last executing test programs: 17m16.545607658s ago: executing program 0 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newtfilter={0xa4, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc, [{0x8, 0x9df8, 0x5, 0xfffffffe}, {0xfff, 0xabac, 0x5d9, 0x6}, {0x7365, 0x200, 0x2, 0x3}, {0xaa2, 0x80000000, 0xc06f, 0x8001}, {0x9, 0x8001, 0x80, 0x7ff}, {0x10c00, 0x23e, 0x10000, 0x2}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) 17m16.148110865s ago: executing program 0 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000140)='./file0\x00', 0x218) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000"], 0xa8}}, 0x0) 17m13.693610303s ago: executing program 0 (id=354): unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b100c0000000000010902"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 17m11.162797043s ago: executing program 0 (id=363): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, 0x0) eventfd2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 17m10.583969998s ago: executing program 0 (id=365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 17m8.832144754s ago: executing program 0 (id=369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 17m7.77797233s ago: executing program 32 (id=369): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m16.679074677s ago: executing program 5 (id=2808): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000180)=""/42) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@chain) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0xfffffffe) r9 = accept4(r8, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000080)={0xfff6, 0x8000, 0x0, 0x3}, &(0x7f00000000c0)=0x10) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) 3m15.828056254s ago: executing program 5 (id=2810): r0 = fsopen(&(0x7f0000000180)='ext4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3m15.523920588s ago: executing program 5 (id=2812): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000140)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/42) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@chain) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0xfffffffe) r7 = accept4(r6, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000080)={0xfff6, 0x8000, 0x0, 0x3}, &(0x7f00000000c0)=0x10) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) 3m13.095632303s ago: executing program 5 (id=2820): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=0x0000000000\x00\x00\x00\x0007,showassoc,session=0x0000000000000040,session=0x0000000000000062,sbsector=0x000000000D000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',session=0x0000000000000056,norock,\x00'], 0x1, 0x54e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x84105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3m11.522028452s ago: executing program 5 (id=2827): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r1, 0x0, 0x0, 0x39c5, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x4) getgroups(0x1, &(0x7f0000000080)=[0xee00]) clock_gettime(0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xc) 3m9.219952942s ago: executing program 5 (id=2834): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x58}}, 0x0) 3m9.005025361s ago: executing program 33 (id=2834): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x58}}, 0x0) 1m58.18620358s ago: executing program 3 (id=3050): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @local, 0xe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="9b87a7e080d34ad499b9b36f4e70aee186d5d1e5772aa3f0467475f8094db20c5e5127a95234343b77c67c308ea9c06415fc620429d23dbfc0ef1a0e7dda683e", 0x40}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000180)="c5b755bb45e1f3c340d438006dde6f05e385d0c7f8d02d9e53cc1d31329ec33529d7017f11e4ff150c155a844235938f3e54cc915d4add4d4e356f37f84cba1e208d464bc1df12e391766e6edf700b83b4", 0x51}], 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x8004) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000004c0)={{r1}, 0xcc, 0x7, 0xffff}) 1m57.803667887s ago: executing program 3 (id=3053): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) io_setup(0x202, &(0x7f0000000200)) 1m56.958518674s ago: executing program 3 (id=3055): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1m56.750349413s ago: executing program 3 (id=3056): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40c0080) syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0xc56, &(0x7f0000002680)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x7) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) truncate(&(0x7f00000001c0)='./file1\x00', 0x200) 1m55.081146655s ago: executing program 3 (id=3061): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, r3, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r4}}}, 0x78) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) 1m53.716056745s ago: executing program 3 (id=3065): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) getpid() 1m53.14114303s ago: executing program 34 (id=3065): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) getpid() 11.375935175s ago: executing program 2 (id=3393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x60000}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 10.202922806s ago: executing program 2 (id=3399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 7.976949783s ago: executing program 2 (id=3412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2a}, 0x94) bind$inet6(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) getrlimit(0x7, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={r4, 0x2}, 0x8) 7.425383177s ago: executing program 1 (id=3415): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000340)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x200, &(0x7f00000008c0)="$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") utime(&(0x7f0000000200)='./file0\x00', 0x0) 6.89983731s ago: executing program 6 (id=3416): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xc}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffb, 0x81}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x84, 0x8, 0x409, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 6.759013406s ago: executing program 1 (id=3419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 6.491709678s ago: executing program 6 (id=3420): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdir(0x0, 0x18) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xffdffffc, @private1, 0x8000}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 5.910688623s ago: executing program 6 (id=3423): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) add_key$fscrypt_v1(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000140)) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r2, 0x0, 0x5d, &(0x7f0000000640)='?&v\xa50\xd5\x17\xe5T#G\xc4_\xf0\v\xf1ja\t\xc7\x136GD\xa3Q\xf1\xf5sK\xd9\xd2C\xbf(\xa0\xf2\xdd5\xd1\xa0\xd9^\xab+#<`\xbe\x1f\xab\xe6qOc\x1bS\xa2\bt\xc6\xac\xd7\xc0\n,s\x9c\x82\x13\x18\xa2\x983^m\xe0\"\x99U7\xdba\x00\xb5\b\x06X\x1bjJ\xe7U'}, 0x30) 5.820072027s ago: executing program 1 (id=3424): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 5.382639086s ago: executing program 2 (id=3426): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{0xbffffff9, 0x1, 0x1, 0xfffffff8, 'syz1\x00', 0x20}, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4e3, 'syz0\x00', 0x0}) 4.999994132s ago: executing program 1 (id=3428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc5696000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.269262768s ago: executing program 7 (id=3430): io_setup(0x6, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = fanotify_init(0x200, 0x400) fanotify_mark(r2, 0x80, 0x8, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@local, @private0={0xfc, 0x0, '\x00', 0xfd}, @loopback, 0x200008, 0x5, 0x6, 0x680, 0x8000000000000001, 0x20c200a3}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000001c0)=ANY=[]) io_getevents(0x0, 0x3, 0xb3d, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x989680}) 3.120911594s ago: executing program 2 (id=3432): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) 2.510466701s ago: executing program 7 (id=3435): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r0, 0x0, 0x0, 0x8000c61) 2.356031637s ago: executing program 2 (id=3436): io_setup(0x6, &(0x7f0000001000)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@local, @private0={0xfc, 0x0, '\x00', 0xfd}, @loopback, 0x200008, 0x5, 0x6, 0x680, 0x8000000000000001, 0x20c200a3}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32]) io_getevents(r0, 0x3, 0xb3d, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x989680}) 2.355905357s ago: executing program 7 (id=3437): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) truncate(&(0x7f0000000140)='./file0\x00', 0x3) 2.151655056s ago: executing program 4 (id=3439): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x680) fsetxattr$system_posix_acl(r0, &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x24, 0x1) 2.06801425s ago: executing program 7 (id=3440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r4, 0x60000}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2.06770183s ago: executing program 6 (id=3441): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r3, 0xfd39e943ccf1163b, 0x4070bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 1.83798348s ago: executing program 4 (id=3442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xfffe}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 1.167945989s ago: executing program 6 (id=3443): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="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", 0xf000}, {0x0, 0x55}], 0x2) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000180)=""/42) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@chain) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0xfffffffe) r8 = accept4(r7, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000080)={0xfff6, 0x8000, 0x0, 0x3}, &(0x7f00000000c0)=0x10) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) 1.016104396s ago: executing program 7 (id=3444): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 807.500915ms ago: executing program 4 (id=3445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 728.628688ms ago: executing program 4 (id=3446): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) 628.162803ms ago: executing program 4 (id=3447): bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x20000000, 0x50}, 0x20) 627.935083ms ago: executing program 1 (id=3448): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="757466382c6e6f636f6d7072657373006d61703d6f66662c646d6f64653d3078303030303030303030303030303030352c6d61703d6f66662c646d6f64653d3078303030303030303030303030303030324173686f776173736f632c756e686964652c7362736563746f723d3078303030303030303030303030304530312c73686f77617373d60342d0beca271d86306f632c6e6f726f636b2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',norock,\x00'], 0x1, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") 627.638843ms ago: executing program 7 (id=3449): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x10, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 83.444606ms ago: executing program 6 (id=3450): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) 72.611977ms ago: executing program 1 (id=3451): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) unshare(0x40600) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x8001, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0x0, 0x5, 0x27, 0x1, 0x7, 0x5, 0x1, 0x34, 0x6, 0x1, 0x5, 0x9b400000, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x7fffffff, 0x407, 0x2323, 0xfffffff7, 0x8, 0x4006, 0x6, 0x7, 0x0, 0x4, 0x8, 0x1400, 0x100080, 0x0, 0x5, 0x6, 0x5, 0xfff, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012b, 0x8007, 0x5, 0x6, 0x129432e2, 0x1, 0xf9, 0xe, 0x5, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x200203, 0x200, 0x3, 0x2f, 0xe, 0x312, 0xd, 0x22, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x800, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x401, 0x101, 0x8, 0x9, 0xc, 0x47, 0x8000, 0x1, 0xfdffffff, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0xb, 0x250, 0x0, 0x6c0, 0xbc45, 0x48c93690, 0x6, 0x3], [0x7, 0x404, 0x0, 0x5, 0x4dfb, 0x100, 0x6, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0xaab1, 0x8, 0x0, 0x2, 0xc, 0x9, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20080008, 0x9, 0x6d01, 0x0, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0xdfe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x80bf, 0x2, 0x8, 0x7ff, 0x12b, 0xb8a, 0x803c, 0x4, 0x7ff, 0x5, 0x1c, 0x120000, 0x1, 0x2006, 0x80a2ed, 0x0, 0x26], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0xa, 0x6, 0x0, 0xb5, 0xce7, 0x43, 0x1fcf8d94, 0x57, 0x5, 0xffffff28, 0x101, 0x10010000, 0x4, 0x7fff, 0x10ffff, 0x2000a620, 0x2, 0x200, 0x1, 0x2, 0x7, 0xe7, 0x6, 0x16, 0xfffffff9, 0x80000004, 0x85, 0xfffffff9, 0xc9, 0x9, 0x6, 0x7, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0xaf, 0xfffffff6, 0x6, 0x226, 0xb, 0x7, 0xb, 0x30b1d693, 0xaed, 0x1000f40, 0x5, 0x2, 0x6c1b, 0x0, 0x4, 0xffef, 0xb1e, 0xd7, 0x6, 0xffff3441, 0x40fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000200)) kernel console output (not intermixed with test programs): l): Invalid header checksum [ 925.207212][ T14] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 925.507542][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 925.556625][ T14] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 925.811881][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 926.032944][ T14] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 926.078210][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.088820][T13160] loop4: detected capacity change from 0 to 2048 [ 926.115482][ T14] usb 2-1: config 0 descriptor?? [ 926.125272][T13160] UDF-fs: bad mount option "uid" or missing value [ 926.134403][ T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 926.661297][T13172] loop4: detected capacity change from 0 to 8 [ 927.702226][T13172] SQUASHFS error: zlib decompression failed, data probably corrupt [ 927.710226][T13172] SQUASHFS error: Failed to read block 0x9b: -5 [ 927.716867][T13172] SQUASHFS error: Unable to read metadata cache entry [99] [ 927.724055][T13172] SQUASHFS error: Unable to read inode 0x127 [ 927.761292][T11465] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 928.619335][ T4334] usb 2-1: USB disconnect, device number 23 [ 929.853004][T13207] delete_channel: no stack [ 931.438675][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.018938][T13239] loop4: detected capacity change from 0 to 8 [ 933.036541][T13239] SQUASHFS error: zlib decompression failed, data probably corrupt [ 933.045247][T13239] SQUASHFS error: Failed to read block 0x9b: -5 [ 933.051790][T13239] SQUASHFS error: Unable to read metadata cache entry [99] [ 933.059090][T13239] SQUASHFS error: Unable to read inode 0x127 [ 935.490624][T13279] CUSE: unknown device info "" [ 935.495557][T13279] CUSE: zero length info key specified [ 937.491640][T13306] loop1: detected capacity change from 0 to 8 [ 937.784968][T13306] SQUASHFS error: zlib decompression failed, data probably corrupt [ 937.793188][T13306] SQUASHFS error: Failed to read block 0x9b: -5 [ 937.799548][T13306] SQUASHFS error: Unable to read metadata cache entry [99] [ 937.806852][T13306] SQUASHFS error: Unable to read inode 0x127 [ 940.104111][T13338] loop2: detected capacity change from 0 to 512 [ 940.173152][T13338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 940.193294][T13338] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.457445][T13345] CUSE: unknown device info "" [ 940.462384][T13345] CUSE: zero length info key specified [ 941.257920][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 941.275875][T13350] loop1: detected capacity change from 0 to 1024 [ 941.364293][T13350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 941.596883][T13355] delete_channel: no stack [ 941.854839][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 943.680966][T13390] delete_channel: no stack [ 948.242391][ T4273] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 948.252356][ T4273] CPU: 0 PID: 4273 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 948.259899][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 948.269948][ T4273] Workqueue: hci2 hci_rx_work [ 948.274639][ T4273] Call Trace: [ 948.277928][ T4273] [ 948.280864][ T4273] dump_stack_lvl+0x168/0x22e [ 948.285535][ T4273] ? show_regs_print_info+0x12/0x12 [ 948.290727][ T4273] ? load_image+0x3b0/0x3b0 [ 948.295240][ T4273] sysfs_create_dir_ns+0x252/0x280 [ 948.300351][ T4273] ? hci_rx_work+0x3eb/0xd40 [ 948.304933][ T4273] ? sysfs_warn_dup+0xa0/0xa0 [ 948.309619][ T4273] ? do_raw_spin_unlock+0x11d/0x230 [ 948.314845][ T4273] kobject_add_internal+0x6b8/0xc80 [ 948.320074][ T4273] kobject_add+0x152/0x210 [ 948.324517][ T4273] ? kobject_init+0x1d0/0x1d0 [ 948.329204][ T4273] ? klist_children_get+0x50/0x50 [ 948.334227][ T4273] ? get_device_parent+0x121/0x3f0 [ 948.339341][ T4273] device_add+0x483/0xfb0 [ 948.343658][ T4273] ? kmem_cache_free+0xf7/0x290 [ 948.348508][ T4273] hci_conn_add_sysfs+0xd1/0x1e0 [ 948.353441][ T4273] le_conn_complete_evt+0xfec/0x15d0 [ 948.358726][ T4273] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 948.364957][ T4273] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 948.370669][ T4273] ? skb_pull_data+0xf7/0x200 [ 948.375339][ T4273] hci_le_enh_conn_complete_evt+0x185/0x460 [ 948.381224][ T4273] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 948.387633][ T4273] ? hci_remote_host_features_evt+0x270/0x270 [ 948.393697][ T4273] hci_event_packet+0x791/0x1210 [ 948.398625][ T4273] ? bis_list+0x280/0x280 [ 948.402941][ T4273] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 948.408924][ T4273] ? kcov_remote_start+0x4c7/0x7e0 [ 948.414033][ T4273] ? nf_l4proto_log_invalid+0x1f9/0x26e [ 948.419597][ T4273] ? hci_send_to_monitor+0x9c/0x4a0 [ 948.424785][ T4273] hci_rx_work+0x3eb/0xd40 [ 948.429197][ T4273] ? _raw_spin_unlock+0x40/0x40 [ 948.434039][ T4273] ? process_one_work+0x7a1/0x1160 [ 948.439139][ T4273] process_one_work+0x898/0x1160 [ 948.444072][ T4273] ? worker_detach_from_pool+0x240/0x240 [ 948.449699][ T4273] ? _raw_spin_lock_irq+0xab/0xe0 [ 948.454742][ T4273] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 948.460109][ T4273] ? kthread_data+0x4b/0xc0 [ 948.464610][ T4273] worker_thread+0xaa2/0x1250 [ 948.469294][ T4273] ? __kthread_parkme+0x162/0x1c0 [ 948.474308][ T4273] kthread+0x29d/0x330 [ 948.478367][ T4273] ? worker_clr_flags+0x1a0/0x1a0 [ 948.483381][ T4273] ? kthread_blkcg+0xd0/0xd0 [ 948.487962][ T4273] ret_from_fork+0x1f/0x30 [ 948.492389][ T4273] [ 948.497067][ T4273] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 948.511723][ T4273] Bluetooth: hci2: failed to register connection device [ 948.688153][T13448] CUSE: unknown device info "" [ 948.693052][T13448] CUSE: zero length info key specified [ 949.940861][T13459] loop2: detected capacity change from 0 to 16 [ 951.072492][T13459] erofs: (device loop2): mounted with root inode @ nid 36. [ 951.089234][T13458] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 951.108334][T13458] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 951.878909][ T26] audit: type=1326 audit(1764030549.908:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.5.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 951.964427][ T26] audit: type=1326 audit(1764030549.938:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.5.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 952.247008][ T26] audit: type=1326 audit(1764030549.938:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.5.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 952.355979][ T26] audit: type=1326 audit(1764030549.938:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.5.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 952.581509][T13488] CUSE: unknown device info "" [ 952.586442][T13488] CUSE: zero length info key specified [ 953.236959][ T26] audit: type=1326 audit(1764030549.938:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.5.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 953.386982][ T26] audit: type=1326 audit(1764030550.098:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.5.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 953.456858][ T4262] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 953.505695][ T26] audit: type=1326 audit(1764030550.098:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.5.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 953.512165][T13492] netlink: 'syz.4.2647': attribute type 6 has an invalid length. [ 953.592997][ T26] audit: type=1326 audit(1764030550.098:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13470 comm="syz.5.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 953.698382][ T4262] usb 6-1: config 67 has an invalid interface number: 177 but max is 0 [ 953.725656][ T4262] usb 6-1: config 67 has an invalid descriptor of length 0, skipping remainder of the config [ 953.766587][ T4262] usb 6-1: config 67 has no interface number 0 [ 953.810269][ T4262] usb 6-1: config 67 interface 177 altsetting 0 endpoint 0x4 has invalid maxpacket 16445, setting to 1024 [ 953.856922][ T4262] usb 6-1: config 67 interface 177 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 953.914433][ T4262] usb 6-1: config 67 interface 177 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 953.967038][ T4262] usb 6-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=eb.17 [ 954.034127][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.085916][T13490] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 954.128367][ T4262] rndis_wlan 6-1:67.177: invalid descriptor buffer length [ 954.136254][ T4262] usb 6-1: bad CDC descriptors [ 954.192715][ T4262] rndis_host 6-1:67.177: invalid descriptor buffer length [ 954.218550][ T4262] usb 6-1: bad CDC descriptors [ 954.234057][ T4262] cdc_acm 6-1:67.177: invalid descriptor buffer length [ 954.615689][ T14] usb 6-1: USB disconnect, device number 22 [ 956.551442][T13524] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2658'. [ 956.780301][T13527] loop3: detected capacity change from 0 to 2048 [ 960.000565][T13561] CUSE: unknown device info "" [ 960.005507][T13561] CUSE: zero length info key specified [ 960.857754][T13564] loop2: detected capacity change from 0 to 128 [ 960.937705][T13564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 960.988219][T13564] ext4 filesystem being mounted at /516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 962.145696][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 964.847588][T13613] rdma_rxe: rxe_register_device failed with error -23 [ 964.854466][T13613] rdma_rxe: failed to add team_slave_0 [ 964.946112][T13616] loop1: detected capacity change from 0 to 8 [ 965.000984][T13616] SQUASHFS error: zlib decompression failed, data probably corrupt [ 965.009286][T13616] SQUASHFS error: Failed to read block 0x9b: -5 [ 965.015589][T13616] SQUASHFS error: Unable to read metadata cache entry [99] [ 965.022875][T13616] SQUASHFS error: Unable to read inode 0x127 [ 965.568741][T11465] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 966.140037][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2690'. [ 966.175064][T13625] netlink: 95 bytes leftover after parsing attributes in process `syz.4.2690'. [ 968.905099][T13653] netlink: 'syz.3.2697': attribute type 12 has an invalid length. [ 969.375431][T13660] loop3: detected capacity change from 0 to 8 [ 969.405386][T13660] SQUASHFS error: zlib decompression failed, data probably corrupt [ 969.413603][T13660] SQUASHFS error: Failed to read block 0x9b: -5 [ 969.419991][T13660] SQUASHFS error: Unable to read metadata cache entry [99] [ 969.427266][T13660] SQUASHFS error: Unable to read inode 0x127 [ 970.004016][T13666] sch_tbf: burst 0 is lower than device veth0_to_bond mtu (1514) ! [ 973.603076][T13697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2709'. [ 977.784502][T13750] rdma_rxe: already configured on team_slave_0 [ 978.306130][T13766] loop3: detected capacity change from 0 to 1024 [ 981.591892][T13799] rdma_rxe: rxe_register_device failed with error -23 [ 981.626504][T13799] rdma_rxe: failed to add team_slave_0 [ 982.622664][T13812] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 986.065146][T13864] loop5: detected capacity change from 0 to 1024 [ 986.092081][T13864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 986.318951][T13864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 987.476469][ T5607] EXT4-fs (loop5): unmounting filesystem. [ 988.558777][ T4517] Bluetooth: (null): Invalid header checksum [ 988.569100][ T4517] Bluetooth: (null): Invalid header checksum [ 988.575372][ T4517] Bluetooth: (null): Invalid header checksum [ 988.585819][ T4517] Bluetooth: (null): Invalid header checksum [ 988.592820][ T4517] Bluetooth: (null): Invalid header checksum [ 989.305621][T13897] netlink: 'syz.1.2771': attribute type 58 has an invalid length. [ 989.611233][T13906] loop3: detected capacity change from 0 to 8 [ 989.642726][T13906] SQUASHFS error: zlib decompression failed, data probably corrupt [ 989.650929][T13906] SQUASHFS error: Failed to read block 0x9b: -5 [ 989.657519][T13906] SQUASHFS error: Unable to read metadata cache entry [99] [ 989.664760][T13906] SQUASHFS error: Unable to read inode 0x127 [ 992.454433][ T4448] Bluetooth: (null): Invalid header checksum [ 992.471053][ T4448] Bluetooth: (null): Invalid header checksum [ 992.879235][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.757020][ T26] audit: type=1326 audit(1764030592.778:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 994.842023][ T26] audit: type=1326 audit(1764030592.778:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 994.893619][ T26] audit: type=1326 audit(1764030592.778:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 994.918991][T13962] loop5: detected capacity change from 0 to 128 [ 994.920114][ T26] audit: type=1326 audit(1764030592.778:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 994.991794][ T26] audit: type=1326 audit(1764030592.778:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 995.027671][T13962] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 995.120156][ T26] audit: type=1326 audit(1764030592.788:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 995.146168][ T26] audit: type=1326 audit(1764030592.788:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 995.172354][ T26] audit: type=1326 audit(1764030592.788:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 995.605565][T13962] FAT-fs (loop5): FAT read failed (blocknr 128) [ 995.624815][ T26] audit: type=1326 audit(1764030592.788:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 995.654008][ T26] audit: type=1326 audit(1764030592.788:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd486f8f749 code=0x7ffc0000 [ 997.276344][T13990] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2800'. [ 997.297154][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2800'. [ 997.311657][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2800'. [ 997.628610][ T4402] Bluetooth: (null): Invalid header checksum [ 997.639180][ T4402] Bluetooth: (null): Invalid header checksum [ 997.748534][ T7765] Bluetooth: (null): Invalid header checksum [ 997.858031][ T5912] Bluetooth: (null): Invalid header checksum [ 997.978325][ T4522] Bluetooth: (null): Invalid header checksum [ 998.087247][ T4522] Bluetooth: (null): Invalid header checksum [ 998.192808][T13996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2804'. [ 998.882089][T14005] loop1: detected capacity change from 0 to 1024 [ 999.014394][T14005] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 999.043076][T14005] EXT4-fs (loop1): orphan cleanup on readonly fs [ 999.106321][T14005] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.2803: Freeing blocks not in datazone - block = 0, count = 4096 [ 999.163232][T14005] EXT4-fs (loop1): 1 orphan inode deleted [ 999.169327][T14005] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 999.348729][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 999.467832][ T4370] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 999.687027][ T4370] usb 3-1: Using ep0 maxpacket: 16 [ 999.698356][ T4370] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.858136][ T4370] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.113585][ T4370] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1000.133552][ T4370] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1000.142923][ T4370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.154080][ T4370] usb 3-1: config 0 descriptor?? [ 1000.587810][ T4370] hid (null): unknown global tag 0xd [ 1000.598191][ T4370] hid (null): unknown global tag 0xd [ 1000.613395][ T4370] hid (null): nested delimiters [ 1000.991310][ T4370] usb 3-1: USB disconnect, device number 20 [ 1003.076702][T14049] loop5: detected capacity change from 0 to 164 [ 1003.392239][T14053] loop2: detected capacity change from 0 to 128 [ 1003.515020][T14053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1003.549142][T14064] loop1: detected capacity change from 0 to 1024 [ 1003.563842][T14053] ext4 filesystem being mounted at /546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1004.438096][ T5607] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1004.551996][ T5607] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1004.792164][ T5607] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1004.820505][ T5607] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1004.865934][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1006.752006][T14094] loop1: detected capacity change from 0 to 1024 [ 1006.807847][T14094] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1006.867222][T14094] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.954204][T14094] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.2833: inode has both inline data and extents flags [ 1007.008045][T14099] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.2833: inode has both inline data and extents flags [ 1007.793113][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 