000000000), 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000140), 0x4) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003d40)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x7, @remote, 0x9}, 0x1c, &(0x7f0000002740)=[{&(0x7f00000003c0)="8e8cb2100d32c3c458992f89c6a20d4b115e33adb8330e70d83acac23d2e136047e3b58e3b4213a575fc090890810d863cc0b66ee4314a889d255f8bad33e04c9fc7b8cdb10f625ff75c2238407afcf95a65dc0f1832efa7cf5c11792dd4405d93160482a4ffc35c9bd09c305db0f859d233b7ef80abbf88c1fe090ed9a85011bcbbdd8c6d0a377cb032cd403df97ac161a6c3ab03d0304f3291a46b309e82c9eb217c49c0c18866b37753d255bc032294ef2c66bb23c2007796be3b04347f9947bcf2d330322f92798895feb90683036d1416e4b57ddee10b9a11b384ddca2f4707f41311dbd9", 0xe7}, {&(0x7f00000004c0)="1bcf06ffdc6b4e73a6fde67cc475c69192c0014ef6b1a9614751ae13081ceb8528907e6b58e09e6d1bea820cee899d5d5f1d2c057f647ce9b87c04c1c7622c8c3e06b8f0febc7fd72fb9dbd4e30458f287c1a51eb50f4c680af31ed5beb3d9dc", 0x60}, {0x0}, {&(0x7f0000000540)="a933e07e9e84cbf86661c04d60674ade234760208888978bd1d7b98c24fa071e5de5cab6", 0x24}, {&(0x7f0000000580)="e599a3a1dbcdbb5da576c4fd676e57bcf3bfb4ad51280f316b1641f4bd79deb895037dafc373be5f789cb2fca5c031c18b39e5f073b8fc51d22cba2268b46123d8bc9332c8a784e1aec9b6fc70a27810091b16f59a5ffcc027c5d5111b41c2f7c787151ec292fd6489d9b734c97917299a82ea26f6d128467126a4e2cdce837a64c2a372b6b990d640a5aa9e235e915b61ca0190aeff08e57037bab37a64698d6a0781d1920f31682b82a6430a276df5fe", 0xb1}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="3c6913b38a67eba9a779d8329ad3f917ef3727eb3d9c45a8a710a44ae37eec0465936244ad3de2844d53f617fc209cf7ce4165ccec67160cfd25fad715917146e05d0019", 0x44}], 0x7}}, {{&(0x7f00000027c0)={0xa, 0x4e24, 0x6c2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}, 0x1c, 0x0, 0x0, &(0x7f0000003fc0)=ANY=[@ANYBLOB="2800000000000000290000003600000087010000000000007804cdf54a67c2040000000400000000200000000000000029000000040000000000000000000000000100050200080024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=r5, @ANYBLOB="000000001400000000000000290000000b000000000000020000000058000000000000002900000039000000000800f500000000fc01000000000000000000000000000000000000000000000000000000000001fc0000000000000000000000000000012001000000000000000000000000000028"], 0x148}}], 0x2, 0x4001c00) 26.72484136s ago: executing program 1 (id=1055): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup3(r0, r0, 0x80000) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f00000004c0)={0x3, 0x2, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611200"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) 26.25613947s ago: executing program 6 (id=1058): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) writev(r0, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1) 26.199539259s ago: executing program 6 (id=1059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 24.847811399s ago: executing program 1 (id=1064): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206c1801d82b68d04f3048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1bfd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9daebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0x9c}, {&(0x7f0000002880)="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", 0x11a}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff160f374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030d070047bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2", 0x9d}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a5", 0x3b}, {&(0x7f0000000180)="df2966f83be61be11a9831c2e62c48d200e5ef6d8633d6649f81483cbc10718f59d4d3dc25fb782b4fdc860f55724dd87c32431d89b0308d4b485cd6e33677f9a435b540f044c23f51305edb2a14923925ef64a400ea0d6ea8c9a927449c6b8a8785fd6c9624e876a2572a2b668b940f38c4eaad93ee27d3812039fcf848aa49525c57d6a5", 0x85}], 0x5}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb332e33b6e0df4f0158b26c4e40129ee086a975e31fe6f3efdcb3cbe854b9744e05c052b222753064cb6d4cb4389c5922e40976a5546e8474066070f075c1634163d7952a8efea44b3e3a593fd00e59ae93a5ff42896ed56473baf984a067b1b8773017042c903de1c421991e68995f58d3465ec4e7d734b375c04d5ba90d06cf30a05e802b63ce2ff861f27d6ded13918f0c33169c6bca92fa8b8cccc944946434358e5a0193a91a73794fc724911f4b5", 0xdb}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35", 0x49}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 24.790909438s ago: executing program 6 (id=1065): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1900}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x8000) 24.677059467s ago: executing program 1 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x10\x00'}]}, 0x1c}}, 0x0) 24.455678621s ago: executing program 1 (id=1071): unshare(0x2040400) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 24.270885468s ago: executing program 1 (id=1073): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 24.269035436s ago: executing program 6 (id=1074): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup3(r0, r0, 0x80000) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f00000004c0)={0x3, 0x2, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000611200"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) 23.429643032s ago: executing program 6 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2008c014) 23.372996627s ago: executing program 5 (id=1078): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.'], 0x6f) 23.371123629s ago: executing program 5 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000680)=""/207, &(0x7f0000000280)=0xcf) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2d4}}, 0x4048010) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) 8.977651998s ago: executing program 34 (id=1073): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 7.951895526s ago: executing program 35 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000680)=""/207, &(0x7f0000000280)=0xcf) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2d4}}, 0x4048010) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006) 7.915333744s ago: executing program 36 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2008c014) 5.872898069s ago: executing program 3 (id=1104): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r8, 0x0, <r9=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r7, 0x3b8c, &(0x7f0000000100)={0x30, r9, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000003, 0x88000) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc040564a, &(0x7f0000000340)={0x0, 0x1, 0x100c, 0xffffffffffffffff, 0x0, 0x0}) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r11, &(0x7f0000000600)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)}], 0x1}}], 0x2, 0x48094) 5.022037522s ago: executing program 3 (id=1105): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)={0x20, 0x9, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timerfd_create(0x8, 0x80000) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x22020400) r2 = fsmount(r1, 0x0, 0x3) r3 = openat(r2, &(0x7f0000000680)='./file0\x00', 0x105c80, 0x22) fchown(r3, 0x0, 0x0) inotify_init1(0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x140, 0x2a, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0x128, 0x1, 0x0, 0x1, [@nested={0x121, 0xde, 0x0, 0x1, [@generic="73ee77f0d238ca193b38ca9fb61bf462c99d3013eb1aae24d54da25652b5d9eb3bcb3571", @generic="74ffb07acc07ce9d46da81076dafb795bc56adcad69006f7e7fbe79a7d220fb7f3a139c913e130599d22e7a1e3e559d872c6aa31c7d73497242e7e9db7e23727e05aad83e9fa958f670ac1c70a4e2aee21b7634e672c308384ebc466cf1f4c0c8f1df75450943c166aebf2e8a3260700654545de822e41bca6e9ba4a0bafda69e19de9327ef50400d37a0e37a24e7e0aa6516b4b78653b60053a41b7e8220f0d61b7cc70cac9812ad9c4cd71e1c62519d8e4b389f3017817a425d643bc37b8f057aef0591cfc434a689c791943e5e0087d9c17c59939702d90fae5593a1e3c3ba8a45c17a51f14c58104e63559b70391d1ce93ab22", @nested={0x4, 0x51}]}]}]}, 0x140}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x1, 0x8, 0x4, 0x20810, 0xffffffffffffffff, 0xa2, '\x00', 0x0, r5, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$cont(0x18, r9, 0x9, 0x400010000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 4.798885918s ago: executing program 0 (id=1106): getpid() r0 = memfd_secret(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x10\x00'}]}, 0x1c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000001080)={0x1, 0x0, 0x20, 0x20, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 3.688924362s ago: executing program 0 (id=1107): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup3(r0, r0, 0x80000) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f00000004c0)={0x3, 0x2, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07002d0c"], 0xa) 3.57864531s ago: executing program 0 (id=1108): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.00'], 0x6f) 3.577695405s ago: executing program 0 (id=1109): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000300)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xfb?\xd1\x88\xa6-\xe5\xe5l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6)\xb8\xb4{r.\xd2\xea\x16\x82\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\xba\x89#=2G<r\xf8\xd56\xaf~Nh\x0e8\xe3\xde\xb9r\xd9\xe0rR\x17\xf6:\x964\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2?&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae^\xef\x06\x03W\xb5;\xa6\xb4\'\'\xc2C\x85\xe4\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd10\x06=\xe7R\x85\x02\xf3\x15\x99o@u\xfd\np)\xa9\xc4a\xa8\x9aE\x9ez0]\xc4\x04\xb0\xeaZ\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\xfa\x1b\x01\xc0\x8c', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f00000000c0)=0xfff) write$ppp(r6, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x44850}, 0xc0) fallocate(r4, 0x0, 0x0, 0x200401) fallocate(r4, 0x0, 0x0, 0x200401) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa7", 0xc}], 0x1}, 0x0) 3.176729051s ago: executing program 3 (id=1110): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.589033069s ago: executing program 3 (id=1111): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) bind$bt_l2cap(r1, 0x0, 0x0) 2.583711072s ago: executing program 3 (id=1112): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@local, @multicast1}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e002700100000000280000012", 0x2d}], 0x1}, 0x0) 451.118025ms ago: executing program 3 (id=1113): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 333.062858ms ago: executing program 0 (id=1114): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 0 (id=1115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) kernel console output (not intermixed with test programs): rface batadv_slave_0 (retrying later): interface not active [ 39.207780][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.209620][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.217061][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.248015][ T6450] hsr_slave_0: entered promiscuous mode [ 39.250023][ T6450] hsr_slave_1: entered promiscuous mode [ 39.252456][ T6450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.254412][ T6450] Cannot create hsr debugfs directory [ 39.330193][ T6443] hsr_slave_0: entered promiscuous mode [ 39.332844][ T6443] hsr_slave_1: entered promiscuous mode [ 39.334628][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.336602][ T6443] Cannot create hsr debugfs directory [ 39.339980][ T6451] hsr_slave_0: entered promiscuous mode [ 39.343294][ T6451] hsr_slave_1: entered promiscuous mode [ 39.344968][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.346903][ T6451] Cannot create hsr debugfs directory [ 39.457876][ T6446] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.464982][ T6446] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.481427][ T6446] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.499507][ T6446] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.562904][ T6454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.566761][ T6454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.580931][ T6454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.584577][ T6454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.600587][ T6450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.610382][ T6450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.625006][ T6450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.632863][ T6450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.670308][ T6443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.673967][ T6443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.679571][ T6443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.698803][ T6443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.722640][ T6451] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.726177][ T6451] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.730647][ T6451] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.734958][ T6451] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.750273][ T6446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.796817][ T6446] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.817113][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.819261][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.824351][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.826263][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.856835][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.881336][ T6454] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.887185][ T6450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.901792][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.919335][ T6443] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.928727][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.930569][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.934658][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.936649][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.960206][ T6450] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.970962][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.972838][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.977553][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.979399][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.990096][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.998624][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.011111][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.013144][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.016554][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.018396][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.021152][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.023113][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.026954][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.028889][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.091525][ T6450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.099072][ T6450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.183808][ T6449] Bluetooth: hci1: command tx timeout [ 40.185469][ T6449] Bluetooth: hci0: command tx timeout [ 40.186971][ T6449] Bluetooth: hci2: command tx timeout [ 40.214937][ T6454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.231291][ T6454] veth0_vlan: entered