last executing test programs: 2m9.081957348s ago: executing program 1 (id=32): shutdown(0xffffffffffffffff, 0x2) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 2m9.021117658s ago: executing program 4 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m7.714368503s ago: executing program 4 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x80000001, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40000, 0x3, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3ffffffe, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x400000, 0x2d52c0], [0x6, 0x1, 0x6, 0xb16, 0x3, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x4, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000, 0x0, 0x1ff, 0x1000, 0x0, 0xf, 0x7, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x200, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810000, 0x0, 0x0, 0x0, 0xf, 0x1], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0xfffffffd, 0x0, 0x3c63, 0xc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, 0x3f, 0x0, 0x8, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffbfc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x10001, 0x0, 0x7e, 0x2, 0x6, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x1, 0xb, 0x20000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m6.489324196s ago: executing program 1 (id=35): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) 2m5.410336096s ago: executing program 4 (id=38): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) pselect6(0x0, 0x0, &(0x7f0000000040)={0x8f55, 0x5, 0x4, 0x1, 0xda6, 0x6, 0x9, 0x2}, &(0x7f0000000140)={0xf9, 0x7fffffffffffffff, 0xff, 0x800, 0x8, 0xb81, 0x2, 0x5}, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x401]}, 0x8}) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x0, 0x3938700}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) getpgrp(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r1}, 0x20) shutdown(r1, 0x1) 2m4.999744648s ago: executing program 1 (id=39): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x3) ioctl$TCXONC(r5, 0x540a, 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = timerfd_create(0x8, 0x80800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0xffffff1a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2004c000) 2m3.180184033s ago: executing program 1 (id=43): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000500)='~', 0x1, 0x4fed0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x5, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r4, 0xcccccccc}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@nogrpid, 0x22}, {@errors_continue}, {@noquota}, {@noblock_validity}]}, 0x1, 0x462, &(0x7f0000001200)="$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") 2m2.3967775s ago: executing program 4 (id=44): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x31]}}]}) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) 2m0.426669341s ago: executing program 4 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/options/bin\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000000d40)=[{&(0x7f00000005c0)="94be4f", 0x3}], 0x1, 0xd, 0x401) 1m53.840017613s ago: executing program 1 (id=60): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000180)) 1m45.291940083s ago: executing program 32 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/options/bin\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000000d40)=[{&(0x7f00000005c0)="94be4f", 0x3}], 0x1, 0xd, 0x401) 1m44.736884397s ago: executing program 1 (id=74): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009055}, 0x24000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x505, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m39.041556401s ago: executing program 0 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000740)={'filter\x00', 0x4}, 0x68) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={@mcast1, 0x28}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.742328185s ago: executing program 0 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m34.932259658s ago: executing program 0 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 1m29.591037828s ago: executing program 33 (id=74): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009055}, 0x24000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x505, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m23.435492189s ago: executing program 0 (id=97): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) gettimeofday(0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 1m11.979373713s ago: executing program 0 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x25a7, 0x4) vmsplice(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) 1m8.398691667s ago: executing program 0 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x204, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8a}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044004}, 0x840) sched_setaffinity(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffb) setgroups(0x3, &(0x7f00000003c0)=[0x0, 0x0, 0xee01]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") keyctl$setperm(0x5, r5, 0x20000) 52.659682135s ago: executing program 34 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x204, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8a}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044004}, 0x840) sched_setaffinity(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffb) setgroups(0x3, &(0x7f00000003c0)=[0x0, 0x0, 0xee01]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") keyctl$setperm(0x5, r5, 0x20000) 23.089482577s ago: executing program 5 (id=163): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$kcm(0x2, 0x200000000000001, 0x106) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{0x0}], 0x1}}], 0x1, 0x40) 21.617572672s ago: executing program 5 (id=164): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102384, 0x18ff0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 17.177354435s ago: executing program 5 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x700, @loopback=0x7f000000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x3) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) 12.322765182s ago: executing program 5 (id=172): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, 0x0) readv(r0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.594589785s ago: executing program 3 (id=173): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x9, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) capset(&(0x7f0000000580)={0x20080522}, &(0x7f0000000040)={0x200000, 0x4200003, 0x9, 0x0, 0x20000003, 0x800}) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000040)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000300)={0xeb9, 0x2}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.588975152s ago: executing program 2 (id=175): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_tcp(0x2, 0x1, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r6, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 7.82860561s ago: executing program 2 (id=176): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, 0x0, 0x5, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000380)={&(0x7f0000000340), 0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x2, 0x18a, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) 5.128448439s ago: executing program 2 (id=177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0xfffffffd, 