1008.507245][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1008.519075][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1008.536255][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1008.545251][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1008.570298][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1008.578305][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1009.765505][T14137] loop2: detected capacity change from 0 to 8 [ 1009.789268][T14140] rdma_rxe: rxe_register_device failed with error -23 [ 1009.827266][T14140] rdma_rxe: failed to add team_slave_0 [ 1009.836425][T14137] SQUASHFS error: Unable to read inode 0x11f [ 1010.363305][T14152] loop2: detected capacity change from 0 to 8 [ 1010.824720][T13447] Bluetooth: hci1: command 0x0409 tx timeout [ 1011.211346][T14152] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1011.221028][T14152] SQUASHFS error: Failed to read block 0x9b: -5 [ 1011.227294][T14152] SQUASHFS error: Unable to read metadata cache entry [99] [ 1011.234472][T14152] SQUASHFS error: Unable to read inode 0x127 [ 1012.290814][T14113] chnl_net:caif_netlink_parms(): no params data found [ 1012.380300][T14165] loop2: detected capacity change from 0 to 8 [ 1012.644481][T14113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.725688][T14113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.755712][T14113] device bridge_slave_0 entered promiscuous mode [ 1012.776735][T14113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.799357][T14113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.032411][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 1013.075921][T14113] device bridge_slave_1 entered promiscuous mode [ 1013.345152][T14113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.421716][T14113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.472678][T14187] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2859'. [ 1013.544400][T14113] team0: Port device team_slave_0 added [ 1013.612569][T14113] team0: Port device team_slave_1 added [ 1013.750046][T14113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.765553][T14113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.802026][T14113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.810080][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1013.810093][ T26] audit: type=1326 audit(1764030611.828:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.2.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcd18f749 code=0x7ffc0000 [ 1013.836147][T14113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.092837][T14113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.401783][ T26] audit: type=1326 audit(1764030611.848:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.2.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcd18f749 code=0x7ffc0000 [ 1014.425034][T14113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.447698][ T26] audit: type=1326 audit(1764030611.848:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.2.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdbcd18f749 code=0x7ffc0000 [ 1014.486116][ T26] audit: type=1326 audit(1764030611.848:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.2.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcd18f749 code=0x7ffc0000 [ 1014.518981][ T26] audit: type=1326 audit(1764030611.848:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.2.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcd18f749 code=0x7ffc0000 [ 1015.083259][T14113] device hsr_slave_0 entered promiscuous mode [ 1015.115443][T14113] device hsr_slave_1 entered promiscuous mode [ 1015.127471][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 1015.139476][T14113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1015.463107][T14113] Cannot create hsr debugfs directory [ 1015.775864][T14214] loop2: detected capacity change from 0 to 512 [ 1015.789896][T14215] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1016.703564][T14113] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1017.197355][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 1017.859365][T14113] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1017.875771][T14113] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1017.922197][T14238] rdma_rxe: already configured on team_slave_0 [ 1017.967515][T14113] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1018.910586][T14113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.979927][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1019.006570][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1019.072403][T14113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.117178][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1019.147913][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.019784][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.026977][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.106993][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1020.143386][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1020.175082][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.184529][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.191708][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.217507][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.240080][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.324496][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.379726][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.421800][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.464710][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.613659][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.640141][T14113] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1020.752875][T14282] CUSE: unknown device info "" [ 1020.757907][T14282] CUSE: zero length info key specified [ 1021.417076][T14113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.471273][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1021.489349][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1021.499355][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1021.508528][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1021.539323][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1023.352175][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1023.394011][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1023.424697][T14113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.897497][T14309] loop1: detected capacity change from 0 to 128 [ 1024.165331][T14309] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1024.238262][T14309] ext4 filesystem being mounted at /588/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.609359][T14309] fscrypt: Error allocating hmac(sha512): -2 [ 1024.728724][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 1026.593171][T14359] rdma_rxe: already configured on team_slave_0 [ 1026.848764][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1026.877955][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1026.952779][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.030553][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.137000][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.245277][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1028.440548][T14113] device veth0_vlan entered promiscuous mode [ 1028.498452][T14113] device veth1_vlan entered promiscuous mode [ 1028.623768][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1028.659585][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1028.758939][T14113] device veth0_macvtap entered promiscuous mode [ 1028.808317][T14113] device veth1_macvtap entered promiscuous mode [ 1028.866429][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.882087][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.893342][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.904280][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.915060][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.925795][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.940834][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.956435][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.968578][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.001566][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.022703][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.044008][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.080831][T14113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.153333][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1029.165501][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1029.220125][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1029.264375][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1029.308632][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.326462][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.337313][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.349271][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.391765][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.483981][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.494188][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.505096][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.515058][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.526379][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.536570][T14113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.571206][T14113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.596979][T14113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.630629][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1030.654197][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1030.686914][T14113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.708301][T14113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.724091][T14113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.733769][T14113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.825810][T14407] loop4: detected capacity change from 0 to 128 [ 1030.927744][T14407] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1030.941206][T14407] ext4 filesystem being mounted at /609/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.987760][T14411] tc_dump_action: action bad kind [ 1031.042841][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.151850][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.809029][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 1032.408805][T14432] CUSE: unknown device info "" [ 1032.413731][T14432] CUSE: zero length info key specified [ 1033.917614][T14414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.925043][T14414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.076607][T14414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1035.138144][T14414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1035.315240][T14451] rdma_rxe: rxe_register_device failed with error -23 [ 1035.339142][T14451] rdma_rxe: failed to add team_slave_0 [ 1036.343186][T14414] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.352519][T14414] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.363071][T14414] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.372335][T14414] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.556639][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1036.677200][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.692958][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.788903][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1036.873163][T14466] loop4: detected capacity change from 0 to 128 [ 1037.391357][T14466] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1037.411197][T14466] ext4 filesystem being mounted at /611/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.526694][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 1039.575814][ T4402] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.636032][T14498] loop2: detected capacity change from 0 to 1024 [ 1039.654751][T14498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1039.673720][T13447] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1039.705008][T13447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1039.717176][T13447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1039.717262][T14498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1039.736791][T13447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1039.749718][ T4265] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1039.764088][ T4265] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1039.889366][ T4402] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.919060][T14498] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1039.929200][T14498] System zones: 0-1, 3-36 [ 1039.936206][T14498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1040.039591][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1040.459258][ T4402] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.628366][ T4402] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.836863][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 1042.560723][T14524] loop3: detected capacity change from 0 to 512 [ 1042.603905][T14524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1042.658895][T14524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1042.762623][T14524] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 1043.043930][T14524] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.2948: invalid indirect mapped block 4294967295 (level 0) [ 1043.464857][T14524] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.2948: invalid indirect mapped block 4294967295 (level 1) [ 1043.493689][T14524] EXT4-fs (loop3): 1 orphan inode deleted [ 1043.506503][T14524] EXT4-fs (loop3): 1 truncate cleaned up [ 1043.513784][T14524] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1043.927728][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 1043.962089][ T26] audit: type=1326 audit(1764030641.988:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db918f749 code=0x7ffc0000 [ 1044.152393][ T26] audit: type=1326 audit(1764030642.018:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1db918f749 code=0x7ffc0000 [ 1044.182510][ T26] audit: type=1326 audit(1764030642.018:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db918f749 code=0x7ffc0000 [ 1044.190923][T14499] chnl_net:caif_netlink_parms(): no params data found [ 1044.205574][ T26] audit: type=1326 audit(1764030642.018:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1db918f749 code=0x7ffc0000 [ 1044.279323][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 1044.315160][ T26] audit: type=1326 audit(1764030642.018:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db918f749 code=0x7ffc0000 [ 1044.363483][T14548] loop2: detected capacity change from 0 to 512 [ 1044.414816][ T26] audit: type=1326 audit(1764030642.018:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1db918f749 code=0x7ffc0000 [ 1044.516187][ T26] audit: type=1326 audit(1764030642.018:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.1.