last executing test programs: 8m41.442451336s ago: executing program 1 (id=112): timerfd_create(0x0, 0x800) syz_open_dev$vim2m(0x0, 0x80020001, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file1\x00', 0x1000c1d, &(0x7f000000a580)=ANY=[@ANYRES32=r4, @ANYRESHEX, @ANYBLOB="9cf45332f216e72f1916be622afc444f62ea0b68c42a77b352fe0afddfb1cc8ff9c0f9e899ea9ae7c30f5a192b0b16000080dfa20a2768950b186e295805038569d0c9f57f41da86410da421701f524e99d5bea9716fa0990dd3611859be346c36edb30828401d5122a1bad83ae10d49e288b3950ae045ad2a04ddc191fcc6abf55e98491049b415163b7e3a99c0a4544190c2011be3a25a85ceab73485f64f25ad6d435b24f2f400d9bef712f399339d02bfd26bf20324b098b673189cd82a5cbf5c5a53fbda881d47d43e25919884a8cd525436c46d28d7c4173aabcc00da4ac21514eb67e0eb9849548fe217ab6bb03ac5d203f8427c8402b016b5b9e83d16cb759a42b6a7f7115433776b3eb8091edf8030f522ae488d96280e59d5b0ddc36f441dfff7700000000000000000000000000000000000000000000000000000000000000000000002c14da6155698f83a9e5d32830f3dc68cfff8cf5b7e936b51590ec6fc503b6ca46a5aa1b35163c0081ae2491391194d483d35de250e75d7d6ae7901b6c9663ddcbecd4bc17a043808b280000000000000000000000000000c8f455465cbebc162473fbee10d24b1e5aded77bc959e4d72cb67a00491fd4696da9de540e0d9ecefa00648305f1ea375309bb41460389068a12930587eef76c7e0359b64a2153d2c1e1a07b0125808f1805beb49929003354aab5fe9f966009e4f90fc66cc885c9406c532a40ec0b76a3757cf11d9e907a44cbc32dbb10", @ANYRES16=r0, @ANYRESOCT, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRES32], 0xff, 0x1fd, &(0x7f000000a380)="$eJzsmb+LE0EUx78zu5c9DxFsLGwsPPBEb39F5ZorThArQThFLYO3d0T3LpKscDkQ7rCxsRQRbP0HLCxS29nZaqGCYGFKwUIYmR/ZnfzYGDFiwPeBTL7z5s178ybJK7IgCOK/5dPHbx8eX1y5dhbAYSzCM/YvTuHDLf/3z+6febJ66fnLdy9e7xx50BmMNw9ACFQmzc+Afaw5yErWF+XwtN92HRynjb4BBl/LH0KhJwkYbhmfO5ZuHDIiTfzbjXRjs54moRwiOcRyqNq5XADdA4aNvDYhmLXeajMVrNlq792tpYWYE708Q0u/K8bdnzrfGseqmcvzyc/r5qOHB3Ju7gYhuL5LABE4IqOrYFg3egUefN8vrsSq/7hbxHf66v+z2qYu2Hf9NZCWo8tTT+HgXxc4q0J4M3GMCQQbtMifcG451u28Gd71+S+ex5tOHIaSjqMaF4Dcctn4vF1I0ysTp8C+DlNYel1+5K6iPzEXOGX1Jxdu3j+CbPte0GrvLde3a1vJVrITx9UL4bkwPB8Hm3UPYaDa0Zj+N6/604IVf67Et8Iq2K1lWTPaBbJmlM9jPVodd/1V46vaw1X/41g6qWPIS1Zle6NzMPPi6l2qJaf08ARBEARBEARBEARBEARBEL/E/jPyBBj0IxD1oEqUEF9V3j8DAAD//2JCZGU=") 8m37.985388105s ago: executing program 4 (id=117): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000001500)=""/4110, 0x100e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) 8m37.184868808s ago: executing program 3 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m36.442981964s ago: executing program 1 (id=119): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x50, 0x1, 0x2, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x7b143208}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) 8m35.350886273s ago: executing program 3 (id=121): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000004240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',version=9p2000,debug=0x0000000000000001,']) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x2020) 8m34.195044734s ago: executing program 4 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000080), 0x0}, 0x20) 8m33.209417966s ago: executing program 3 (id=124): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000003c0)=@buf) 8m33.129764966s ago: executing program 4 (id=125): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$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") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/80, 0x10000}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x0, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 8m31.911635445s ago: executing program 3 (id=126): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000080)={[{@resgid}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0xfffffffd, 0x90, 0xc, "00bf46f8bbde7047bcd4a280000400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 8m30.222518197s ago: executing program 4 (id=130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r3, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 8m30.215856242s ago: executing program 1 (id=131): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) mkdir(0x0, 0x101) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8m30.022400175s ago: executing program 3 (id=132): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdir(0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0xe) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 8m26.499159993s ago: executing program 1 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xb}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 8m26.272515858s ago: executing program 4 (id=136): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x64}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f0000000c00)) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288", 0x85, 0x0, 0x0, 0x0) 8m26.112959338s ago: executing program 3 (id=139): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e24, 0xa9a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0xffffffffffffffff, {[0xfc1, 0x8, 0x400, 0x0, 0x100, 0x7f, 0x37, 0x5]}}, 0x5c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 8m25.983734809s ago: executing program 1 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 8m25.881048071s ago: executing program 4 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 8m24.691216224s ago: executing program 1 (id=143): socket(0x848000000015, 0x805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 8m10.330489378s ago: executing program 32 (id=139): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e24, 0xa9a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0xffffffffffffffff, {[0xfc1, 0x8, 0x400, 0x0, 0x100, 0x7f, 0x37, 0x5]}}, 0x5c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 8m10.055550075s ago: executing program 33 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 8m9.176385064s ago: executing program 34 (id=143): socket(0x848000000015, 0x805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 6m3.941251996s ago: executing program 2 (id=369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r1, r1], 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, &(0x7f0000000180), 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x22802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) writev(r6, &(0x7f0000000b40), 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 6m2.826138007s ago: executing program 2 (id=370): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='6\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c7"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007", @ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 6m1.672363669s ago: executing program 2 (id=371): read$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r2, &(0x7f0000000300)=""/154, 0x9a) 6m0.753884153s ago: executing program 2 (id=372): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffed6, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd580200000000000000081e33dffa150835f7518d58b4f5d82db4881a5b98cb9fb992f816d0bdcc09b5063087117502231900"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000150001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x6, 0x1, 0xfff}, {0x80, 0x5, 0x3, 0x5}, {0x0, 0x2, 0x9, 0x4}, {0x3, 0x3, 0x0, 0x10001}]}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) 5m57.002426102s ago: executing program 2 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000a00)={[{@nodatacow}, {@nobarrier}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@rescan_uuid_tree}, {@acl}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = socket(0x1, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file6\x00', 0x101442, 0xfb) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) getpeername$packet(r2, &(0x7f0000000040), &(0x7f0000000180)=0x13) socket$inet_tcp(0x2, 0x1, 0x0) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7, 0x1, [0x180000, 0x4]}) 5m54.105221392s ago: executing program 2 (id=381): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1], 0x64}}, 0x0) 5m38.389982678s ago: executing program 35 (id=381): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1], 0x64}}, 0x0) 9.544294794s ago: executing program 5 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x6, 0xff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) 9.225256388s ago: executing program 0 (id=861): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000010) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x4000, @loopback}, 0x1c) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000006c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYBLOB="a89c9257e4a1015ae3d6903f845d147824be83d3f1c59f230cb48e1749045997b36c8d7431d4e3c07b5a61f434996c0169570dedf954d2362a607f1dff03eb831a826e61695249dced7e1c2cef74bb3fc13a3c836371b257c0308a90c9f2def4ff9d6ed9bc198e5e6dff44e93b2fd1d7e3be844bb9c1e172df0504afc3903b3ca60b89b9f3aeefb2cb2c432d2ea35f8b14d59b5a3f0648697be13096c3c95f2ff454e40f746067b7270abb9e7a2b38b249b96cc02390", @ANYRES16=r5, @ANYBLOB="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", @ANYRES8=r1], 0x2, 0xc35, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj06BT0ZzsMyXonkpZ6vKWvNbD7757FJfKuLHkaK//vbdAc/j39d5d/c0iLe+uf7us7VOHup+OPB+/xPHj10cHP6Np7d7nbZqwMnL7enbdxqjQ8PDIz2ba/nbP9mzbSB/b7E3XSci5t948/XW1NTk3P2/KE+BXVR/hF6k2uPS04f1YnEvTsi9exG1A9GMh9N3HgPl/f+9SPG77/5n94bfuf/X41c67+7e4ePnf7Z+/39x8452eP+vba6X7//lPX2r+/+TPdtezL8b6atF1BduzfYdj6jPv/Hmqfat1s3Jm5PT50+f/vLg4JfPne47HFG/0Z6a7Hm1J4cLAAAAAAAAAAAAAAAA4MFJRfx+pGj9eDU1IuJONV9r4OLgs6eeORSHqvlWG+ZtvzZy7VLj5Zlbs3OT8/OTE43R6fb4zMTkTr+uXk33Gh0a3pfOfKgj+9z+I/WXZ2bfmGvf/OOFLT8/Wr90fX5hrjW+9cdxJIqIZu+Wk1WDR4eGq0ZPtVvTVdWrW06m/+j6UhH/FSnGzzfS5/O2PP9/8wz/DfP/FzfvaJ/m/3+iZ1v5nSkV8fNI8Tt/9XR8vmrn0bjnmOVyfxcpTl74XC4Xh8ty3TZ0nivQmRlYlv2/SPFPv9hYtjsf8sn1smd2fGAfEeX4H4sU3/+L78Zv5m0bn/+w9fgf3byjfRr/p3q2Hd3wvIJdd508/qcixUtPvh2/lbd90PM/us/eOJEL330+xz6N/6d6tg3k7/3tvek6AAAAAAAAAADAI60vFfH3keKHw7X0Qt62k7//N7F5R/v0978+3bNtYm/WK/rQF7s+qAAAAABwQPSlIn4SKW4uvH13DvXG+d898z9/b33+51Da9Gn153y/Vj03YC///K/XQP7esd13GwAAAAAAAAAAAAAAAAAAAA6UlIp4Ia+nPlbN55/Ydj315Ujxyv88l8ul42W57jrwA9Wv9Ssz06cuTU3NjLcWWtenJhsjs63xybLuU5Fi9W8/l+sW1frq3fXmO2u8r6/FPhcphv+hW7azFnt3bfKn1sueKct+IlL89z9uLNtdx/pT62XPlmX/JlJ8/V+2Lnt8vey5sux3I8WPvt7olj1alu0+H/XT62WfH58p9mFUAAAAAAAAAAAAAAAAAAAAeNz0pSL+PFL8762lu3P58/r/fT1vK299s2e9/03uVOv8D1Tr/2/3+n7W/6+eK7C43bcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDHU4oi3owUs1dW03J/+b6jfrk9ffvO6NDw1tWOpKrmoap8+VM/c/bc+S+9MHihmx9cf699Jl4buXap8fLMrdm5yfn5yYnG6HR7fGZicsd72G39zU5WB6Bx6/XbEzduzDfOPn9uw8d3Bt7vf+L4wMXBZ0890y07OjQ8PNJTptZ3399+j7TN9sNRxF9Hiue+99P0w/6IInZ/LD7k3NlvR6pOnKw6MTo0XHVkqt2aXig/vNo9EEVEo6dSs3uMHsBY7EozYrFsftngk2X3RmZbc63rU5ONq625hfZCe2b6auq0tuxPI4q4kCKWImKl/97d9UURr0eK7xxbTf/aH3Goexy+eGXkq6fPbt+OYh/7uANlOxt9EUvFIzBmB1h/FPHPkeJn75yIf+uPqEXnJ74Q8WqZP4h4KzrjncoT43zEe1ucRzyaalHE/5fjf3E1vdNfXg+615XLX2t8ZfrGTE/Z7nXlkb8/PEgH/NpUjyJ+VF3xV9O/++8aAAAAAAAAAAAAAAAA4AAp4tcjxYvvnkjV/OC7c4rb0zcb11rXpzrT+rpz/7pzptfW1tYaqZPNnGM5F3Mu5VzOuZIzilw/Z7PM+traWH6/mHMp53LOlZxxKNfP2cw5lnMx51LO5ZwrOaOW6+ds5hzLuZhzKedyzpWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/YzWt9XfWlx6LTi5bD/Rj75cBAAD//5ym87Y=") syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.72956631s ago: executing program 5 (id=862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x44810, 0x0, 0x0) 7.608982806s ago: executing program 0 (id=863): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000010) getpid() r6 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x4000, @loopback}, 0x1c) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000006c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r6, @ANYBLOB="a89c9257e4a1015ae3d6903f845d147824be83d3f1c59f230cb48e1749045997b36c8d7431d4e3c07b5a61f434996c0169570dedf954d2362a607f1dff03eb831a826e61695249dced7e1c2cef74bb3fc13a3c836371b257c0308a90c9f2def4ff9d6ed9bc198e5e6dff44e93b2fd1d7e3be844bb9c1e172df0504afc3903b3ca60b89b9f3aeefb2cb2c432d2ea35f8b14d59b5a3f0648697be13096c3c95f2ff454e40f746067b7270abb9e7a2b38b249b96cc02390", @ANYRES16=r5, @ANYBLOB="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", @ANYRES8=r1], 0x2, 0xc35, &(0x7f0000002540)="$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") 7.444005793s ago: executing program 5 (id=864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737908320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) accept4(r0, &(0x7f0000000040)=@alg, 0x0, 0x400) r2 = fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0xee6, &(0x7f0000002d40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0186e86, &(0x7f0000000080)={@desc={0x40002, 0x0, @auto="58dba03d0702e96b"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB="168500"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$loop(0x0, 0x10000, 0x10d480) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="18080100000018ff000011cfcf81f5c8e34a819c99c3d163a3fe6d00"/37, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c000000150a01"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 6.111844872s ago: executing program 0 (id=865): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf2", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = fanotify_init(0x202, 0x1000) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(0x0, 0x0, 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000300), 0x24, 0x0) syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x6}}}}, 0xf) 4.671667947s ago: executing program 0 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737908320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) accept4(r0, &(0x7f0000000040)=@alg, 0x0, 0x400) r2 = fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0xee6, &(0x7f0000002d40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0186e86, &(0x7f0000000080)={@desc={0x40002, 0x0, @auto="58dba03d0702e96b"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB="168500"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$loop(0x0, 0x10000, 0x10d480) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="18080100000018ff000011cfcf81f5c8e34a819c99c3d163a3fe6d00"/37, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c000000150a01"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 3.399120046s ago: executing program 5 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737908320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) accept4(r0, &(0x7f0000000040)=@alg, 0x0, 0x400) r2 = fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0xee6, &(0x7f0000002d40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0186e86, &(0x7f0000000080)={@desc={0x40002, 0x0, @auto="58dba03d0702e96b"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB="168500"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$loop(0x0, 0x10000, 0x10d480) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="18080100000018ff000011cfcf81f5c8e34a819c99c3d163a3fe6d00"/37, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c000000150a01"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 3.361020336s ago: executing program 0 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737908320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) accept4(r0, &(0x7f0000000040)=@alg, 0x0, 0x400) r2 = fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0xee6, &(0x7f0000002d40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0186e86, &(0x7f0000000080)={@desc={0x40002, 0x0, @auto="58dba03d0702e96b"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB="168500"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$loop(0x0, 0x10000, 0x10d480) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="18080100000018ff000011cfcf81f5c8e34a819c99c3d163a3fe6d00"/37, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c000000150a01"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 1.952600991s ago: executing program 5 (id=869): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000010) getpid() r6 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x4000, @loopback}, 0x1c) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000006c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r6, @ANYBLOB="a89c9257e4a1015ae3d6903f845d147824be83d3f1c59f230cb48e1749045997b36c8d7431d4e3c07b5a61f434996c0169570dedf954d2362a607f1dff03eb831a826e61695249dced7e1c2cef74bb3fc13a3c836371b257c0308a90c9f2def4ff9d6ed9bc198e5e6dff44e93b2fd1d7e3be844bb9c1e172df0504afc3903b3ca60b89b9f3aeefb2cb2c432d2ea35f8b14d59b5a3f0648697be13096c3c95f2ff454e40f746067b7270abb9e7a2b38b249b96cc02390", @ANYRES16=r5, @ANYBLOB="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", @ANYRES8=r1], 0x2, 0xc35, &(0x7f0000002540)="$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") syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.888762ms ago: executing program 0 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737908320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) accept4(r0, &(0x7f0000000040)=@alg, 0x0, 0x400) r2 = fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1, 