last executing test programs: 37.986054228s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@delalloc}, {}, {@nodioread_nolock}, {@norecovery}, {@dioread_nolock}, {@minixdf}, {@oldalloc}, {@sysvgroups}, {@i_version}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000000000, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9bf8bdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x6]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 36.601393511s ago: executing program 1 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x9, 0xff, 0x10000000100006, 0x8001, 0x455, 0xb, 0x3, 0xffffffff, 0x80, 0x9, 0x1, 0xc, 0x3, 0x4], 0x8080000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 33.908373627s ago: executing program 1 (id=15): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x9) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 33.505735286s ago: executing program 32 (id=15): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x9) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 13.922693062s ago: executing program 0 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x11) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r6, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 11.423927652s ago: executing program 0 (id=45): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf2, 0x0, &(0x7f00000004c0)) 11.013727392s ago: executing program 0 (id=48): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 10.714850439s ago: executing program 0 (id=50): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = userfaultfd(0x1) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000016c0)={{&(0x7f000014d000/0x3000)=nil, 0x3000}, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000540)=0x5, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$eJzs3AuYjtX6MPB1r7Uehia9TXIY1r3uhzcNlkmSHJLkkCRJkuSUJGmSJCEx5JQ0JCHHSZPDEJJTY9I4nw85J022NEkSklNY38Wubfe1/+39/3bf3//ac/+ua12z7vd57/Xez9xzzbue571mvus2vE6zujWbEJH4t8BfvyQLIWKEEIOFENcIIQIhRMW4inEXj+dTkPzvvQj7cz2UfqUrYFcS9z934/7nbtz/3I37n7tx/3M37n/uxv3P3bj/jOVmW2YUvZZH7h18/z834/f//yA55SZ8ta7c9d3/Gync/9yN+5+7cf9zkeD3D3H/czfuf+7G/f/Pd+cfHOP+/4eK+deexv1nLDf7273gc977/wX3o//skfd3n3H8egv6ytf2v2Fc4R8/xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGO5xGl/mRZC/Dq/0nUxxhhjjDHGGGPsz+PzXukKGGOMMcYYY4wx9v8fCCmU0CIQeUReESPyifziKhErrhYFxDUiIq4VceI6UVBcLwqJwqKIKCriRTFRXBiBwgoSoSghSoqouEGUEjeKBFFalBFlhRPlRKK4SZQXN4sK4hZRUdwqKonbRGVRRVQV1cTtorq4Q9QQd4qa4i5RS9QWdURdcbeoJ+4R9cW9ooG4TzQU94tG4gHRWDwomoiHRFPxsGgmHhHNxaOihWgpWonWos3/U/5Lopd4WfQWfUSy6Cv6iVdEfzFADBSDxGDxqhgiXhNDxesiRQwTw8UbYoR4U4wUb4lRYrQYI94WY8U4MV5MEBPFJJEq3hGTxbsiTbwnpoipYpqYLtLFDDFTvC9midlijvhAzBUfinlivlggFopF4iORIRaLTPGxWCI+EVliqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNost4lOxVWwT28UOsVPsErvFZ2KP+FzsFV+IbPHlfzP/1P+V3x0ECJAgQYOGPJAHYiAG8kN+iIVYKAAFIAIRiIM4KAgFoRAUgiJQBOIhHopDcUBAICAoASUgClEoBaUgARKgDJQBBw4SIRHKw81QASpARagIlaASVIYqUAWqQTWoDtWhBtSAmlATakEtqAN14G64G+6B+lAfGkADaAgNoRE0gsbQGJpAE2gKTaEZNIPm0BxaQAtoBa2gDbSBttAW2kE7aA/toQN0gI7QEZIgCTpBJ+gMnaELdIGu0BW6QTfoDj2gB7wEL8HL8DL0gVqyL/SDftAf+sNAGASD4FUYAq/Ba/A6pMAwGA5vwBvwJoyEkzAKRsMYGAPV5TgYDxOA5CRIhVSYDJMhDdJgCkyFqTAd0mEGzISZMAtmw2z4AObCh/AhzIf5sBAWwSLIgMWQCZmwBE5BFiyFZbAcVsBKWAGrYQ2shnWwHtbBRtgIm2EzfAqfwjbYBjtgB+yCXfAZfAafw+eQAtmQDftgH+yH/XAADkAO5MBBOAiH4BAchsNwBI7AUTgGx+EYnIATcBJOwWk4DWfhLJyDF+K/abqr9NoUIS/SUss8Mo+MkTEyv8wvY2WsLCALyIiMyDgZJwvKgrKQLCSLyCIyXsbL4rK4RImSZChLyBIyKqOylCwlE2SCLCPLSCedTJSJsrwsLyvICrKivFVWkrfJyrKKfMJVk9Vkddne1ZB3ypqypqwla8s6sq6sK+vJerK+rC8byAayoWwoG8kHZGPZFwbCQ/JiZ5rJYdBcDocWsqVsJVvLN+Ex2VaOhHbyCdlePilHwyjoKNu6JPmM7CTHQ2f5nJwAz8uuchJ0ky/K7rKH7Clfkr1kO9db9pFToK/sJ6dDfzlADpSD5CyoLS92rI58XabIYXK4fEMuhDflSPmWHCVHyzHybTlWjpPj5QQ5UU6SqfIdOVm+K9Pke3KKnCqnyekyXc6QM+X7cpacLefID+Rc+aGcJ+fLBXKhXCQ/khlyscyUH8sl8hOZJZfKZXK5XCFXylVytVwj18p1cr3cIDfKTXKz3CI/lVvlNrld7pA75S65W34m98jP5V75hcyWX8p98i9yv/xKHpBfyxz5jTwov5WH5HfysPxeHpE/yKPymDwuf5Qn5E/ypDwlT8sz8qz8WZ6T5+UF6aVQoKRSSqtA5VF5VYzKp/Krq1SsuloVUNeoiLpWxanrVEF1vSqkCqsiqqiKV8VUcWUUKqtIhaqEKqmi6gZVSt2oElRpVUaVVU6VU4nqJlVe3awqqFtURXWrqqRuU5VVFVVVVVO3q+rqDlVD3alqqrtULVVb1VF11d2qnrpH1Vf3qgbqPtVQ3a8aqQdUY/WgaqIeUk3Vw6qZekQ1V4+qFqqlaqVaqzbqMdVWPa7aBUII9aTqoJ5SHdXTKkk9ozqpZ1Vn9Zzqop5XXdULqpt6UXVXPVRPdV5dUF71Vn1Usuqr+qlXVH81QA1Ug9Rg9aoaol5TQ9XrKkUNU8PVG2qEelONVG+pUWq0GqPeVmPVODVeTVAT1SSVqt5Rk9W7Kk29p6aoqWqamq7S1Qw18JeV5vwL+e/+g/yhl159s9qiPlVb1Ta1Xe1QO9UutVvtVnvUHrVX7VXZKlvtU/vUfrVfHVAHVI7KUQfVQXVIHVKH1WF1RB1RR9UxdUb9qE6on9RJdUqdUmfUWXVWnfvleyA0aKmV1jrQeXReHaPz6fz6Kh2rr9YF9DU6oq/Vcfo6XVBfrwvpwrqILqrjdTFdXBuN2mrSoS6hS+qovkGX0jfqBF1al9FltdPldKK+6d/O/2f1tdFtdFvdVrfT7XR73V530B10R91RJ+kk3Ul30p11Z91Fd9FddVfdTXfT3XV33VP31L10L91b99bJOln306/o/nqAHqgH6cH6VT1ED9FD9VCdolP0cD1cj9Aj9Eg9Uo/So/QYPUaP1WP1eD1eT9QTdapO1ZP1ZJ2m0/QUPUVP09N0uk7XM/VMPUvP0nP0HD1Xz9Xz9Dy9QC/Qi/QinaEzdKbO1Ev0Ep2ll+qlerlerlfqlXq1Xq3X6rV6vV6vN+qNOktv0Vv0Vr1Vb9fb9U69U+/Wu/UevUfv1Xt1ts7W+/Q+vV/v1wf0AZ2jc/RBfVAf0of0YX1YH9FH9FF9VB/Xx/UJfUKf1Cf1aX1an9Vn9Tl9Tl/QFy5u+wIZyEAHOsgT5Aligpggf5A/iA1igwJBgSASRIK4IC4oGFwfFAoKB0WCokF8UCwoHpgAAxtQEAYlgpJBNLghKBXcGCQEpYMyQdnABeWCxOCmoHxwc1AhuCWoGNwaVApuCyoHVYKqQbXg9qB6cEdQI7gzqBncFdQKav/6OVRwT1A/uDdoENwXNAzuDxoFDwSNgweDJsFDQdPg4aBZ8EjQPHg0aBG0DFoFrYM2/+r6QZ2gbnB3UO8P1/f+ZOHHXW/TxySbvqafecX0NwPMQDPIDDavmiHmNTPUvG5SzDAz3LxhRpg3zUjzlhllRpsx5m0z1owz480EM9FMMqnmHTPZvGvSzHtmiplqppnpJt3MMDPN+2aWmW3mmA/MXPOhmWfmmwVmoVlkPjIZZrHJNB+bJeYTk2WWmmVmuVlhVppVZrVZY9aadWa92WA2mk1ms9liPjVbzTaz3ewwO80us9t8ZvaYz81e84XJNl+afeYvZr/5yhwwX5sc8405aL41h8x35rD53hwxP5ij5pg5bn40J8xP5qQ5ZU6bM+as+dmcM+fNBeMvbu4vvr2jRo15MA/GYAzmx/wYi7FYAAtgBCMYh3FYEAtiISyERbAIxmM8FsfieBEhYQksgVGMYikshQmYgGWwDDp0mIiJWB7LYwWsgBWxIlbCSlgZK2NVrIq34+14B96Bd+KdeBfehbWxNtbFulgP62F9rI8NsAE2xIbYCBthY2yMTbAJNsWm2AybYXNsji2wBbbCVtgG22BbbIvtsB22x/bYATtgR+yISZiEnbATdsbO2AW7YFfsit2wG3bH7tgTe2Iv7IW9z/TGZEzGftgP+2N/HIgDcTAOxiE4BIfiUEzBFByOw3EEjsCROBJH4Wgcg2/jWByH43ECTsRJmIqpOBknYxqm4RScgtNwGqZjOs7EmTgLZ+EcnINzcS7Ow3m4ABfgIlyEGZiBmZiJS3AJZmEWLsNluAJX4CpchWtwDa7DdbgBN+Am3IRbcAtuVVtxO27HnbgTd+Nu3IN7cC/uxWzMxn24D/fjfjyABzAHc/AgHsRDeAgP42E8gkfwKB7F43gcT+AJPIkn8TSexrP4M57D83gBPcZYKfLbq2ysvdoWsNfYGJvP/n1cxBa18baYLW6NLWQL/yZGa22CLW3L2LLW2XI20d70u7iyrWKr2mr2dlvd3mFr/C6uZ++x9e29toG9z9a1d/8mbmjvt43sI7axfdQ2sS1tU9vaNrOP2Ob2UdvCtrStbGvbwT5lO9qnbZJ9xnayz/4uzrCL7Rq71q6z6+0e+7k9bc/YQ/Y7e9b+bHvbPnawfdUOsa/ZofZ1m9Jg2G9jO8yOsW/bsXacHW8n2Il20u/iaXa6Tbcz7Ez7vp1lZ/8uXmQ/snNtpp1n59sFduGl+GJNmfZju8R+YrPsUrvMLrcr7Eq7yq7+W63L7Ua7yW62u+1ndqvdZrfbHXan3XUpvngee+0XNtt+aQ/ab+1++5U9YA/bHPvNpfji+R2239sj9gd71B6zx+2P9oT9yZ60py6d/8Vz/9Getxest4KAJCnSFFAeyksxlI/y01UUS1dTAbqGInQtxdF1VJCup0JUmIpQUYqnYlScDCFZIgqpBJWkKN1ApehGSqDSVIbKkqNylEg3UXm6mSrQLVSRbqVKdBtVpipUlarR7VSd7qAaWlBNuotqUW2qQ3XpbqpH91B9upca0H3UkO6nRvQANaYHqQk9RE3pYWpGj1BzepRaUEtqRa2pDT1GbelxakdPUHt6kjrQU9SRnqYkeoY60bPUmZ6jLvQ8daUXqBu9SN2pB/Wkl6gXvUy9qQ8lU1/qR69QfxpAA2kQDaZXaQi9RkPpdUqhYTSc3qAR9CaNpLdoFI2mMfQ2jaVxNJ4m0ESaRKn0Dk2mdymN3qMpNJWm0XRKpxk0k96nWTSb5tAHNJc+pHk0nxbQQlpEH1EGLaZM+piW0CeURUtpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCn9JW2kbbaQftpF20mz6jPfQ57aUvKJu+pH30F9pPX9EB+ppy6Bs6SN/SIfqODtP3dIR+oKN0jI7Tj3SCfqKTdIpO0xk6Sz/TOTpPF8iTCCGUoQp1GIR5wrxhTJgvzB9eFcaGV4cFwmvCSHhtGBdeFxYMrw8LhYXDImHRMD4sFhYPTYihDSkMwxJhyTAa3hCWCm8ME8LSYZmwbOjCcmFieFNYPrw5rBDeElYMbw0rhbeFlcMq4SP3VQtvD6uHd4Q1wjvDmuFdYa2wdlgnrBveHdYL7wnrh/eGDcL7wgrh/WGj8IGwcfhg2CR8KGwaPhw2Cx8Jm4ePhi3ClmGrsHXYJnwsbBs+HrYLnwjbh0+GHcKnwo7h02FS+EzYKXz2nx5PDvuG/cJXwldC7+9VC6ILo4uiH0UzooujmdGPo0uin0Szokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo97XzSscOOmU0y5weVxeF+PyufzuKhfrrnYF3DUu4q51ce46V9Bd7wq5wq6IK+riXTFX3BmHzjpyoSvhSrqou8GVcje6BFfalXFlnXPlXKJr7dq4Nq6te9y1c0+49u5J96R7yj3lnnZPu2dcJ/es6+yec13c866re8G94F503V0P19O95Hq5l11v18clu2TXz/Vz/V1/N9ANzPPLHswNdUNdiktxw91wN8KNcCPdSDfKjXJj3Bg31o114914N9FNdKku1U12k12aS3NT3BQ3zU1z6S7dzXQz3Sw3y81xc9zchLlunpvnFrgFbpFb5DJchst0mW6JW+KyXJZb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+q2uu1uu9vpdrrdbrfb4/a4vW6vy3bZbp/b5/a7/e6A+9rluG/cQfetO+S+c4fd9+6I+8EddcfccfejO+F+cifdKXfanXFn3c/unDvvLjjvUiPvRCZH3o2kRd6LTIlMjUyLTI+kR2ZEZkbej8yKzI7MiXwQmRv5MDIvMj+yIBIjhPgokhFZHMmMfBxZEvkkkhVZGlkWWR5ZEVkZ8b7Y1tCX8CV91N/gS/kbfYIv7cv4st75cj7R3+TL+5t9BX+Lr+hv9ZX8bb6yr+Kr+kd9C9/St/KtfRv/mG/rH/ft/BO+vX/Sd/BP+Y7+aZ/kn/Gd/LO+s3/Od/HP+67+Bd/Nv+i7+x6+p3/J9/Iv+96+j0/2fX0//4rv7wf4gX6QH+xf9UP8a36of92n+GF+uH/Dj/Bv+pH+LT/Kj/Zj/Nt+rB/nx/sJfqKf5FP9O35yvnd9mn/PT/FT/TQ/3af7GX6mf9/P8rP9HP+Bn+s/9PP8fL/AL/SL/Ec+wy/2mf5jv8R/4rP8Ur/ML/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Kd+q9/mt/sdfqff5Xf7z/we/7nf67/w2f5Lv8//xe/3X/kD/muf47/xB/23/pD/zh/23/sj/gd/1B/zx/2P/oT/yZ/0p/xpf8af9T/7c/68v8B/s8YYY4wx9i9JO/DHx/v+g8fkL+OifkKIq7cVzfn741oIsaHQX+cDZHyHiBDimT7dHvp11KqVnJz8y3OzlAhKzhdCRC7nX7oM+SVeKtqLp0SSeEKU/4f1DZA9ztIfrA9HvY/eKkT+v8u5uI//Nb68/s3/xfqPPTkmo1J4Ou6365/7Zb95sf7ofCESSl7OyScux5fXr/BfrF+47R/Vn6VEvq9ShWj3dzmx4nJ8ef1E8bh4ViT95pmMMcYYY4wxxthfDZBVu/yT689L1+fx+lJ46eG84m/xP70+Z4wxxhhjjDHG2JX3fI+eTz+WlPREF57whCc8+dvkSv9mYowxxhhjjP3ZLm/6r3QljDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY7vU/8e/ErvQ5MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1fa/wkAAP//jKQ7JQ==") rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 9.419376041s ago: executing program 3 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x11) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r6, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 7.862897149s ago: executing program 0 (id=54): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0) 6.644602318s ago: executing program 3 (id=56): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000b00)={0x0, 0x40, 0x2, 0x0, 0x10, 0xfffffed8, 0x10, 0xfffffed8, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000b80), 0x0, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000640)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, 0x0, 0x0, 0x0}) 6.221034728s ago: executing program 3 (id=58): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf2, 0x0, &(0x7f00000004c0)) 5.952411055s ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x11) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) tee(r5, r4, 0x33, 0x8) 4.836388422s ago: executing program 3 (id=62): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = userfaultfd(0x1) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000016c0)={{&(0x7f000014d000/0x3000)=nil, 0x3000}, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000540)=0x5, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 3.379017507s ago: executing program 2 (id=66): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x3008452, &(0x7f0000000b00)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x80800) fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x9) inotify_add_watch(r0, &(0x7f0000000a80)='./file0\x00', 0x4000008) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2541, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x800007e1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 3.29039543s ago: executing program 4 (id=16): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(0xffffffffffffffff, 0x6f50, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x4, 0x20, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x0, 0x1}) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, 0x0) 1.396802415s ago: executing program 2 (id=67): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 1.302258608s ago: executing program 0 (id=68): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x10102, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) shutdown(r0, 0x1) 1.103021383s ago: executing program 4 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x11) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) tee(r5, r4, 0x33, 0x8) 1.075544623s ago: executing program 2 (id=70): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf2, 0x0, &(0x7f00000004c0)) 881.817728ms ago: executing program 2 (id=71): syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000002c0)=0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1, 0x2a8, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffb, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x367, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 723.910342ms ago: executing program 3 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x11) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r6, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) read$FUSE(r5, &(0x7f0000000380)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 364.409571ms ago: executing program 2 (id=73): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000b00)={0x0, 0x40, 0x2, 0x0, 0x10, 0xfffffed8, 0x10, 0xfffffed8, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000b80), 0x0, 0x0}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000640)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, 0x0, 0x0, 0x0}) 211.072554ms ago: executing program 2 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001") ioctl(r1, 0x40140921, &(0x7f0000000480)="0200000001000000020000000200000006") ioctl(r1, 0x400c0930, 0x0) 0s ago: executing program 4 (id=75): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)="6a40c5", 0x3, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 351.049140][ T5804] cgroup: Unknown subsys name 'net' [ 351.215185][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 352.957009][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 354.791698][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.806805][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.814956][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.822662][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.822987][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.837757][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.845523][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.847900][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.861832][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 354.862230][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.876993][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.877492][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 354.914664][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.924770][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 354.925059][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.960949][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.970116][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.977745][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 354.986269][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 354.987337][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.003573][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.024769][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.035580][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 355.043469][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.574792][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 355.672775][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 355.713644][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 355.742037][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 355.843486][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.851390][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.861869][ T5820] bridge_slave_0: entered allmulticast mode [ 355.869551][ T5820] bridge_slave_0: entered promiscuous mode [ 355.914208][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.921582][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.929523][ T5820] bridge_slave_1: entered allmulticast mode [ 355.936932][ T5820] bridge_slave_1: entered promiscuous mode [ 356.007495][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.036640][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.043887][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.051260][ T5815] bridge_slave_0: entered allmulticast mode [ 356.058941][ T5815] bridge_slave_0: entered promiscuous mode [ 356.074282][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.106810][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.114011][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.121516][ T5815] bridge_slave_1: entered allmulticast mode [ 356.129656][ T5815] bridge_slave_1: entered promiscuous mode [ 356.158930][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.166240][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.173672][ T5822] bridge_slave_0: entered allmulticast mode [ 356.181290][ T5822] bridge_slave_0: entered promiscuous mode [ 356.211724][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.218973][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.226499][ T5818] bridge_slave_0: entered allmulticast mode [ 356.233760][ T5818] bridge_slave_0: entered promiscuous mode [ 356.252829][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.262280][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.270605][ T5822] bridge_slave_1: entered allmulticast mode [ 356.278235][ T5822] bridge_slave_1: entered promiscuous mode [ 356.285369][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.292659][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.300766][ T5818] bridge_slave_1: entered allmulticast mode [ 356.308609][ T5818] bridge_slave_1: entered promiscuous mode [ 356.333226][ T5820] team0: Port device team_slave_0 added [ 356.343983][ T5820] team0: Port device team_slave_1 added [ 356.373638][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.420705][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.445531][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.468590][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.476423][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.503038][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.523817][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.546690][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.570206][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.580230][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.607336][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.634339][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.648261][ T5815] team0: Port device team_slave_0 added [ 356.665756][ T5815] team0: Port device team_slave_1 added [ 356.687670][ T5822] team0: Port device team_slave_0 added [ 356.729658][ T5822] team0: Port device team_slave_1 added [ 356.736979][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.743955][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.772828][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.792287][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.799435][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.825717][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.850564][ T5818] team0: Port device team_slave_0 added [ 356.900542][ T5818] team0: Port device team_slave_1 added [ 356.916538][ T5820] hsr_slave_0: entered promiscuous mode [ 356.923237][ T5820] hsr_slave_1: entered promiscuous mode [ 356.931600][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.938909][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.965654][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.018535][ T5815] hsr_slave_0: entered promiscuous mode [ 357.025399][ T5815] hsr_slave_1: entered promiscuous mode [ 357.033079][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.041508][ T5815] Cannot create hsr debugfs directory [ 357.049138][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.056606][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.083636][ T5821] Bluetooth: hci1: command tx timeout [ 357.083655][ T5825] Bluetooth: hci2: command tx timeout [ 357.089875][ T5821] Bluetooth: hci0: command tx timeout [ 357.090129][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.144606][ T5825] Bluetooth: hci3: command tx timeout [ 357.162472][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.170266][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.196826][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.210338][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.217463][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.243960][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.409373][ T5818] hsr_slave_0: entered promiscuous mode [ 357.416392][ T5818] hsr_slave_1: entered promiscuous mode [ 357.422979][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.431166][ T5818] Cannot create hsr debugfs directory [ 357.469089][ T5822] hsr_slave_0: entered promiscuous mode [ 357.476731][ T5822] hsr_slave_1: entered promiscuous mode [ 357.483267][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.491263][ T5822] Cannot create hsr debugfs directory [ 357.891514][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.910554][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.921696][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.934930][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.013232][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.031205][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.052108][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.063630][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.171310][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.196838][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.222817][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.277242][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.326291][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.356971][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.371037][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.382487][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.401989][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.459309][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.491009][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.523082][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.530640][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.556707][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.578961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.586230][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.636125][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.643374][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.662116][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.669381][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.741634][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.809842][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.855401][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.862564][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.913300][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.920590][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.002332][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.146373][ T5825] Bluetooth: hci0: command tx timeout [ 359.152077][ T5825] Bluetooth: hci1: command tx timeout [ 359.152690][ T5085] Bluetooth: hci2: command tx timeout [ 359.167131][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.197090][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.204348][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.226446][ T5085] Bluetooth: hci3: command tx timeout [ 359.240911][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.248174][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.469096][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.536638][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.642535][ T5820] veth0_vlan: entered promiscuous mode [ 359.687449][ T5815] veth0_vlan: entered promiscuous mode [ 359.744449][ T5820] veth1_vlan: entered promiscuous mode [ 359.756837][ T5815] veth1_vlan: entered promiscuous mode [ 359.780143][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.844119][ T5820] veth0_macvtap: entered promiscuous mode [ 359.900038][ T5820] veth1_macvtap: entered promiscuous mode [ 359.950800][ T5815] veth0_macvtap: entered promiscuous mode [ 359.976890][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.992577][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.011645][ T5815] veth1_macvtap: entered promiscuous mode [ 360.021733][ T5818] veth0_vlan: entered promiscuous mode [ 360.034716][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.043800][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.056006][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.067324][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.093175][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.113179][ T5818] veth1_vlan: entered promiscuous mode [ 360.152421][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.164105][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.180681][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.194044][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.205610][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.217675][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.278497][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.289608][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.300292][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.309693][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.340561][ T5818] veth0_macvtap: entered promiscuous mode [ 360.378327][ T5818] veth1_macvtap: entered promiscuous mode [ 360.429363][ T5872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.441861][ T5872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.481173][ T5822] veth0_vlan: entered promiscuous mode [ 360.522928][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.535112][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.546066][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.556684][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.568190][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.606461][ T5822] veth1_vlan: entered promiscuous mode [ 360.616954][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.627831][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.637716][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.641668][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.659303][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.671510][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.684105][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.758221][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.782073][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.790964][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.800119][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.823758][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.846260][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.915194][ T5858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.923102][ T5858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.955366][ T5885] syz.0.1[5885]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 360.970436][ T5822] veth0_macvtap: entered promiscuous mode [ 361.018421][ T5822] veth1_macvtap: entered promiscuous mode [ 361.079702][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.091412][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.107053][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.120899][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.133450][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.152192][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.164954][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.188770][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.224809][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.231731][ T5085] Bluetooth: hci1: command tx timeout [ 361.236813][ T5825] Bluetooth: hci0: command tx timeout [ 361.240175][ T5085] Bluetooth: hci2: command tx timeout [ 361.254578][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.281359][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.303408][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.319805][ T5085] Bluetooth: hci3: command tx timeout [ 361.427831][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.456071][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.551462][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.615239][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.624148][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.634592][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.251266][ T5885] loop0: detected capacity change from 0 to 32768 [ 362.326090][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.334083][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.347659][ T5885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (5885) [ 362.465957][ T5885] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.541852][ T5085] Bluetooth: hci0: command tx timeout [ 364.541896][ T5821] Bluetooth: hci2: command tx timeout [ 364.547623][ T5085] Bluetooth: hci3: command tx timeout [ 364.553238][ T5825] Bluetooth: hci1: command tx timeout [ 364.590171][ T5885] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 364.626818][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.642046][ T5885] BTRFS info (device loop0): force clearing of disk cache [ 364.651083][ T5885] BTRFS info (device loop0): enabling auto defrag [ 364.658370][ T5885] BTRFS info (device loop0): max_inline at 0 [ 364.665368][ T5885] BTRFS info (device loop0): enabling disk space caching [ 364.672643][ T5885] BTRFS info (device loop0): disk space caching is enabled [ 364.685016][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 364.687022][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 364.698885][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.711632][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 364.725384][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 364.804875][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 364.806953][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 364.842243][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 364.886571][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 364.926541][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 364.955372][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.973846][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 364.974634][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 365.009531][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.036296][ T5885] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 365.066946][ T5885] BTRFS error (device loop0): open_ctree failed: -12 [ 365.201229][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.249798][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.582356][ T5914] loop1: detected capacity change from 0 to 1024 [ 365.602208][ T5914] EXT4-fs: Ignoring removed oldalloc option [ 365.646841][ T5914] EXT4-fs: Ignoring removed i_version option [ 365.688873][ T5914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.770928][ T5916] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 365.821258][ T5914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.918077][ T5916] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 366.008297][ T5914] loop1: detected capacity change from 1024 to 0 [ 366.035588][ T5921] syz.1.2: attempt to access beyond end of device [ 366.035588][ T5921] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 366.113936][ T5921] syz.1.2: attempt to access beyond end of device [ 366.113936][ T5921] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 366.165706][ T5921] syz.1.2: attempt to access beyond end of device [ 366.165706][ T5921] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 366.215262][ T5921] syz.1.2: attempt to access beyond end of device [ 366.215262][ T5921] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 366.259386][ T5921] syz.1.2: attempt to access beyond end of device [ 366.259386][ T5921] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 366.278789][ T5910] comedi comedi3: reset error (fatal) [ 366.305670][ T5921] syz.1.2: attempt to access beyond end of device [ 366.305670][ T5921] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 366.389260][ T5921] syz.1.2: attempt to access beyond end of device [ 366.389260][ T5921] loop1: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 366.428732][ T5921] syz.1.2: attempt to access beyond end of device [ 366.428732][ T5921] loop1: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 366.467048][ T5921] EXT4-fs error (device loop1): ext4_get_inode_loc:4647: inode #15: block 8: comm syz.1.2: unable to read itable block [ 366.515645][ T5921] syz.1.2: attempt to access beyond end of device [ 366.515645][ T5921] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 366.563486][ T5921] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 366.604658][ T5921] EXT4-fs (loop1): I/O error while writing superblock [ 366.644253][ T27] audit: type=1800 audit(1791714694.188:2): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 366.793623][ T5822] syz-executor: attempt to access beyond end of device [ 366.793623][ T5822] loop1: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 366.850001][ T5925] loop0: detected capacity change from 0 to 4096 [ 366.857179][ T5822] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata [ 366.897057][ T5822] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 366.906742][ T5822] EXT4-fs (loop1): I/O error while writing superblock [ 367.000838][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.353523][ T5822] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 367.750748][ T5822] EXT4-fs (loop1): I/O error while writing superblock [ 367.807378][ T5925] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 367.815439][ T5917] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 367.911378][ T5929] loop2: detected capacity change from 0 to 512 [ 367.962271][ T5929] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 368.046520][ T5929] EXT4-fs (loop2): 1 truncate cleaned up [ 368.081181][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.834827][ T27] audit: type=1800 audit(1791714696.128:3): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 368.954543][ T27] audit: type=1326 audit(1791714696.458:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5938 comm="syz.0.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe13df9e1d9 code=0x0 [ 369.173821][ T5815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.375102][ T5943] input: syz0 as /devices/virtual/input/input5 [ 369.650256][ T5862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.868146][ T5862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.069419][ T5862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.279294][ T5862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.534428][ C0] sched: RT throttling activated [ 372.041500][ T5792] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 372.284681][ T5792] usb 3-1: Using ep0 maxpacket: 8 [ 372.465826][ T5792] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 372.474724][ T5792] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.494574][ T5792] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 372.577184][ T5792] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 372.610327][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.626978][ T5792] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.640515][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.648794][ T5792] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 372.660263][ T5792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.903080][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.912683][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.930223][ T5821] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 372.940821][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.949574][ T5792] usb 3-1: usb_control_msg returned -32 [ 372.971607][ T5792] usbtmc 3-1:16.0: can't read capabilities [ 375.319258][ T5821] Bluetooth: hci3: command tx timeout [ 375.501825][ T5817] usb 3-1: USB disconnect, device number 2 [ 376.270636][ T5994] loop3: detected capacity change from 0 to 256 [ 376.361647][ T5994] ======================================================= [ 376.361647][ T5994] WARNING: The mand mount option has been deprecated and [ 376.361647][ T5994] and is ignored by this kernel. Remove the mand [ 376.361647][ T5994] option from the mount to silence this warning. [ 376.361647][ T5994] ======================================================= [ 377.147261][ T5994] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 377.434496][ T5821] Bluetooth: hci3: command tx timeout [ 378.324181][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 378.839842][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.854509][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.076181][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.124733][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.132065][ T5965] bridge_slave_0: entered allmulticast mode [ 379.181204][ T5965] bridge_slave_0: entered promiscuous mode [ 379.428109][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.464140][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.511945][ T6001] bio_check_eod: 3 callbacks suppressed [ 379.512009][ T6001] kworker/u4:6: attempt to access beyond end of device [ 379.512009][ T6001] loop3: rw=1, sector=1112, nr_sectors = 1 limit=256 [ 379.534558][ T5821] Bluetooth: hci3: command tx timeout [ 379.551364][ T5965] bridge_slave_1: entered allmulticast mode [ 379.600305][ T5965] bridge_slave_1: entered promiscuous mode [ 379.674102][ T6001] Buffer I/O error on dev loop3, logical block 1112, lost async page write [ 379.743044][ T6001] kworker/u4:6: attempt to access beyond end of device [ 379.743044][ T6001] loop3: rw=1, sector=1113, nr_sectors = 1 limit=256 [ 379.824614][ T6001] Buffer I/O error on dev loop3, logical block 1113, lost async page write [ 379.870544][ T6001] kworker/u4:6: attempt to access beyond end of device [ 379.870544][ T6001] loop3: rw=1, sector=1114, nr_sectors = 1 limit=256 [ 379.886771][ T5862] hsr_slave_0: left promiscuous mode [ 379.913822][ T5862] hsr_slave_1: left promiscuous mode [ 379.931770][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.939914][ T6001] Buffer I/O error on dev loop3, logical block 1114, lost async page write [ 379.974667][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.982048][ T6001] kworker/u4:6: attempt to access beyond end of device [ 379.982048][ T6001] loop3: rw=1, sector=1115, nr_sectors = 1 limit=256 [ 380.036260][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.054046][ T6001] Buffer I/O error on dev loop3, logical block 1115, lost async page write [ 380.075187][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.114106][ T6001] kworker/u4:6: attempt to access beyond end of device [ 380.114106][ T6001] loop3: rw=1, sector=1116, nr_sectors = 1 limit=256 [ 380.135270][ T5862] bridge_slave_1: left allmulticast mode [ 380.161402][ T5862] bridge_slave_1: left promiscuous mode [ 380.181248][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.202642][ T6001] Buffer I/O error on dev loop3, logical block 1116, lost async page write [ 380.240662][ T6001] kworker/u4:6: attempt to access beyond end of device [ 380.240662][ T6001] loop3: rw=1, sector=1117, nr_sectors = 1 limit=256 [ 380.289918][ T5862] bridge_slave_0: left allmulticast mode [ 380.310682][ T6001] Buffer I/O error on dev loop3, logical block 1117, lost async page write [ 380.328333][ T5862] bridge_slave_0: left promiscuous mode [ 380.358114][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.367284][ T6001] kworker/u4:6: attempt to access beyond end of device [ 380.367284][ T6001] loop3: rw=1, sector=1118, nr_sectors = 1 limit=256 [ 380.441147][ T6001] Buffer I/O error on dev loop3, logical block 1118, lost async page write [ 380.495142][ T6001] kworker/u4:6: attempt to access beyond end of device [ 380.495142][ T6001] loop3: rw=1, sector=1119, nr_sectors = 1 limit=256 [ 380.633935][ T6001] Buffer I/O error on dev loop3, logical block 1119, lost async page write [ 380.682308][ T5862] veth1_macvtap: left promiscuous mode [ 380.700246][ T6001] kworker/u4:6: attempt to access beyond end of device [ 380.700246][ T6001] loop3: rw=1, sector=1120, nr_sectors = 1 limit=256 [ 380.718500][ T5862] veth0_macvtap: left promiscuous mode [ 380.724321][ T5862] veth1_vlan: left promiscuous mode [ 380.782311][ T5862] veth0_vlan: left promiscuous mode [ 381.209798][ T6001] Buffer I/O error on dev loop3, logical block 1120, lost async page write [ 382.143101][ T5821] Bluetooth: hci3: command tx timeout [ 382.209859][ T6001] kworker/u4:6: attempt to access beyond end of device [ 382.209859][ T6001] loop3: rw=1, sector=1121, nr_sectors = 1 limit=256 [ 382.232749][ T6001] Buffer I/O error on dev loop3, logical block 1121, lost async page write [ 383.838264][ T6056] loop2: detected capacity change from 0 to 256 [ 384.039758][ T6056] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 384.276788][ T6059] loop3: detected capacity change from 0 to 1024 [ 384.826931][ T6062] hfsplus: unknown catalog record type 0 [ 384.833592][ T6062] hfsplus: unknown catalog record type 0 [ 385.660722][ T5862] team0 (unregistering): Port device team_slave_1 removed [ 385.759230][ T5862] team0 (unregistering): Port device team_slave_0 removed [ 385.858478][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.970333][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.301788][ T11] bio_check_eod: 7286 callbacks suppressed [ 386.301807][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.301807][ T11] loop2: rw=1, sector=872, nr_sectors = 1 limit=256 [ 386.384559][ T11] buffer_io_error: 7286 callbacks suppressed [ 386.384576][ T11] Buffer I/O error on dev loop2, logical block 872, lost async page write [ 386.409849][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.409849][ T11] loop2: rw=1, sector=873, nr_sectors = 1 limit=256 [ 386.431479][ T11] Buffer I/O error on dev loop2, logical block 873, lost async page write [ 386.442741][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.442741][ T11] loop2: rw=1, sector=874, nr_sectors = 1 limit=256 [ 386.463111][ T11] Buffer I/O error on dev loop2, logical block 874, lost async page write [ 386.471856][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.471856][ T11] loop2: rw=1, sector=875, nr_sectors = 1 limit=256 [ 386.494816][ T11] Buffer I/O error on dev loop2, logical block 875, lost async page write [ 386.503551][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.503551][ T11] loop2: rw=1, sector=876, nr_sectors = 1 limit=256 [ 386.541952][ T11] Buffer I/O error on dev loop2, logical block 876, lost async page write [ 386.567712][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.567712][ T11] loop2: rw=1, sector=877, nr_sectors = 1 limit=256 [ 386.584311][ T11] Buffer I/O error on dev loop2, logical block 877, lost async page write [ 386.603734][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.603734][ T11] loop2: rw=1, sector=878, nr_sectors = 1 limit=256 [ 386.638116][ T11] Buffer I/O error on dev loop2, logical block 878, lost async page write [ 386.652714][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.652714][ T11] loop2: rw=1, sector=879, nr_sectors = 1 limit=256 [ 386.673239][ T11] Buffer I/O error on dev loop2, logical block 879, lost async page write [ 386.683964][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.683964][ T11] loop2: rw=1, sector=880, nr_sectors = 1 limit=256 [ 386.704903][ T11] Buffer I/O error on dev loop2, logical block 880, lost async page write [ 386.713964][ T11] kworker/u4:0: attempt to access beyond end of device [ 386.713964][ T11] loop2: rw=1, sector=881, nr_sectors = 1 limit=256 [ 386.737636][ T11] Buffer I/O error on dev loop2, logical block 881, lost async page write [ 390.178359][ T5862] bond0 (unregistering): Released all slaves [ 392.069705][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.234510][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.276527][ T6001] hfsplus: unknown catalog record type 0 [ 392.282744][ T6001] hfsplus: unknown catalog record type 0 [ 392.335381][ T5965] team0: Port device team_slave_0 added [ 392.390764][ T5965] team0: Port device team_slave_1 added [ 392.507342][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.543383][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.604898][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.644749][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.651825][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.704645][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.903983][ T5965] hsr_slave_0: entered promiscuous mode [ 392.923840][ T6110] loop0: detected capacity change from 0 to 256 [ 392.971653][ T5965] hsr_slave_1: entered promiscuous mode [ 392.987120][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.034297][ T5965] Cannot create hsr debugfs directory [ 393.182776][ T6110] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 393.774242][ T5965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.806057][ T5965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.836631][ T5965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.852850][ T5965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 394.428272][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.138766][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.275954][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.283207][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.372328][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.380523][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.664032][ T5965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.974271][ T6141] loop2: detected capacity change from 0 to 1024 [ 396.560912][ T6145] hfsplus: unknown catalog record type 0 [ 396.567930][ T6145] hfsplus: unknown catalog record type 0 [ 397.051278][ T6042] bio_check_eod: 7526 callbacks suppressed [ 397.051296][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.051296][ T6042] loop0: rw=1, sector=1672, nr_sectors = 1 limit=256 [ 397.126059][ T5862] hfsplus: unknown catalog record type 0 [ 397.132437][ T6042] buffer_io_error: 7526 callbacks suppressed [ 397.132451][ T6042] Buffer I/O error on dev loop0, logical block 1672, lost async page write [ 397.147979][ T5862] hfsplus: unknown catalog record type 0 [ 397.194580][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.194580][ T6042] loop0: rw=1, sector=1673, nr_sectors = 1 limit=256 [ 397.248014][ T6042] Buffer I/O error on dev loop0, logical block 1673, lost async page write [ 397.281157][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.281157][ T6042] loop0: rw=1, sector=1674, nr_sectors = 1 limit=256 [ 397.335398][ T6042] Buffer I/O error on dev loop0, logical block 1674, lost async page write [ 397.344226][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.344226][ T6042] loop0: rw=1, sector=1675, nr_sectors = 1 limit=256 [ 397.393070][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.418456][ T6042] Buffer I/O error on dev loop0, logical block 1675, lost async page write [ 397.464918][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.464918][ T6042] loop0: rw=1, sector=1676, nr_sectors = 1 limit=256 [ 397.514445][ T6042] Buffer I/O error on dev loop0, logical block 1676, lost async page write [ 397.523571][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.523571][ T6042] loop0: rw=1, sector=1677, nr_sectors = 1 limit=256 [ 397.574527][ T6042] Buffer I/O error on dev loop0, logical block 1677, lost async page write [ 397.804637][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.804637][ T6042] loop0: rw=1, sector=1678, nr_sectors = 1 limit=256 [ 397.865593][ T6042] Buffer I/O error on dev loop0, logical block 1678, lost async page write [ 397.875307][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.875307][ T6042] loop0: rw=1, sector=1679, nr_sectors = 1 limit=256 [ 397.899894][ T6042] Buffer I/O error on dev loop0, logical block 1679, lost async page write [ 397.920098][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.920098][ T6042] loop0: rw=1, sector=1680, nr_sectors = 1 limit=256 [ 397.951052][ T6042] Buffer I/O error on dev loop0, logical block 1680, lost async page write [ 397.967082][ T6042] kworker/u4:9: attempt to access beyond end of device [ 397.967082][ T6042] loop0: rw=1, sector=1681, nr_sectors = 1 limit=256 [ 398.025252][ T6042] Buffer I/O error on dev loop0, logical block 1681, lost async page write [ 398.559550][ T5965] veth0_vlan: entered promiscuous mode [ 398.625825][ T5965] veth1_vlan: entered promiscuous mode [ 398.723922][ T5965] veth0_macvtap: entered promiscuous mode [ 398.766162][ T5965] veth1_macvtap: entered promiscuous mode [ 398.810601][ T6188] loop3: detected capacity change from 0 to 256 [ 398.827688][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.874579][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.894998][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.942579][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.970822][ T6188] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 398.984726][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.018068][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.107992][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.197261][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.296963][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.307135][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.320853][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.338089][ T5965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.365540][ T5965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.382365][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.415237][ T5965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.424036][ T5965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.464651][ T5965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.473481][ T5965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.700740][ T5858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.735267][ T5858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.812163][ T5872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.834367][ T5872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.171234][ T6204] loop2: detected capacity change from 0 to 1024 [ 400.678611][ T6213] hfsplus: unknown catalog record type 0 [ 400.684835][ T6213] hfsplus: unknown catalog record type 0 [ 402.028956][ T6001] hfsplus: unknown catalog record type 0 [ 402.029066][ T6001] hfsplus: unknown catalog record type 0 [ 402.707057][ T5858] bio_check_eod: 6726 callbacks suppressed [ 402.707076][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.707076][ T5858] loop3: rw=1, sector=528, nr_sectors = 1 limit=256 [ 402.744516][ T5858] buffer_io_error: 6726 callbacks suppressed [ 402.744535][ T5858] Buffer I/O error on dev loop3, logical block 528, lost async page write [ 402.759615][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.759615][ T5858] loop3: rw=1, sector=529, nr_sectors = 1 limit=256 [ 402.773127][ T5858] Buffer I/O error on dev loop3, logical block 529, lost async page write [ 402.782002][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.782002][ T5858] loop3: rw=1, sector=530, nr_sectors = 1 limit=256 [ 402.796144][ T5858] Buffer I/O error on dev loop3, logical block 530, lost async page write [ 402.804944][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.804944][ T5858] loop3: rw=1, sector=531, nr_sectors = 1 limit=256 [ 402.818415][ T5858] Buffer I/O error on dev loop3, logical block 531, lost async page write [ 402.827895][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.827895][ T5858] loop3: rw=1, sector=532, nr_sectors = 1 limit=256 [ 402.841482][ T5858] Buffer I/O error on dev loop3, logical block 532, lost async page write [ 402.850662][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.850662][ T5858] loop3: rw=1, sector=533, nr_sectors = 1 limit=256 [ 402.864768][ T5858] Buffer I/O error on dev loop3, logical block 533, lost async page write [ 402.873660][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.873660][ T5858] loop3: rw=1, sector=534, nr_sectors = 1 limit=256 [ 402.887445][ T5858] Buffer I/O error on dev loop3, logical block 534, lost async page write [ 402.896398][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.896398][ T5858] loop3: rw=1, sector=535, nr_sectors = 1 limit=256 [ 402.920077][ T5858] Buffer I/O error on dev loop3, logical block 535, lost async page write [ 402.930841][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.930841][ T5858] loop3: rw=1, sector=536, nr_sectors = 1 limit=256 [ 402.945015][ T5858] Buffer I/O error on dev loop3, logical block 536, lost async page write [ 402.953856][ T5858] kworker/u4:2: attempt to access beyond end of device [ 402.953856][ T5858] loop3: rw=1, sector=537, nr_sectors = 1 limit=256 [ 402.968515][ T5858] Buffer I/O error on dev loop3, logical block 