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1db918f749 code=0x7ffc0000 [ 1044.546067][ T26] audit: type=1326 audit(1764030642.378:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm=08435B40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcd18f749 code=0x7ffc0000 [ 1044.580192][T14548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1044.762274][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 1044.781458][ T26] audit: type=1326 audit(1764030642.378:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm=08435B40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcd18f749 code=0x7ffc0000 [ 1044.855056][T14565] device bridge0 entered promiscuous mode [ 1044.858644][ T26] audit: type=1326 audit(1764030642.378:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14547 comm=08435B40 exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fdbcd18f749 code=0x7ffc0000 [ 1044.944635][T14565] device bridge0 left promiscuous mode [ 1044.977196][T14499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.038098][T14499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.056116][T14499] device bridge_slave_0 entered promiscuous mode [ 1045.103870][ T4273] Bluetooth: Wrong link type (-22) [ 1045.174046][T14499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.184132][T14499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.214669][T14499] device bridge_slave_1 entered promiscuous mode [ 1045.997502][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 1046.209057][T14499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.340528][T14499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.851651][T14499] team0: Port device team_slave_0 added [ 1046.894405][T14499] team0: Port device team_slave_1 added [ 1047.575127][T14499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.577389][ T4334] kernel write not supported for file [eventfd] (pid: 4334 comm: kworker/0:6) [ 1047.598535][T14499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.627619][T14499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.707012][T14080] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1047.724473][T14499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.813539][T14499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.023614][T14499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.037027][T14080] usb 4-1: Using ep0 maxpacket: 16 [ 1048.086942][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 1048.089321][T14080] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.432987][T14080] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1048.530594][T14080] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1048.564256][T14080] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1048.586397][T14080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.727476][T14080] usb 4-1: config 0 descriptor?? [ 1048.834361][T14080] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1050.121897][T14499] device hsr_slave_0 entered promiscuous mode [ 1050.155438][T14499] device hsr_slave_1 entered promiscuous mode [ 1051.923613][T14499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.965307][T14499] Cannot create hsr debugfs directory [ 1052.024314][ T4262] usb 4-1: USB disconnect, device number 28 [ 1052.333232][T14652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1052.354005][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1052.387049][T14652] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1052.409327][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1052.446825][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1052.537641][T14653] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2980'. [ 1052.767148][T14661] loop6: detected capacity change from 0 to 512 [ 1052.787387][T14661] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1053.054460][T14661] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1053.103395][T14661] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 1053.126275][T14661] System zones: 0-1, 15-15, 18-18, 34-34 [ 1053.406475][T14661] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1053.417072][T14661] __quota_error: 23 callbacks suppressed [ 1053.417088][T14661] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1053.618038][T14661] EXT4-fs warning (device loop6): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1053.637217][T14661] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1053.666234][T14661] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2982: bg 0: block 40: padding at end of block bitmap is not set [ 1053.718510][T14661] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 1053.741205][ T4402] device hsr_slave_0 left promiscuous mode [ 1053.781542][ T4402] device hsr_slave_1 left promiscuous mode [ 1053.786287][T14661] EXT4-fs (loop6): 1 truncate cleaned up [ 1053.795790][T14661] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1053.822074][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.875863][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.890473][ T4402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.898168][ T4402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.944203][ T4402] device veth1_macvtap left promiscuous mode [ 1053.961415][ T4402] device veth0_macvtap left promiscuous mode [ 1053.990655][ T4402] device veth1_vlan left promiscuous mode [ 1054.015533][ T4402] device veth0_vlan left promiscuous mode [ 1054.032884][T14113] EXT4-fs (loop6): unmounting filesystem. [ 1054.318883][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.942325][T14685] loop1: detected capacity change from 0 to 1024 [ 1056.351132][ T4262] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1057.166299][T14685] EXT4-fs: Ignoring removed i_version option [ 1057.173033][T14685] EXT4-fs: inline encryption not supported [ 1057.186881][ T4262] usb 7-1: Using ep0 maxpacket: 16 [ 1057.205184][ T4262] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.240302][T14685] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1057.246317][ T4262] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1057.272375][ T4262] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1057.283240][ T4262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.317689][ T4262] usb 7-1: config 0 descriptor?? [ 1057.355966][ T4262] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1057.371871][T14685] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1057.456830][ T4341] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1057.495233][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 1057.556152][T14708] loop3: detected capacity change from 0 to 1024 [ 1057.639888][ T4341] usb 3-1: Using ep0 maxpacket: 16 [ 1057.650516][ T4341] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.696898][ T4341] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.735981][ T4341] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1057.753632][ T4341] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1057.772360][ T4341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.786139][ T46] hfsplus: b-tree write err: -5, ino 8 [ 1057.867072][ T4341] usb 3-1: config 0 descriptor?? [ 1058.325662][ T4341] hid (null): unknown global tag 0xd [ 1058.331349][ T4341] hid (null): unknown global tag 0xd [ 1058.336710][ T4341] hid (null): nested delimiters [ 1058.536987][T14420] usb 3-1: USB disconnect, device number 21 [ 1059.378325][ T4402] team0 (unregistering): Port device team_slave_1 removed [ 1059.386354][T14447] usb 7-1: USB disconnect, device number 2 [ 1061.572546][ T4402] team0 (unregistering): Port device team_slave_0 removed [ 1061.783611][ T4402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.570257][ T4402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.606075][ T4402] bond0 (unregistering): Released all slaves [ 1064.642869][ T6039] Bluetooth: (null): Invalid header checksum [ 1064.653287][ T6039] Bluetooth: (null): Invalid header checksum [ 1064.681543][ T6039] Bluetooth: (null): Invalid header checksum [ 1064.687786][ T6039] Bluetooth: (null): Invalid header checksum [ 1064.693976][ T6039] Bluetooth: (null): Invalid header checksum [ 1065.161294][T14499] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1065.342776][T14499] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1065.438553][T14783] CUSE: unknown device info "" [ 1065.443695][T14783] CUSE: zero length info key specified [ 1066.037220][T14499] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1066.078798][T14499] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1066.842150][ T4341] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1066.858168][ T4402] Bluetooth: (null): Invalid header checksum [ 1066.873067][ T4402] Bluetooth: (null): Invalid header checksum [ 1066.919434][ T4402] Bluetooth: (null): Invalid header checksum [ 1066.925522][ T4402] Bluetooth: (null): Invalid header checksum [ 1066.953346][ T4402] Bluetooth: (null): Invalid header checksum [ 1067.104661][ T4341] usb 3-1: config index 0 descriptor too short (expected 31444, got 27) [ 1067.116379][T14499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.139386][ T4341] usb 3-1: config 21 has too many interfaces: 83, using maximum allowed: 32 [ 1067.160120][ T26] audit: type=1326 audit(1764030665.188:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1067.187633][ T4341] usb 3-1: config 21 has an invalid interface number: 120 but max is 82 [ 1067.196110][ T4341] usb 3-1: config 21 has 1 interface, different from the descriptor's value: 83 [ 1067.217107][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1067.224958][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1067.234450][ T26] audit: type=1326 audit(1764030665.218:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1067.251432][ T4341] usb 3-1: config 21 has no interface number 0 [ 1067.267375][T14499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.291747][ T4341] usb 3-1: config 21 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 47582, setting to 1024 [ 1067.312308][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1067.332113][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1067.353508][ T4341] usb 3-1: config 21 interface 120 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1067.364540][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.371728][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.382057][ T26] audit: type=1326 audit(1764030665.218:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1067.406249][ T4341] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1067.466846][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1067.475033][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1067.483787][ T4341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.516275][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1067.529804][T14784] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1067.567623][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.574768][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.586387][ T26] audit: type=1326 audit(1764030665.218:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1067.611053][ T26] audit: type=1326 audit(1764030665.218:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1067.619463][ T4341] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:21.120/input/input11 [ 1067.645132][ T26] audit: type=1326 audit(1764030665.218:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1067.678483][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1067.869651][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1067.960097][ T26] audit: type=1326 audit(1764030665.218:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1068.207106][ T26] audit: type=1326 audit(1764030665.218:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1068.243963][ T6039] Bluetooth: (null): Invalid header checksum [ 1068.251028][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1068.267046][ T26] audit: type=1326 audit(1764030665.218:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1068.296250][ T26] audit: type=1326 audit(1764030665.218:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14812 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06b938f749 code=0x7ffc0000 [ 1068.322072][ T6039] Bluetooth: (null): Invalid header checksum [ 1068.337262][ C1] usbtouchscreen 3-1:21.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1068.357617][ T6039] Bluetooth: (null): Invalid header checksum [ 1068.363768][ T6039] Bluetooth: (null): Invalid header checksum [ 1068.372786][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1068.372930][ T4341] usb 3-1: USB disconnect, device number 22 [ 1068.398222][ T6039] Bluetooth: (null): Invalid header checksum [ 1068.425421][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1068.454263][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1068.607601][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1068.649689][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1068.686120][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1068.756351][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1068.803259][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1068.853174][T14499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1069.967283][ T5912] Bluetooth: (null): Invalid header checksum [ 1069.975722][ T5912] Bluetooth: (null): Invalid header checksum [ 1070.078509][ T5912] Bluetooth: (null): Invalid header checksum [ 1070.447508][T14499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.457864][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1070.476678][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1072.561564][T14902] loop1: detected capacity change from 0 to 256 [ 1072.654359][T14902] exfat: Bad value for 'uid' [ 1073.959459][ T6498] Bluetooth: (null): Invalid header checksum [ 1073.980050][ T6498] Bluetooth: (null): Invalid header checksum [ 1074.069165][ T4522] Bluetooth: (null): Invalid header checksum [ 1074.179252][ T4522] Bluetooth: (null): Invalid header checksum [ 1074.289073][ T9952] Bluetooth: (null): Invalid header checksum [ 1074.420346][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1074.710573][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1074.755673][T14499] device veth0_vlan entered promiscuous mode [ 1074.803974][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1074.824026][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1074.856758][T14499] device veth1_vlan entered promiscuous mode [ 1074.995285][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1075.120406][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1075.139544][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1075.931043][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1076.020443][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1076.039943][T14933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1076.382071][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1076.404921][T14499] device veth0_macvtap entered promiscuous mode [ 1076.607697][T14499] device veth1_macvtap entered promiscuous mode [ 