promiscuous mode [ 40.236899][ T6454] veth1_vlan: entered promiscuous mode [ 40.250816][ T6454] veth0_macvtap: entered promiscuous mode [ 40.252632][ T6449] Bluetooth: hci4: command tx timeout [ 40.256654][ T6454] veth1_macvtap: entered promiscuous mode [ 40.262147][ T6449] Bluetooth: hci3: command tx timeout [ 40.266813][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.272977][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.296554][ T6454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.299076][ T6454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.301441][ T6454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.306406][ T6454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.331249][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.344379][ T6443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.388845][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.408738][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.410862][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.433632][ T6446] veth0_vlan: entered promiscuous mode [ 40.446874][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.448901][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.456152][ T6446] veth1_vlan: entered promiscuous mode [ 40.469248][ T6450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.475715][ T6443] veth0_vlan: entered promiscuous mode [ 40.519751][ T6443] veth1_vlan: entered promiscuous mode [ 40.525282][ T6446] veth0_macvtap: entered promiscuous mode [ 40.528510][ T6446] veth1_macvtap: entered promiscuous mode [ 40.547561][ T6443] veth0_macvtap: entered promiscuous mode [ 40.551009][ T6443] veth1_macvtap: entered promiscuous mode [ 40.556810][ T6451] veth0_vlan: entered promiscuous mode [ 40.560938][ T6451] veth1_vlan: entered promiscuous mode [ 40.588409][ T6454] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.610299][ T6451] veth0_macvtap: entered promiscuous mode [ 40.619117][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.623279][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.626603][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.629678][ T6443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.646390][ T6443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.653665][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.655911][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.658895][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.661319][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.666575][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.670242][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.676679][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.679365][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.681787][ T6446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.687450][ T6446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.690654][ T6446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.697454][ T6446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.699642][ T6446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.701788][ T6446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.706553][ T6446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.746960][ T6451] veth1_macvtap: entered promiscuous mode [ 40.765867][ T6443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.769225][ T6443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.771347][ T6443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.776966][ T6443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.830300][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.834454][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.836890][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.840161][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.843196][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.846103][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.850739][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.859466][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.863107][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.865472][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.868244][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.870934][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.882739][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.917408][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.221620][ T6530] Zero length message leads to an empty skb [ 41.331177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.336973][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.550149][ T6450] veth0_vlan: entered promiscuous mode [ 41.568846][ T6451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.571189][ T6451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.578376][ T6451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.580669][ T6451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.600351][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.607023][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.665015][ T6450] veth1_vlan: entered promiscuous mode [ 41.676971][ T6450] veth0_macvtap: entered promiscuous mode [ 41.680117][ T6450] veth1_macvtap: entered promiscuous mode [ 41.688346][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.691670][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.694703][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.697518][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.699991][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.703084][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.705547][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.708127][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.711355][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.715082][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.717771][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.720199][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.723215][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.725723][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.728367][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.730928][ T6450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.735771][ T6450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.738913][ T6450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.795402][ T6450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.797730][ T6450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.799847][ T6450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.803404][ T6450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.820951][ T626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.823478][ T626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.836612][ T4422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.840568][ T4422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.292695][ T6449] Bluetooth: hci0: command tx timeout [ 42.294512][ T6452] Bluetooth: hci2: command tx timeout [ 42.296561][ T6449] Bluetooth: hci1: command tx timeout [ 42.332612][ T6449] Bluetooth: hci4: command tx timeout [ 42.335576][ T6444] Bluetooth: hci3: command tx timeout [ 42.558377][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.560333][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.582032][ T626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.584097][ T626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.589704][ T6538] loop3: detected capacity change from 0 to 2048 [ 42.634509][ T6538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.679067][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.681179][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.690111][ T6540] loop2: detected capacity change from 0 to 2048 [ 42.717111][ T6540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.764993][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.092880][ T6545] hub 2-0:1.0: USB hub found [ 43.096313][ T6545] hub 2-0:1.0: 8 ports detected [ 43.734742][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.745292][ T6444] Bluetooth: hci1: command tx timeout [ 44.746809][ T6444] Bluetooth: hci2: command tx timeout [ 44.748191][ T6444] Bluetooth: hci0: command tx timeout [ 44.749676][ T6444] Bluetooth: hci3: command tx timeout [ 44.750975][ T6444] Bluetooth: hci4: command tx timeout [ 45.340750][ T6560] loop1: detected capacity change from 0 to 512 [ 46.423153][ T6560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.147878][ T6444] Bluetooth: hci3: command tx timeout [ 47.148192][ T6452] Bluetooth: hci0: command tx timeout [ 47.150563][ T6444] Bluetooth: hci2: command tx timeout [ 47.150773][ T6452] Bluetooth: hci1: command tx timeout [ 47.152265][ T6449] Bluetooth: hci4: command tx timeout [ 47.259603][ T6574] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 47.283262][ T6574] loop0: detected capacity change from 0 to 4096 [ 47.882154][ T6574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.887980][ T6574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.900446][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.964030][ T6554] loop3: detected capacity change from 0 to 32768 [ 47.968206][ T6554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9 (6554) [ 48.841675][ T6554] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.861965][ T6554] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm [ 48.864201][ T6554] BTRFS info (device loop3): using free-space-tree [ 48.876325][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 48.877010][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 48.879560][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 48.888070][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 48.890782][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 48.897822][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 48.901075][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 48.904603][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 48.907760][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 48.911034][ T6554] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 48.944322][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 48.982394][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14'. [ 49.008315][ T6554] BTRFS error (device loop3): open_ctree failed: -12 [ 49.023207][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 49.025510][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14'. [ 49.047799][ T6601] netlink: 'syz.1.11': attribute type 2 has an invalid length. [ 49.861219][ T6610] loop4: detected capacity change from 0 to 2048 [ 49.882093][ T6607] loop1: detected capacity change from 0 to 512 [ 49.884450][ T6610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 49.892286][ T6607] EXT4-fs: inline encryption not supported [ 49.923253][ T6613] loop3: detected capacity change from 0 to 1024 [ 50.044796][ T6618] loop0: detected capacity change from 0 to 2048 [ 50.047078][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.077108][ T6618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 50.234847][ T6621] loop2: detected capacity change from 0 to 4096 [ 50.944759][ T6624] hub 2-0:1.0: USB hub found [ 50.946467][ T6624] hub 2-0:1.0: 8 ports detected [ 51.083056][ T6601] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.11: corrupted inode contents [ 51.098976][ T6601] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #2: comm syz.1.11: mark_inode_dirty error [ 51.357329][ T6621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.361792][ T6621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.385938][ T6601] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #2: comm syz.1.11: corrupted inode contents [ 51.389348][ T6601] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.11: mark_inode_dirty error [ 51.571436][ T2078] hfsplus: b-tree write err: -5, ino 4 [ 52.002084][ T6631] hub 2-0:1.0: USB hub found [ 52.008117][ T6631] hub 2-0:1.0: 8 ports detected [ 52.604194][ T6638] loop3: detected capacity change from 0 to 2048 [ 52.609184][ T6638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 52.615873][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.563644][ T6650] loop4: detected capacity change from 0 to 2048 [ 55.802285][ T6650] loop4: unable to read partition table [ 55.804159][ T6650] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 57.586059][ T6661] loop0: detected capacity change from 0 to 2048 [ 57.642373][ T6661] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.080919][ T6672] hub 2-0:1.0: USB hub found [ 59.082347][ T6672] hub 2-0:1.0: 8 ports detected [ 59.807072][ T6678] loop2: detected capacity change from 0 to 4096 [ 60.937734][ T6681] loop3: detected capacity change from 0 to 4096 [ 61.083081][ T6681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.103133][ T6678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.110136][ T6681] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.113363][ T6678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.546401][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.548219][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.730231][ T6709] loop2: detected capacity change from 0 to 2048 [ 64.758065][ T6713] loop0: detected capacity change from 0 to 2048 [ 64.762074][ T6709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.763781][ T6711] loop1: detected capacity change from 0 to 2048 [ 64.774273][ T6713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.947839][ T6715] loop4: detected capacity change from 0 to 2048 [ 64.966510][ T6711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.974421][ T6717] loop3: detected capacity change from 0 to 2048 [ 64.983072][ T6715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.857647][ T6723] hub 2-0:1.0: USB hub found [ 65.859447][ T6723] hub 2-0:1.0: 8 ports detected [ 65.978371][ T6717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.520102][ T6726] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 67.492759][ T6731] hub 2-0:1.0: USB hub found [ 67.612003][ T6731] hub 2-0:1.0: 8 ports detected [ 68.528462][ T6454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.614606][ T6735] loop2: detected capacity change from 0 to 2048 [ 68.651739][ T6735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.707021][ T6737] loop0: detected capacity change from 0 to 1024 [ 68.822044][ T6737] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 68.844102][ T6737] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 68.846240][ T6737] hfsplus: xattr search failed [ 68.857294][ T6741] loop1: detected capacity change from 0 to 2048 [ 69.032437][ T6743] hub 2-0:1.0: USB hub found [ 69.034226][ T6743] hub 2-0:1.0: 8 ports detected [ 69.589523][ T6741] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.609810][ T6745] loop3: detected capacity change from 0 to 256 [ 69.622881][ T1778] cfg80211: failed to load regulatory.db [ 69.736356][ T6747] loop2: detected capacity change from 0 to 2048 [ 69.776108][ T6747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.108645][ T6751] hub 2-0:1.0: USB hub found [ 70.111292][ T6751] hub 2-0:1.0: 8 ports detected [ 70.195158][ T6753] hub 2-0:1.0: USB hub found [ 70.196717][ T6753] hub 2-0:1.0: 8 ports detected [ 72.320694][ T6765] mmap: syz.1.48 (6765) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 72.703304][ T6767] loop1: detected capacity change from 0 to 32768 [ 72.705471][ T6767] ======================================================= [ 72.705471][ T6767] WARNING: The mand mount option has been deprecated and [ 72.705471][ T6767] and is ignored by this kernel. Remove the mand [ 72.705471][ T6767] option from the mount to silence this warning. [ 72.705471][ T6767] ======================================================= [ 72.714711][ T6767] ocfs2: Unknown parameter 'barrier500000000000000026115' [ 73.345221][ T6770] loop0: detected capacity change from 0 to 128 [ 73.347399][ T6770] hpfs: Bad value for 'uid' [ 73.348514][ T6770] hpfs: Bad value for 'uid' [ 74.332521][ T6778] loop2: detected capacity change from 0 to 256 [ 74.334739][ T6778] exfat: Unknown parameter 'uid�u�6KZ�' [ 74.463907][ T6770] loop0: detected capacity change from 0 to 32768 [ 74.532187][ T6770] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.51 (6770) [ 75.281601][ T6770] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 75.317387][ T6770] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 75.329598][ T6770] BTRFS info (device loop0): using free-space-tree [ 76.003072][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 76.003215][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 76.021021][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 76.032934][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 76.055264][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 76.072187][ T6770] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 76.112327][ T6770] BTRFS error (device loop0): open_ctree failed: -12 [ 79.091579][ T6850] loop3: detected capacity change from 0 to 4096 [ 79.975178][ T6850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.979604][ T6850] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.098908][ T6858] loop4: detected capacity change from 0 to 4096 [ 80.376224][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.380827][ T6858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.434546][ T6839] loop1: detected capacity change from 0 to 32768 [ 81.437434][ T6839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.61 (6839) [ 81.447362][ T6839] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.450170][ T6839] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 81.457696][ T6839] BTRFS info (device loop1): using free-space-tree [ 82.141515][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 82.141656][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 82.160656][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 82.229668][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 82.232625][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 82.235672][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 82.238316][ T6839] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 83.252094][ T6884] loop2: detected capacity change from 0 to 2048 [ 83.262872][ T6839] BTRFS error (device loop1): open_ctree failed: -12 [ 83.863858][ T6884] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.274260][ T6903] hub 2-0:1.0: USB hub found [ 84.276157][ T6903] hub 2-0:1.0: 8 ports detected [ 85.577272][ T6913] loop3: detected capacity change from 0 to 32768 [ 85.579468][ T6913] ocfs2: Unknown parameter 'barrier500000000000000026115' [ 86.578250][ T6929] loop1: detected capacity change from 0 to 2048 [ 86.605151][ T6929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.637464][ T6926] loop4: detected capacity change from 0 to 4096 [ 86.978194][ T6934] hub 2-0:1.0: USB hub found [ 86.980176][ T6934] hub 2-0:1.0: 8 ports detected [ 87.187095][ T6926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.534984][ T6926] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.646355][ T6931] loop3: detected capacity change from 0 to 4096 [ 87.686394][ T6910] loop0: detected capacity change from 0 to 32768 [ 87.697253][ T6910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.74 (6910) [ 87.711289][ T6931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.726982][ T6910] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.765839][ T6910] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 87.768204][ T6910] BTRFS info (device loop0): using free-space-tree [ 87.776508][ T6931] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.845352][ T6947] ax25_connect(): syz.1.81 uses autobind, please contact jreuter@yaina.de [ 89.335287][ T6443] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 90.342607][ T6966] loop0: detected capacity change from 0 to 2048 [ 90.370932][ T6966] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.774756][ T6978] hub 2-0:1.0: USB hub found [ 91.776426][ T6978] hub 2-0:1.0: 8 ports detected [ 93.011701][ T6986] loop2: detected capacity change from 0 to 2048 [ 93.077333][ T6986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.717561][ T6994] hub 2-0:1.0: USB hub found [ 93.719988][ T6994] hub 2-0:1.0: 8 ports detected [ 100.917048][ T7040] loop0: detected capacity change from 0 to 2048 [ 101.415245][ T7040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.971088][ T7038] loop4: detected capacity change from 0 to 2048 [ 102.006732][ T7038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.132654][ T7056] hub 2-0:1.0: USB hub found [ 103.134221][ T7056] hub 2-0:1.0: 8 ports detected [ 104.725856][ T7069] hub 2-0:1.0: USB hub found [ 104.727668][ T7069] hub 2-0:1.0: 8 ports detected [ 108.703613][ T7111] [U] � [ 108.704539][ T7111] [U] [ 108.705197][ T7111] [U] [ 108.705870][ T7111] [U] [ 108.706570][ T7111] [U] [ 108.707188][ T7111] [U] [ 108.707859][ T7111] [U] [ 108.708471][ T7111] [U] [ 108.737917][ T7111] [U] [ 108.738738][ T7111] [U] [ 108.739398][ T7111] [U] [ 108.740033][ T7111] [U] [ 108.740697][ T7111] [U] [ 108.741334][ T7111] [U] [ 108.741950][ T7111] [U] [ 108.742563][ T7111] [U] [ 108.750861][ T7111] [U] [ 108.751686][ T7111] [U] [ 108.752345][ T7111] [U] [ 108.753066][ T7111] [U] [ 108.753733][ T7111] [U] [ 108.754329][ T7111] [U] [ 108.754944][ T7111] [U] [ 108.755582][ T7111] [U] [ 108.772082][ T7111] [U] [ 108.772896][ T7111] [U] [ 108.773537][ T7111] [U] [ 108.774231][ T7111] [U] [ 108.774862][ T7111] [U] [ 108.775443][ T7111] [U] [ 108.776047][ T7111] [U] [ 108.776651][ T7111] [U] [ 108.792087][ T7111] [U] [ 108.792849][ T7111] [U] [ 108.793531][ T7111] [U] [ 108.794196][ T7111] [U] [ 108.794831][ T7111] [U] [ 108.795436][ T7111] [U] [ 108.796158][ T7111] [U] [ 108.796839][ T7111] [U] [ 108.809092][ T7111] [U] [ 108.809801][ T7111] [U] [ 108.810467][ T7111] [U] [ 108.811226][ T7111] [U] [ 108.811891][ T7111] [U] [ 108.812586][ T7111] [U] [ 108.813223][ T7111] [U] [ 108.813901][ T7111] [U] [ 108.820039][ T7111] [U] [ 108.820768][ T7111] [U] [ 108.821439][ T7111] [U] [ 108.822141][ T7111] [U] [ 108.822783][ T7111] [U] [ 108.823446][ T7111] [U] [ 108.824072][ T7111] [U] [ 108.824696][ T7111] [U] [ 108.972388][ T7111] [U] [ 108.973094][ T7111] [U] [ 108.973815][ T7111] [U] [ 108.974476][ T7111] [U] [ 108.975173][ T7111] [U] [ 108.975810][ T7111] [U] [ 108.976393][ T7111] [U] [ 108.977009][ T7111] [U] [ 108.977786][ T7111] [U] [ 108.978412][ T7111] [U] [ 108.979023][ T7111] [U] [ 108.979692][ T7111] [U] [ 108.980285][ T7111] [U] [ 108.980908][ T7111] [U] [ 108.981543][ T7111] [U] [ 108.982225][ T7111] [U] [ 108.984339][ T7111] [U] [ 108.985051][ T7111] [U] [ 108.985723][ T7111] [U] [ 108.986389][ T7111] [U] [ 108.987091][ T7111] [U] [ 108.987734][ T7111] [U] [ 108.988362][ T7111] [U] [ 108.988978][ T7111] [U] [ 108.989702][ T7111] [U] [ 108.990330][ T7111] [U] [ 108.990984][ T7111] [U] [ 108.991649][ T7111] [U] [ 108.992378][ T7111] [U] [ 108.993018][ T7111] [U] [ 108.993679][ T7111] [U] [ 108.994374][ T7111] [U] [ 108.997640][ T7111] [U] [ 108.998256][ T7111] [U] [ 108.998841][ T7111] [U] [ 108.999484][ T7111] [U] [ 109.000146][ T7111] [U] [ 109.000799][ T7111] [U] [ 109.001475][ T7111] [U] [ 109.002142][ T7111] [U] [ 109.003350][ T7111] [U] [ 109.004070][ T7111] [U] [ 109.004749][ T7111] [U] [ 109.005372][ T7111] [U] [ 109.006013][ T7111] [U] [ 109.006636][ T7111] [U] [ 109.007269][ T7111] [U] [ 109.007946][ T7111] [U] [ 109.009790][ T7111] [U] [ 109.010513][ T7111] [U] [ 109.011180][ T7111] [U] [ 109.011838][ T7111] [U] [ 109.012502][ T7111] [U] [ 109.013259][ T7111] [U] [ 109.013982][ T7111] [U] [ 109.014627][ T7111] [U] [ 109.017242][ T7111] [U] [ 109.017960][ T7111] [U] [ 109.018604][ T7111] [U] [ 109.019286][ T7111] [U] [ 109.019916][ T7111] [U] [ 109.020529][ T7111] [U] [ 109.021249][ T7111] [U] [ 109.022134][ T7111] [U] [ 109.193512][ T7111] [U] [ 109.194236][ T7111] [U] [ 109.194976][ T7111] [U] [ 109.195632][ T7111] [U] [ 109.196327][ T7111] [U] [ 109.196985][ T7111] [U] [ 109.197605][ T7111] [U] [ 109.312608][ T7110] [U] [ 109.906952][ T7125] loop4: detected capacity change from 0 to 512 [ 109.911070][ T7124] loop2: detected capacity change from 0 to 512 [ 109.916201][ T7124] EXT4-fs: Ignoring removed orlov option [ 109.918694][ T7125] EXT4-fs: Ignoring removed orlov option [ 109.936855][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.946648][ T7125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.643541][ T7125] FAULT_INJECTION: forcing a failure. [ 110.643541][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 110.646698][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.4.125 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 110.646714][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 110.646721][ T7125] Call trace: [ 110.646724][ T7125] show_stack+0x2c/0x3c (C) [ 110.646744][ T7125] dump_stack_lvl+0xe4/0x150 [ 110.646758][ T7125] dump_stack+0x1c/0x28 [ 110.646771][ T7125] should_fail_ex+0x418/0x590 [ 110.646782][ T7125] should_failslab+0xc8/0x130 [ 110.646793][ T7125] __kmalloc_noprof+0xf4/0x54c [ 110.646807][ T7125] tomoyo_realpath_from_path+0xc8/0x4cc [ 110.646822][ T7125] tomoyo_path_number_perm+0x1ec/0x5e4 [ 110.646834][ T7125] tomoyo_path_chown+0x68/0xf0 [ 110.646847][ T7125] security_path_chown+0x130/0x378 [ 110.646859][ T7125] chown_common+0x3f8/0x708 [ 110.646870][ T7125] ksys_fchown+0xe0/0x158 [ 110.646880][ T7125] __arm64_sys_fchown+0x7c/0x94 [ 110.646891][ T7125] invoke_syscall+0x98/0x2b8 [ 110.646905][ T7125] el0_svc_common+0x130/0x23c [ 110.646919][ T7125] do_el0_svc+0x48/0x58 [ 110.646932][ T7125] el0_svc+0x54/0x168 [ 110.646944][ T7125] el0t_64_sync_handler+0x84/0x108 [ 110.646955][ T7125] el0t_64_sync+0x198/0x19c [ 110.646970][ T7125] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.884741][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.890127][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.627433][ T7147] FAULT_INJECTION: forcing a failure. [ 111.627433][ T7147] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.653366][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.0.133 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 111.653386][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.653393][ T7147] Call trace: [ 111.653396][ T7147] show_stack+0x2c/0x3c (C) [ 111.653417][ T7147] dump_stack_lvl+0xe4/0x150 [ 111.653431][ T7147] dump_stack+0x1c/0x28 [ 111.653444][ T7147] should_fail_ex+0x418/0x590 [ 111.653455][ T7147] should_fail+0x14/0x24 [ 111.653464][ T7147] should_fail_usercopy+0x20/0x30 [ 111.653475][ T7147] _copy_from_iter+0x1a0/0x170c [ 111.653487][ T7147] netlink_sendmsg+0x5a8/0xa9c [ 111.653511][ T7147] ____sys_sendmsg+0x570/0x87c [ 111.653525][ T7147] __sys_sendmsg+0x238/0x304 [ 111.653537][ T7147] __arm64_sys_sendmsg+0x80/0x94 [ 111.653549][ T7147] invoke_syscall+0x98/0x2b8 [ 111.653562][ T7147] el0_svc_common+0x130/0x23c [ 111.653575][ T7147] do_el0_svc+0x48/0x58 [ 111.653591][ T7147] el0_svc+0x54/0x168 [ 111.653602][ T7147] el0t_64_sync_handler+0x84/0x108 [ 111.653613][ T7147] el0t_64_sync+0x198/0x19c [ 111.880672][ T7156] loop3: detected capacity change from 0 to 4096 [ 111.908235][ T7156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.913064][ T7156] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.158799][ T7143] loop1: detected capacity change from 0 to 32768 [ 112.285003][ T7143] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 113.146136][ T6434] libceph: connect (1)[c::]:6789 error -101 [ 113.147943][ T6434] libceph: mon0 (1)[c::]:6789 connect error [ 113.170327][ T6434] libceph: connect (1)[c::]:6789 error -101 [ 113.176482][ T6434] libceph: mon0 (1)[c::]:6789 connect error [ 113.297686][ T7143] ceph: No mds server is up or the cluster is laggy [ 113.336834][ T7176] loop2: detected capacity change from 0 to 2048 [ 113.387746][ T7176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.428696][ T6451] ocfs2: Unmounting device (7,1) on (node local) [ 113.628537][ T7163] loop4: detected capacity change from 0 to 32768 [ 113.824844][ T7178] hub 2-0:1.0: USB hub found [ 113.826611][ T7178] hub 2-0:1.0: 8 ports detected [ 114.446820][ T7163] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 114.458366][ T7163] bcachefs (loop4): initializing new filesystem [ 114.465883][ T7163] bcachefs (loop4): going read-write [ 114.522281][ T7163] bcachefs (loop4): marking superblocks [ 114.543099][ T7193] netlink: 'syz.1.142': attribute type 2 has an invalid length. [ 114.572925][ T7163] bcachefs (loop4): initializing freespace [ 114.576923][ T7163] bcachefs (loop4): done initializing freespace [ 114.587531][ T7163] bcachefs (loop4): reading snapshots table [ 114.591757][ T7163] bcachefs (loop4): reading snapshots done [ 114.651198][ T7163] bcachefs (loop4): done starting filesystem [ 114.707393][ T7163] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 114.747470][ T7163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.843628][ T6450] bcachefs (loop4): shutting down [ 114.845021][ T6450] bcachefs (loop4): going read-only [ 114.846507][ T6450] bcachefs (loop4): finished waiting for writes to stop [ 114.902560][ T6450] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 114.967483][ T7189] loop2: detected capacity change from 0 to 32768 [ 114.971659][ T7189] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.141 (7189) [ 115.072169][ T7189] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.074907][ T7189] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 115.098777][ T6450] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 115.467915][ T6450] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 115.615544][ T6450] bcachefs (loop4): marking filesystem clean [ 115.741693][ T7189] BTRFS info (device loop2): rebuilding free space tree [ 115.849511][ T6450] bcachefs (loop4): shutdown complete [ 115.862540][ T7189] BTRFS info (device loop2): disabling free space tree [ 115.864335][ T7189] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.866714][ T7189] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.045108][ T7201] loop0: detected capacity change from 0 to 32768 [ 116.154790][ T7201] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 116.347037][ T6494] libceph: connect (1)[c::]:6789 error -101 [ 116.348818][ T6494] libceph: mon0 (1)[c::]:6789 connect error [ 116.355027][ T6494] libceph: connect (1)[c::]:6789 error -101 [ 116.356656][ T6494] libceph: mon0 (1)[c::]:6789 connect error [ 116.357419][ T6446] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.790966][ T7200] ceph: No mds server is up or the cluster is laggy [ 116.993916][ T27] libceph: connect (1)[c::]:6789 error -101 [ 116.995520][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 117.127582][ T7239] FAULT_INJECTION: forcing a failure. [ 117.127582][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.130787][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.2.149 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 117.130803][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 117.130810][ T7239] Call trace: [ 117.130813][ T7239] show_stack+0x2c/0x3c (C) [ 117.130833][ T7239] dump_stack_lvl+0xe4/0x150 [ 117.130848][ T7239] dump_stack+0x1c/0x28 [ 117.130860][ T7239] should_fail_ex+0x418/0x590 [ 117.130872][ T7239] should_fail+0x14/0x24 [ 117.130881][ T7239] should_fail_usercopy+0x20/0x30 [ 117.130891][ T7239] _copy_from_iter+0x1a0/0x170c [ 117.130903][ T7239] netlink_sendmsg+0x5a8/0xa9c [ 117.130917][ T7239] ____sys_sendmsg+0x570/0x87c [ 117.130930][ T7239] __sys_sendmsg+0x238/0x304 [ 117.130942][ T7239] __arm64_sys_sendmsg+0x80/0x94 [ 117.130954][ T7239] invoke_syscall+0x98/0x2b8 [ 117.130967][ T7239] el0_svc_common+0x130/0x23c [ 117.130980][ T7239] do_el0_svc+0x48/0x58 [ 117.130992][ T7239] el0_svc+0x54/0x168 [ 117.131003][ T7239] el0t_64_sync_handler+0x84/0x108 [ 117.131013][ T7239] el0t_64_sync+0x198/0x19c [ 117.239744][ T7242] loop3: detected capacity change from 0 to 2048 [ 117.245093][ T6443] ocfs2: Unmounting device (7,0) on (node local) [ 118.524330][ T7242] loop3: unable to read partition table [ 118.525879][ T7242] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 118.557489][ T6060] Alternate GPT is invalid, using primary GPT. [ 118.559186][ T6060] loop3: p2 p3 p7 [ 118.649450][ T7254] loop0: detected capacity change from 0 to 256 [ 118.651490][ T7254] exfat: Unknown parameter 'uid�u�6KZ�' [ 120.739206][ T7283] loop2: detected capacity change from 0 to 512 [ 120.774092][ T7283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.842463][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.907310][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 120.990576][ T7279] loop3: detected capacity change from 0 to 32768 [ 121.023037][ T7279] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 121.160205][ T6434] libceph: connect (1)[c::]:6789 error -101 [ 121.174983][ T6434] libceph: mon0 (1)[c::]:6789 connect error [ 121.417379][ T7301] FAULT_INJECTION: forcing a failure. [ 121.417379][ T7301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.420739][ T7301] CPU: 1 UID: 0 PID: 7301 Comm: syz.4.144 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 121.420756][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 121.420763][ T7301] Call trace: [ 121.420766][ T7301] show_stack+0x2c/0x3c (C) [ 121.420786][ T7301] dump_stack_lvl+0xe4/0x150 [ 121.420801][ T7301] dump_stack+0x1c/0x28 [ 121.420814][ T7301] should_fail_ex+0x418/0x590 [ 121.420825][ T7301] should_fail+0x14/0x24 [ 121.420834][ T7301] should_fail_usercopy+0x20/0x30 [ 121.420845][ T7301] lo_ioctl+0x488/0x24f0 [ 121.420857][ T7301] blkdev_ioctl+0x3a8/0xac4 [ 121.420872][ T7301] __arm64_sys_ioctl+0x14c/0x1cc [ 121.420884][ T7301] invoke_syscall+0x98/0x2b8 [ 121.420897][ T7301] el0_svc_common+0x130/0x23c [ 121.420909][ T7301] do_el0_svc+0x48/0x58 [ 121.420921][ T7301] el0_svc+0x54/0x168 [ 121.420932][ T7301] el0t_64_sync_handler+0x84/0x108 [ 121.420943][ T7301] el0t_64_sync+0x198/0x19c [ 121.443166][ T7279] ceph: No mds server is up or the cluster is laggy [ 121.455356][ T6434] libceph: connect (1)[c::]:6789 error -101 [ 121.462027][ T6434] libceph: mon0 (1)[c::]:6789 connect error [ 121.551523][ T6454] ocfs2: Unmounting device (7,3) on (node local) [ 121.658240][ T7306] FAULT_INJECTION: forcing a failure. [ 121.658240][ T7306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.661790][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.3.171 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 121.661806][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 121.661817][ T7306] Call trace: [ 121.661821][ T7306] show_stack+0x2c/0x3c (C) [ 121.661842][ T7306] dump_stack_lvl+0xe4/0x150 [ 121.661857][ T7306] dump_stack+0x1c/0x28 [ 121.661871][ T7306] should_fail_ex+0x418/0x590 [ 121.661883][ T7306] should_fail+0x14/0x24 [ 121.661893][ T7306] should_fail_usercopy+0x20/0x30 [ 121.661905][ T7306] _copy_from_iter+0x1a0/0x170c [ 121.661917][ T7306] netlink_sendmsg+0x5a8/0xa9c [ 121.661936][ T7306] ____sys_sendmsg+0x570/0x87c [ 121.661949][ T7306] __sys_sendmsg+0x238/0x304 [ 121.661961][ T7306] __arm64_sys_sendmsg+0x80/0x94 [ 121.661973][ T7306] invoke_syscall+0x98/0x2b8 [ 121.661986][ T7306] el0_svc_common+0x130/0x23c [ 121.662000][ T7306] do_el0_svc+0x48/0x58 [ 121.662013][ T7306] el0_svc+0x54/0x168 [ 121.662024][ T7306] el0t_64_sync_handler+0x84/0x108 [ 121.662035][ T7306] el0t_64_sync+0x198/0x19c [ 123.501371][ T7324] loop1: detected capacity change from 0 to 512 [ 123.669168][ T7324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.715922][ T7329] loop4: detected capacity change from 0 to 1024 [ 123.718066][ T7329] EXT4-fs: Ignoring removed oldalloc option [ 123.719609][ T7329] EXT4-fs: Ignoring removed i_version option [ 123.721105][ T7329] EXT4-fs: Ignoring removed orlov option [ 123.735053][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.759685][ T7329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.767617][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.770152][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.782171][ T53] Bluetooth: hci3: unknown advertising packet type: 0x07 [ 123.782211][ T53] Bluetooth: hci3: unknown advertising packet type: 0x08 [ 123.784196][ T53] Bluetooth: hci3: unknown advertising packet type: 0xff [ 123.786953][ T53] Bluetooth: hci3: unknown advertising packet type: 0x39 [ 123.876481][ T7338] FAULT_INJECTION: forcing a failure. [ 123.876481][ T7338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.897276][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.1.180 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 123.897297][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 123.897317][ T7338] Call trace: [ 123.897321][ T7338] show_stack+0x2c/0x3c (C) [ 123.897341][ T7338] dump_stack_lvl+0xe4/0x150 [ 123.897356][ T7338] dump_stack+0x1c/0x28 [ 123.897369][ T7338] should_fail_ex+0x418/0x590 [ 123.897380][ T7338] should_fail+0x14/0x24 [ 123.897390][ T7338] should_fail_usercopy+0x20/0x30 [ 123.897401][ T7338] _copy_from_iter+0x1a0/0x170c [ 123.897413][ T7338] netlink_sendmsg+0x5a8/0xa9c [ 123.897427][ T7338] ____sys_sendmsg+0x570/0x87c [ 123.897440][ T7338] __sys_sendmsg+0x238/0x304 [ 123.897453][ T7338] __arm64_sys_sendmsg+0x80/0x94 [ 123.897465][ T7338] invoke_syscall+0x98/0x2b8 [ 123.897478][ T7338] el0_svc_common+0x130/0x23c [ 123.897490][ T7338] do_el0_svc+0x48/0x58 [ 123.897513][ T7338] el0_svc+0x54/0x168 [ 123.897523][ T7338] el0t_64_sync_handler+0x84/0x108 [ 123.897534][ T7338] el0t_64_sync+0x198/0x19c [ 124.044876][ T7342] block nbd1: shutting down sockets [ 124.754230][ T7351] loop3: detected capacity change from 0 to 4096 [ 124.982479][ T7351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.033168][ T7351] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.040197][ T7355] loop2: detected capacity change from 0 to 512 [ 125.064397][ T7355] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.071911][ T7355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 125.081540][ T7355] System zones: 0-1, 15-15, 18-18, 34-34 [ 125.085625][ T7355] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.089331][ T7355] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 125.109067][ T7355] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 125.123666][ T7355] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 125.133852][ T7355] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.184: bad orphan inode 16 [ 125.150307][ T7355] EXT4-fs (loop2): Remounting filesystem read-only [ 125.156552][ T7355] ext4_test_bit(bit=15, block=18) = 1 [ 125.158653][ T7355] is_bad_inode(inode)=0 [ 125.162225][ T7355] NEXT_ORPHAN(inode)=0 [ 125.165824][ T7355] max_ino=32 [ 125.167682][ T7355] i_nlink=2 [ 125.170891][ T7355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.976406][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.978974][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.406721][ T7369] syz.1.187 uses obsolete (PF_INET,SOCK_PACKET) [ 126.571326][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.575355][ T7378] loop1: detected capacity change from 0 to 512 [ 126.627308][ T7378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.637485][ T7382] loop4: detected capacity change from 0 to 16 [ 126.660731][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.191'. [ 126.682528][ T7384] loop3: detected capacity change from 0 to 8 [ 126.696812][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.723017][ T7384] netlink: 56 bytes leftover after parsing attributes in process `syz.3.192'. [ 126.891981][ T7384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'. [ 126.894743][ T7389] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'. [ 127.695704][ T6446] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.790086][ T7388] loop4: detected capacity change from 0 to 32768 [ 127.792565][ T30] audit: type=1326 audit(127.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7396 comm="syz.1.196" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8555ad28 code=0x0 [ 127.806944][ T7388] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.194 (7388) [ 127.831722][ T7388] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.882054][ T7388] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 127.904028][ T7388] BTRFS info (device loop4): using free-space-tree [ 128.110122][ T7399] loop1: detected capacity change from 0 to 32768 [ 128.112455][ T7399] XFS: noikeep mount option is deprecated. [ 128.172389][ T691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.230474][ T6449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.234744][ T6449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.237939][ T6449] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.239189][ T7399] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.241019][ T6449] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.256239][ T6449] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 128.258372][ T6449] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.858793][ T691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.940059][ T7399] XFS (loop1): Ending clean mount [ 128.980918][ T6450] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.996901][ T7399] XFS (loop1): Quotacheck needed: Please wait. [ 129.046150][ T7399] XFS (loop1): Quotacheck: Done. [ 129.055928][ T691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.170146][ T7446] ip6t_srh: unknown srh invflags 7D00 [ 129.180705][ T7447] FAULT_INJECTION: forcing a failure. [ 129.180705][ T7447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.200326][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.0.204 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 129.200346][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 129.200353][ T7447] Call trace: [ 129.200356][ T7447] show_stack+0x2c/0x3c (C) [ 129.200377][ T7447] dump_stack_lvl+0xe4/0x150 [ 129.200391][ T7447] dump_stack+0x1c/0x28 [ 129.200404][ T7447] should_fail_ex+0x418/0x590 [ 129.200415][ T7447] should_fail+0x14/0x24 [ 129.200425][ T7447] should_fail_usercopy+0x20/0x30 [ 129.200435][ T7447] ____sys_sendmsg+0x260/0x87c [ 129.200449][ T7447] __sys_sendmmsg+0x2fc/0x76c [ 129.200460][ T7447] __arm64_sys_sendmmsg+0xa0/0xbc [ 129.200473][ T7447] invoke_syscall+0x98/0x2b8 [ 129.200486][ T7447] el0_svc_common+0x130/0x23c [ 129.200509][ T7447] do_el0_svc+0x48/0x58 [ 129.200522][ T7447] el0_svc+0x54/0x168 [ 129.200533][ T7447] el0t_64_sync_handler+0x84/0x108 [ 129.200543][ T7447] el0t_64_sync+0x198/0x19c [ 129.246237][ T691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.329617][ T6451] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.426237][ T7459] loop4: detected capacity change from 0 to 512 [ 129.510291][ T7424] chnl_net:caif_netlink_parms(): no params data found [ 129.516876][ T7459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.682057][ T6449] Bluetooth: hci1: command tx timeout [ 130.827892][ T7473] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.209: corrupted inode contents [ 130.978480][ T7473] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.209: mark_inode_dirty error [ 130.987267][ T7473] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.209: corrupted inode contents [ 131.010422][ T7473] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.209: mark_inode_dirty error [ 131.575916][ T7451] loop0: detected capacity change from 0 to 32768 [ 131.615234][ T7451] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.206 (7451) [ 131.748508][ T7451] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.751225][ T7451] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 131.767954][ T6450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.781474][ T7451] BTRFS info (device loop0): using free-space-tree [ 131.788226][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.790124][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.815781][ T7424] bridge_slave_0: entered allmulticast mode [ 131.822768][ T7424] bridge_slave_0: entered promiscuous mode [ 131.834426][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.836308][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.838212][ T7424] bridge_slave_1: entered allmulticast mode [ 131.840305][ T7424] bridge_slave_1: entered promiscuous mode [ 131.913633][ T691] bridge_slave_1: left allmulticast mode [ 131.915427][ T691] bridge_slave_1: left promiscuous mode [ 131.932226][ T691] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.956103][ T30] audit: type=1326 audit(131.940:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7504 comm="syz.4.212" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5ad28 code=0x0 [ 131.974851][ T7486] loop1: detected capacity change from 0 to 2048 [ 131.986630][ T691] bridge_slave_0: left allmulticast mode [ 131.988042][ T691] bridge_slave_0: left promiscuous mode [ 131.989518][ T691] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.752347][ T6449] Bluetooth: hci1: command tx timeout [ 132.936332][ T6443] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.247053][ T7507] loop3: detected capacity change from 0 to 32768 [ 133.249266][ T7507] ocfs2: Bad value for 'resv_level' [ 133.339369][ T7486] loop1: detected capacity change from 0 to 32768 [ 133.411184][ T7486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.531036][ T7519] loop4: detected capacity change from 0 to 32768 [ 133.561615][ T7536] FAULT_INJECTION: forcing a failure. [ 133.561615][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 133.575264][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.3.217 