537, lost async page write [ 403.469432][ T6238] ------------[ cut here ]------------ [ 403.475401][ T6238] kobject: '(null)' (ffff88807797c060): is not initialized, yet kobject_get() is being called. [ 403.527648][ T6238] WARNING: CPU: 1 PID: 6238 at lib/kobject.c:642 kobject_add_internal+0x115/0xc90 [ 403.537116][ T6238] Modules linked in: [ 403.541699][ T6238] CPU: 1 PID: 6238 Comm: syz.2.74 Not tainted syzkaller #0 [ 403.549237][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 403.559615][ T6238] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 403.565890][ T6238] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 ee 88 61 f7 49 8b 34 24 48 c7 c7 40 0c eb 8b 4c 89 e2 e8 4b 66 d2 f6 <0f> 0b e9 e5 00 00 00 e8 9f a7 08 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 403.585802][ T6238] RSP: 0018:ffffc9000348f8c8 EFLAGS: 00010246 [ 403.592040][ T6238] RAX: d7f034865b5c2600 RBX: ffff88805e6b0878 RCX: 0000000000080000 [ 403.600481][ T6238] RDX: ffffc9000db05000 RSI: 000000000000866e RDI: 000000000000866f [ 403.609012][ T6238] RBP: 0000000000000000 R08: ffffc9000348f4c7 R09: 1ffff92000691e98 [ 403.617173][ T6238] R10: dffffc0000000000 R11: fffff52000691e99 R12: ffff88807797c060 [ 403.625704][ T6238] R13: dffffc0000000000 R14: ffff88807797c09c R15: dffffc0000000000 [ 403.633787][ T6238] FS: 00007f17fb0d16c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 403.643735][ T6238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.651259][ T6238] CR2: 00007fcdc1626080 CR3: 000000005cfa8000 CR4: 00000000003506e0 [ 403.659452][ T6238] Call Trace: [ 403.662961][ T6238] [ 403.666086][ T6238] ? kfree+0x31/0x1a0 [ 403.670198][ T6238] kobject_add+0x164/0x240 [ 403.674762][ T6238] ? kobject_init+0x1d0/0x1d0 [ 403.679564][ T6238] ? mddev_create_serial_pool+0x210/0x470 [ 403.685462][ T6238] bind_rdev_to_array+0xb4e/0x1260 [ 403.690680][ T6238] ? bind_rdev_to_array+0x5fb/0x1260 [ 403.696115][ T6238] ? md_import_device+0x7b0/0x7b0 [ 403.701270][ T6238] md_add_new_disk+0xe2e/0x17a0 [ 403.706485][ T6238] md_ioctl+0x214c/0x24d0 [ 403.710892][ T6238] ? blkdev_common_ioctl+0x10ee/0x2580 [ 403.716525][ T6238] ? md_release+0x1e0/0x1e0 [ 403.721114][ T6238] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 403.726928][ T6238] ? blkdev_bszset+0x1f0/0x1f0 [ 403.731834][ T6238] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 403.737447][ T6238] ? md_release+0x1e0/0x1e0 [ 403.742018][ T6238] blkdev_ioctl+0x5b2/0x730 [ 403.747263][ T6238] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 403.752814][ T6238] ? bpf_lsm_file_ioctl+0x9/0x10 [ 403.757997][ T6238] ? security_file_ioctl+0x80/0xa0 [ 403.763222][ T6238] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 403.768816][ T6238] __se_sys_ioctl+0xfd/0x170 [ 403.773487][ T6238] do_syscall_64+0x55/0xb0 [ 403.778034][ T6238] ? clear_bhb_loop+0x40/0x90 [ 403.782814][ T6238] ? clear_bhb_loop+0x40/0x90 [ 403.787803][ T6238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.793805][ T6238] RIP: 0033:0x7f17fa19e1d9 [ 403.798367][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.818211][ T6238] RSP: 002b:00007f17fb0d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.826779][ T6238] RAX: ffffffffffffffda RBX: 00007f17fa426090 RCX: 00007f17fa19e1d9 [ 403.834930][ T6238] RDX: 0000200000000400 RSI: 0000000040140921 RDI: 0000000000000004 [ 403.842968][ T6238] RBP: 00007f17fa235888 R08: 0000000000000000 R09: 0000000000000000 [ 403.851710][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.859978][ T6238] R13: 00007f17fa426128 R14: 00007f17fa426090 R15: 00007fffcdb18548 [ 403.868200][ T6238] [ 403.871287][ T6238] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 403.878624][ T6238] CPU: 1 PID: 6238 Comm: syz.2.74 Not tainted syzkaller #0 [ 403.885899][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 403.896027][ T6238] Call Trace: [ 403.899382][ T6238] [ 403.902358][ T6238] dump_stack_lvl+0x18c/0x250 [ 403.907096][ T6238] ? show_regs_print_info+0x20/0x20 [ 403.912347][ T6238] ? load_image+0x420/0x420 [ 403.916934][ T6238] panic+0x2ca/0x720 [ 403.920905][ T6238] ? bpf_jit_dump+0xd0/0xd0 [ 403.925490][ T6238] __warn+0x2e0/0x470 [ 403.929543][ T6238] ? kobject_add_internal+0x115/0xc90 [ 403.935084][ T6238] ? kobject_add_internal+0x115/0xc90 [ 403.940532][ T6238] report_bug+0x2be/0x4f0 [ 403.944961][ T6238] ? kobject_add_internal+0x115/0xc90 [ 403.950406][ T6238] ? kobject_add_internal+0x115/0xc90 [ 403.955845][ T6238] ? kobject_add_internal+0x117/0xc90 [ 403.961303][ T6238] handle_bug+0xcf/0x120 [ 403.965613][ T6238] exc_invalid_op+0x1a/0x50 [ 403.970173][ T6238] asm_exc_invalid_op+0x1a/0x20 [ 403.975099][ T6238] RIP: 0010:kobject_add_internal+0x115/0xc90 [ 403.981138][ T6238] Code: b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 ee 88 61 f7 49 8b 34 24 48 c7 c7 40 0c eb 8b 4c 89 e2 e8 4b 66 d2 f6 <0f> 0b e9 e5 00 00 00 e8 9f a7 08 f7 b8 fe ff ff ff e9 f0 06 00 00 [ 404.000804][ T6238] RSP: 0018:ffffc9000348f8c8 EFLAGS: 00010246 [ 404.006943][ T6238] RAX: d7f034865b5c2600 RBX: ffff88805e6b0878 RCX: 0000000000080000 [ 404.015065][ T6238] RDX: ffffc9000db05000 RSI: 000000000000866e RDI: 000000000000866f [ 404.023093][ T6238] RBP: 0000000000000000 R08: ffffc9000348f4c7 R09: 1ffff92000691e98 [ 404.031121][ T6238] R10: dffffc0000000000 R11: fffff52000691e99 R12: ffff88807797c060 [ 404.039179][ T6238] R13: dffffc0000000000 R14: ffff88807797c09c R15: dffffc0000000000 [ 404.047232][ T6238] ? kobject_add_internal+0x115/0xc90 [ 404.052684][ T6238] ? kfree+0x31/0x1a0 [ 404.056755][ T6238] kobject_add+0x164/0x240 [ 404.061249][ T6238] ? kobject_init+0x1d0/0x1d0 [ 404.066003][ T6238] ? mddev_create_serial_pool+0x210/0x470 [ 404.071793][ T6238] bind_rdev_to_array+0xb4e/0x1260 [ 404.076971][ T6238] ? bind_rdev_to_array+0x5fb/0x1260 [ 404.082386][ T6238] ? md_import_device+0x7b0/0x7b0 [ 404.087478][ T6238] md_add_new_disk+0xe2e/0x17a0 [ 404.092402][ T6238] md_ioctl+0x214c/0x24d0 [ 404.096798][ T6238] ? blkdev_common_ioctl+0x10ee/0x2580 [ 404.102332][ T6238] ? md_release+0x1e0/0x1e0 [ 404.106889][ T6238] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 404.112711][ T6238] ? blkdev_bszset+0x1f0/0x1f0 [ 404.117547][ T6238] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 404.123110][ T6238] ? md_release+0x1e0/0x1e0 [ 404.127674][ T6238] blkdev_ioctl+0x5b2/0x730 [ 404.132245][ T6238] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 404.137789][ T6238] ? bpf_lsm_file_ioctl+0x9/0x10 [ 404.142776][ T6238] ? security_file_ioctl+0x80/0xa0 [ 404.147950][ T6238] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 404.153476][ T6238] __se_sys_ioctl+0xfd/0x170 [ 404.158141][ T6238] do_syscall_64+0x55/0xb0 [ 404.162610][ T6238] ? clear_bhb_loop+0x40/0x90 [ 404.167342][ T6238] ? clear_bhb_loop+0x40/0x90 [ 404.172099][ T6238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.178054][ T6238] RIP: 0033:0x7f17fa19e1d9 [ 404.182512][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.202167][ T6238] RSP: 002b:00007f17fb0d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.210650][ T6238] RAX: ffffffffffffffda RBX: 00007f17fa426090 RCX: 00007f17fa19e1d9 [ 404.218682][ T6238] RDX: 0000200000000400 RSI: 0000000040140921 RDI: 0000000000000004 [ 404.226733][ T6238] RBP: 00007f17fa235888 R08: 0000000000000000 R09: 0000000000000000 [ 404.234757][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.242810][ T6238] R13: 00007f17fa426128 R14: 00007f17fa426090 R15: 00007fffcdb18548 [ 404.250850][ T6238] [ 404.254511][ T6238] Kernel Offset: disabled [ 404.258923][ T6238] Rebooting in 86400 seconds..