1076.747490][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.758777][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.770095][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.780858][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.790988][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.822248][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.921855][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.932816][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.942835][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.956274][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.991255][T14499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.770368][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1077.807625][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1077.835243][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1077.982606][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1078.037541][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.098512][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.284711][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.533199][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.644188][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.655273][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.679225][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.726927][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.752255][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1078.763931][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.775260][T14499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.787994][T14499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.796703][T14499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.805772][T14499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.815735][T14499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.826480][T14960] netlink: 'syz.2.3052': attribute type 13 has an invalid length. [ 1078.850324][T14960] netlink: 'syz.2.3052': attribute type 17 has an invalid length. [ 1079.743412][T14972] loop3: detected capacity change from 0 to 2048 [ 1079.815026][T14960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1079.842524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1079.853597][T14972] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1079.867713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1080.248271][T14972] loop3: detected capacity change from 2048 to 0 [ 1080.325830][ T4592] loop: Write error at byte offset 9223372036855464959, length 512. [ 1080.341801][ C0] I/O error, dev loop3, sector 1346 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1080.351822][ C0] Buffer I/O error on dev loop3, logical block 1346, lost sync page write [ 1080.360433][T14979] UDF-fs: warning (device loop3): udf_update_inode: IO error syncing udf inode [00000542] [ 1080.407153][ T4592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.436231][ T4593] loop: Write error at byte offset 9223372036855450623, length 512. [ 1080.442494][ T4592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.489838][ C1] I/O error, dev loop3, sector 1318 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1080.500135][ T4593] loop: Write error at byte offset 9223372036855464959, length 512. [ 1080.511671][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.512102][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1080.530420][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.562137][ C1] I/O error, dev loop3, sector 1346 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1080.571889][ C1] Buffer I/O error on dev loop3, logical block 1346, lost sync page write [ 1080.580613][T14979] UDF-fs: warning (device loop3): udf_update_inode: IO error syncing udf inode [00000542] [ 1080.732049][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1080.886248][ C1] I/O error, dev loop3, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1080.901172][ C1] I/O error, dev loop3, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1081.681307][ T6039] loop: Write error at byte offset 9223372036854841343, length 512. [ 1081.703473][ C0] I/O error, dev loop3, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1081.713152][ C0] Buffer I/O error on dev loop3, logical block 128, lost sync page write [ 1082.936200][T15013] loop6: detected capacity change from 0 to 128 [ 1083.001023][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1083.011284][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1083.027339][T15013] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1083.047281][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1083.065556][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1083.075280][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1083.086034][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1083.112820][T15013] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.940514][T14113] EXT4-fs (loop6): unmounting filesystem. [ 1084.484785][T15033] x_tables: duplicate underflow at hook 1 [ 1085.703266][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 1086.024424][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1086.037829][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1086.045548][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1086.053492][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1086.062252][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1086.069687][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1086.499642][T15053] loop2: detected capacity change from 0 to 8 [ 1086.879332][T15053] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1086.887548][T15053] SQUASHFS error: Failed to read block 0x9b: -5 [ 1086.893924][T15053] SQUASHFS error: Unable to read metadata cache entry [99] [ 1086.901254][T15053] SQUASHFS error: Unable to read inode 0x127 [ 1089.752678][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 1089.754925][ T4265] Bluetooth: hci4: command 0x0409 tx timeout [ 1090.311475][T15014] chnl_net:caif_netlink_parms(): no params data found [ 1090.703926][T15014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.735623][T15014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.772096][T15014] device bridge_slave_0 entered promiscuous mode [ 1091.119718][T15014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.324447][T15014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.388912][T15014] device bridge_slave_1 entered promiscuous mode [ 1091.837137][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 1091.837266][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 1092.180575][T15042] chnl_net:caif_netlink_parms(): no params data found [ 1092.238545][T15014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.352413][T15014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.352699][T15104] loop6: detected capacity change from 0 to 1024 [ 1092.425873][T15104] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1092.447072][T15104] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.498294][T15104] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.3088: inode has both inline data and extents flags [ 1092.708164][T14113] EXT4-fs (loop6): unmounting filesystem. [ 1092.811867][T15014] team0: Port device team_slave_0 added [ 1092.958959][T15014] team0: Port device team_slave_1 added [ 1093.359409][ T4522] Bluetooth: (null): Invalid header checksum [ 1093.506339][ T4522] Bluetooth: (null): Invalid header checksum [ 1093.968060][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 1093.968110][T13447] Bluetooth: hci4: command 0x040f tx timeout [ 1094.571192][ T4522] Bluetooth: (null): Invalid header checksum [ 1094.843454][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1094.843467][ T26] audit: type=1326 audit(1764030692.868:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1094.913806][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.921421][ T26] audit: type=1326 audit(1764030692.888:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1094.936851][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.981171][ T26] audit: type=1326 audit(1764030692.928:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1095.084388][ T26] audit: type=1326 audit(1764030692.928:333): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1095.135861][T15042] device bridge_slave_0 entered promiscuous mode [ 1095.220970][T15014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.231866][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.257988][ T26] audit: type=1326 audit(1764030692.928:334): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz.6.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1095.314555][T15014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.339427][ T4440] device hsr_slave_0 left promiscuous mode [ 1095.360317][ T4440] device hsr_slave_1 left promiscuous mode [ 1095.574383][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.594720][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.614977][ T4440] device bridge_slave_1 left promiscuous mode [ 1095.624730][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.662823][ T4440] device bridge_slave_0 left promiscuous mode [ 1095.768216][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.997537][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 1097.702836][ T7765] smc: removing ib device syz! [ 1097.762591][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1097.800649][T15165] loop6: detected capacity change from 0 to 128 [ 1099.278062][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.143998][ T4440] bond0 (unregistering): Released all slaves [ 1100.310659][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.318874][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.331070][T15042] device bridge_slave_1 entered promiscuous mode [ 1100.372305][T15014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.379522][T15014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.407904][T15014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.468053][T15042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.618133][T15042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.924646][T15042] team0: Port device team_slave_0 added [ 1101.139047][T15042] team0: Port device team_slave_1 added [ 1101.211779][T15014] device hsr_slave_0 entered promiscuous mode [ 1101.412491][T15014] device hsr_slave_1 entered promiscuous mode [ 1101.857775][T15042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.909224][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.998637][T15042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.114526][T15042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.131880][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.323074][T15042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.371241][T15042] device hsr_slave_0 entered promiscuous mode [ 1103.382012][T15042] device hsr_slave_1 entered promiscuous mode [ 1103.403680][T15042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1103.434518][T15042] Cannot create hsr debugfs directory [ 1103.584491][T15221] loop4: detected capacity change from 0 to 128 [ 1103.652706][T15221] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1103.723447][T15221] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.501853][T14499] EXT4-fs (loop4): unmounting filesystem. [ 1105.436795][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 1105.506585][T15042] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1105.775932][T15042] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1105.870813][T15042] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1105.905668][T15042] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1106.056925][T15014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1106.089099][T15014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1106.589308][T15014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1106.621129][T15014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1106.884740][T15270] loop6: detected capacity change from 0 to 256 [ 1106.922318][T15042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.973607][T15042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.991941][T15270] FAT-fs (loop6): Directory bread(block 64) failed [ 1107.004425][T15270] FAT-fs (loop6): Directory bread(block 65) failed [ 1107.005408][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1107.020221][T15270] FAT-fs (loop6): Directory bread(block 66) failed [ 1107.056149][T15270] FAT-fs (loop6): Directory bread(block 67) failed [ 1107.074213][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1107.083284][T15270] FAT-fs (loop6): Directory bread(block 68) failed [ 1107.100167][T15270] FAT-fs (loop6): Directory bread(block 69) failed [ 1107.116337][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1107.134062][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1107.138765][T15270] FAT-fs (loop6): Directory bread(block 70) failed [ 1107.152771][T15270] FAT-fs (loop6): Directory bread(block 71) failed [ 1107.154145][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.166127][T15270] FAT-fs (loop6): Directory bread(block 72) failed [ 1107.166420][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.177230][T15270] FAT-fs (loop6): Directory bread(block 73) failed [ 1107.224246][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1107.251391][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1107.260973][ T26] audit: type=1800 audit(1764030705.288:335): pid=15270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3123" name="bus" dev="loop6" ino=1048629 res=0 errno=0 [ 1107.277055][ T4522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.288907][ T4522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.335806][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1107.371586][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1107.433810][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1107.598841][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1107.639390][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1107.700359][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1107.869389][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1108.032057][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1108.149071][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1108.161432][T15042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1108.176590][T15042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1108.190470][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1108.198908][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1108.208339][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1108.249351][T15014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.677595][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1108.703800][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1108.742742][T15014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.767899][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1108.790258][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1108.816658][ T4522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.823848][ T4522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.893480][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1108.940418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1108.959428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1108.976594][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.983829][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.012408][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1109.028631][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1109.084689][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1109.102555][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1109.128809][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1109.137373][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1109.155582][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1109.174526][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1109.197955][ T4341] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1109.226035][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1109.252697][T15014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.294306][T15014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1109.343014][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1109.352741][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1109.407187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1109.414792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1109.426852][ T4341] usb 5-1: Using ep0 maxpacket: 16 [ 1109.433717][ T4341] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.456895][T15042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.498035][ T4341] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.516925][ T4341] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1109.532456][ T4341] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1109.562515][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.599973][ T4341] usb 5-1: config 0 descriptor?? [ 1110.051699][ T4341] hid (null): unknown global tag 0xd [ 1110.076395][ T4341] hid (null): unknown global tag 0xd [ 1110.117240][ T4341] hid (null): nested delimiters [ 1110.127619][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1110.135208][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1110.153476][T15014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.201697][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1110.225479][ T2945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1110.982141][ T4334] usb 5-1: USB disconnect, device number 23 [ 1111.072256][T15014] device veth0_vlan entered promiscuous mode [ 1111.088487][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1111.117667][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1111.153786][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1111.163247][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1111.180839][T15014] device veth1_vlan entered promiscuous mode [ 1111.281083][T15014] device veth0_macvtap entered promiscuous mode [ 1111.316019][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1111.326293][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1111.352640][T15014] device veth1_macvtap entered promiscuous mode [ 1111.361138][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1111.370093][ T6498] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1111.834300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1111.898540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1111.918773][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.946832][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.970837][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.003523][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.023810][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.044243][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.062247][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.088084][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.104864][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.118846][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.146240][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.175009][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.189002][T15014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.211879][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.225572][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.235984][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.258990][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.269370][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.296430][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.342128][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.383885][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.490793][T15372] loop4: detected capacity change from 0 to 1024 [ 1112.736343][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.904617][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.914965][T15014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.925785][T15014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.938729][T15014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.959735][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1112.986432][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1113.023588][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1113.094373][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1113.140720][T15042] device veth0_vlan entered promiscuous mode [ 1113.165257][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1113.177787][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1113.192503][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1113.204470][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1113.226310][T15014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.235231][T15014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.245091][T15014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.254745][T15014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.278181][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3147'. [ 1113.301346][T15042] device veth1_vlan entered promiscuous mode [ 1113.437902][T15042] device veth0_macvtap entered promiscuous mode [ 1113.663185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1113.704361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1113.773158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1113.797015][ T14] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1113.813833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1113.893208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1114.017057][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 1114.029838][ T14] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.057686][T15042] device veth1_macvtap entered promiscuous mode [ 1114.084092][ T14] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.122086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1114.137746][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1114.151952][ T14] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1114.159885][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.174436][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.184513][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.184786][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.211100][ T14] usb 3-1: config 0 descriptor?? [ 1114.212603][T15394] loop4: detected capacity change from 0 to 764 [ 1114.225735][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.236438][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.248268][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.262238][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.275163][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.287454][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.321043][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.350202][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.360909][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.428672][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.636317][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.649260][T15042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.046201][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.086575][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.098434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1115.115865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1115.126082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1115.157168][T15404] loop4: detected capacity change from 0 to 512 [ 1115.170002][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.186337][T15404] EXT4-fs: Ignoring removed i_version option [ 1115.202634][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.239545][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.268611][T15404] EXT4-fs (loop4): 1 truncate cleaned up [ 1115.276268][ T14] hid (null): unknown global tag 0xd [ 1115.288132][T15404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1115.297658][ T14] hid (null): unknown global tag 0xd [ 1115.303041][ T14] hid (null): nested delimiters [ 1115.312870][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.348966][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.361722][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.387703][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.398664][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.409091][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.420484][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.430485][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.441215][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.451374][T15042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.461938][T15042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.475733][T14312] usb 3-1: USB disconnect, device number 23 [ 1115.495145][T15042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.503449][T14499] EXT4-fs (loop4): unmounting filesystem. [ 1115.514990][T15042] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.525631][T15042] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.537776][T15042] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.588546][T15042] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.618036][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1115.629504][ T6039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1115.666228][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.688846][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.718570][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1115.760342][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.808920][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.830352][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.870161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1115.890562][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.699718][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.832386][ T9952] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1116.969124][T15436] loop2: detected capacity change from 0 to 16 [ 1117.027157][T15436] erofs: (device loop2): mounted with root inode @ nid 36. [ 1118.266953][T15448] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3167'. [ 1120.278389][T15470] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3177'. [ 1120.296901][T15470] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1120.456907][T15476] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1120.491416][ T2945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.682163][ T2945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.704040][T15480] loop1: detected capacity change from 0 to 16 [ 1120.757713][T15480] erofs: (device loop1): mounted with root inode @ nid 36. [ 1120.773906][T13447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1120.786385][T13447] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1120.794766][T13447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1120.803966][T13447] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1120.812387][T13447] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1120.820590][T13447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1120.861318][ T2945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.301241][ T2945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.878035][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 1124.449235][T15524] loop6: detected capacity change from 0 to 16 [ 1124.537133][T15524] erofs: (device loop6): mounted with root inode @ nid 36. [ 1124.562007][T15477] chnl_net:caif_netlink_parms(): no params data found [ 1124.648091][T15527] netlink: 'syz.1.3193': attribute type 3 has an invalid length. [ 1124.718795][T15527] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1124.966971][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 1125.822669][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 1126.035611][T15477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.053931][T15477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.138176][T15477] device bridge_slave_0 entered promiscuous mode [ 1126.194599][T15554] loop6: detected capacity change from 0 to 512 [ 1126.232398][T15550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3198'. [ 1126.265470][T15554] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1126.323250][T15554] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1126.653644][T15554] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.3199: bad orphan inode 131083 [ 1126.917663][T15554] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1127.069849][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 1127.192479][T15550] bond0: (slave bond_slave_1): Releasing backup interface [ 1127.511794][T15477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.543589][T15477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.790221][T15477] device bridge_slave_1 entered promiscuous mode [ 1127.971876][T15573] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3203'. [ 1128.043050][T15577] loop4: detected capacity change from 0 to 16 [ 1128.065430][T15477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.074189][T15577] erofs: (device loop4): mounted with root inode @ nid 36. [ 1128.126131][ T2945] bridge0: port 3(gretap0) entered disabled state [ 1128.303493][T15568] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1128.347854][T15566] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.3199: iget: bad extra_isize 1312 (inode size 256) [ 1128.426519][ T2945] device gretap0 left promiscuous mode [ 1128.440893][ T2945] bridge0: port 3(gretap0) entered disabled state [ 1128.535486][T15589] device sit0 entered promiscuous mode [ 1128.563404][T14113] EXT4-fs (loop6): unmounting filesystem. [ 1128.603137][T15589] netlink: 'syz.4.3208': attribute type 1 has an invalid length. [ 1128.616869][T15589] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3208'. [ 1128.662047][T15477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.083246][T15477] team0: Port device team_slave_0 added [ 1129.094619][T15477] team0: Port device team_slave_1 added [ 1129.216814][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 1129.304257][T15611] CUSE: unknown device info "" [ 1129.309227][T15611] CUSE: zero length info key specified [ 1129.839155][T15612] loop7: detected capacity change from 0 to 128 [ 1129.926876][T14420] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1130.117105][T14420] usb 