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 133.575283][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.575290][ T7536] Call trace: [ 133.575294][ T7536] show_stack+0x2c/0x3c (C) [ 133.575314][ T7536] dump_stack_lvl+0xe4/0x150 [ 133.575329][ T7536] dump_stack+0x1c/0x28 [ 133.575341][ T7536] should_fail_ex+0x418/0x590 [ 133.575352][ T7536] should_failslab+0xc8/0x130 [ 133.575363][ T7536] __kmalloc_noprof+0xf4/0x54c [ 133.575377][ T7536] io_cache_alloc_new+0x58/0x114 [ 133.575389][ T7536] io_prep_rw+0x490/0xcb0 [ 133.575402][ T7536] io_prep_rwv+0xc4/0x578 [ 133.575413][ T7536] io_prep_readv+0x2c/0x3c [ 133.575425][ T7536] io_submit_sqes+0x710/0x199c [ 133.575435][ T7536] __arm64_sys_io_uring_enter+0x2f0/0x14b0 [ 133.575446][ T7536] invoke_syscall+0x98/0x2b8 [ 133.575459][ T7536] el0_svc_common+0x1e0/0x23c [ 133.575472][ T7536] do_el0_svc+0x48/0x58 [ 133.575484][ T7536] el0_svc+0x54/0x168 [ 133.575505][ T7536] el0t_64_sync_handler+0x84/0x108 [ 133.575516][ T7536] el0t_64_sync+0x198/0x19c [ 133.721556][ T7543] loop0: detected capacity change from 0 to 512 [ 133.759197][ T7543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.791719][ T7543] FAULT_INJECTION: forcing a failure. [ 133.791719][ T7543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.798752][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: syz.0.220 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 133.798772][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.798779][ T7543] Call trace: [ 133.798783][ T7543] show_stack+0x2c/0x3c (C) [ 133.798803][ T7543] dump_stack_lvl+0xe4/0x150 [ 133.798818][ T7543] dump_stack+0x1c/0x28 [ 133.798831][ T7543] should_fail_ex+0x418/0x590 [ 133.798842][ T7543] should_fail+0x14/0x24 [ 133.798851][ T7543] should_fail_usercopy+0x20/0x30 [ 133.798862][ T7543] simple_read_from_buffer+0xd4/0x248 [ 133.798876][ T7543] proc_fail_nth_read+0x134/0x1a0 [ 133.798888][ T7543] vfs_read+0x22c/0x974 [ 133.798901][ T7543] ksys_read+0x15c/0x26c [ 133.798912][ T7543] __arm64_sys_read+0x7c/0x90 [ 133.798923][ T7543] invoke_syscall+0x98/0x2b8 [ 133.798936][ T7543] el0_svc_common+0x130/0x23c [ 133.798949][ T7543] do_el0_svc+0x48/0x58 [ 133.798961][ T7543] el0_svc+0x54/0x168 [ 133.798972][ T7543] el0t_64_sync_handler+0x84/0x108 [ 133.798982][ T7543] el0t_64_sync+0x198/0x19c [ 133.856478][ T6443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.709431][ T7486] overlayfs: failed to resolve './file2': -2 [ 134.811950][ T6449] Bluetooth: hci1: command tx timeout [ 134.828786][ T6451] ocfs2: Unmounting device (7,1) on (node local) [ 135.529400][ T7561] FAULT_INJECTION: forcing a failure. [ 135.529400][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.538395][ T7561] CPU: 1 UID: 0 PID: 7561 Comm: syz.0.224 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 135.538424][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 135.538432][ T7561] Call trace: [ 135.538435][ T7561] show_stack+0x2c/0x3c (C) [ 135.538456][ T7561] dump_stack_lvl+0xe4/0x150 [ 135.538471][ T7561] dump_stack+0x1c/0x28 [ 135.538508][ T7561] should_fail_ex+0x418/0x590 [ 135.538521][ T7561] should_fail+0x14/0x24 [ 135.538530][ T7561] should_fail_usercopy+0x20/0x30 [ 135.538541][ T7561] memdup_user+0x8c/0x258 [ 135.538553][ T7561] strndup_user+0x78/0xe0 [ 135.538564][ T7561] __arm64_sys_fsconfig+0x630/0xc88 [ 135.538576][ T7561] invoke_syscall+0x98/0x2b8 [ 135.538589][ T7561] el0_svc_common+0x130/0x23c [ 135.538601][ T7561] do_el0_svc+0x48/0x58 [ 135.538614][ T7561] el0_svc+0x54/0x168 [ 135.538625][ T7561] el0t_64_sync_handler+0x84/0x108 [ 135.538638][ T7561] el0t_64_sync+0x198/0x19c [ 135.646645][ T7566] loop0: detected capacity change from 0 to 2048 [ 135.651432][ T7566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.026899][ T7568] hub 2-0:1.0: USB hub found [ 136.028647][ T7568] hub 2-0:1.0: 8 ports detected [ 136.632745][ T7570] loop0: detected capacity change from 0 to 2048 [ 136.640166][ T7570] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.893082][ T6449] Bluetooth: hci1: command tx timeout [ 137.321519][ T691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.507528][ T691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.590420][ T691] bond0 (unregistering): Released all slaves [ 137.638491][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.640895][ T7519] bond0: Unable to set down delay as MII monitoring is disabled [ 137.709180][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.865904][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 138.053381][ T7424] team0: Port device team_slave_0 added [ 138.945902][ T7424] team0: Port device team_slave_1 added [ 139.074679][ T7606] netlink: 80 bytes leftover after parsing attributes in process `syz.4.229'. [ 139.083402][ T7591] loop3: detected capacity change from 0 to 32768 [ 139.087693][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.097081][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.106122][ T7591] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.232 (7591) [ 139.115374][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.124923][ T7598] loop0: detected capacity change from 0 to 32768 [ 139.127284][ T7591] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 139.129814][ T7591] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 139.132593][ T7591] BTRFS info (device loop3): disk space caching is enabled [ 139.135431][ T7591] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 139.159820][ T7607] loop1: detected capacity change from 0 to 32768 [ 139.175813][ T7607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.234 (7607) [ 139.206573][ T7607] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.211135][ T7607] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 139.218360][ T7607] BTRFS info (device loop1): using free-space-tree [ 139.275093][ T7591] BTRFS info (device loop3): rebuilding free space tree [ 139.354061][ T7645] FAULT_INJECTION: forcing a failure. [ 139.354061][ T7645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.357363][ T7645] CPU: 1 UID: 0 PID: 7645 Comm: syz.0.235 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 139.357379][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 139.357397][ T7645] Call trace: [ 139.357401][ T7645] show_stack+0x2c/0x3c (C) [ 139.357421][ T7645] dump_stack_lvl+0xe4/0x150 [ 139.357435][ T7645] dump_stack+0x1c/0x28 [ 139.357448][ T7645] should_fail_ex+0x418/0x590 [ 139.357460][ T7645] should_fail+0x14/0x24 [ 139.357469][ T7645] should_fail_usercopy+0x20/0x30 [ 139.357480][ T7645] _copy_from_iter+0x1a0/0x170c [ 139.357492][ T7645] netlink_sendmsg+0x5a8/0xa9c [ 139.357515][ T7645] ____sys_sendmsg+0x570/0x87c [ 139.357529][ T7645] __sys_sendmsg+0x238/0x304 [ 139.357541][ T7645] __arm64_sys_sendmsg+0x80/0x94 [ 139.357553][ T7645] invoke_syscall+0x98/0x2b8 [ 139.357566][ T7645] el0_svc_common+0x130/0x23c [ 139.357578][ T7645] do_el0_svc+0x48/0x58 [ 139.357591][ T7645] el0_svc+0x54/0x168 [ 139.357601][ T7645] el0t_64_sync_handler+0x84/0x108 [ 139.357612][ T7645] el0t_64_sync+0x198/0x19c [ 139.388303][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.421998][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.433776][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.433829][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.477760][ T7591] BTRFS info (device loop3): disabling free space tree [ 139.479530][ T7591] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 139.489881][ T7591] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 139.490836][ T7424] hsr_slave_0: entered promiscuous mode [ 139.503419][ T7424] hsr_slave_1: entered promiscuous mode [ 139.505435][ T7424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.508342][ T7424] Cannot create hsr debugfs directory [ 140.865234][ T6451] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.905598][ T7591] BTRFS info (device loop3): balance: start -susage=1,drange=8796093022215..8,vrange=18446744073709551614..33554432,limit=10376293541461622786,limit=2..2415919104 [ 140.982539][ T7591] BTRFS info (device loop3): balance: ended with status: 0 [ 141.052282][ T691] hsr_slave_0: left promiscuous mode [ 141.078299][ T6454] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 141.143614][ T691] hsr_slave_1: left promiscuous mode [ 141.145463][ T691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.147321][ T691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.152772][ T691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.154658][ T691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.176708][ T691] veth1_macvtap: left promiscuous mode [ 141.179426][ T691] veth0_macvtap: left promiscuous mode [ 142.136726][ T691] veth1_vlan: left promiscuous mode [ 142.138415][ T691] veth0_vlan: left promiscuous mode [ 143.188633][ T7679] loop1: detected capacity change from 0 to 4096 [ 143.220135][ T7679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.850308][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.888414][ T7686] loop1: detected capacity change from 0 to 128 [ 144.876458][ T691] team0 (unregistering): Port device team_slave_1 removed [ 145.109990][ T691] team0 (unregistering): Port device team_slave_0 removed [ 148.175537][ T7711] FAULT_INJECTION: forcing a failure. [ 148.175537][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 148.178676][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.1.249 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 148.178692][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.178700][ T7711] Call trace: [ 148.178703][ T7711] show_stack+0x2c/0x3c (C) [ 148.178723][ T7711] dump_stack_lvl+0xe4/0x150 [ 148.178737][ T7711] dump_stack+0x1c/0x28 [ 148.178750][ T7711] should_fail_ex+0x418/0x590 [ 148.178761][ T7711] should_failslab+0xc8/0x130 [ 148.178772][ T7711] kmem_cache_alloc_noprof+0x84/0x410 [ 148.178786][ T7711] skb_clone+0x1c8/0x330 [ 148.178800][ T7711] __netlink_deliver_tap+0x36c/0x700 [ 148.178813][ T7711] netlink_deliver_tap+0x1ac/0x1b0 [ 148.178826][ T7711] netlink_unicast+0x64c/0x8a4 [ 148.178837][ T7711] netlink_sendmsg+0x7b4/0xa9c [ 148.178850][ T7711] sock_write_iter+0x2d8/0x448 [ 148.178863][ T7711] do_iter_readv_writev+0x558/0x7d8 [ 148.178876][ T7711] vfs_writev+0x2dc/0x92c [ 148.178888][ T7711] do_writev+0x178/0x304 [ 148.178900][ T7711] __arm64_sys_writev+0x80/0x94 [ 148.178912][ T7711] invoke_syscall+0x98/0x2b8 [ 148.178925][ T7711] el0_svc_common+0x130/0x23c [ 148.178938][ T7711] do_el0_svc+0x48/0x58 [ 148.178950][ T7711] el0_svc+0x54/0x168 [ 148.178961][ T7711] el0t_64_sync_handler+0x84/0x108 [ 148.178971][ T7711] el0t_64_sync+0x198/0x19c [ 148.327797][ T7718] loop4: detected capacity change from 0 to 256 [ 149.074255][ T7424] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.256632][ T7732] loop0: detected capacity change from 0 to 4096 [ 149.256901][ T7424] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.270197][ T7732] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 149.289964][ T7424] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 149.297064][ T7735] loop1: detected capacity change from 0 to 4096 [ 149.310327][ T7424] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.334711][ T7735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.508505][ T7750] netlink: 596 bytes leftover after parsing attributes in process `syz.3.258'. [ 149.542790][ T7750] netlink: 596 bytes leftover after parsing attributes in process `syz.3.258'. [ 149.542815][ T7752] tmpfs: Bad value for 'size' [ 149.555890][ T7750] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 149.566465][ T7752] input: syz0 as /devices/virtual/input/input2 [ 149.601324][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'. [ 149.604078][ T7750] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 149.609573][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'. [ 149.659382][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.695293][ T7424] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.751512][ T662] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.753429][ T662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.762555][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.764396][ T662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.770255][ T7759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.261'. [ 149.795810][ T7424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.809884][ T7424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.880803][ T7770] loop0: detected capacity change from 0 to 1024 [ 149.952217][ T6451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.985418][ T7775] loop3: detected capacity change from 0 to 2048 [ 150.044903][ T7770] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.053971][ T7770] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 150.071119][ T7770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.073723][ T7775] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.088977][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.136175][ T7770] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 150.171031][ T7770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.265: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 150.187922][ T7770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.265: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 150.199231][ T7770] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.265: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 150.213616][ T7790] FAULT_INJECTION: forcing a failure. [ 150.213616][ T7790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.227451][ T7790] CPU: 0 UID: 0 PID: 7790 Comm: syz.1.266 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 150.227473][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 150.227481][ T7790] Call trace: [ 150.227484][ T7790] show_stack+0x2c/0x3c (C) [ 150.227514][ T7790] dump_stack_lvl+0xe4/0x150 [ 150.227529][ T7790] dump_stack+0x1c/0x28 [ 150.227542][ T7790] should_fail_ex+0x418/0x590 [ 150.227553][ T7790] should_fail+0x14/0x24 [ 150.227563][ T7790] should_fail_usercopy+0x20/0x30 [ 150.227573][ T7790] _copy_from_iter+0x1a0/0x170c [ 150.227586][ T7790] netlink_sendmsg+0x5a8/0xa9c [ 150.227600][ T7790] ____sys_sendmsg+0x570/0x87c [ 150.227614][ T7790] __sys_sendmsg+0x238/0x304 [ 150.227626][ T7790] __arm64_sys_sendmsg+0x80/0x94 [ 150.227638][ T7790] invoke_syscall+0x98/0x2b8 [ 150.227656][ T7790] el0_svc_common+0x130/0x23c [ 150.227669][ T7790] do_el0_svc+0x48/0x58 [ 150.227681][ T7790] el0_svc+0x54/0x168 [ 150.227692][ T7790] el0t_64_sync_handler+0x84/0x108 [ 150.227703][ T7790] el0t_64_sync+0x198/0x19c [ 150.321759][ T7799] FAULT_INJECTION: forcing a failure. [ 150.321759][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.326157][ T7799] CPU: 0 UID: 0 PID: 7799 Comm: syz.1.269 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 150.326177][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 150.326184][ T7799] Call trace: [ 150.326187][ T7799] show_stack+0x2c/0x3c (C) [ 150.326208][ T7799] dump_stack_lvl+0xe4/0x150 [ 150.326223][ T7799] dump_stack+0x1c/0x28 [ 150.326236][ T7799] should_fail_ex+0x418/0x590 [ 150.326247][ T7799] should_fail+0x14/0x24 [ 150.326257][ T7799] should_fail_usercopy+0x20/0x30 [ 150.326267][ T7799] _copy_from_iter+0x1a0/0x170c [ 150.326280][ T7799] netlink_sendmsg+0x5a8/0xa9c [ 150.326294][ T7799] ____sys_sendmsg+0x570/0x87c [ 150.326308][ T7799] __sys_sendmmsg+0x2fc/0x76c [ 150.326320][ T7799] __arm64_sys_sendmmsg+0xa0/0xbc [ 150.326332][ T7799] invoke_syscall+0x98/0x2b8 [ 150.326346][ T7799] el0_svc_common+0x130/0x23c [ 150.326358][ T7799] do_el0_svc+0x48/0x58 [ 150.326371][ T7799] el0_svc+0x54/0x168 [ 150.326381][ T7799] el0t_64_sync_handler+0x84/0x108 [ 150.326392][ T7799] el0t_64_sync+0x198/0x19c [ 150.326916][ T6443] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.494721][ T7802] hub 2-0:1.0: USB hub found [ 150.496361][ T7802] hub 2-0:1.0: 8 ports detected [ 151.189629][ T7424] veth0_vlan: entered promiscuous mode [ 151.235736][ T7424] veth1_vlan: entered promiscuous mode [ 151.252589][ T7424] veth0_macvtap: entered promiscuous mode [ 151.266112][ T7815] netlink: 48 bytes leftover after parsing attributes in process `syz.3.272'. [ 151.330995][ T7816] FAULT_INJECTION: forcing a failure. [ 151.330995][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 151.334361][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.4.271 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 151.334382][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.334389][ T7816] Call trace: [ 151.334392][ T7816] show_stack+0x2c/0x3c (C) [ 151.334412][ T7816] dump_stack_lvl+0xe4/0x150 [ 151.334427][ T7816] dump_stack+0x1c/0x28 [ 151.334440][ T7816] should_fail_ex+0x418/0x590 [ 151.334451][ T7816] should_failslab+0xc8/0x130 [ 151.334463][ T7816] kmem_cache_alloc_noprof+0x84/0x410 [ 151.334477][ T7816] security_file_alloc+0x30/0x328 [ 151.334490][ T7816] init_file+0x94/0x2a0 [ 151.334510][ T7816] alloc_empty_file+0xc0/0x1d4 [ 151.334523][ T7816] path_openat+0xd4/0x2b1c [ 151.334536][ T7816] do_filp_open+0x1e8/0x404 [ 151.334548][ T7816] do_open_execat+0x148/0x430 [ 151.334559][ T7816] alloc_bprm+0x44/0xa74 [ 151.334570][ T7816] do_execveat_common+0x164/0x880 [ 151.334582][ T7816] __arm64_sys_execveat+0xd0/0xec [ 151.334593][ T7816] invoke_syscall+0x98/0x2b8 [ 151.334606][ T7816] el0_svc_common+0x130/0x23c [ 151.334619][ T7816] do_el0_svc+0x48/0x58 [ 151.334631][ T7816] el0_svc+0x54/0x168 [ 151.334642][ T7816] el0t_64_sync_handler+0x84/0x108 [ 151.334652][ T7816] el0t_64_sync+0x198/0x19c [ 151.852965][ T7424] veth1_macvtap: entered promiscuous mode [ 151.952523][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.955821][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.958516][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.965840][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.968366][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.970950][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.974417][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.977174][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.980471][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.015111][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.021656][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.042369][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.044988][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.047720][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.050309][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.066874][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.072360][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.152748][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.291445][ T7828] loop3: detected capacity change from 0 to 4096 [ 152.314473][ T7424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.316748][ T7424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.318932][ T7424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.321087][ T7424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.326686][ T7828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.488697][ T528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.496275][ T528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.526954][ T691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.528942][ T691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.606879][ T7847] netlink: 'syz.0.280': attribute type 10 has an invalid length. [ 152.721742][ T7834] loop1: detected capacity change from 0 to 32768 [ 152.724977][ T7847] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.731727][ T7834] btrfs: Deprecated parameter 'usebackuproot' [ 152.741966][ T7834] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 152.755655][ T7834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.277 (7834) [ 152.795181][ T7834] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.802338][ T7834] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 152.807017][ T7834] BTRFS info (device loop1): using free-space-tree [ 152.986347][ T6454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.708171][ T7836] loop4: detected capacity change from 0 to 32768 [ 153.776021][ T7836] BTRFS: device /dev/loop4 (7:4) using temp-fsid 18bb4433-00a7-464a-8c59-f6ae8314e171 [ 153.795369][ T7836] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.278 (7836) [ 153.810707][ T7834] BTRFS info (device loop1): rebuilding free space tree [ 154.892374][ T7836] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.894968][ T7836] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 154.897125][ T7836] BTRFS info (device loop4): using free-space-tree [ 155.459781][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 155.752398][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 155.752567][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 155.752683][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 155.752792][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 155.752890][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 155.752996][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 155.753109][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 155.753212][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 155.753325][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 155.753433][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 155.753547][ T7836] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 156.019551][ T7836] BTRFS error (device loop4): open_ctree failed: -12 [ 156.088767][ T6451] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.309055][ T7948] loop3: detected capacity change from 0 to 4096 [ 159.455964][ T7948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.545350][ T7963] loop0: detected capacity change from 0 to 1024 [ 160.172120][ T7963] EXT4-fs: Ignoring removed bh option [ 160.173623][ T7963] EXT4-fs: inline encryption not supported [ 160.220957][ T6454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.223461][ T7963] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.247612][ T7963] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 160.287582][ T7969] loop5: detected capacity change from 0 to 2048 [ 160.321514][ T7969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.430981][ T7963] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 2: comm syz.0.294: lblock 2 mapped to illegal pblock 2 (length 1) [ 161.003566][ T7981] hub 2-0:1.0: USB hub found [ 161.005999][ T7981] hub 2-0:1.0: 8 ports detected [ 161.414729][ T7983] loop1: detected capacity change from 0 to 256 [ 161.419101][ T7963] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 161.421282][ T7963] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 48: comm syz.0.294: lblock 0 mapped to illegal pblock 48 (length 1) [ 161.427710][ T7963] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 161.431271][ T7963] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.294: Failed to acquire dquot type 0 [ 161.925536][ T7963] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 162.201613][ T7963] EXT4-fs error (device loop0): ext4_evict_inode:256: inode #11: comm syz.0.294: mark_inode_dirty error [ 162.234078][ T7963] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 162.236804][ T7963] EXT4-fs (loop0): 1 orphan inode deleted [ 162.238621][ T7963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.253472][ T11] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.460947][ T7992] warning: `syz.4.301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 162.524728][ T7992] FAULT_INJECTION: forcing a failure. [ 162.524728][ T7992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.542483][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.4.301 Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 162.542512][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 162.542519][ T7992] Call trace: [ 162.542522][ T7992] show_stack+0x2c/0x3c (C) [ 162.542542][ T7992] dump_stack_lvl+0xe4/0x150 [ 162.542558][ T7992] dump_stack+0x1c/0x28 [ 162.542571][ T7992] should_fail_ex+0x418/0x590 [ 162.542587][ T7992] should_fail+0x14/0x24 [ 162.542596][ T7992] should_fail_usercopy+0x20/0x30 [ 162.542606][ T7992] simple_read_from_buffer+0xd4/0x248 [ 162.542621][ T7992] proc_fail_nth_read+0x134/0x1a0 [ 162.542634][ T7992] vfs_read+0x22c/0x974 [ 162.542645][ T7992] ksys_read+0x15c/0x26c [ 162.542657][ T7992] __arm64_sys_read+0x7c/0x90 [ 162.542668][ T7992] invoke_syscall+0x98/0x2b8 [ 162.542681][ T7992] el0_svc_common+0x130/0x23c [ 162.542693][ T7992] do_el0_svc+0x48/0x58 [ 162.542706][ T7992] el0_svc+0x54/0x168 [ 162.542717][ T7992] el0t_64_sync_handler+0x84/0x108 [ 162.542727][ T7992] el0t_64_sync+0x198/0x19c [ 162.639261][ T11] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 162.641490][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 162.657820][ T7963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.689485][ T7963] EXT4-fs error (device loop0): __ext4_get_inode_loc:4435: comm syz.0.294: Invalid inode table block 1 in block_group 0 [ 162.759248][ T7963] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 162.767851][ T7963] EXT4-fs error (device loop0): ext4_quota_off:7194: inode #3: comm syz.0.294: mark_inode_dirty error [ 163.110537][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'. [ 163.152113][ T8032] syz_tun: entered allmulticast mode [ 163.207346][ T8027] syz_tun: left allmulticast mode [ 163.284339][ T8042] trusted_key: syz.5.315 sent an empty control message without MSG_MORE. [ 163.402740][ T8052] sctp: [Deprecated]: syz.5.319 (pid 8052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.402740][ T8052] Use struct sctp_sack_info instead [ 163.575281][ T8067] tipc: Started in network mode [ 163.576521][ T8067] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 163.578718][ T8067] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 163.826739][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 164.012078][ T6448] Bluetooth: hci2: command 0x0406 tx timeout [ 164.013863][ T6448] Bluetooth: hci3: command 0x0406 tx timeout [ 164.015384][ T6448] Bluetooth: hci0: command 0x0406 tx timeout [ 164.016884][ T6448] Bluetooth: hci4: command 0x0406 tx timeout [ 174.989037][ T8074] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 175.000140][ T8074] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 175.205667][ T8123] siw: device registration error -23 [ 175.258875][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'. [ 175.289533][ T8130] syz_tun: entered allmulticast mode [ 175.294105][ T8130] netlink: 'syz.5.340': attribute type 39 has an invalid length. [ 175.383076][ T8130] syz_tun (unregistering): left allmulticast mode [ 175.423699][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 175.440984][ T8137] bond_slave_0: entered promiscuous mode [ 175.442769][ T8137] bond_slave_1: entered promiscuous mode [ 175.444290][ T8137] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 175.471310][ T8137] macvtap1: entered promiscuous mode [ 175.477600][ T8137] bond0: entered promiscuous mode [ 175.482576][ T8137] macvtap1: entered allmulticast mode [ 175.486934][ T8137] bond0: entered allmulticast mode [ 175.488322][ T8137] bond_slave_0: entered allmulticast mode [ 175.489677][ T8137] bond_slave_1: entered allmulticast mode [ 175.494735][ T8137] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 175.510486][ T8137] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 175.559071][ T8145] bond0: left allmulticast mode [ 175.560441][ T8145] bond_slave_0: left allmulticast mode [ 175.563847][ T8145] bond_slave_1: left allmulticast mode [ 175.567029][ T8145] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 175.570967][ T8145] bond0: left promiscuous mode [ 175.575948][ T8145] bond_slave_0: left promiscuous mode [ 175.577593][ T8145] bond_slave_1: left promiscuous mode [ 175.578981][ T8145] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 175.790423][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 175.791267][ T8158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.885689][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 175.897164][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 176.148217][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.151549][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.155168][ T6444] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 176.214232][ T8173] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 177.018955][ T8181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.045590][ T8181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.067795][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 177.906532][ T8199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.360'. [ 180.052102][ T8234] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 180.090893][ T8234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.113769][ T8234] gretap1: entered promiscuous mode [ 180.117345][ T8234] bond1: (slave gretap1): making interface the new active one [ 180.119940][ T8234] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 180.136015][ T8234] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 180.216294][ T10] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0 [ 180.229408][ T10] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0 [ 180.265037][ T10] hid-multitouch 0005:0457:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 180.998538][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.000887][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.026874][ T8235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.053225][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.374'. [ 181.602888][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.605223][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.724070][ T8264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.436250][ T8272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.380'. [ 182.447960][ T8273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.379'. [ 183.752157][ T8317] Invalid/unusable pipe [ 183.759347][ T8317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.836745][ T8323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.395'. [ 183.854411][ T8323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.448203][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.449937][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.906829][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'. [ 