0x32}, @in=@broadcast, {}, {}, {}, 0x100, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1f4}]}, 0x140}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r4, &(0x7f0000000040), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r3, 0x0, 0x0, 0x7, 0x10000) fcntl$setlease(r2, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x400, 0xcd) fcntl$setlease(r5, 0x400, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000002200), 0x0) read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) write(r1, &(0x7f0000000140)="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef", 0x40) open_by_handle_at(0xffffffffffffffff, 0x0, 0x10500) 5.103065915s ago: executing program 3 (id=178): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x20004850) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, 0x0, 0x2000c800) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r5 = syz_open_dev$vim2m(0x0, 0xfffffff0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0x3a, [0x4, 0xd, 0xb82e, 0x9, 0x8, 0x5, 0x7, 0x8, 0x7fff, 0x3, 0x3, 0x40, 0x8, 0x6, 0x4, 0x6, 0x3, 0xfffc, 0xffff, 0x64, 0x1, 0x3, 0x7fff, 0xa, 0x43, 0x6, 0x0, 0x4, 0x9, 0x7, 0x3, 0x4, 0x6, 0xc, 0x7, 0x3, 0x1, 0x1, 0x4, 0x8, 0x4, 0x2, 0x8000, 0x8, 0x800, 0x1, 0x0, 0x81], 0x7fb}}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 4.837118492s ago: executing program 3 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x204) r4 = socket$inet(0x2, 0x1, 0x0) bind(0xffffffffffffffff, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) connect(0xffffffffffffffff, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 4.033695129s ago: executing program 5 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000400)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3.254063491s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0x9, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000d40), 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000003440)=""/4096) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x4e20, 0x80, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) write(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) tkill(r3, 0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x8000000000001) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x80000000, 0x9, 0x7f, 0x2, 0xa, "e891775bc839903ebd7ab4c2e6017b81201f4d", 0x3ff, 0x2}) 2.956649963s ago: executing program 2 (id=182): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e27, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) r5 = io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000400)={0x0, 0x1, '\x00', @zc_export={r5}}, 0x0) 1.819057219s ago: executing program 5 (id=183): r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b0001000000000904000001", @ANYBLOB="5482"], 0x0) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) signalfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x8040480) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x40010) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0xa) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) 1.817454739s ago: executing program 3 (id=184): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000100)='map_files\x00') fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x4, 0x0) getdents64(r6, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 116.563924ms ago: executing program 2 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='127.0.0.1\n', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='7777\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/cluster/ocfs2/node/node0/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/ocfs2/node/node1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/node/node1/ipv4_address\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)='127.0.0.2\n', 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/node/node1/ipv4_port\x00', 0x2, 0x0) write(r5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) dup2(0xffffffffffffffff, 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/cluster/ocfs2/heartbeat/hb0/block_bytes\x00', 0x2, 0x0) write(r6, &(0x7f00000006c0)='5', 0x1) 42.86461ms ago: executing program 2 (id=186): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2, 0x2) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 0s ago: executing program 3 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080060000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5100000000", 0x43}], 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x400448e6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$xdp(0x2c, 0x3, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./myproc/interrupts\x00', 0x20) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) lseek(r5, 0x2000000008, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 76.471293][ T5597] cgroup: Unknown subsys name 'net' [ 76.561849][ T5597] cgroup: Unknown subsys name 'cpuset' [ 76.565845][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.131040][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.731949][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.734187][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.735667][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.736164][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.752895][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.760855][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.761557][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.761815][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.773031][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.774658][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.775127][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.776244][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.777182][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.811599][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.812952][ T4926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.813313][ T4926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.833071][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.833104][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.833952][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.834872][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.835753][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.836899][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.838003][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.852310][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.853488][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.854146][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.854829][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.856834][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.863640][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.864495][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.928194][ T5620] Bluetooth: hci4: command tx timeout [ 82.928303][ T5620] Bluetooth: hci3: command tx timeout [ 82.928366][ T5620] Bluetooth: hci5: command tx timeout [ 82.929111][ T5624] Bluetooth: hci1: command tx timeout [ 82.929183][ T5624] Bluetooth: hci0: command tx timeout [ 82.929760][ T5620] Bluetooth: hci2: command tx timeout [ 83.642362][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.642553][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.643164][ T5609] bridge_slave_0: entered allmulticast mode [ 83.645163][ T5609] bridge_slave_0: entered promiscuous mode [ 83.649388][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.649497][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.649633][ T5609] bridge_slave_1: entered allmulticast mode [ 83.651752][ T5609] bridge_slave_1: entered promiscuous mode [ 83.704355][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.704461][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.704862][ T5615] bridge_slave_0: entered allmulticast mode [ 83.706634][ T5615] bridge_slave_0: entered promiscuous mode [ 83.730662][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.730838][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.731288][ T5615] bridge_slave_1: entered allmulticast mode [ 83.733422][ T5615] bridge_slave_1: entered promiscuous mode [ 83.736103][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.736214][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.736778][ T5616] bridge_slave_0: entered allmulticast mode [ 83.740251][ T5616] bridge_slave_0: entered promiscuous mode [ 83.829691][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.829803][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.829944][ T5616] bridge_slave_1: entered allmulticast mode [ 83.832173][ T5616] bridge_slave_1: entered promiscuous mode [ 83.834479][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.834590][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.834745][ T5610] bridge_slave_0: entered allmulticast mode [ 83.838118][ T5610] bridge_slave_0: entered promiscuous mode [ 83.855213][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.859827][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.929978][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.930152][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.930276][ T5610] bridge_slave_1: entered allmulticast mode [ 83.931954][ T5610] bridge_slave_1: entered promiscuous mode [ 83.981997][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.982113][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.982367][ T5611] bridge_slave_0: entered allmulticast mode [ 83.984426][ T5611] bridge_slave_0: entered promiscuous mode [ 83.992330][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.017712][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.047196][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.047316][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.047470][ T5614] bridge_slave_0: entered allmulticast mode [ 84.049349][ T5614] bridge_slave_0: entered promiscuous mode [ 84.071861][ T5609] team0: Port device team_slave_0 added [ 84.076746][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.080483][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.080747][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.080882][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.081341][ T5611] bridge_slave_1: entered allmulticast mode [ 84.083638][ T5611] bridge_slave_1: entered promiscuous mode [ 84.124816][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.128598][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.128707][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.128856][ T5614] bridge_slave_1: entered allmulticast mode [ 84.131074][ T5614] bridge_slave_1: entered promiscuous mode [ 84.136647][ T5609] team0: Port device team_slave_1 added [ 84.196558][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.274054][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.325033][ T5615] team0: Port device team_slave_0 added [ 84.330567][ T5616] team0: Port device team_slave_0 added [ 84.334668][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.353008][ T5610] team0: Port device team_slave_0 added [ 84.356334][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.368203][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.368225][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.368260][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.373874][ T5616] team0: Port device team_slave_1 added [ 84.404705][ T5615] team0: Port device team_slave_1 added [ 84.450772][ T5610] team0: Port device team_slave_1 added [ 84.453402][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.454180][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.454194][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.454220][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.522569][ T5611] team0: Port device team_slave_0 added [ 84.561137][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.561162][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.561196][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.562632][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.562648][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.562676][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.566478][ T5611] team0: Port device team_slave_1 added [ 84.589873][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.589896][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.589925][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.595019][ T5614] team0: Port device team_slave_0 added [ 84.596739][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.596755][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.596784][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.602433][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.602452][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.602481][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.605480][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.605496][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.605525][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.673187][ T5614] team0: Port device team_slave_1 added [ 84.865127][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.865148][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.865175][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.899501][ T5609] hsr_slave_0: entered promiscuous mode [ 84.900887][ T5609] hsr_slave_1: entered promiscuous mode [ 84.903004][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.903020][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.903048][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.977236][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.977258][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.977300][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.995541][ T5615] hsr_slave_0: entered promiscuous mode [ 84.996728][ T5615] hsr_slave_1: entered promiscuous mode [ 84.998151][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 84.998239][ T5615] Cannot create hsr debugfs directory [ 85.000576][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.000592][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.000621][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.022934][ T5628] Bluetooth: hci4: command tx timeout [ 85.027293][ T5624] Bluetooth: hci0: command tx timeout [ 85.027329][ T5624] Bluetooth: hci1: command tx timeout [ 85.027357][ T5624] Bluetooth: hci5: command tx timeout [ 85.027384][ T5624] Bluetooth: hci3: command tx timeout [ 85.027697][ T5628] Bluetooth: hci2: command tx timeout [ 85.144540][ T5616] hsr_slave_0: entered promiscuous mode [ 85.145439][ T5616] hsr_slave_1: entered promiscuous mode [ 85.146069][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 85.146092][ T5616] Cannot create hsr debugfs directory [ 85.154611][ T5610] hsr_slave_0: entered promiscuous mode [ 