0xee6, &(0x7f0000002d40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBzj+p6c2IqEfEpfeg/KFRTBo19EAUiOkBUQlRpIhTxYGKC6VSilQkUKUq6qntqVVvPVSoFypVqRTUQxspcRX7zXr32cOux/asvfv7SZ/fvnmz833jjTYz49m3ARhYtaWfR45MZyG8+9mVY6+ezD65s+yR5hr7ln5msdcIIdRb+lmyvc/jgls3Lp1Yq83CoaWfeT88d7353PEQwkLYF66FRvhodv7LD997dv/Hb4zd9/bFs69t0e43pfsBAAD96Oqf5v/2xD//+NTUzat758Joc3l+fN6I/fF43H8gHijnx8u10N7PWqLVSLLeUIxast5Qst5wkme4IF892U69YL2RDvmGWpattZ8AAACwE+XntY2Q1Wba+rXazMzyef8dn0+OZDPnzsyfvtCjQgEAAIDS/nN56aZbIYQQQgghhBBC9HEsTvb6CgQAAAAwaNL5wlZZ2NyZuppba3SX//oztbWfD5ug6n//8u+s/B+87h0HAIDy+vVoMt+v/Dg6n8cgnUdwKHneOo//mxcDhpLtdqtoXsGdMt9gUZ3p73W7Kqp/va9jrxTVn86HuV0V1Z/O07ldFdU/WnEdZRXVP1ZxHWUV1b+r4jrKKqp/d8V1lFVU/3jFdZRVVP9ExXWUVVT/XRXXUVZR/XsqrqOsovp3ym21RfU3Kq6jrKL6pyquo6yi+u+uuI6yiuq/p+I6yiqq/96K6+iVh2Ob/x72JuOt58/pOd1OOccDAACAQfc/8/8JIYQQQgghRC9j5fbT3tci+jgu9/TqAwAAALAd5J8LyD/1vhjl40Mdxodbx8dWVsjH6x2eP9JhfLTDOAAAABDCb988/cA72crn/Dc4H15z3qhd4ZPbocQ8Rul8hOvNv9F5zzaaf6fMWwYAAMBgyb537faTx95/eerm1b1zLWe/t+P5bj4P6HC8NvBp7Of3BUwk/Sw/h55rz1MrWC+9PnBX0fae3+COAgAAwADLz98bIavNtJx3N0KtNjOzcj4+HerZ6TPzpw7Efv79LH+YrI/eWX6w4roBAACA7q2c7699/p9/j+90GMlmzp2ZP31huT/RXF6vtV4XmFxZnrVeF2gkyw8VLD8c+/n3d/5gctfS8pkTP5w/udk7DwAAAAPiwisXz74wP3/qRx544IEHzQe9fmcCAAA22xdfXKn/+PDE75Y//78y/13++f99sd+Ic/v9Oa6Q3yeQfw5g1ef1j7fnmSxa73z7eo1kvaEYo0ndYy3bCUvzDbY/b6ooX6N9OyMF+caTfBNJvnSeguFk/TzfnmR5Oj9hvt5ksjydh3E4yZEl+R8NAAAAUGz25ZfOz1545eLTZ1564cVTL546d/jQ0e8ePXrg4HcOzi7d1z/benc/AAAAsBOt3PTb/XP+vpUFAQAAAAAAAAAAAAAAAAAAwACq4uvEer2PAAAAMOj+fTmEsCCEEKVjcbT3NQghhBBCCCE6xOJi+k3zAAAAAFvr1o1LJ1rbVRayTc3X3Fpjubkd8+btxNN/nboT+WrXn2m/XrJ7U6th0FX971/+nZX/g9c3N/9Y/qDr979a+wbmyuV9fPaX0635HxzuMn+6/8+Xy78/yf946C7/4vtJ/uPl8j+R5N/dZf5V+3++XP4nY/7p2N//WLf521//0djm+7Gry/zfTvb/ZOg2f7L/jS4TJp6K+QFgENV6XcAWyY8S8uPo8djP9zcebob07of1Hv/Xku0Mb7jy9u3mx0H3x35+vDSR5M2tt/7xZHt3lawztVPuKimqf7Nex61WVH+94jrKKqp/pOI6yiqqf7TiOsoqqn+s4jrKKqq/2/PQXiuqf6dcVy6qf7ziOsoqqn+i4jrKKqp/vf+P90pR/XsqrqOsovonK66jrKL6S15Wq1xR/VMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0ykOxLTofzs8/J+NY3m8k/dE1fpf9em0BAAAAdpp/mf9PCCGEEO2x/GeB3tchhPjKWFxsHtRvwvb+u7is9/slRBJz26CGPomWdw0G0NZ+mhmA7cr7/2Dz+g82r/9g8/rzVfJ7+LOknxvqMD7cYbzeYXwkGU//vY52GL8n2e5ifl0zurfD+Nc6jO/pMH5/h/HpDuMPdBh/sMP4Qx3GAQAAGAz3xdb5IQAAAPSvV3/16Vu/efz4jambV/fOhZFV884fiP3R+Lf1N2M/nfc+V49/8/9J7P8itr+P7T+S9d1/AgAAAFsv/54Yf/8HAACA/pV/T6nzfwAAAOhfU7F1/g8AAAD96+7YOv8HAACAPpaNrb04tvl1gUdj2+28fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3r0nWxlvv/DyfituDxvV1lYvlKQ1dpn8t8V292x/VaX9aTfB9Bt/tyeLvNsVf7JDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpHbennkSPTWQjvfnbl2M9G3vrLnWWPNNfYt/Qzi71GCKHefF4+utL/dVzx1o1LJ1rb27HNwqGQhay5PDx3vZlpPISwEPaFa6ERPpqd//LD957d//EbY/e9ffHsa1v4K2jbPwAAAOhH/w8AAP//kQsoAA==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0186e86, &(0x7f0000000080)={@desc={0x40002, 0x0, @auto="58dba03d0702e96b"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB="168500"/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$loop(0x0, 0x10000, 0x10d480) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="18080100000018ff000011cfcf81f5c8e34a819c99c3d163a3fe6d0000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa420000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=ANY=[@ANYBLOB="1c000000150a01"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 0s ago: executing program 5 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x840000000002, 0x6, 0xff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) kernel console output (not intermixed with test programs): left promiscuous mode [ 378.506683][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.483238][ T30] audit: type=1800 audit(1746505028.983:17): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.501" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 379.889695][ T5832] Bluetooth: hci5: command tx timeout [ 382.001228][ T5832] Bluetooth: hci5: command tx timeout [ 382.602829][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.636527][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.659707][ T6004] bond0 (unregistering): Released all slaves [ 382.934126][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.951548][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.979821][ T6004] bond0 (unregistering): Released all slaves [ 383.027816][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.043731][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.065925][ T6004] bond0 (unregistering): Released all slaves [ 383.390401][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.405520][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.425268][ T6004] bond0 (unregistering): Released all slaves [ 383.863580][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.897856][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.926914][ T6004] bond0 (unregistering): Released all slaves [ 384.063285][ T5832] Bluetooth: hci5: command tx timeout [ 384.433288][ T6004] tipc: Left network mode [ 384.592178][ T6004] tipc: Left network mode [ 386.775658][ T8088] chnl_net:caif_netlink_parms(): no params data found [ 386.815840][ T30] audit: type=1800 audit(1746505036.313:18): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.512" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 387.907427][ T6004] hsr_slave_0: left promiscuous mode [ 387.919080][ T6004] hsr_slave_1: left promiscuous mode [ 387.941025][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.969409][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.109993][ T6004] hsr_slave_0: left promiscuous mode [ 388.219699][ T6004] hsr_slave_1: left promiscuous mode [ 388.234971][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.323755][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.479403][ T6004] hsr_slave_0: left promiscuous mode [ 388.504624][ T6004] hsr_slave_1: left promiscuous mode [ 388.510830][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.555243][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.629368][ T6004] hsr_slave_0: left promiscuous mode [ 388.637190][ T6004] hsr_slave_1: left promiscuous mode [ 388.644997][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.652574][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.674582][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.682188][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.927020][ T6004] hsr_slave_0: left promiscuous mode [ 388.941473][ T6004] hsr_slave_1: left promiscuous mode [ 388.947666][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.956339][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.964602][ T6004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.972097][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.017895][ T6004] veth1_macvtap: left promiscuous mode [ 389.023539][ T6004] veth0_macvtap: left promiscuous mode [ 389.082447][ T6004] veth1_macvtap: left promiscuous mode [ 389.089042][ T6004] veth0_macvtap: left promiscuous mode [ 389.103942][ T6004] veth1_vlan: left promiscuous mode [ 389.109521][ T6004] veth0_vlan: left promiscuous mode [ 390.142983][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 390.224880][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 390.708854][ T30] audit: type=1800 audit(1746505040.213:19): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.522" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 390.767853][ T8190] loop0: detected capacity change from 0 to 2048 [ 390.981096][ T8190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.042310][ T8190] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.319420][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 391.328893][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.411104][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 392.279432][ T8201] loop0: detected capacity change from 0 to 32768 [ 392.388018][ T8201] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 393.381344][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 393.457410][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 393.825768][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 395.149426][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 395.257253][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 396.016606][ T8221] loop0: detected capacity change from 0 to 32768 [ 396.047898][ T8221] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 397.170783][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 397.340980][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 397.419802][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 399.341211][ T7897] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 399.426685][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.444566][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.463694][ T8088] bridge_slave_0: entered allmulticast mode [ 399.486819][ T8088] bridge_slave_0: entered promiscuous mode [ 400.061308][ T7897] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 400.269805][ T7897] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 400.726238][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.753596][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.763446][ T8088] bridge_slave_1: entered allmulticast mode [ 400.771620][ T8088] bridge_slave_1: entered promiscuous mode [ 400.836947][ T8242] overlayfs: failed to clone upperpath [ 400.885173][ T7897] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.947937][ T8088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.185271][ T8088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.307255][ T7895] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 401.361405][ T7895] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 401.501758][ T8088] team0: Port device team_slave_0 added [ 401.545280][ T7895] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 401.608063][ T7895] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 401.666221][ T8088] team0: Port device team_slave_1 added [ 402.096198][ T8248] loop0: detected capacity change from 0 to 32768 [ 402.162072][ T8248] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 402.415516][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.422610][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.171823][ T8088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.182562][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 403.272201][ T8088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.294361][ T8088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.343412][ T8088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.760064][ T8088] hsr_slave_0: entered promiscuous mode [ 403.794640][ T8088] hsr_slave_1: entered promiscuous mode [ 403.801088][ T8088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.863463][ T8088] Cannot create hsr debugfs directory [ 404.597049][ T30] audit: type=1800 audit(1746505054.073:20): pid=8261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.540" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 405.534522][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 405.555059][ T8271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.561249][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 405.565547][ T8271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.577535][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 405.578247][ T8271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.604784][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 405.612078][ T8271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.621881][ T8271] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 405.622240][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.923403][ T5837] Bluetooth: hci6: command tx timeout [ 407.930563][ T5837] Bluetooth: hci1: command tx timeout [ 408.432681][ T8288] overlayfs: failed to clone upperpath [ 408.625057][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 408.648268][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 408.667041][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 408.682414][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 408.703939][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.969937][ T5832] Bluetooth: hci1: command tx timeout [ 409.993329][ T5837] Bluetooth: hci6: command tx timeout [ 410.551293][ T8304] loop0: detected capacity change from 0 to 2048 [ 410.638265][ T8304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.651295][ T8304] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.764005][ T5837] Bluetooth: hci3: command tx timeout [ 410.879931][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.387143][ T8088] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 411.416234][ T8088] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 412.131006][ T5837] Bluetooth: hci1: command tx timeout [ 412.136824][ T5832] Bluetooth: hci6: command tx timeout [ 412.425401][ T30] audit: type=1800 audit(1746505061.923:21): pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.555" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 412.832661][ T8267] chnl_net:caif_netlink_parms(): no params data found [ 412.869501][ T5837] Bluetooth: hci3: command tx timeout [ 413.050523][ T8088] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 414.003153][ T8088] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 414.223633][ T5837] Bluetooth: hci1: command tx timeout [ 414.229182][ T5837] Bluetooth: hci6: command tx timeout [ 415.029764][ T5832] Bluetooth: hci3: command tx timeout [ 415.262499][ T8290] chnl_net:caif_netlink_parms(): no params data found [ 415.394405][ T8345] overlayfs: failed to clone upperpath [ 415.584266][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 415.962378][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.023425][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.030919][ T8267] bridge_slave_0: entered allmulticast mode [ 416.047973][ T8267] bridge_slave_0: entered promiscuous mode [ 416.056827][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.065074][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.072380][ T8267] bridge_slave_1: entered allmulticast mode [ 416.082135][ T8267] bridge_slave_1: entered promiscuous mode [ 416.475195][ T8360] overlayfs: failed to clone upperpath [ 416.648191][ T8361] netlink: 96 bytes leftover after parsing attributes in process `syz.0.564'. [ 417.060585][ T8267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.084871][ T5832] Bluetooth: hci3: command tx timeout [ 417.119973][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.133034][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.167656][ T30] audit: type=1800 audit(1746505066.643:22): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.566" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 417.222873][ T8290] bridge_slave_0: entered allmulticast mode [ 417.265295][ T8290] bridge_slave_0: entered promiscuous mode [ 417.476747][ T8267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.764300][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.771575][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.792937][ T8290] bridge_slave_1: entered allmulticast mode [ 418.816649][ T8290] bridge_slave_1: entered promiscuous mode [ 419.099783][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.132751][ T8267] team0: Port device team_slave_0 added [ 419.151404][ T8267] team0: Port device team_slave_1 added [ 419.183474][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.194816][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.212839][ T8268] bridge_slave_0: entered allmulticast mode [ 419.224336][ T8268] bridge_slave_0: entered promiscuous mode [ 419.340851][ T8088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.381712][ T8088] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.484452][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.590343][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.623398][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.630939][ T8268] bridge_slave_1: entered allmulticast mode [ 419.642741][ T8268] bridge_slave_1: entered promiscuous mode [ 419.676797][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.684161][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.710745][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.718008][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.677729][ T8267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.693276][ T8267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.783082][ T8267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.799714][ T8267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.807286][ T8267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.847527][ T8267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.005909][ T8290] team0: Port device team_slave_0 added [ 421.054121][ T8290] team0: Port device team_slave_1 added [ 