189.424912][ T8374] ceph: No mds server is up or the cluster is laggy [ 189.518266][ T8386] netlink: 32 bytes leftover after parsing attributes in process `syz.5.412'. [ 189.597748][ T8389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.710820][ T6434] libceph: connect (1)[c::]:6789 error -101 [ 189.714646][ T6434] libceph: mon0 (1)[c::]:6789 connect error [ 191.279875][ T8417] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 191.324718][ T8417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.357110][ T8425] gretap1: entered promiscuous mode [ 191.360386][ T8425] bond1: (slave gretap1): making interface the new active one [ 191.368158][ T8425] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 191.401090][ T8428] netlink: 'syz.0.424': attribute type 39 has an invalid length. [ 191.521198][ T8438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.808892][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 193.576934][ T8476] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 204.212335][ T8476] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 204.326800][ T8489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.609759][ T8548] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 207.846311][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 208.325765][ T8555] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 208.370675][ T8555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.373953][ T8562] netlink: 'syz.0.453': attribute type 39 has an invalid length. [ 208.550592][ T8563] gretap1: entered promiscuous mode [ 208.584232][ T8563] bond1: (slave gretap1): making interface the new active one [ 209.554346][ T8563] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 210.202610][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 210.274949][ T8583] input: syz0 as /devices/virtual/input/input3 [ 210.555267][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.558187][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.563411][ T30] audit: type=1400 audit(210.540:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8594 comm="syz.3.462" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0 [ 211.301463][ T8592] delete_channel: no stack [ 211.438776][ T8624] lo: entered allmulticast mode [ 211.524595][ T8629] syzkaller1: entered promiscuous mode [ 211.526195][ T8629] syzkaller1: entered allmulticast mode [ 211.626169][ T8642] netlink: 'syz.0.474': attribute type 1 has an invalid length. [ 211.646732][ T8642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.814985][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.818586][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.209090][ T8730] netlink: 124 bytes leftover after parsing attributes in process `syz.1.494'. [ 243.010685][ T8804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.799716][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.811032][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.045130][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'. [ 244.047455][ T8830] netlink: 100 bytes leftover after parsing attributes in process `syz.5.524'. [ 244.049772][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'. [ 244.247556][ T8833] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 245.178862][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.182227][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.726351][ T8850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.616366][ T8892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.843094][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.848414][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.662853][ T8925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.916653][ T8965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.085728][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.160042][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.240276][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.576'. [ 252.626236][ T8978] gretap1: entered promiscuous mode [ 252.722960][ T6444] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 252.995958][ T8999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.204023][ T9010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.217085][ T9010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.641403][ T9041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.813114][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.612'. [ 254.974536][ T9047] netlink: 'syz.4.613': attribute type 10 has an invalid length. [ 254.992647][ T9047] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 256.108190][ T6516] kernel write not supported for file /dsp1 (pid: 6516 comm: kworker/1:5) [ 256.428222][ T6452] Bluetooth: hci1: command 0x0405 tx timeout [ 256.474252][ T9089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.068180][ T9103] netlink: 96 bytes leftover after parsing attributes in process `syz.5.631'. [ 257.110390][ T9105] netlink: 'syz.5.632': attribute type 1 has an invalid length. [ 257.130741][ T9105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.140848][ T9105] gretap1: entered promiscuous mode [ 257.146299][ T9105] bond2: (slave gretap1): making interface the new active one [ 257.149166][ T9105] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 257.157104][ T9105] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 258.005521][ T9138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.428710][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 258.720975][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.732072][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.826940][ T9203] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 260.485995][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'. [ 260.748306][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.750949][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.288915][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.680'. [ 263.341797][ T9255] tipc: Started in network mode [ 263.347459][ T9255] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 263.353341][ T9255] tipc: Enabled bearer <udp:syz0>, priority 10 [ 264.663678][ T8] tipc: Node number set to 4269801491 [ 266.364861][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 271.342784][ T6444] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 272.647340][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.649691][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.461699][ T6452] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.465702][ T6452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.469668][ T6452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.534593][ T6452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.537659][ T6452] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 273.539932][ T6452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.628815][ T9474] chnl_net:caif_netlink_parms(): no params data found [ 274.756122][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.765218][ T9474] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.767239][ T9474] bridge_slave_0: entered allmulticast mode [ 274.769356][ T9474] bridge_slave_0: entered promiscuous mode [ 274.799212][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.801030][ T9474] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.812299][ T9474] bridge_slave_1: entered allmulticast mode [ 274.814590][ T9474] bridge_slave_1: entered promiscuous mode [ 274.899401][ T9474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.917791][ T9474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.985598][ T9474] team0: Port device team_slave_0 added [ 274.993883][ T9474] team0: Port device team_slave_1 added [ 275.042836][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.044679][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.064802][ T9474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.075701][ T9474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.077802][ T9474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.108593][ T9474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.198785][ T9474] hsr_slave_0: entered promiscuous mode [ 275.200696][ T9474] hsr_slave_1: entered promiscuous mode [ 275.663569][ T6444] Bluetooth: hci5: command tx timeout [ 276.793140][ T9474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.814207][ T9474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.859940][ T9474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.902223][ T9474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.050771][ T9474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.080262][ T9474] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.090095][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.092829][ T8193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.104581][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.106473][ T8193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.178201][ T9474] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.336427][ T9474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.692046][ T6444] Bluetooth: hci5: command tx timeout [ 278.322595][ T9474] veth0_vlan: entered promiscuous mode [ 278.346396][ T9474] veth1_vlan: entered promiscuous mode [ 278.407224][ T9474] veth0_macvtap: entered promiscuous mode [ 278.421216][ T9474] veth1_macvtap: entered promiscuous mode [ 278.539237][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.551950][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.554851][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.557442][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.564663][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.567595][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.574044][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.580283][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.587256][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.589831][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.593706][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.638254][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.640856][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.649203][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.657125][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.659651][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.668666][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.671122][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.675223][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.677553][ T9474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.680549][ T9474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.684777][ T9474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.702603][ T9474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.705202][ T9474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.707264][ T9474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.709398][ T9474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.859822][ T6444] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 278.899918][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.906428][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.917808][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.920184][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.249241][ T9653] netlink: 'syz.6.764': attribute type 21 has an invalid length. [ 279.285026][ T9653] netlink: 'syz.6.764': attribute type 20 has an invalid length. [ 279.286887][ T9653] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.771943][ T6444] Bluetooth: hci5: command tx timeout [ 280.431731][ T9674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.839'. [ 281.852459][ T6444] Bluetooth: hci5: command tx timeout [ 281.872375][ T9716] netlink: 36 bytes leftover after parsing attributes in process `syz.5.855'. [ 283.409271][ T9746] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 283.952038][ T6444] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 285.897988][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.877'. [ 297.331636][ T6452] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 297.686070][ T9818] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 300.829701][ T9865] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 310.259113][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.260717][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.877366][ T9849] tipc: Started in network mode [ 311.878573][ T9849] tipc: Node identity 4, cluster identity 4711 [ 311.880047][ T9849] tipc: Node number set to 4 [ 311.881440][ T9849] tipc: Cannot configure node identity twice [ 311.973471][ T9877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.975730][ T9877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.197777][ T30] audit: type=1326 audit(312.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000 [ 312.221537][ T30] audit: type=1326 audit(312.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000 [ 312.244122][ T30] audit: type=1326 audit(312.190:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=5 compat=0 ip=0xffffad95ad28 code=0x7ffc0000 [ 312.269043][ T30] audit: type=1326 audit(312.190:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000 [ 312.410270][ T30] audit: type=1326 audit(312.190:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000 [ 312.416144][ T30] audit: type=1326 audit(312.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=286 compat=0 ip=0xffffad95ad28 code=0x7ffc0000 [ 312.421416][ T30] audit: type=1326 audit(312.