5-1: Using ep0 maxpacket: 16 [ 1130.127363][T14420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.759559][T14420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.769497][T14420] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1132.438760][T14420] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1132.489397][T14420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.624473][T14420] usb 5-1: config 0 descriptor?? [ 1132.639664][T14420] usb 5-1: can't set config #0, error -71 [ 1132.682697][T14420] usb 5-1: USB disconnect, device number 24 [ 1132.849828][T15620] loop4: detected capacity change from 0 to 16 [ 1132.887034][T15620] erofs: (device loop4): mounted with root inode @ nid 36. [ 1132.930653][T15477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.957477][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.837969][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 1133.956835][T15477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.294076][T15477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.308869][T15477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.396072][T15477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.447378][ T2945] device hsr_slave_0 left promiscuous mode [ 1134.460307][ T2945] device hsr_slave_1 left promiscuous mode [ 1134.612622][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.713563][T15645] CUSE: unknown device info "" [ 1134.718529][T15645] CUSE: zero length info key specified [ 1135.313021][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.366167][T15648] loop1: detected capacity change from 0 to 128 [ 1135.373696][ T2945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.396348][ T2945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.571932][ T2945] device bridge_slave_1 left promiscuous mode [ 1135.642949][T15653] loop4: detected capacity change from 0 to 8 [ 1135.775576][T15653] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1135.783682][T15653] SQUASHFS error: Failed to read block 0x9b: -5 [ 1135.789984][T15653] SQUASHFS error: Unable to read metadata cache entry [99] [ 1135.798239][T15653] SQUASHFS error: Unable to read inode 0x127 [ 1135.820275][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.855791][ T26] audit: type=1326 audit(1764030733.878:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15654 comm="syz.7.3227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaf5b8f749 code=0x0 [ 1135.876769][T15648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1135.893128][T15648] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.945694][ T2945] device bridge_slave_0 left promiscuous mode [ 1136.025693][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.136061][T15661] loop6: detected capacity change from 0 to 16 [ 1136.147467][T15661] erofs: (device loop6): mounted with root inode @ nid 36. [ 1136.220997][ T2945] device veth1_macvtap left promiscuous mode [ 1136.391278][ T2945] device veth0_macvtap left promiscuous mode [ 1136.398077][ T2945] device veth1_vlan left promiscuous mode [ 1136.404010][ T2945] device veth0_vlan left promiscuous mode [ 1136.568511][T15014] EXT4-fs (loop1): unmounting filesystem. [ 1137.606779][ T4334] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1138.094871][ T4460] Bluetooth: (null): Invalid header checksum [ 1138.108188][ T4460] Bluetooth: (null): Invalid header checksum [ 1138.115021][ T4460] Bluetooth: (null): Invalid header checksum [ 1138.169395][ T9952] Bluetooth: (null): Invalid header checksum [ 1138.280334][ T9952] Bluetooth: (null): Invalid header checksum [ 1138.389132][ T4334] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.415427][ T9952] Bluetooth: (null): Invalid header checksum [ 1138.447487][ T4334] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1138.486947][ T4334] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1138.496072][ T4334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.547077][ T4334] usb 7-1: config 0 descriptor?? [ 1138.574417][ T4334] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1138.653206][T15699] loop4: detected capacity change from 0 to 16 [ 1138.681092][T15699] erofs: (device loop4): mounted with root inode @ nid 36. [ 1138.784751][ T4334] usb 7-1: USB disconnect, device number 3 [ 1140.753819][ T2945] team0 (unregistering): Port device team_slave_1 removed [ 1140.802042][ T2945] team0 (unregistering): Port device team_slave_0 removed [ 1140.848254][ T2945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.894437][ T2945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.484411][T15720] loop6: detected capacity change from 0 to 512 [ 1141.494053][ T2945] bond0 (unregistering): Released all slaves [ 1141.537845][T15720] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1141.549274][T15720] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.632686][T15695] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3240'. [ 1141.726397][T14113] EXT4-fs (loop6): unmounting filesystem. [ 1141.830368][T15477] device hsr_slave_0 entered promiscuous mode [ 1142.067507][T15477] device hsr_slave_1 entered promiscuous mode [ 1142.088246][T15477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1142.095841][T15477] Cannot create hsr debugfs directory [ 1142.361254][ T4517] Bluetooth: (null): Invalid header checksum [ 1142.396436][ T4517] Bluetooth: (null): Invalid header checksum [ 1142.534547][ T4517] Bluetooth: (null): Invalid header checksum [ 1142.707692][ T4517] Bluetooth: (null): Invalid header checksum [ 1142.758998][ T4517] Bluetooth: (null): Invalid header checksum [ 1145.654623][T15771] loop7: detected capacity change from 0 to 512 [ 1145.794409][T15771] EXT4-fs error (device loop7): ext4_find_inline_data_nolock:164: inode #15: comm syz.7.3262: inline data xattr refers to an external xattr inode [ 1145.865534][T15771] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3262: couldn't read orphan inode 15 (err -117) [ 1145.885830][T15771] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1146.028687][T15042] EXT4-fs (loop7): unmounting filesystem. [ 1147.817290][ T26] audit: type=1326 audit(1764030745.838:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.700750][ T26] audit: type=1326 audit(1764030745.838:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.724801][ T26] audit: type=1326 audit(1764030745.838:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.755155][ T26] audit: type=1326 audit(1764030745.838:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.784817][ T26] audit: type=1326 audit(1764030745.838:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.817893][ T26] audit: type=1326 audit(1764030745.838:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.840960][ T26] audit: type=1326 audit(1764030745.838:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.865312][ T26] audit: type=1326 audit(1764030745.838:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.898501][ T26] audit: type=1326 audit(1764030745.838:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1148.923190][ T26] audit: type=1326 audit(1764030745.838:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15799 comm="syz.6.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a32f8f749 code=0x7ffc0000 [ 1150.761832][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.771590][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.088985][T15825] loop7: detected capacity change from 0 to 256 [ 1152.579818][T15789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.634376][T15789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.487819][T15789] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.497084][T15789] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.505939][T15789] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.515228][T15789] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.648656][T15806] netlink: 'syz.6.3269': attribute type 27 has an invalid length. [ 1153.774714][T15847] loop4: detected capacity change from 0 to 1024 [ 1153.829462][T15847] EXT4-fs: Ignoring removed bh option [ 1153.894264][T15847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1154.171191][T14499] EXT4-fs (loop4): unmounting filesystem. [ 1154.199129][T15806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.206576][T15806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.559459][T15806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.567205][T14421] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 1155.594315][T15806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.768365][T14421] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1155.781102][T14421] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 8 [ 1155.793001][T14421] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1155.802440][T14421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.821067][T15857] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1155.936647][T15806] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.945867][T15806] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.955321][T15806] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.964399][T15806] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.065854][T14421] usb 5-1: string descriptor 0 read error: -71 [ 1156.094789][T15807] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1156.112471][T15807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.121644][T15807] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.138467][T14421] usb 5-1: USB disconnect, device number 25 [ 1156.157811][T15807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1156.404609][T15477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1156.443274][T15477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1156.459199][T15477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1156.500743][T15477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1157.136681][T15880] loop7: detected capacity change from 0 to 2048 [ 1157.304679][T15477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.306872][T15880] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1157.486439][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1157.534734][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1157.681400][T15477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.732060][T15880] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1158.917162][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1158.998316][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1159.021469][T15042] EXT4-fs (loop7): unmounting filesystem. [ 1159.087169][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.094297][ T4440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.133377][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1159.163531][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1159.194364][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.201530][ T4440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.744806][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1159.884024][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1159.995800][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1160.033728][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1160.043816][T15918] loop6: detected capacity change from 0 to 256 [ 1160.080929][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1160.127388][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1160.165747][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1160.207197][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1160.257172][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1160.384310][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1160.442873][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1160.451888][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1160.471834][T15477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1161.137481][T15928] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3305'. [ 1161.154605][T15928] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1162.703160][T15945] loop1: detected capacity change from 0 to 1024 [ 1162.714408][T15945] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1162.757617][T15945] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1162.820249][T15945] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.980733][T13447] Bluetooth: hci2: command 0x0406 tx timeout [ 1164.200166][T15014] EXT4-fs (loop1): unmounting filesystem. [ 1164.369280][T15477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.406922][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1164.427059][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1164.501573][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1164.527585][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1165.274102][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1165.335690][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1165.355262][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1165.544166][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1165.575198][T15477] device veth0_vlan entered promiscuous mode [ 1165.863957][T15477] device veth1_vlan entered promiscuous mode [ 1166.376239][T15991] loop7: detected capacity change from 0 to 128 [ 1166.392367][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1166.498511][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1166.558377][T15991] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1166.689946][T15477] device veth0_macvtap entered promiscuous mode [ 1166.705796][T15991] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.833166][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1167.258843][T15477] device veth1_macvtap entered promiscuous mode [ 1167.449814][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1167.962151][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.986023][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.003913][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.056506][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.126225][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.191143][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.288001][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.346924][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.668097][T16020] loop6: detected capacity change from 0 to 164 [ 1169.128219][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.152458][T15477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.277040][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1169.312719][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1169.341612][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.372503][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.420096][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.456415][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.511168][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.582196][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.612185][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.671919][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.739034][T15477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.749993][T15477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.762090][T15477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.769613][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1170.069691][ T7765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1170.389086][T15477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.450076][T15477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.507680][T15477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.516414][T15477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.950058][T16052] CUSE: unknown device info "" [ 1170.954950][T16052] CUSE: zero length info key specified [ 1172.521180][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.549099][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.593190][T16059] loop6: detected capacity change from 0 to 512 [ 1172.621242][ T5912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.654484][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1172.662681][T16059] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1172.703947][ T5912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.749950][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1172.755965][T16063] loop1: detected capacity change from 0 to 512 [ 1172.778586][T16059] EXT4-fs (loop6): 1 truncate cleaned up [ 1172.817761][T16059] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1172.965469][T16063] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1173.061522][T16063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 1173.167010][T16063] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.3337: corrupted in-inode xattr [ 1173.265085][T15042] EXT4-fs (loop7): unmounting filesystem. [ 1173.917117][T16063] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3337: couldn't read orphan inode 15 (err -117) [ 1173.954546][T14113] EXT4-fs (loop6): unmounting filesystem. [ 1174.039128][T16063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1174.129797][T16063] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 1174.279560][T16085] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3341'. [ 1174.491781][T15014] EXT4-fs (loop1): unmounting filesystem. [ 1174.577031][ T4262] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1174.851602][ T4262] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.943599][ T4262] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1175.074405][ T4262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.236019][ T4262] usb 7-1: Product: syz [ 1175.240265][ T4262] usb 7-1: Manufacturer: syz [ 1175.244942][ T4262] usb 7-1: SerialNumber: syz [ 1175.276176][T16101] loop1: detected capacity change from 0 to 16 [ 1175.344839][T16101] erofs: (device loop1): mounted with root inode @ nid 36. [ 1175.354483][T16100] CUSE: unknown device info "" [ 1175.359460][T16100] CUSE: zero length info key specified [ 1175.595347][T16107] loop2: detected capacity change from 0 to 736 [ 1175.673148][ T4262] cdc_ncm 7-1:1.0: bind() failure [ 1175.701121][ T4262] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 1175.727342][ T4262] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 1175.758116][ T4262] usbtest: probe of 7-1:1.1 failed with error -71 [ 1175.825892][ T4262] usb 7-1: USB disconnect, device number 4 [ 1176.132736][T16120] loop7: detected capacity change from 0 to 736 [ 1177.208222][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.011246][T16164] loop2: detected capacity change from 0 to 1024 [ 1180.077107][T16164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1180.142014][T16164] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.755950][T16176] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1180.978253][T15477] EXT4-fs (loop2): unmounting filesystem. [ 1181.252307][T16193] loop2: detected capacity change from 0 to 2048 [ 1181.553281][T16193] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=385, location=385 [ 1181.870521][T16193] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1182.439896][T16218] CUSE: unknown device info "" [ 1182.444793][T16218] CUSE: zero length info key specified [ 1184.340227][T16234] loop2: detected capacity change from 0 to 256 [ 1185.482283][T16265] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1186.403501][T16281] loop7: detected capacity change from 0 to 128 [ 1186.467552][T16281] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1186.590490][T16281] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.826768][T16298] loop1: detected capacity change from 0 to 8 [ 1186.836975][T16296] Bluetooth: MGMT ver 1.22 [ 1187.169512][T16298] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1187.318564][T16298] SQUASHFS error: Failed to read block 0x4de: -5 [ 1187.370921][T16298] SQUASHFS error: Failed to read block 0x4de: -5 [ 1187.403400][T16298] SQUASHFS error: Failed to read block 0x4de: -5 [ 1187.466602][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1187.466616][ T26] audit: type=1800 audit(1764030785.488:348): pid=16298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3405" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1187.528942][T15042] EXT4-fs (loop7): unmounting filesystem. [ 1188.427169][T16316] netlink: 'syz.4.3413': attribute type 27 has an invalid length. [ 1189.085296][T16325] loop1: detected capacity change from 0 to 16 [ 1189.104613][T16325] erofs: (device loop1): mounted with root inode @ nid 36. [ 1190.032701][T16339] loop4: detected capacity change from 0 to 128 [ 1190.103476][T16339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1190.131319][T16339] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.170309][T16344] loop6: detected capacity change from 0 to 16 [ 1190.198914][T16344] erofs: (device loop6): mounted with root inode @ nid 36. [ 1191.189414][T14499] EXT4-fs (loop4): unmounting filesystem. [ 1195.201652][T16407] Illegal XDP return value 4294967274 on prog (id 319) dev N/A, expect packet loss! [ 1195.256757][T16409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1195.816134][T16414] loop1: detected capacity change from 0 to 164 [ 1209.996813][ T4273] Bluetooth: hci4: command 0x0406 tx timeout [ 1210.002860][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 1301.126631][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1301.133597][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11465/1:b..l P3638/1:b..l [ 1301.143181][ C0] (detected by 0, t=10502 jiffies, g=96625, q=400 ncpus=2) [ 1301.150441][ C0] task:udevd state:R running task stack:23040 pid:3638 ppid:1 flags:0x00004002 [ 1301.162247][ C0] Call Trace: [ 1301.165512][ C0] [ 1301.168452][ C0] __schedule+0x10ec/0x40b0 [ 1301.172955][ C0] ? __sched_text_start+0x8/0x8 [ 1301.177820][ C0] ? lock_chain_count+0x20/0x20 [ 1301.182651][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 1301.187916][ C0] preempt_schedule_irq+0xb1/0x150 [ 1301.193006][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 1301.198703][ C0] ? rcu_is_watching+0x11/0xa0 [ 1301.203448][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1301.209242][ C0] irqentry_exit+0x63/0x70 [ 1301.213636][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1301.219601][ C0] RIP: 0010:__d_lookup+0x189/0x7c0 [ 1301.224705][ C0] Code: ff 43 80 3c 3e 00 74 08 48 89 df e8 21 d9 eb ff 48 8b 1b 48 89 de 48 83 e6 01 31 ff e8 f0 ad 9b ff 48 83 e3 01 48 8b 6c 24 10 <4c> 8b 74 24 08 75 30 e8 0b de 84 ff 89 c3 31 ff 89 c6 e8 50 ad 9b [ 1301.244305][ C0] RSP: 0018:ffffc900032b7808 EFLAGS: 00000246 [ 1301.250353][ C0] RAX: ffffffff81e52c50 RBX: 0000000000000000 RCX: ffff88807c8b5940 [ 1301.258395][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.266358][ C0] RBP: ffff8880256fb8f8 R08: dffffc0000000000 R09: fffff520000c1a36 [ 1301.274310][ C0] R10: fffff520000c1a36 R11: 1ffff920000c1a35 R12: ffff8880237bd358 [ 1301.282266][ C0] R13: ffffffff81e52b5b R14: 1ffff920000c1a35 R15: dffffc0000000000 [ 1301.290221][ C0] ? __d_lookup+0x8b/0x7c0 [ 1301.294621][ C0] ? __d_lookup+0x180/0x7c0 [ 1301.299107][ C0] ? __d_lookup+0x180/0x7c0 [ 1301.303587][ C0] ? kernfs_iop_permission+0x28b/0x380 [ 1301.309022][ C0] lookup_fast+0x7c/0x4d0 [ 1301.313337][ C0] ? inode_permission+0xef/0x480 [ 1301.318254][ C0] ? bpf_lsm_inode_permission+0x5/0x10 [ 1301.323690][ C0] ? security_inode_permission+0xac/0xf0 [ 1301.329302][ C0] link_path_walk+0x5f2/0xe50 [ 1301.333977][ C0] ? handle_lookup_down+0x130/0x130 [ 1301.339151][ C0] ? __stack_depot_save+0x35/0x460 [ 1301.344250][ C0] path_lookupat+0x9d/0x440 [ 1301.348753][ C0] filename_lookup+0x1f0/0x500 [ 1301.353517][ C0] ? hashlen_string+0x110/0x110 [ 1301.358358][ C0] ? __might_fault+0xa6/0x120 [ 1301.363012][ C0] vfs_statx+0x109/0x650 [ 1301.367233][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 1301.372246][ C0] ? strncpy_from_user+0x1e3/0x350 [ 1301.377348][ C0] ? vfs_fstatat+0x80/0x80 [ 1301.381837][ C0] ? getname_flags+0x206/0x500 [ 1301.386580][ C0] __x64_sys_newfstatat+0x155/0x1e0 [ 1301.391760][ C0] ? __ia32_sys_newlstat+0x180/0x180 [ 1301.397033][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1301.402221][ C0] do_syscall_64+0x4c/0xa0 [ 1301.406790][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1301.411707][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1301.416363][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1301.422234][ C0] RIP: 0033:0x7fd307711b0a [ 1301.426632][ C0] RSP: 002b:00007ffd95c2d918 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1301.435032][ C0] RAX: ffffffffffffffda RBX: 00007ffd95c2ddb0 RCX: 00007fd307711b0a [ 1301.443008][ C0] RDX: 00007ffd95c2d920 RSI: 00007ffd95c2ddb0 RDI: 00000000ffffff9c [ 1301.450959][ C0] RBP: 00005637e99c8910 R08: 0000000000000000 R09: 0000000000000020 [ 1301.458924][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd95c2d9b0 [ 1301.466873][ C0] R13: 00005637af358100 R14: 0000000000000000 R15: 00007ffd95c2e4e0 [ 1301.474838][ C0] [ 1301.477837][ C0] task:udevd state:R running task stack:23040 pid:11465 ppid:3638 flags:0x00004002 [ 1301.488670][ C0] Call Trace: [ 1301.491936][ C0] [ 1301.494847][ C0] __schedule+0x10ec/0x40b0 [ 1301.499341][ C0] ? __sched_text_start+0x8/0x8 [ 1301.504168][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 1301.509187][ C0] ? preempt_schedule+0xa7/0xb0 [ 1301.514016][ C0] preempt_schedule_common+0x82/0xd0 [ 1301.519282][ C0] preempt_schedule+0xa7/0xb0 [ 1301.523947][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1301.529566][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1301.535526][ C0] ? lock_chain_count+0x20/0x20 [ 1301.540357][ C0] preempt_schedule_thunk+0x16/0x18 [ 1301.545541][ C0] _raw_spin_unlock_irq+0x3c/0x40 [ 1301.550548][ C0] loop_queue_rq+0x9d9/0xac0 [ 1301.555114][ C0] ? blk_add_trace_bio+0x2c/0x2e0 [ 1301.560122][ C0] __blk_mq_try_issue_directly+0x4ab/0x7a0 [ 1301.566026][ C0] ? trace_block_unplug+0x250/0x250 [ 1301.571213][ C0] ? should_fail_request+0x70/0x70 [ 1301.576318][ C0] blk_mq_plug_issue_direct+0x233/0x620 [ 1301.581850][ C0] ? blk_mq_flush_plug_list+0x67a/0xd40 [ 1301.587379][ C0] blk_mq_flush_plug_list+0x7e7/0xd40 [ 1301.592734][ C0] ? trace_block_rq_insert+0x240/0x240 [ 1301.598171][ C0] ? dio_aio_complete_work+0x20/0x20 [ 1301.603442][ C0] __blk_flush_plug+0x3c6/0x440 [ 1301.608276][ C0] ? blk_check_plugged+0x250/0x250 [ 1301.613369][ C0] blk_finish_plug+0x59/0x80 [ 1301.617975][ C0] read_pages+0x646/0x840 [ 1301.622288][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 1301.627295][ C0] ? page_cache_ra_unbounded+0x770/0x770 [ 1301.632904][ C0] ? folio_batch_add_and_move+0x14a/0x250 [ 1301.638604][ C0] ? folio_add_lru+0x545/0xd50 [ 1301.643347][ C0] ? filemap_add_folio+0x188/0x3c0 [ 1301.648461][ C0] page_cache_ra_unbounded+0x690/0x770 [ 1301.653911][ C0] page_cache_sync_ra+0x3d7/0x490 [ 1301.658916][ C0] filemap_read+0x5ff/0x2f80 [ 1301.663499][ C0] ? find_get_pages_range_tag+0x730/0x730 [ 1301.669201][ C0] ? aa_file_perm+0x3ef/0xec0 [ 1301.673870][ C0] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 1301.680448][ C0] blkdev_read_iter+0x3d5/0x500 [ 1301.685283][ C0] ? fsnotify_perm+0x39b/0x550 [ 1301.690033][ C0] vfs_read+0x434/0x920 [ 1301.694174][ C0] ? kernel_read+0x1e0/0x1e0 [ 1301.698749][ C0] ? ima_file_free+0x3e0/0x3e0 [ 1301.703493][ C0] ? preempt_count_add+0x8d/0x190 [ 1301.708500][ C0] ? __fdget_pos+0x1d4/0x360 [ 1301.713077][ C0] ksys_read+0x143/0x240 [ 1301.717305][ C0] ? vfs_write+0x960/0x960 [ 1301.721704][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1301.726889][ C0] do_syscall_64+0x4c/0xa0 [ 1301.731285][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1301.735955][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1301.740627][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1301.746532][ C0] RIP: 0033:0x7fd3076a7407 [ 1301.750939][ C0] RSP: 002b:00007ffd95c28b00 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1301.759336][ C0] RAX: ffffffffffffffda RBX: 00007fd307d90880 RCX: 00007fd3076a7407 [ 1301.767288][ C0] RDX: 0000000000000200 RSI: 00007fd307d82000 RDI: 0000000000000009 [ 1301.775238][ C0] RBP: 00005637e99e4f80 R08: 0000000000000000 R09: 0000000000000000 [ 1301.783193][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1301.791180][ C0] R13: 0000000000009000 R14: 00005637e99d3338 R15: 00007fd307e5539c [ 1301.799151][ C0] [ 1301.802151][ C0] rcu: rcu_preempt kthread starved for 9752 jiffies! g96625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1301.813235][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1301.823269][ C0] rcu: RCU grace-period kthread stack dump: [ 1301.829134][ C0] task:rcu_preempt state:R running task stack:27424 pid:16 ppid:2 flags:0x00004000 [ 1301.839889][ C0] Call Trace: [ 1301.843149][ C0] [ 1301.846064][ C0] __schedule+0x10ec/0x40b0 [ 1301.850566][ C0] ? __sched_text_start+0x8/0x8 [ 1301.855395][ C0] ? __mod_timer+0x91e/0xd00 [ 1301.859972][ C0] schedule+0xb9/0x180 [ 1301.864022][ C0] schedule_timeout+0x15c/0x280 [ 1301.868854][ C0] ? console_conditional_schedule+0x40/0x40 [ 1301.874729][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1301.880607][ C0] ? update_process_times+0x1b0/0x1b0 [ 1301.885976][ C0] ? prepare_to_swait_event+0x335/0x350 [ 1301.891506][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 1301.896341][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1301.902474][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 1301.907215][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1301.912046][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1301.917229][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1301.922409][ C0] rcu_gp_kthread+0x95/0x380 [ 1301.926982][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1301.932070][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1301.937945][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1301.942953][ C0] kthread+0x29d/0x330 [ 1301.947003][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1301.952093][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1301.956666][ C0] ret_from_fork+0x1f/0x30 [ 1301.961070][ C0] [ 1301.964070][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1301.970368][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1301.975565][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10