421.167454][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.305020][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.359978][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.393425][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.426132][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.526417][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.536685][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.564491][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.584598][ T8267] hsr_slave_0: entered promiscuous mode [ 421.591528][ T8267] hsr_slave_1: entered promiscuous mode [ 421.598624][ T8267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.612785][ T8267] Cannot create hsr debugfs directory [ 421.696138][ T8268] team0: Port device team_slave_0 added [ 422.025271][ T8268] team0: Port device team_slave_1 added [ 422.044758][ T8401] overlayfs: failed to clone upperpath [ 422.153375][ T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 422.234942][ T8290] hsr_slave_0: entered promiscuous mode [ 422.242053][ T8290] hsr_slave_1: entered promiscuous mode [ 422.260541][ T8290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.272634][ T8290] Cannot create hsr debugfs directory [ 422.333452][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 422.384904][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.400261][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.417826][ T52] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 422.934386][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.038380][ T52] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 423.047551][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.060722][ T52] usb 1-1: config 0 descriptor?? [ 423.065996][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.159486][ T8268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.185389][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.198419][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.229184][ T8268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.284497][ T30] audit: type=1800 audit(1746505072.793:23): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.577" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 423.353059][ T8088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.944560][ T52] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0003/input/input7 [ 425.137534][ T8268] hsr_slave_0: entered promiscuous mode [ 425.154412][ T8268] hsr_slave_1: entered promiscuous mode [ 425.175586][ T8268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.193377][ T8268] Cannot create hsr debugfs directory [ 425.396683][ T52] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0003/input/input8 [ 426.226696][ T52] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 426.479035][ T8425] overlayfs: failed to clone upperpath [ 426.591815][ T10] usb 1-1: USB disconnect, device number 4 [ 426.731586][ T30] audit: type=1800 audit(1746505076.233:24): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.581" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 426.995419][ T8429] loop0: detected capacity change from 0 to 32768 [ 427.029108][ T8429] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 428.695971][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 429.763159][ T8445] loop0: detected capacity change from 0 to 32768 [ 429.904053][ T8445] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 430.169612][ T8088] veth0_vlan: entered promiscuous mode [ 430.834901][ T6004] bridge_slave_1: left allmulticast mode [ 430.852243][ T6004] bridge_slave_1: left promiscuous mode [ 430.859245][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.860940][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 430.885408][ T6004] bridge_slave_0: left allmulticast mode [ 430.891086][ T6004] bridge_slave_0: left promiscuous mode [ 430.903437][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.982036][ T6004] bridge_slave_1: left allmulticast mode [ 431.002511][ T6004] bridge_slave_1: left promiscuous mode [ 431.013903][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.065163][ T6004] bridge_slave_0: left allmulticast mode [ 431.070888][ T6004] bridge_slave_0: left promiscuous mode [ 431.083451][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.107043][ T6004] bridge_slave_1: left allmulticast mode [ 431.112796][ T6004] bridge_slave_1: left promiscuous mode [ 431.133627][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.145485][ T6004] bridge_slave_0: left allmulticast mode [ 431.151145][ T6004] bridge_slave_0: left promiscuous mode [ 431.174059][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.197281][ T6004] bridge_slave_1: left allmulticast mode [ 431.202954][ T6004] bridge_slave_1: left promiscuous mode [ 431.223513][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.236205][ T6004] bridge_slave_0: left allmulticast mode [ 431.241868][ T6004] bridge_slave_0: left promiscuous mode [ 431.263617][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.284710][ T6004] bridge_slave_1: left allmulticast mode [ 431.290383][ T6004] bridge_slave_1: left promiscuous mode [ 431.324093][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.335941][ T6004] bridge_slave_0: left allmulticast mode [ 431.341609][ T6004] bridge_slave_0: left promiscuous mode [ 431.353768][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.422389][ T6004] bridge_slave_1: left allmulticast mode [ 431.436794][ T6004] bridge_slave_1: left promiscuous mode [ 431.446675][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.599198][ T6004] bridge_slave_0: left allmulticast mode [ 431.623401][ T6004] bridge_slave_0: left promiscuous mode [ 431.823989][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.914656][ T6004] bridge_slave_1: left allmulticast mode [ 431.920431][ T6004] bridge_slave_1: left promiscuous mode [ 431.934417][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.955664][ T6004] bridge_slave_0: left allmulticast mode [ 431.961416][ T6004] bridge_slave_0: left promiscuous mode [ 431.973999][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.393589][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 433.963483][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 433.970919][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.992381][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.019003][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 434.047258][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 434.080150][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.109772][ T10] usb 1-1: config 0 descriptor?? [ 434.143559][ T30] audit: type=1800 audit(1746505083.643:25): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.591" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 434.524889][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.592'. [ 434.667860][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0004/input/input9 [ 434.693538][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.709503][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.718119][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.726801][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.737932][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.838804][ T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0004/input/input10 [ 434.934976][ T10] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 435.526583][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.540994][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.552162][ T6004] bond0 (unregistering): Released all slaves [ 435.572934][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.588264][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.600818][ T6004] bond0 (unregistering): Released all slaves [ 435.626876][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.647776][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.659292][ T6004] bond0 (unregistering): Released all slaves [ 435.678773][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.690671][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.701499][ T6004] bond0 (unregistering): Released all slaves [ 435.727746][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.759991][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.766848][ C0] kye 0003:0458:5011.0004: usb_submit_urb(ctrl) failed: -1 [ 435.778626][ T6004] bond0 (unregistering): Released all slaves [ 435.798640][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.810444][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.821785][ T6004] bond0 (unregistering): Released all slaves [ 435.850695][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.863409][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.876597][ T6004] bond0 (unregistering): Released all slaves [ 435.907145][ T10] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 436.054042][ T8267] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 436.157679][ T8267] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 436.220806][ T8267] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 436.342321][ T8267] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 436.452757][ T6004] hsr_slave_0: left promiscuous mode [ 436.493020][ T6004] hsr_slave_1: left promiscuous mode [ 436.522095][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.573910][ T8480] loop0: detected capacity change from 0 to 764 [ 436.595516][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.642336][ T6004] hsr_slave_0: left promiscuous mode [ 436.883752][ T5837] Bluetooth: hci4: command tx timeout [ 436.890702][ T6004] hsr_slave_1: left promiscuous mode [ 436.905742][ T5933] usb 1-1: USB disconnect, device number 5 [ 436.945243][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.980887][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.072870][ T6004] hsr_slave_0: left promiscuous mode [ 437.090019][ T6004] hsr_slave_1: left promiscuous mode [ 437.098621][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.106890][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.149162][ T6004] hsr_slave_0: left promiscuous mode [ 437.160363][ T6004] hsr_slave_1: left promiscuous mode [ 437.167406][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.177598][ T8486] Symlink component flag not implemented [ 437.183696][ T8486] Symlink component flag not implemented (116) [ 437.193140][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.212638][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.229484][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.654246][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 437.699366][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 438.297069][ T8489] netlink: 96 bytes leftover after parsing attributes in process `syz.0.596'. [ 438.923684][ T5837] Bluetooth: hci4: command tx timeout [ 438.976716][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 439.334024][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.340759][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.349611][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 439.946232][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 440.040210][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 440.080465][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 440.103299][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 440.110825][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.142949][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.163280][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 440.177928][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 440.187201][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.204966][ T9] usb 1-1: config 0 descriptor?? [ 440.557941][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 440.599967][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 440.733543][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0005/input/input11 [ 440.883153][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0005/input/input12 [ 440.937988][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 440.973895][ T9] kye 0003:0458:5011.0005: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 441.003403][ T5837] Bluetooth: hci4: command tx timeout [ 441.101125][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 441.614609][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 441.649766][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 441.833871][ C1] kye 0003:0458:5011.0005: usb_submit_urb(ctrl) failed: -1 [ 441.973707][ T9] usb 1-1: reset high-speed USB device number 6 using dummy_hcd [ 442.116360][ T9] usb 1-1: device descriptor read/64, error -32 [ 443.126411][ T5837] Bluetooth: hci4: command tx timeout [ 443.191949][ T8473] chnl_net:caif_netlink_parms(): no params data found [ 443.592290][ T5891] usb 1-1: USB disconnect, device number 6 [ 443.622267][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 444.082262][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.100876][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.138035][ T8473] bridge_slave_0: entered allmulticast mode [ 444.156303][ T8473] bridge_slave_0: entered promiscuous mode [ 444.175539][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.182796][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.201693][ T8473] bridge_slave_1: entered allmulticast mode [ 444.223869][ T8473] bridge_slave_1: entered promiscuous mode [ 445.027633][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.044523][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.277479][ T8290] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 445.382282][ T8290] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 445.403040][ T8290] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 445.486027][ T8267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.610899][ T8473] team0: Port device team_slave_0 added [ 445.630201][ T8290] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 447.033411][ T8473] team0: Port device team_slave_1 added [ 447.136103][ T8557] overlayfs: failed to clone upperpath [ 447.301919][ T8267] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.306702][ T8562] loop0: detected capacity change from 0 to 16 [ 447.328299][ T8562] erofs (device loop0): mounted with root inode @ nid 36. [ 447.467747][ T8562] erofs (device loop0): corrupted dir block 8200 @ nid 36 [ 447.502590][ T8565] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 447.544263][ T8565] erofs (device loop0): readahead error at folio 9 @ nid 36 [ 447.574159][ T8565] syz.0.608: attempt to access beyond end of device [ 447.574159][ T8565] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 447.621311][ T8565] syz.0.608: attempt to access beyond end of device [ 447.621311][ T8565] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 447.681609][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.696344][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.062302][ T8473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.482263][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.533386][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.813847][ T8473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.933528][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.941016][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.259452][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.266673][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.386053][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.610'. [ 449.642672][ T8581] loop0: detected capacity change from 0 to 32768 [ 449.716196][ T8581] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 450.079582][ T8473] hsr_slave_0: entered promiscuous mode [ 450.105073][ T8473] hsr_slave_1: entered promiscuous mode [ 450.116561][ T8473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.142153][ T8473] Cannot create hsr debugfs directory [ 450.934289][ T8268] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 450.968144][ T8268] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 451.009224][ T8290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.306696][ T8268] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 451.329055][ T8268] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 451.567223][ T8290] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.672997][ T8606] overlayfs: failed to clone upperpath [ 451.839143][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.846416][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.856866][ T8609] netlink: 96 bytes leftover after parsing attributes in process `syz.5.614'. [ 452.007400][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.014666][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.117724][ T8612] overlayfs: failed to clone upperpath [ 452.220373][ T8267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.268895][ T8614] overlayfs: failed to clone upperpath [ 452.336190][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 454.382626][ T8290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.477927][ T8268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.570092][ T8268] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.704772][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.711954][ T5923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.825444][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.832768][ T5923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.182876][ T8290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.427258][ T8473] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 456.993282][ T8473] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 457.120568][ T8473] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 460.672302][ T8473] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 460.718499][ T8268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.743854][ T6004] bridge_slave_1: left allmulticast mode [ 460.752811][ T6004] bridge_slave_1: left promiscuous mode [ 460.767794][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.784021][ T6004] bridge_slave_0: left allmulticast mode [ 460.935834][ T6004] bridge_slave_0: left promiscuous mode [ 460.941733][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.205030][ T5892] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 462.108951][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 462.130040][ T5892] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 462.147845][ T5892] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 462.161315][ T5892] usb 1-1: config 1 has no interface number 1 [ 462.169563][ T5892] usb 1-1: config 1 interface 2 has no altsetting 0 [ 462.319908][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.339372][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.358100][ T6004] bond0 (unregistering): Released all slaves [ 462.474599][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 462.488650][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.498629][ T5892] usb 1-1: Product: syz [ 462.502819][ T5892] usb 1-1: Manufacturer: syz [ 462.513085][ T5892] usb 1-1: SerialNumber: syz [ 463.533613][ T5892] usb 1-1: can't set config #1, error -71 [ 463.557216][ T5892] usb 1-1: USB disconnect, device number 7 [ 463.801330][ T6004] hsr_slave_0: left promiscuous mode [ 463.834384][ T6004] hsr_slave_1: left promiscuous mode [ 463.850845][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.868420][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.893092][ T6004] veth0_vlan: left promiscuous mode [ 465.164729][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.192129][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.208046][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.217761][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.228446][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.293392][ T5837] Bluetooth: hci5: command tx timeout [ 467.496760][ T8713] netlink: 96 bytes leftover after parsing attributes in process `syz.5.633'. [ 467.658852][ T8716] loop0: detected capacity change from 0 to 16 [ 467.768485][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 467.778678][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 467.786704][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 467.795698][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 467.804069][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 467.843008][ T8716] erofs (device loop0): mounted with root inode @ nid 36. [ 467.882967][ T8716] erofs (device loop0): corrupted dir block 8200 @ nid 36 [ 467.895903][ T8716] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 467.922247][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 467.930514][ T8716] erofs (device loop0): readahead error at folio 9 @ nid 36 [ 467.954580][ T8716] syz.0.634: attempt to access beyond end of device [ 467.954580][ T8716] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 468.138886][ T8716] syz.0.634: attempt to access beyond end of device [ 468.138886][ T8716] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 468.789592][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 468.799757][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 468.807798][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 468.816846][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 468.841372][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 468.913072][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 468.945183][ T8727] loop0: detected capacity change from 0 to 16 [ 468.972489][ T8727] erofs (device loop0): mounted with root inode @ nid 36. [ 469.026416][ T8727] erofs (device loop0): corrupted dir block 8200 @ nid 36 [ 469.323407][ T5832] Bluetooth: hci5: command tx timeout [ 469.841696][ T8732] loop0: detected capacity change from 0 to 32768 [ 469.893927][ T5832] Bluetooth: hci7: command tx timeout [ 470.127416][ T8732] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 470.923688][ T5832] Bluetooth: hci8: command tx timeout [ 470.970641][ T8267] veth0_vlan: entered promiscuous mode [ 471.028857][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 471.403293][ T5832] Bluetooth: hci5: command tx timeout [ 471.973369][ T5832] Bluetooth: hci7: command tx timeout [ 473.006147][ T5832] Bluetooth: hci8: command tx timeout [ 473.548933][ T5832] Bluetooth: hci5: command tx timeout [ 474.096359][ T5832] Bluetooth: hci7: command tx timeout [ 474.587387][ T8766] loop0: detected capacity change from 0 to 32768 [ 474.625322][ T8770] overlayfs: failed to clone upperpath [ 474.676255][ T8766] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 474.718953][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.085844][ T5832] Bluetooth: hci8: command tx timeout [ 475.413901][ T5826] ocfs2: Unmounting device (7,0) on (node local) [ 475.422441][ T8778] overlayfs: failed to clone upperpath [ 475.641808][ T30] audit: type=1800 audit(1746505125.143:26): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.646" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 477.050237][ T5832] Bluetooth: hci7: command tx timeout [ 477.163468][ T5832] Bluetooth: hci8: command tx timeout [ 478.170051][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 478.776454][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.347473][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 480.366798][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.374050][ T7062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.865353][ T8696] chnl_net:caif_netlink_parms(): no params data found [ 480.915370][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.922648][ T7062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.946914][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.960346][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.968004][ T8723] bridge_slave_0: entered allmulticast mode [ 480.978109][ T8723] bridge_slave_0: entered promiscuous mode [ 481.187077][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.201458][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.240750][ T8723] bridge_slave_1: entered allmulticast mode [ 481.267147][ T8723] bridge_slave_1: entered promiscuous mode [ 482.510898][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.523856][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.535508][ T8719] bridge_slave_0: entered allmulticast mode [ 482.565401][ T8719] bridge_slave_0: entered promiscuous mode [ 482.581774][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.602472][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.610707][ T8719] bridge_slave_1: entered allmulticast mode [ 482.625555][ T8719] bridge_slave_1: entered promiscuous mode [ 483.125264][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.161311][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.286483][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.304024][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.311432][ T8696] bridge_slave_0: entered allmulticast mode [ 483.335921][ T8696] bridge_slave_0: entered promiscuous mode [ 483.378551][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.403455][ T8696] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.410894][ T8696] bridge_slave_1: entered allmulticast mode [ 483.438875][ T8696] bridge_slave_1: entered promiscuous mode [ 484.522279][ T8866] overlayfs: failed to clone upperpath [ 484.812600][ T8719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.519478][ T8719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.657050][ T8723] team0: Port device team_slave_0 added [ 487.042749][ T8696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.076940][ T8696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.279188][ T8723] team0: Port device team_slave_1 added [ 488.653238][ T30] audit: type=1800 audit(1746505138.153:27): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.662" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 488.736548][ T8719] team0: Port device team_slave_0 added [ 489.025061][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.032119][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.003388][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.055955][ T8696] team0: Port device team_slave_0 added [ 490.073859][ T8719] team0: Port device team_slave_1 added [ 490.194917][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.212222][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.283574][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.405573][ T8696] team0: Port device team_slave_1 added [ 491.648302][ T8473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.150661][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.173291][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.241909][ T8719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.275916][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.318633][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.393338][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.474818][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.492183][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.502958][ T8930] loop0: detected capacity change from 0 to 2048 [ 493.581110][ T8696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.608039][ T8930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.621640][ T8930] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.645848][ T8696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.652839][ T8696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.679341][ T8696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.817094][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.276600][ T8723] hsr_slave_0: entered promiscuous mode [ 494.287016][ T8946] loop0: detected capacity change from 0 to 4096 [ 494.314558][ T8723] hsr_slave_1: entered promiscuous mode [ 494.320918][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.377532][ T8723] Cannot create hsr debugfs directory [ 494.620137][ T8954] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.439569][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 495.516791][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 496.112555][ T8696] hsr_slave_0: entered promiscuous mode [ 496.146851][ T8696] hsr_slave_1: entered promiscuous mode [ 496.174643][ T8696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.829301][ T8696] Cannot create hsr debugfs directory [ 496.976016][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.993116][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.011847][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.032480][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.040487][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.603864][ T5832] Bluetooth: hci1: command tx timeout [ 500.445255][ T8719] hsr_slave_0: entered promiscuous mode [ 500.465349][ T8719] hsr_slave_1: entered promiscuous mode [ 500.490433][ T8719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.506781][ T8719] Cannot create hsr debugfs directory [ 501.643581][ T5832] Bluetooth: hci1: command tx timeout [ 501.653782][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.660226][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.007799][ T5832] Bluetooth: hci1: command tx timeout [ 504.852515][ T30] audit: type=1800 audit(1746505154.353:28): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.684" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 505.033292][ T5888] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 506.043335][ T5832] Bluetooth: hci1: command tx timeout [ 506.111322][ T5888] usb 1-1: not running at top speed; connect to a high speed hub [ 506.150093][ T5888] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 506.170586][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.231140][ T5888] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.250736][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.263828][ T5888] usb 1-1: Product: syz [ 506.268064][ T5888] usb 1-1: Manufacturer: syz [ 506.283435][ T5888] usb 1-1: SerialNumber: syz [ 506.540060][ T5888] usb 1-1: 0:2 : does not exist [ 506.610133][ T5888] usb 1-1: USB disconnect, device number 8 [ 506.719307][ T8918] udevd[8918]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.016062][ T9053] loop0: detected capacity change from 0 to 2048 [ 508.185590][ T9053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.252597][ T9053] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.932988][ T9053] syz.0.690 (9053) used greatest stack depth: 20264 bytes left [ 509.180063][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.174872][ T8961] chnl_net:caif_netlink_parms(): no params data found [ 512.602734][ T30] audit: type=1800 audit(1746505162.103:29): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.695" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 514.172205][ T8723] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 514.225458][ T8723] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 514.372478][ T8961] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.379906][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.387440][ T8961] bridge_slave_0: entered allmulticast mode [ 514.395661][ T8961] bridge_slave_0: entered promiscuous mode [ 514.406454][ T8723] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 514.633407][ T8723] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 514.741357][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.762879][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.809964][ T8723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.820618][ T8723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.857666][ T8961] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.865343][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.872640][ T8961] bridge_slave_1: entered allmulticast mode [ 514.881599][ T8961] bridge_slave_1: entered promiscuous mode [ 516.393800][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.401052][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.432230][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.439497][ T6309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.486060][ T9130] loop0: detected capacity change from 0 to 1024 [ 516.645602][ T9130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.776428][ T8961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.939386][ T8961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.063895][ T9137] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 518.182495][ T6004] bridge_slave_1: left allmulticast mode [ 518.203343][ T6004] bridge_slave_1: left promiscuous mode [ 518.209165][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.054486][ T6004] bridge_slave_0: left allmulticast mode [ 519.060186][ T6004] bridge_slave_0: left promiscuous mode [ 519.080798][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.150424][ T6004] bridge_slave_1: left allmulticast mode [ 519.177261][ T6004] bridge_slave_1: left promiscuous mode [ 520.147713][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.158779][ T6004] bridge_slave_0: left allmulticast mode [ 520.165061][ T6004] bridge_slave_0: left promiscuous mode [ 520.175383][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.198527][ T6004] bridge_slave_1: left allmulticast mode [ 520.211587][ T6004] bridge_slave_1: left promiscuous mode [ 520.219822][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.251263][ T6004] bridge_slave_0: left allmulticast mode [ 520.275348][ T6004] bridge_slave_0: left promiscuous mode [ 520.282405][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.724434][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.056751][ T9173] netlink: 96 bytes leftover after parsing attributes in process `syz.5.707'. [ 522.571897][ T9182] loop0: detected capacity change from 0 to 2048 [ 522.606630][ T9182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.651425][ T9182] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.849471][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.210100][ T9191] overlayfs: failed to resolve './file0': -2 [ 525.233612][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.246765][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.257574][ T6004] bond0 (unregistering): Released all slaves [ 525.349045][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.365083][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.378244][ T6004] bond0 (unregistering): Released all slaves [ 525.505416][ T9199] netlink: 96 bytes leftover after parsing attributes in process `syz.5.713'. [ 526.946869][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.963999][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 526.972020][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 527.545740][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 527.579616][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 528.013981][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.033790][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.055681][ T6004] bond0 (unregistering): Released all slaves [ 528.242887][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.271919][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.295614][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.330487][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.335238][ T8961] team0: Port device team_slave_0 added [ 528.354261][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.356264][ T8961] team0: Port device team_slave_1 added [ 528.578716][ T6004] hsr_slave_0: left promiscuous mode [ 528.585655][ T6004] hsr_slave_1: left promiscuous mode [ 528.616226][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.656929][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.711448][ T6004] hsr_slave_0: left promiscuous mode [ 528.721627][ T30] audit: type=1800 audit(1746505178.223:30): pid=9228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.719" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 528.799095][ T6004] hsr_slave_1: left promiscuous mode [ 528.815002][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.839411][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.871676][ T6004] hsr_slave_0: left promiscuous mode [ 528.889180][ T6004] hsr_slave_1: left promiscuous mode [ 528.899236][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.912511][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.152210][ T6004] veth0_vlan: left promiscuous mode [ 529.268932][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 529.281059][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 529.290014][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 529.300597][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 529.308872][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 529.596717][ T9236] loop0: detected capacity change from 0 to 256 [ 529.651486][ T5837] Bluetooth: hci3: command tx timeout [ 529.672686][ T9236] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 530.969129][ T5837] Bluetooth: hci4: command tx timeout [ 530.994951][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 531.223933][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 531.404838][ T5837] Bluetooth: hci6: command tx timeout [ 531.723347][ T5837] Bluetooth: hci3: command tx timeout [ 533.179259][ T5837] Bluetooth: hci4: command tx timeout [ 533.630972][ T5837] Bluetooth: hci6: command tx timeout [ 533.975325][ T5837] Bluetooth: hci3: command tx timeout [ 534.633611][ T30] audit: type=1800 audit(1746505184.133:31): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.728" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 535.242053][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 535.243666][ T5837] Bluetooth: hci4: command tx timeout [ 535.290702][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 535.700662][ T5837] Bluetooth: hci6: command tx timeout [ 535.853017][ T9269] loop0: detected capacity change from 0 to 16 [ 535.861547][ T9269] erofs (device loop0): mounted with root inode @ nid 36. [ 535.892481][ T9269] erofs (device loop0): corrupted dir block 8200 @ nid 36 [ 535.902818][ T9269] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 535.910584][ T9269] erofs (device loop0): readahead error at folio 9 @ nid 36 [ 535.918495][ T9269] syz.0.731: attempt to access beyond end of device [ 535.918495][ T9269] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 535.932742][ T9269] syz.0.731: attempt to access beyond end of device [ 535.932742][ T9269] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 536.043832][ T5837] Bluetooth: hci3: command tx timeout [ 536.988684][ T9275] loop0: detected capacity change from 0 to 256 [ 537.029940][ T9275] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 537.275301][ T9278] netlink: 96 bytes leftover after parsing attributes in process `syz.5.734'. [ 537.324783][ T5837] Bluetooth: hci4: command tx timeout [ 537.773443][ T5837] Bluetooth: hci6: command tx timeout [ 539.081898][ T9288] loop0: detected capacity change from 0 to 512 [ 539.226401][ T30] audit: type=1800 audit(1746505188.733:32): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.737" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 539.233940][ T9288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 539.266340][ T9288] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.401675][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 539.483167][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 540.443398][ T9300] overlay: ./file2 is not a directory [ 541.147619][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 541.924068][ T9310] loop0: detected capacity change from 0 to 16 [ 542.508290][ T9310] erofs (device loop0): mounted with root inode @ nid 36. [ 542.528441][ T9310] erofs (device loop0): corrupted dir block 8200 @ nid 36 [ 542.536639][ T9310] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 542.544462][ T9310] erofs (device loop0): readahead error at folio 9 @ nid 36 [ 542.552499][ T9310] syz.0.741: attempt to access beyond end of device [ 542.552499][ T9310] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 542.566779][ T9310] syz.0.741: attempt to access beyond end of device [ 542.566779][ T9310] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 543.053866][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.060945][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.161392][ T8961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.320332][ T8961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.335441][ T8961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.716765][ T9322] loop0: detected capacity change from 0 to 2048 [ 543.924936][ T9322] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 543.934459][ T9322] UDF-fs: Scanning with blocksize 512 failed [ 543.969444][ T9322] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 543.984792][ T9322] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 543.992512][ T9322] UDF-fs: Scanning with blocksize 1024 failed [ 544.008215][ T9322] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 544.026661][ T9322] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 544.036574][ T9322] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 544.044400][ T9322] UDF-fs: Scanning with blocksize 2048 failed [ 544.053276][ T9322] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 544.065070][ T9322] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 544.077129][ T9322] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 544.086897][ T9322] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 544.094739][ T9322] UDF-fs: Scanning with blocksize 4096 failed [ 544.100815][ T9322] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 544.123429][ T8961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.949530][ T8961] hsr_slave_0: entered promiscuous mode [ 544.968950][ T8961] hsr_slave_1: entered promiscuous mode [ 544.982930][ T8961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.998145][ T8961] Cannot create hsr debugfs directory [ 545.409562][ T30] audit: type=1800 audit(1746505194.903:33): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.746" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 547.111896][ T9369] overlayfs: failed to clone upperpath [ 547.410486][ T9374] loop0: detected capacity change from 0 to 512 [ 547.501438][ T9374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 547.522700][ T9374] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.419413][ T9381] overlay: ./file2 is not a directory [ 549.619600][ T9233] chnl_net:caif_netlink_parms(): no params data found [ 549.711861][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 550.972333][ T9213] chnl_net:caif_netlink_parms(): no params data found [ 552.775664][ T9221] chnl_net:caif_netlink_parms(): no params data found [ 554.952420][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.975885][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.999057][ T9233] bridge_slave_0: entered allmulticast mode [ 555.017253][ T9233] bridge_slave_0: entered promiscuous mode [ 555.217686][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.263513][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.273999][ T9233] bridge_slave_1: entered allmulticast mode [ 555.282985][ T9233] bridge_slave_1: entered promiscuous mode [ 555.328878][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.360070][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.379393][ T9221] bridge_slave_0: entered allmulticast mode [ 555.401572][ T9221] bridge_slave_0: entered promiscuous mode [ 555.512769][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 555.526689][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 555.550745][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 555.664748][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 555.672530][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 555.709234][ T9233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.734057][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.762287][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.782248][ T9221] bridge_slave_1: entered allmulticast mode [ 555.823457][ T9221] bridge_slave_1: entered promiscuous mode [ 555.997927][ T9213] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.061918][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.082265][ T9213] bridge_slave_0: entered allmulticast mode [ 556.223960][ T9213] bridge_slave_0: entered promiscuous mode [ 556.581821][ T9233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.851844][ T9221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.994530][ T9443] loop0: detected capacity change from 0 to 512 [ 557.089141][ T9221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.101203][ T9443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 557.118344][ T9213] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.123429][ T9443] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.138947][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.146649][ T9213] bridge_slave_1: entered allmulticast mode [ 557.154788][ T9213] bridge_slave_1: entered promiscuous mode [ 557.791362][ T5832] Bluetooth: hci5: command tx timeout [ 557.894931][ T9452] overlay: ./file2 is not a directory [ 558.564976][ T9233] team0: Port device team_slave_0 added [ 558.837159][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 559.050746][ T9213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.112290][ T9213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.144393][ T9233] team0: Port device team_slave_1 added [ 559.239183][ T9460] overlayfs: failed to clone upperpath [ 560.146520][ T9221] team0: Port device team_slave_0 added [ 560.172776][ T9221] team0: Port device team_slave_1 added [ 560.545331][ T5832] Bluetooth: hci5: command tx timeout [ 562.234211][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.240649][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.414382][ T9478] overlayfs: failed to clone upperpath [ 562.980235][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.268047][ T5832] Bluetooth: hci5: command tx timeout [ 563.283438][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.317952][ T9221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.352409][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.371574][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.418404][ T9221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.675310][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.682534][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.712096][ T9233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.730678][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.878757][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.159657][ T9233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.577655][ T5832] Bluetooth: hci5: command tx timeout [ 565.917197][ T9492] loop0: detected capacity change from 0 to 512 [ 565.929353][ T9213] team0: Port device team_slave_0 added [ 566.025611][ T9492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 566.038905][ T9492] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.237751][ T9213] team0: Port device team_slave_1 added [ 567.037026][ T9233] hsr_slave_0: entered promiscuous mode [ 567.062108][ T9233] hsr_slave_1: entered promiscuous mode [ 567.081714][ T9233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.090622][ T9233] Cannot create hsr debugfs directory [ 567.262888][ T9221] hsr_slave_0: entered promiscuous mode [ 567.296185][ T9221] hsr_slave_1: entered promiscuous mode [ 567.302659][ T9221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.351536][ T9221] Cannot create hsr debugfs directory [ 567.417431][ T9498] overlay: ./file2 is not a directory [ 567.534389][ T9505] overlayfs: failed to clone upperpath [ 568.415582][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.422663][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.524525][ T9213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.575928][ T9213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.582943][ T9213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.700903][ T9213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.971102][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 572.820327][ T9213] hsr_slave_0: entered promiscuous mode [ 572.827309][ T9213] hsr_slave_1: entered promiscuous mode [ 572.833849][ T9213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.851093][ T9213] Cannot create hsr debugfs directory [ 573.775842][ T30] audit: type=1800 audit(1746505223.283:34): pid=9537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.776" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 574.145659][ T9434] chnl_net:caif_netlink_parms(): no params data found [ 576.118878][ T9559] loop0: detected capacity change from 0 to 512 [ 576.318018][ T9559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 576.333004][ T9559] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.500155][ T6004] bridge_slave_1: left allmulticast mode [ 576.512529][ T6004] bridge_slave_1: left promiscuous mode [ 576.526695][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.546496][ T6004] bridge_slave_0: left allmulticast mode [ 576.552276][ T6004] bridge_slave_0: left promiscuous mode [ 576.562721][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.582596][ T6004] bridge_slave_1: left allmulticast mode [ 576.590151][ T6004] bridge_slave_1: left promiscuous mode [ 576.620873][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.630942][ T6004] bridge_slave_0: left allmulticast mode [ 576.638650][ T6004] bridge_slave_0: left promiscuous mode [ 576.644611][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.656135][ T6004] bridge_slave_1: left allmulticast mode [ 576.661866][ T6004] bridge_slave_1: left promiscuous mode [ 576.668405][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.716143][ T6004] bridge_slave_0: left allmulticast mode [ 576.749856][ T9568] overlay: ./file2 is not a directory [ 576.782494][ T6004] bridge_slave_0: left promiscuous mode [ 576.792857][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.408926][ T6004] bridge_slave_1: left allmulticast mode [ 577.423257][ T6004] bridge_slave_1: left promiscuous mode [ 577.459563][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.551433][ T6004] bridge_slave_0: left allmulticast mode [ 577.585764][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 577.595292][ T6004] bridge_slave_0: left promiscuous mode [ 577.601200][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.817066][ T6004] bridge_slave_1: left allmulticast mode [ 577.822828][ T6004] bridge_slave_1: left promiscuous mode [ 577.929678][ T9573] overlayfs: failed to clone upperpath [ 