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9891 comm="syz.0.912" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x7ffc0000 [ 315.262615][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.926'. [ 327.368070][ T9939] team0 (unregistering): Port device team_slave_0 removed [ 327.374265][ T9939] team0 (unregistering): Port device team_slave_1 removed [ 327.446389][ T9941] syz_tun: entered allmulticast mode [ 328.851380][ T9997] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 342.652980][T10061] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 346.037177][ T6452] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 346.208359][T10120] lo: entered allmulticast mode [ 346.210484][T10120] lo: left allmulticast mode [ 347.216079][T10140] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media [ 350.105968][ T6452] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 350.108281][ T6452] Bluetooth: hci4: Injecting HCI hardware error event [ 350.112320][ T6452] Bluetooth: hci4: hardware error 0x00 [ 351.143204][ T30] audit: type=1326 audit(351.120:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10175 comm="syz.0.984" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x0 [ 352.252438][ T6452] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 353.063005][ T6452] Bluetooth: hci0: unexpected event 0x07 length: 4 < 255 [ 355.766910][T10229] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 357.531685][ T30] audit: type=1326 audit(357.510:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10239 comm="syz.6.1001" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675ad28 code=0x0 [ 358.522677][ T30] audit: type=1326 audit(358.490:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10245 comm="syz.5.1003" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcb5ad28 code=0x0 [ 358.678175][ T6452] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 359.367689][T10286] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.666124][ T6452] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 362.819207][ T30] audit: type=1326 audit(362.160:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10298 comm="syz.6.1016" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675ad28 code=0x0 [ 362.824298][ T30] audit: type=1326 audit(362.320:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10307 comm="syz.1.1020" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8555ad28 code=0x0 [ 363.040229][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 363.042678][T10332] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1022'. [ 363.044911][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 363.915352][T10334] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 367.002681][T10379] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 367.459206][ T30] audit: type=1326 audit(367.350:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10367 comm="syz.6.1035" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8675ad28 code=0x0 [ 367.655635][T10388] netlink: 'syz.0.1042': attribute type 11 has an invalid length. [ 367.774805][ T6452] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 369.205495][T10431] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 369.209924][ T6452] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 370.516762][T10445] netlink: 'syz.6.1065': attribute type 1 has an invalid length. [ 370.573616][T10445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.590130][T10452] gretap1: entered promiscuous mode [ 370.595084][T10452] bond1: (slave gretap1): making interface the new active one [ 370.597930][T10452] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 370.618981][T10445] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 371.692911][ T2367] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.694543][ T2367] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.806822][T10474] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 373.059283][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 373.114064][T10477] netlink: 'syz.3.1075': attribute type 4 has an invalid length. [ 373.255582][ T6452] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 373.257909][ T6452] Bluetooth: hci2: Injecting HCI hardware error event [ 373.262621][ T6452] Bluetooth: hci2: hardware error 0x00 [ 374.217582][ T30] audit: type=1326 audit(374.200:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10508 comm="syz.3.1084" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9915ad28 code=0x0 [ 375.542037][ T6452] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 375.853428][ T6452] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 375.856514][ T6452] Bluetooth: hci5: Injecting HCI hardware error event [ 375.868394][ T6444] Bluetooth: hci5: hardware error 0x00 [ 378.092137][ T6444] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 379.472745][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 386.417845][ T6444] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.422988][ T6444] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.425855][ T6444] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.429152][ T6444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.431466][ T6444] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 386.433701][ T6444] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 387.437794][ T6452] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 387.447881][ T6452] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 387.450816][ T6452] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 387.454253][ T6452] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 387.457573][ T6452] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 387.460489][ T6452] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.525307][ T6452] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 387.529754][ T6452] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 387.533795][ T6452] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 387.541082][ T6452] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 387.543401][ T6452] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 387.545493][ T6452] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 387.749905][T10538] bond_slave_0: entered promiscuous mode [ 387.751389][T10538] bond_slave_1: entered promiscuous mode [ 387.752933][T10538] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 387.759900][T10538] macvtap1: entered promiscuous mode [ 387.761281][T10538] bond0: entered promiscuous mode [ 387.770236][T10538] macvtap1: entered allmulticast mode [ 387.771620][T10538] bond0: entered allmulticast mode [ 387.779000][T10538] bond_slave_0: entered allmulticast mode [ 387.780586][T10538] bond_slave_1: entered allmulticast mode [ 387.792009][T10538] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 387.794451][T10538] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 387.837611][T10539] bond0: left allmulticast mode [ 387.838882][T10539] bond_slave_0: left allmulticast mode [ 387.842573][T10539] bond_slave_1: left allmulticast mode [ 387.844194][T10539] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 387.846023][T10539] bond0: left promiscuous mode [ 387.847526][T10539] bond_slave_0: left promiscuous mode [ 387.848966][T10539] bond_slave_1: left promiscuous mode [ 387.850277][T10539] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 388.492009][ T6452] Bluetooth: hci6: command tx timeout [ 389.435006][ T8193] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.512830][T10589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.568296][ T6452] Bluetooth: hci7: command tx timeout [ 389.611949][ T6452] Bluetooth: hci8: command tx timeout [ 390.085077][ T8193] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.223120][ T8193] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.324086][T10595] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 390.328478][T10595] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 390.330323][T10595] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1105'. [ 390.387816][ T8193] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.574981][ T6452] Bluetooth: hci6: command tx timeout [ 390.690136][T10548] chnl_net:caif_netlink_parms(): no params data found [ 390.854279][ T30] audit: type=1326 audit(390.820:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10599 comm="syz.0.1106" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad95ad28 code=0x0 [ 391.610126][ T8193] bridge_slave_1: left allmulticast mode [ 391.611562][ T8193] bridge_slave_1: left promiscuous mode [ 391.617968][ T6452] Bluetooth: hci7: command tx timeout [ 391.621620][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.648545][ T8193] bridge_slave_0: left allmulticast mode [ 391.650086][ T8193] bridge_slave_0: left promiscuous mode [ 391.651543][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.676063][ T6452] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 391.693485][ T6452] Bluetooth: hci8: command tx timeout [ 392.141646][T10626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.146824][T10626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.273421][ T8193] bond2 (unregistering): (slave gretap1): Releasing active interface [ 392.651981][ T6452] Bluetooth: hci6: command tx timeout [ 393.346724][ T8193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.384634][ T8193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.424311][ T8193] bond0 (unregistering): Released all slaves [ 393.691963][ T6452] Bluetooth: hci7: command tx timeout [ 393.772935][ T6452] Bluetooth: hci8: command tx timeout [ 394.084795][ T8193] bond1 (unregistering): Released all slaves [ 394.731971][ T6452] Bluetooth: hci6: command tx timeout [ 394.763244][ T8193] bond2 (unregistering): Released all slaves [ 394.771678][T10541] chnl_net:caif_netlink_parms(): no params data found [ 394.840485][ T8193] tipc: Disabling bearer <udp:syz0> [ 394.850352][ T8193] tipc: Left network mode [ 394.868247][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.892135][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.894141][T10548] bridge_slave_0: entered allmulticast mode [ 394.896179][T10548] bridge_slave_0: entered promiscuous mode [ 394.914020][T10552] chnl_net:caif_netlink_parms(): no params data found [ 394.917918][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.919712][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.921550][T10548] bridge_slave_1: entered allmulticast mode [ 394.943108][T10548] bridge_slave_1: entered promiscuous mode [ 395.149291][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.362013][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.719995][ T6452] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 395.722603][ T6452] Bluetooth: hci0: Injecting HCI hardware error event [ 395.728889][ T6452] Bluetooth: hci0: hardware error 0x00 [ 395.772047][ T6444] Bluetooth: hci7: command tx timeout [ 395.852906][ T6444] Bluetooth: hci8: command tx timeout [ 397.852134][ T6452] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 404.972102][ T31] INFO: task kworker/1:5:6516 blocked for more than 143 seconds. [ 404.974009][ T31] Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 404.977446][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 404.979689][ T31] task:kworker/1:5 state:D stack:0 pid:6516 tgid:6516 ppid:2 task_flags:0x4208060 flags:0x00000008 [ 405.000318][ T31] Workqueue: events p9_write_work [ 405.001633][ T31] Call trace: [ 405.021120][ T31] __switch_to+0x414/0x788 (T) [ 405.022385][ T31] __schedule+0x1360/0x257c [ 405.023440][ T31] schedule+0xbc/0x238 [ 405.024456][ T31] schedule_preempt_disabled+0x18/0x2c [ 405.025782][ T31] __mutex_lock_common+0xd30/0x24b8 [ 405.026944][ T31] mutex_lock_nested+0x2c/0x38 [ 405.028004][ T31] pipe_write+0x184/0x1880 [ 405.029008][ T31] __kernel_write_iter+0x340/0x7a0 [ 405.030142][ T31] kernel_write+0x1cc/0x2d0 [ 405.031379][ T31] p9_write_work+0x45c/0xc1c [ 405.036786][ T31] process_one_work+0x810/0x1638 [ 405.038102][ T31] worker_thread+0x97c/0xeec [ 405.039200][ T31] kthread+0x65c/0x7b0 [ 405.040198][ T31] ret_from_fork+0x10/0x20 [ 405.041279][ T31] [ 405.041279][ T31] Showing all locks held in the system: [ 405.051460][ T31] 1 lock held by khungtaskd/31: [ 405.052826][ T31] #0: ffff80008fda22a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0xc/0x44 [ 405.055189][ T31] 3 locks held by kworker/u8:3/44: [ 405.056418][ T31] #0: ffff0000c32ea948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x674/0x1638 [ 405.058765][ T31] #1: ffff8000993b7ba0 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638 [ 405.072038][ T31] #2: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 405.074256][ T31] 3 locks held by kworker/u8:5/528: [ 405.075488][ T31] #0: ffff0000d2e1b948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x674/0x1638 [ 405.077994][ T31] #1: ffff80009cb17ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638 [ 405.080787][ T31] #2: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 405.083182][ T31] 1 lock held by dhcpcd/6114: [ 405.084374][ T31] #0: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 405.086464][ T31] 2 locks held by getty/6207: [ 405.087460][ T31] #0: ffff0000d317f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 405.089528][ T31] #1: ffff80009bcae2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41c/0x1228 [ 405.091782][ T31] 3 locks held by kworker/1:5/6516: [ 405.093340][ T31] #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x674/0x1638 [ 405.096051][ T31] #1: ffff8000b2d67ba0 ((work_completion)(&m->wq)){+.+.}-{0:0}, at: process_one_work+0x708/0x1638 [ 405.098348][ T31] #2: ffff0000d52c8c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_write+0x184/0x1880 [ 405.100459][ T31] 3 locks held by kworker/u8:12/6549: [ 405.101917][ T31] #0: ffff0000c0031148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x674/0x1638 [ 405.104751][ T31] #1: ffff8000a3fa7ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x708/0x1638 [ 405.107328][ T31] #2: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 405.109270][ T31] 4 locks held by kworker/u8:13/8193: [ 405.110639][ T31] #0: ffff0000c1899948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x674/0x1638 [ 405.113405][ T31] #1: ffff80009f5a7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x708/0x1638 [ 405.115685][ T31] #2: ffff800092b65790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x148/0xa48 [ 405.117766][ T31] #3: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 405.119784][ T31] 2 locks held by syz.4.646/9146: [ 405.120980][ T31] #0: ffff0000d52c8c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_write+0x184/0x1880 [ 405.123457][ T31] #1: ffff0000f3c902e8 (mapping.invalidate_lock#4){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x100/0x758 [ 405.126118][ T31] 2 locks held by syz-executor/10541: [ 405.127282][ T31] #0: ffff800091aaa560 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 [ 405.129641][ T31] #1: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xaf8/0x1844 [ 405.132262][ T31] 2 locks held by syz-executor/10548: [ 405.133549][ T31] #0: ffff800091aaa560 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 [ 405.135849][ T31] #1: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xaf8/0x1844 [ 405.138216][ T31] 2 locks held by syz-executor/10552: [ 405.139614][ T31] #0: ffff80008fbc1630 (&ops->srcu#2){.+.+}-{0:0}, at: srcu_lock_acquire+0x18/0x54 [ 405.142093][ T31] #1: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xaf8/0x1844 [ 405.144140][ T31] 1 lock held by syz.3.1113/10634: [ 405.145226][ T31] #0: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 405.147279][ T31] 1 lock held by syz.0.1115/10660: [ 405.148473][ T31] #0: ffff800092b71f28 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x5e8/0xa9c [ 405.150918][ T31] [ 405.151423][ T31] ============================================= [ 405.151423][ T31] [ 405.154624][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 405.156368][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-g14d05f12084d #0 [ 405.158940][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 405.161292][ T31] Call trace: [ 405.162015][ T31] show_stack+0x2c/0x3c (C) [ 405.163048][ T31] dump_stack_lvl+0xe4/0x150 [ 405.164146][ T31] dump_stack+0x1c/0x28 [ 405.165178][ T31] panic+0x300/0x8a0 [ 405.166160][ T31] hung_task_panic+0x0/0x2c [ 405.167314][ T31] kthread+0x65c/0x7b0 [ 405.168376][ T31] ret_from_fork+0x10/0x20 [ 405.169536][ T31] SMP: stopping secondary CPUs [ 405.170675][ T31] Kernel Offset: disabled [ 405.171616][ T31] CPU features: 0x200,00002070,00800250,82017203 [ 405.173082][ T31] Memory Limit: none [ 405.776546][ T31] Rebooting in 86400 seconds..