578.583515][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.719393][ T6004] bridge_slave_0: left allmulticast mode [ 578.725301][ T6004] bridge_slave_0: left promiscuous mode [ 578.731191][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.365122][ T9582] loop0: detected capacity change from 0 to 2048 [ 579.468615][ T9582] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 579.477817][ T9582] UDF-fs: Scanning with blocksize 512 failed [ 579.514505][ T9582] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 579.533380][ T9582] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 579.541276][ T9582] UDF-fs: Scanning with blocksize 1024 failed [ 579.560479][ T9582] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 579.575664][ T9582] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 579.585461][ T9582] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 579.593251][ T9582] UDF-fs: Scanning with blocksize 2048 failed [ 579.607059][ T9582] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 579.621262][ T9582] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 579.637696][ T9582] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 579.647591][ T9582] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 579.655367][ T9582] UDF-fs: Scanning with blocksize 4096 failed [ 579.661445][ T9582] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 582.188770][ T9591] loop0: detected capacity change from 0 to 2048 [ 582.213559][ T9591] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 582.221837][ T9591] UDF-fs: Scanning with blocksize 512 failed [ 582.229919][ T9591] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 582.241039][ T9591] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 582.248758][ T9591] UDF-fs: Scanning with blocksize 1024 failed [ 582.256172][ T9591] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 582.268616][ T9591] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 582.278248][ T9591] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 582.288175][ T9591] UDF-fs: Scanning with blocksize 2048 failed [ 582.294909][ T9591] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 582.305348][ T9591] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 582.319721][ T9591] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 582.329378][ T9591] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 582.337085][ T9591] UDF-fs: Scanning with blocksize 4096 failed [ 582.343151][ T9591] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 582.730059][ T9594] loop0: detected capacity change from 0 to 512 [ 582.807450][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.789'. [ 582.817454][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.789'. [ 582.884129][ T9594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 582.914882][ T9594] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.549345][ T9603] overlay: ./file2 is not a directory [ 585.072278][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.467142][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.485887][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 585.530059][ T6004] bond0 (unregistering): Released all slaves [ 585.551512][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.608641][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.629411][ T6004] bond0 (unregistering): Released all slaves [ 585.648858][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.670757][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.685383][ T6004] bond0 (unregistering): Released all slaves [ 585.782434][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.794317][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.809371][ T6004] bond0 (unregistering): Released all slaves [ 585.920985][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.931956][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.942578][ T6004] bond0 (unregistering): Released all slaves [ 586.021792][ T9434] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.048298][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.078662][ T9434] bridge_slave_0: entered allmulticast mode [ 586.087928][ T9434] bridge_slave_0: entered promiscuous mode [ 586.101922][ T9434] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.110915][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.120755][ T9434] bridge_slave_1: entered allmulticast mode [ 586.150936][ T9434] bridge_slave_1: entered promiscuous mode [ 586.727114][ T9618] loop0: detected capacity change from 0 to 16 [ 586.744424][ T9618] erofs (device loop0): mounted with root inode @ nid 36. [ 586.754469][ T9618] erofs (device loop0): corrupted dir block 8200 @ nid 36 [ 586.762629][ T9618] erofs (device loop0): readahead error at folio 12 @ nid 36 [ 586.770601][ T9618] erofs (device loop0): readahead error at folio 9 @ nid 36 [ 586.778433][ T9618] syz.0.793: attempt to access beyond end of device [ 586.778433][ T9618] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 586.792665][ T9618] syz.0.793: attempt to access beyond end of device [ 586.792665][ T9618] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 587.080861][ T6004] hsr_slave_0: left promiscuous mode [ 587.231881][ T6004] hsr_slave_1: left promiscuous mode [ 587.260880][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.338008][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.411104][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.423883][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 587.437632][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 587.451103][ T6004] hsr_slave_0: left promiscuous mode [ 587.459105][ T6004] hsr_slave_1: left promiscuous mode [ 587.474729][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.476056][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 587.491884][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.505795][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 587.544160][ T6004] hsr_slave_0: left promiscuous mode [ 587.559861][ T6004] hsr_slave_1: left promiscuous mode [ 587.570097][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.591781][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.627727][ T6004] hsr_slave_0: left promiscuous mode [ 587.640229][ T6004] hsr_slave_1: left promiscuous mode [ 587.646789][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.664024][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.729883][ T6004] hsr_slave_0: left promiscuous mode [ 587.739125][ T6004] hsr_slave_1: left promiscuous mode [ 587.764210][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.794354][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.443993][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 588.468614][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 588.479929][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 588.545869][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.554454][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.805732][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 588.909249][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 589.391759][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 589.427163][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 589.563506][ T5837] Bluetooth: hci1: command tx timeout [ 589.696976][ T30] audit: type=1800 audit(1746505239.203:35): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.796" name="nullb0" dev="tmpfs" ino=772 res=0 errno=0 [ 589.717950][ T9634] loop0: detected capacity change from 0 to 1024 [ 589.811591][ T9634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.918369][ T9631] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 590.934534][ T9631] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 590.942435][ T5837] Bluetooth: hci3: command tx timeout [ 590.953933][ T9631] EXT4-fs (loop0): This should not happen!! Data will be lost [ 590.953933][ T9631] [ 590.963743][ T9631] EXT4-fs (loop0): Total free blocks count 0 [ 590.969894][ T9631] EXT4-fs (loop0): Free/Dirty block details [ 590.975911][ T9631] EXT4-fs (loop0): free_blocks=68451041280 [ 590.981800][ T9631] EXT4-fs (loop0): dirty_blocks=32 [ 590.987069][ T9631] EXT4-fs (loop0): Block reservation details [ 590.993129][ T9631] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 591.135169][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 591.154092][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.165276][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 591.184072][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 591.193006][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 591.202946][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 591.258666][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 591.361195][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 591.643336][ T5837] Bluetooth: hci1: command tx timeout [ 592.413381][ T9640] overlayfs: failed to clone upperpath [ 593.013345][ T5837] Bluetooth: hci3: command tx timeout [ 593.243439][ T5837] Bluetooth: hci7: command tx timeout [ 593.289021][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 593.386251][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 593.742222][ T5837] Bluetooth: hci1: command tx timeout [ 595.093498][ T5837] Bluetooth: hci3: command tx timeout [ 595.323459][ T5837] Bluetooth: hci7: command tx timeout [ 595.813413][ T5837] Bluetooth: hci1: command tx timeout [ 596.234481][ T9671] loop0: detected capacity change from 0 to 256 [ 596.281742][ T9671] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 596.600493][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 597.313375][ T5837] Bluetooth: hci3: command tx timeout [ 597.403421][ T5837] Bluetooth: hci7: command tx timeout [ 597.571798][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 599.483515][ T5837] Bluetooth: hci7: command tx timeout [ 600.473925][ T9695] loop0: detected capacity change from 0 to 512 [ 600.637521][ T9695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 600.678344][ T9434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.711831][ T9695] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.424712][ T9703] overlay: ./file2 is not a directory [ 602.290435][ T9434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.292035][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 602.540306][ T9707] loop0: detected capacity change from 0 to 764 [ 602.559223][ T9434] team0: Port device team_slave_0 added [ 602.865889][ T9709] overlayfs: failed to clone upperpath [ 603.685944][ T9712] Symlink component flag not implemented [ 603.691774][ T9712] Symlink component flag not implemented (116) [ 603.967671][ T9434] team0: Port device team_slave_1 added [ 605.444106][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.451218][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.695920][ T9434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.940657][ T9434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.693241][ T9434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.720291][ T9434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.797321][ T9733] loop0: detected capacity change from 0 to 512 [ 607.951129][ T9733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 607.971164][ T9733] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.230597][ T9434] hsr_slave_0: entered promiscuous mode [ 608.241955][ T9434] hsr_slave_1: entered promiscuous mode [ 608.251691][ T9434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.333487][ T9738] overlay: ./file2 is not a directory [ 608.629624][ T9434] Cannot create hsr debugfs directory [ 609.279802][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 610.026345][ T9643] chnl_net:caif_netlink_parms(): no params data found [ 610.179885][ T9748] loop0: detected capacity change from 0 to 1024 [ 610.222766][ T9748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.438938][ T9757] overlayfs: failed to clone upperpath [ 611.000792][ T9747] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 611.016249][ T9747] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 611.028753][ T9747] EXT4-fs (loop0): This should not happen!! Data will be lost [ 611.028753][ T9747] [ 611.038682][ T9747] EXT4-fs (loop0): Total free blocks count 0 [ 611.044782][ T9747] EXT4-fs (loop0): Free/Dirty block details [ 611.050752][ T9747] EXT4-fs (loop0): free_blocks=68451041280 [ 611.056688][ T9747] EXT4-fs (loop0): dirty_blocks=32 [ 611.061866][ T9747] EXT4-fs (loop0): Block reservation details [ 611.068005][ T9747] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 611.150555][ T9621] chnl_net:caif_netlink_parms(): no params data found [ 611.388213][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.504401][ T9643] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.511671][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.533653][ T9643] bridge_slave_0: entered allmulticast mode [ 611.541768][ T9643] bridge_slave_0: entered promiscuous mode [ 611.595432][ T9626] chnl_net:caif_netlink_parms(): no params data found [ 611.729072][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.736619][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.753458][ T9643] bridge_slave_1: entered allmulticast mode [ 611.761377][ T9643] bridge_slave_1: entered promiscuous mode [ 611.843637][ T9769] overlayfs: failed to clone upperpath [ 612.808883][ T9774] loop0: detected capacity change from 0 to 1024 [ 612.888257][ T9774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.054284][ T9643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.124923][ T9643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.436032][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.449726][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.458442][ T9621] bridge_slave_0: entered allmulticast mode [ 613.467420][ T9621] bridge_slave_0: entered promiscuous mode [ 613.528887][ T9643] team0: Port device team_slave_0 added [ 613.548054][ T9643] team0: Port device team_slave_1 added [ 613.598217][ T9773] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 613.616078][ T9773] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 613.628565][ T9773] EXT4-fs (loop0): This should not happen!! Data will be lost [ 613.628565][ T9773] [ 613.638402][ T9773] EXT4-fs (loop0): Total free blocks count 0 [ 613.644579][ T9773] EXT4-fs (loop0): Free/Dirty block details [ 613.650556][ T9773] EXT4-fs (loop0): free_blocks=68451041280 [ 613.656505][ T9773] EXT4-fs (loop0): dirty_blocks=32 [ 613.661686][ T9773] EXT4-fs (loop0): Block reservation details [ 613.667784][ T9773] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 613.724958][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.732146][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.768203][ T9643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.792620][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.804353][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.831442][ T9643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.903526][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.935309][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.614555][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.622038][ T9621] bridge_slave_1: entered allmulticast mode [ 614.679638][ T9621] bridge_slave_1: entered promiscuous mode [ 614.875225][ T9626] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.882490][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.921001][ T9626] bridge_slave_0: entered allmulticast mode [ 614.930894][ T9626] bridge_slave_0: entered promiscuous mode [ 615.040676][ T9643] hsr_slave_0: entered promiscuous mode [ 615.047473][ T9643] hsr_slave_1: entered promiscuous mode [ 615.054218][ T9643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.061858][ T9643] Cannot create hsr debugfs directory [ 615.389941][ T9793] loop0: detected capacity change from 0 to 2048 [ 615.792101][ T9793] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 615.801003][ T9793] UDF-fs: Scanning with blocksize 512 failed [ 615.825060][ T9626] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.832236][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.839564][ T9793] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 615.851116][ T9793] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 615.858851][ T9793] UDF-fs: Scanning with blocksize 1024 failed [ 615.883567][ T9626] bridge_slave_1: entered allmulticast mode [ 615.891603][ T9626] bridge_slave_1: entered promiscuous mode [ 616.070750][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.082859][ T9793] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 616.093826][ T9793] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 616.103532][ T9793] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 616.111342][ T9793] UDF-fs: Scanning with blocksize 2048 failed [ 616.120901][ T9793] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 616.131168][ T9793] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 616.142142][ T9793] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 616.151892][ T9793] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 616.159688][ T9793] UDF-fs: Scanning with blocksize 4096 failed [ 616.165911][ T9793] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 617.064164][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.139890][ T9626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.178357][ T9626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.220517][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 617.232925][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 617.242052][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 617.254909][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 617.264412][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 617.550887][ T9807] loop0: detected capacity change from 0 to 2048 [ 617.621196][ T9807] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 617.630287][ T9807] UDF-fs: Scanning with blocksize 512 failed [ 617.666630][ T9807] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 617.683120][ T9807] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 617.691593][ T9807] UDF-fs: Scanning with blocksize 1024 failed [ 617.721982][ T9807] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 617.738157][ T9807] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 617.747896][ T9807] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 617.756178][ T9807] UDF-fs: Scanning with blocksize 2048 failed [ 617.766372][ T9807] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 617.791153][ T9807] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 617.814303][ T9807] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 617.824111][ T9807] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 617.832710][ T9807] UDF-fs: Scanning with blocksize 4096 failed [ 617.838930][ T9807] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 618.241456][ T9621] team0: Port device team_slave_0 added [ 618.277743][ T9809] loop0: detected capacity change from 0 to 256 [ 618.682125][ T9811] overlayfs: failed to resolve './file2': -2 [ 619.059054][ T9621] team0: Port device team_slave_1 added [ 619.146205][ T9809] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 619.312478][ T9626] team0: Port device team_slave_0 added [ 619.572331][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.607039][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.911183][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.014949][ T9626] team0: Port device team_slave_1 added [ 620.044589][ T5837] Bluetooth: hci4: command tx timeout [ 620.242648][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.266383][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.313152][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.364476][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.371464][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.397521][ T9815] loop0: detected capacity change from 0 to 4096 [ 620.417487][ T9626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.457769][ T9816] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 620.552428][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 620.566445][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 620.584433][ T9626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.615947][ T9626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.664962][ T9626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.228201][ T9621] hsr_slave_0: entered promiscuous mode [ 621.249654][ T9621] hsr_slave_1: entered promiscuous mode [ 621.262979][ T9621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.271094][ T9621] Cannot create hsr debugfs directory [ 621.541506][ T9626] hsr_slave_0: entered promiscuous mode [ 621.548899][ T9626] hsr_slave_1: entered promiscuous mode [ 621.556331][ T9626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.566915][ T9825] overlayfs: failed to clone upperpath [ 621.572931][ T9626] Cannot create hsr debugfs directory [ 621.858687][ T9826] loop0: detected capacity change from 0 to 2048 [ 622.278929][ T5837] Bluetooth: hci4: command tx timeout [ 622.334232][ T9826] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 622.342501][ T9826] UDF-fs: Scanning with blocksize 512 failed [ 622.353341][ T9826] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 622.373316][ T9826] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 622.380986][ T9826] UDF-fs: Scanning with blocksize 1024 failed [ 622.393583][ T9826] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 622.410468][ T9826] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 622.422278][ T9826] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 622.430037][ T9826] UDF-fs: Scanning with blocksize 2048 failed [ 622.436742][ T9826] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 622.447025][ T9826] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 622.464736][ T9826] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 622.474346][ T9826] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 622.481983][ T9826] UDF-fs: Scanning with blocksize 4096 failed [ 622.488618][ T9826] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 623.873802][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.880439][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.256309][ T9835] loop0: detected capacity change from 0 to 2048 [ 624.364822][ T5837] Bluetooth: hci4: command tx timeout [ 624.399672][ T9835] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 624.410275][ T9835] UDF-fs: Scanning with blocksize 512 failed [ 624.442633][ T9835] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 624.478159][ T9835] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 624.485945][ T9835] UDF-fs: Scanning with blocksize 1024 failed [ 624.505269][ T9835] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 624.520298][ T9835] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 624.530134][ T9835] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 624.537893][ T9835] UDF-fs: Scanning with blocksize 2048 failed [ 624.548462][ T9835] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 624.565372][ T9835] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 624.588390][ T9835] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 624.598852][ T9835] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 624.608296][ T9835] UDF-fs: Scanning with blocksize 4096 failed [ 624.614495][ T9835] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 625.090798][ T9841] loop0: detected capacity change from 0 to 512 [ 625.139906][ T9841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 625.150386][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 625.163648][ T9841] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.233426][ T9845] overlayfs: failed to clone upperpath [ 626.311682][ T9848] overlay: ./file2 is not a directory [ 626.455847][ T5837] Bluetooth: hci4: command tx timeout [ 627.529634][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 627.729031][ T9643] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 628.053404][ T9643] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 628.085767][ T9643] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 628.225536][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.241435][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.250147][ T9800] bridge_slave_0: entered allmulticast mode [ 628.271137][ T9800] bridge_slave_0: entered promiscuous mode [ 628.332987][ T9643] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 628.429051][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.443591][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.451068][ T9800] bridge_slave_1: entered allmulticast mode [ 628.459902][ T9800] bridge_slave_1: entered promiscuous mode [ 628.806543][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.861597][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.957727][ T9800] team0: Port device team_slave_0 added [ 629.374425][ T6004] bridge_slave_1: left allmulticast mode [ 629.390437][ T6004] bridge_slave_1: left promiscuous mode [ 629.408128][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.518603][ T6004] bridge_slave_0: left allmulticast mode [ 629.529596][ T6004] bridge_slave_0: left promiscuous mode [ 629.538860][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.566873][ T6004] bridge_slave_1: left allmulticast mode [ 629.572642][ T6004] bridge_slave_1: left promiscuous mode [ 629.581618][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.602003][ T6004] bridge_slave_0: left allmulticast mode [ 629.610441][ T6004] bridge_slave_0: left promiscuous mode [ 629.625069][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.649839][ T6004] bridge_slave_1: left allmulticast mode [ 629.662496][ T6004] bridge_slave_1: left promiscuous mode [ 629.678829][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.713831][ T6004] bridge_slave_0: left allmulticast mode [ 629.719523][ T6004] bridge_slave_0: left promiscuous mode [ 629.733452][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.752982][ T6004] bridge_slave_1: left allmulticast mode [ 629.760908][ T6004] bridge_slave_1: left promiscuous mode [ 629.783491][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.814572][ T6004] bridge_slave_0: left allmulticast mode [ 629.820260][ T6004] bridge_slave_0: left promiscuous mode [ 629.836114][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.640120][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 631.650554][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 631.720626][ T9878] overlayfs: missing 'workdir' [ 633.233880][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.288386][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.302504][ T6004] bond0 (unregistering): Released all slaves [ 633.317273][ T9891] overlayfs: failed to clone upperpath [ 633.336822][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.520285][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.530773][ T6004] bond0 (unregistering): Released all slaves [ 633.570194][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.588366][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.867277][ T9893] loop0: detected capacity change from 0 to 2048 [ 633.991422][ T9893] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 634.000842][ T9893] UDF-fs: Scanning with blocksize 512 failed [ 634.041745][ T9893] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 634.057684][ T9893] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 634.065462][ T9893] UDF-fs: Scanning with blocksize 1024 failed [ 634.083020][ T9893] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 634.096520][ T9893] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 634.106197][ T9893] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 634.114044][ T9893] UDF-fs: Scanning with blocksize 2048 failed [ 634.125329][ T9893] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 634.143263][ T9893] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 634.164027][ T9893] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 634.173850][ T9893] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 634.181596][ T9893] UDF-fs: Scanning with blocksize 4096 failed [ 634.187896][ T9893] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 634.314970][ T6004] bond0 (unregistering): Released all slaves [ 634.350188][ T6004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.379302][ T6004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.429455][ T6004] bond0 (unregistering): Released all slaves [ 634.473300][ T9621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 634.499252][ T9621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 635.384441][ T9800] team0: Port device team_slave_1 added [ 635.504722][ T9621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 635.519440][ T9621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 635.818748][ T9899] loop0: detected capacity change from 0 to 2048 [ 635.883559][ T6004] hsr_slave_0: left promiscuous mode [ 635.906103][ T6004] hsr_slave_1: left promiscuous mode [ 635.933678][ T9899] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 635.942024][ T9899] UDF-fs: Scanning with blocksize 512 failed [ 635.956335][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.120215][ T9899] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 636.133338][ T9899] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 636.140998][ T9899] UDF-fs: Scanning with blocksize 1024 failed [ 636.151196][ T9899] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 636.161995][ T9899] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 636.171707][ T9899] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 636.179485][ T9899] UDF-fs: Scanning with blocksize 2048 failed [ 636.199127][ T9899] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 636.200195][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.210187][ T9899] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 636.241126][ T9899] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 636.250808][ T9899] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 636.258650][ T9899] UDF-fs: Scanning with blocksize 4096 failed [ 636.264783][ T9899] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 636.701592][ T6004] hsr_slave_0: left promiscuous mode [ 636.841824][ T6004] hsr_slave_1: left promiscuous mode [ 636.865584][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.904517][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.947978][ T6004] hsr_slave_0: left promiscuous mode [ 636.982859][ T6004] hsr_slave_1: left promiscuous mode [ 636.989227][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.039071][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.110703][ T6004] hsr_slave_0: left promiscuous mode [ 637.148067][ T6004] hsr_slave_1: left promiscuous mode [ 637.164071][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.185100][ T6004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.206853][ T9907] netlink: 96 bytes leftover after parsing attributes in process `syz.5.853'. [ 638.185813][ T9916] loop0: detected capacity change from 0 to 256 [ 638.236310][ T9916] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 638.339861][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 638.437137][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 640.294249][ T9923] loop0: detected capacity change from 0 to 4096 [ 640.442714][ T9926] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.738598][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 640.831176][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 641.710641][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 642.723807][ T9939] loop0: detected capacity change from 0 to 2048 [ 642.790549][ T9939] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 642.798889][ T9939] UDF-fs: Scanning with blocksize 512 failed [ 642.806978][ T9939] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 642.818048][ T9939] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 642.825728][ T9939] UDF-fs: Scanning with blocksize 1024 failed [ 642.832933][ T9939] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 642.843832][ T9939] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 642.853525][ T9939] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 642.861166][ T9939] UDF-fs: Scanning with blocksize 2048 failed [ 642.867948][ T9939] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 642.911221][ T9939] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 642.923571][ T9939] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 642.933175][ T9939] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 642.940948][ T9939] UDF-fs: Scanning with blocksize 4096 failed [ 642.947118][ T9939] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 643.282475][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 644.272370][ T9950] loop0: detected capacity change from 0 to 2048 [ 644.319812][ T9950] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 644.328180][ T9950] UDF-fs: Scanning with blocksize 512 failed [ 644.347868][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.864'. [ 644.358181][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.864'. [ 644.367622][ T9950] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 644.379756][ T9950] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 644.387479][ T9950] UDF-fs: Scanning with blocksize 1024 failed [ 644.401440][ T9950] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 644.412473][ T9950] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 644.423129][ T9950] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 644.430819][ T9950] UDF-fs: Scanning with blocksize 2048 failed [ 644.438458][ T9950] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 644.448975][ T9950] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 644.461236][ T9950] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 644.470845][ T9950] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 644.478680][ T9950] UDF-fs: Scanning with blocksize 4096 failed [ 644.484858][ T9950] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 644.819479][ T9953] loop0: detected capacity change from 0 to 512 [ 644.931655][ T9953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 644.952103][ T9953] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.980204][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 645.027794][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 645.380652][ T9958] overlay: ./file2 is not a directory [ 646.201329][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 646.389437][ T9962] loop0: detected capacity change from 0 to 4096 [ 646.459871][ T9963] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 646.632411][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 646.667962][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 646.705356][ T6004] team0 (unregistering): Port device team_slave_1 removed [ 647.046887][ T6004] team0 (unregistering): Port device team_slave_0 removed [ 647.514952][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.522040][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.647023][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.675623][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.684839][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 647.701772][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.705456][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 647.738343][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 647.771203][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 647.783691][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 647.863347][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.047827][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.867'. [ 648.058142][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.867'. [ 648.191944][ T9972] loop0: detected capacity change from 0 to 4096 [ 648.271009][ T9973] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 648.372845][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 648.424624][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 648.908413][ T9800] hsr_slave_0: entered promiscuous mode [ 648.926839][ T9800] hsr_slave_1: entered promiscuous mode [ 648.933155][ T9800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.943104][ T9800] Cannot create hsr debugfs directory [ 649.885145][ T5837] Bluetooth: hci5: command tx timeout [ 650.540075][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 650.558098][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 650.568666][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 650.577253][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 650.587038][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 651.009536][ T9987] loop0: detected capacity change from 0 to 4096 [ 651.115072][ T9989] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 651.169304][ T31] INFO: task kworker/1:7:6743 blocked for more than 143 seconds. [ 651.191037][ T31] Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 [ 651.963517][ T5837] Bluetooth: hci5: command tx timeout [ 651.978728][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.047604][ T31] task:kworker/1:7 state:D stack:26088 pid:6743 tgid:6743 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 652.053913][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 652.202663][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 652.316817][ T31] Workqueue: usb_hub_wq hub_event [ 652.423719][ T31] Call Trace: [ 652.469573][ T31] [ 652.523572][ T31] __schedule+0x16e2/0x4cd0 [ 652.528213][ T31] ? __lock_acquire+0xaac/0xd20 [ 652.553257][ T31] ? schedule+0x165/0x360 [ 652.557783][ T31] ? __pfx___schedule+0x10/0x10 [ 652.562739][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.585544][ T31] ? schedule+0x91/0x360 [ 652.589900][ T31] schedule+0x165/0x360 [ 652.594197][ T31] usb_kill_urb+0x1be/0x2d0 [ 652.599076][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 652.604590][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 652.610778][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 652.616420][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 652.622072][ T31] ? __kmalloc_noprof+0x29b/0x4f0 [ 652.627733][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.633731][ T31] usb_control_msg+0x232/0x3e0 [ 652.638589][ T31] hub_port_init+0xbf9/0x2800 [ 652.643947][ T31] hub_event+0x2518/0x4a00 [ 652.649561][ T31] ? rcu_is_watching+0x15/0xb0 [ 652.661405][ T31] ? __pfx_hub_event+0x10/0x10 [ 652.667427][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.673161][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.680754][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 652.683369][ T5837] Bluetooth: hci1: command tx timeout [ 652.687608][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 652.701641][ T31] process_scheduled_works+0xade/0x17a0 [ 652.707775][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.721093][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.727303][ T31] worker_thread+0x8a0/0xda0 [ 652.732067][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 652.745560][ T31] ? __kthread_parkme+0x7b/0x200 [ 652.750672][ T31] kthread+0x711/0x8a0 [ 652.760593][ T31] ? __pfx_worker_thread+0x10/0x10 [ 652.769980][ T31] ? __pfx_kthread+0x10/0x10 [ 652.779307][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 652.783734][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.792273][ T31] ? __pfx_kthread+0x10/0x10 [ 652.797311][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.797400][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 652.802594][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 652.823353][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.828771][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 652.836308][ T31] ? __pfx_kthread+0x10/0x10 [ 652.841224][ T31] ret_from_fork+0x4e/0x80 [ 652.846294][ T31] ? __pfx_kthread+0x10/0x10 [ 652.851203][ T31] ret_from_fork_asm+0x1a/0x30 [ 652.856541][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 652.863297][ T31] [ 652.869092][ T31] [ 652.869092][ T31] Showing all locks held in the system: [ 652.870502][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 652.930778][ T31] 1 lock held by khungtaskd/31: [ 652.948866][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 652.966762][ T31] 3 locks held by kworker/u8:5/188: [ 652.972160][ T31] #0: ffff88802f982948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 652.986422][ T31] #1: ffffc90002f47c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 652.999771][ T31] #2: ffffffff8f2f4808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 653.014986][ T31] 2 locks held by dhcpcd/5486: [ 653.019832][ T31] #0: ffffffff8f2d92e8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x790 [ 653.029639][ T31] #1: ffffffff8f2f4808 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 653.039303][ T31] 2 locks held by getty/5578: [ 653.044248][ T31] #0: ffff88814cb0b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 653.054271][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 653.064687][ T31] 1 lock held by syz-executor/5826: [ 653.069963][ T31] #0: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 653.081085][ T31] 5 locks held by kworker/u8:11/6004: [ 653.087091][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 653.098244][ T31] #1: ffffc9000451fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 653.109070][ T31] #2: ffffffff8f2e7cd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 653.118987][ T31] #3: ffff888059b454e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 653.129412][ T31] #4: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 653.140575][ T31] 3 locks held by kworker/u8:13/6309: [ 653.146122][ T31] 5 locks held by kworker/1:7/6743: [ 653.151489][ T31] #0: ffff888144ee7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 653.163062][ T31] #1: ffffc90003b8fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 653.175661][ T31] #2: ffff888145bcd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 653.189007][ T31] #3: ffff888028a91510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 653.213290][ T31] #4: ffff888145bbf068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 653.225269][ T31] 7 locks held by syz-executor/9800: [ 653.230659][ T31] #0: ffff888034a9e420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 653.247236][ T31] #1: ffff888077fa0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 653.268677][ T31] #2: ffff888144b591e8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 653.314264][ T31] #3: ffffffff8eb947e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 653.325503][ T31] #4: ffff8880587d00e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 653.336538][ T31] #5: ffff8880587d7250 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 653.346966][ T9969] chnl_net:caif_netlink_parms(): no params data found [ 653.366469][ T31] #6: ffffffff8df41200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 653.381718][ T31] 2 locks held by syz-executor/9969: [ 653.390513][ T31] 2 locks held by syz-executor/9981: [ 653.396082][ T31] #0: ffffffff8f7f2050 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 653.406036][ T31] #1: ffffffff8f2f4808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 653.415363][ T31] 2 locks held by syz-executor/9997: [ 653.420721][ T31] #0: ffffffff8f2e7cd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 653.430428][ T31] #1: ffffffff8f2f4808 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 653.440288][ T31] [ 653.442686][ T31] ============================================= [ 653.442686][ T31] [ 653.453902][ T31] NMI backtrace for cpu 0 [ 653.453921][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 653.453950][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 653.453966][ T31] Call Trace: [ 653.453975][ T31] [ 653.453985][ T31] dump_stack_lvl+0x189/0x250 [ 653.454025][ T31] ? __wake_up_klogd+0xd9/0x110 [ 653.454053][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.454083][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.454118][ T31] ? __pfx__printk+0x10/0x10 [ 653.454157][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 653.454200][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 653.454244][ T31] ? _printk+0xcf/0x120 [ 653.454272][ T31] ? __pfx__printk+0x10/0x10 [ 653.454299][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 653.454330][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 653.454372][ T31] watchdog+0xfee/0x1030 [ 653.454405][ T31] ? watchdog+0x1de/0x1030 [ 653.454444][ T31] kthread+0x711/0x8a0 [ 653.454476][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.454505][ T31] ? __pfx_kthread+0x10/0x10 [ 653.454532][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.454561][ T31] ? __pfx_kthread+0x10/0x10 [ 653.454588][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.454612][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.454638][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.454666][ T31] ? __pfx_kthread+0x10/0x10 [ 653.454693][ T31] ret_from_fork+0x4e/0x80 [ 653.454716][ T31] ? __pfx_kthread+0x10/0x10 [ 653.454745][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.454785][ T31] [ 653.454816][ T31] Sending NMI from CPU 0 to CPUs 1: [ 653.620655][ C1] NMI backtrace for cpu 1 [ 653.620674][ C1] CPU: 1 UID: 0 PID: 5193 Comm: udevd Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 653.620699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 653.620713][ C1] RIP: 0010:check_preemption_disabled+0x63/0x120 [ 653.620746][ C1] Code: 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 fc fe b9 f5 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c8 65 4c 8b 3c 25 08 50 75 92 41 f6 47 2f 04 74 0a 41 83 bf 18 [ 653.620764][ C1] RSP: 0018:ffffc9000458f880 EFLAGS: 00000046 [ 653.620784][ C1] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: 0000000080000000 [ 653.620799][ C1] RDX: 0000000000000000 RSI: ffffffff8d75dff8 RDI: ffffffff8bc1d220 [ 653.620814][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 653.620827][ C1] R10: 0000000000000000 R11: ffffffff825ae56c R12: 0000000000000246 [ 653.620842][ C1] R13: ffff88807d97da00 R14: ffffffff8df3b8c0 R15: ffff88807f7162b0 [ 653.620861][ C1] FS: 00007f6e7adc8c80(0000) GS:ffff8881261cb000(0000) knlGS:0000000000000000 [ 653.620879][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.620894][ C1] CR2: 000055a64afe9218 CR3: 000000002ebef000 CR4: 0000000000350ef0 [ 653.620911][ C1] Call Trace: [ 653.620919][ C1] [ 653.620930][ C1] lock_is_held_type+0x79/0x190 [ 653.620958][ C1] __might_resched+0xa6/0x610 [ 653.620978][ C1] ? __lock_acquire+0xaac/0xd20 [ 653.621012][ C1] ? __pfx___might_resched+0x10/0x10 [ 653.621033][ C1] ? kernfs_root+0x1c/0x230 [ 653.621062][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.621089][ C1] ? kernfs_root+0x1c/0x230 [ 653.621119][ C1] down_read+0x22/0x2e0 [ 653.621148][ C1] kernfs_iop_permission+0x7c/0x4e0 [ 653.621180][ C1] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 653.621209][ C1] inode_permission+0x248/0x490 [ 653.621248][ C1] link_path_walk+0x216/0xe50 [ 653.621288][ C1] path_lookupat+0x97/0x430 [ 653.621324][ C1] filename_lookup+0x212/0x570 [ 653.621357][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.621385][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 653.621432][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.621457][ C1] ? strncpy_from_user+0x150/0x290 [ 653.621492][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.621516][ C1] ? getname_flags+0x1e5/0x540 [ 653.621548][ C1] do_readlinkat+0xd9/0x500 [ 653.621569][ C1] ? __pfx_do_readlinkat+0x10/0x10 [ 653.621594][ C1] __x64_sys_readlink+0x7f/0x90 [ 653.621627][ C1] do_syscall_64+0xf6/0x210 [ 653.621654][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.621678][ C1] ? exc_page_fault+0x91/0x110 [ 653.621703][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.621724][ C1] RIP: 0033:0x7f6e7a917d47 [ 653.621741][ C1] Code: 73 01 c3 48 8b 0d e1 90 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b1 90 0d 00 f7 d8 64 89 01 48 [ 653.621759][ C1] RSP: 002b:00007ffc373ddef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 653.621780][ C1] RAX: ffffffffffffffda RBX: 00007ffc373ddf08 RCX: 00007f6e7a917d47 [ 653.621796][ C1] RDX: 0000000000000400 RSI: 00007ffc373ddf08 RDI: 00007ffc373de3e8 [ 653.621810][ C1] RBP: 0000000000000400 R08: 000055a64afa5bb4 R09: 0000000000000000 [ 653.621824][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007ffc373de3e8 [ 653.621838][ C1] R13: 00007ffc373de358 R14: 000055a64af91910 R15: 0000000000000000 [ 653.621863][ C1] [ 653.711599][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 653.711624][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 653.711653][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 653.711669][ T31] Call Trace: [ 653.711681][ T31] [ 653.711692][ T31] dump_stack_lvl+0x99/0x250 [ 653.711733][ T31] ? __asan_memcpy+0x40/0x70 [ 653.711759][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.711795][ T31] ? __pfx__printk+0x10/0x10 [ 653.711829][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.711863][ T31] panic+0x2db/0x790 [ 653.711897][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.711931][ T31] ? __pfx_panic+0x10/0x10 [ 653.711966][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.711992][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 653.712025][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.712053][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 653.712083][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 653.712125][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.712159][ T31] watchdog+0x102d/0x1030 [ 653.712194][ T31] ? watchdog+0x1de/0x1030 [ 653.712238][ T31] kthread+0x711/0x8a0 [ 653.712273][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.712302][ T31] ? __pfx_kthread+0x10/0x10 [ 653.712331][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.712360][ T31] ? __pfx_kthread+0x10/0x10 [ 653.712389][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 653.712413][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 653.712441][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.712470][ T31] ? __pfx_kthread+0x10/0x10 [ 653.712499][ T31] ret_from_fork+0x4e/0x80 [ 653.712523][ T31] ? __pfx_kthread+0x10/0x10 [ 653.712553][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.712601][ T31] [ 654.138513][ T31] Kernel Offset: disabled [ 654.142827][ T31] Rebooting in 86400 seconds..