85.155844][ T5610] hsr_slave_1: entered promiscuous mode [ 85.156699][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 85.156721][ T5610] Cannot create hsr debugfs directory [ 85.440812][ T5614] hsr_slave_0: entered promiscuous mode [ 85.441803][ T5614] hsr_slave_1: entered promiscuous mode [ 85.442398][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 85.442420][ T5614] Cannot create hsr debugfs directory [ 85.470647][ T5611] hsr_slave_0: entered promiscuous mode [ 85.471828][ T5611] hsr_slave_1: entered promiscuous mode [ 85.472754][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 85.472775][ T5611] Cannot create hsr debugfs directory [ 86.093722][ T5615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.114824][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.115752][ T5615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.132152][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.134946][ T5615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.140947][ T30] cfg80211: failed to load regulatory.db [ 86.161636][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.174792][ T5615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.186411][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.270690][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.276089][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.285747][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.296594][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.313843][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.320990][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.321993][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.335876][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.446024][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.461496][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.477800][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.483644][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.486076][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.491050][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.492028][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.516113][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.644964][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.659257][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.663209][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.664069][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.678146][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.702913][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.707943][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.712871][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.721165][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.795495][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.863593][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.870375][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.871292][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.879023][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.879949][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.886317][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.912191][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.912378][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.946094][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.951888][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.979480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.979566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.031847][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.089987][ T5628] Bluetooth: hci4: command tx timeout [ 87.090042][ T52] Bluetooth: hci2: command tx timeout [ 87.090076][ T52] Bluetooth: hci1: command tx timeout [ 87.090104][ T5620] Bluetooth: hci0: command tx timeout [ 87.090186][ T5624] Bluetooth: hci5: command tx timeout [ 87.090262][ T5628] Bluetooth: hci3: command tx timeout [ 87.141515][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.145769][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.168077][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.172427][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.174869][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.175189][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.209030][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.210593][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.213527][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.283775][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.283880][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.349953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.350037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.365605][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.449619][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.525625][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.552602][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.584645][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.584733][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.615424][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.615536][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.625309][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.690065][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.690163][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.730718][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.730893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.790823][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.852262][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.852377][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.911408][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.911519][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.983307][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.179076][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.243616][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.243731][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.325457][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.325575][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.566215][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.030028][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.167833][ T5628] Bluetooth: hci3: command tx timeout [ 89.167874][ T5628] Bluetooth: hci5: command tx timeout [ 89.167900][ T5628] Bluetooth: hci2: command tx timeout [ 89.167925][ T5628] Bluetooth: hci4: command tx timeout [ 89.167950][ T5628] Bluetooth: hci1: command tx timeout [ 89.167975][ T5628] Bluetooth: hci0: command tx timeout [ 89.614856][ T5615] veth0_vlan: entered promiscuous mode [ 89.673976][ T5615] veth1_vlan: entered promiscuous mode [ 89.715429][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.833286][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.949469][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.956882][ T5615] veth0_macvtap: entered promiscuous mode [ 89.984442][ T5615] veth1_macvtap: entered promiscuous mode [ 90.059055][ T5616] veth0_vlan: entered promiscuous mode [ 90.088884][ T5616] veth1_vlan: entered promiscuous mode [ 90.115589][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.151327][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.250275][ T5609] veth0_vlan: entered promiscuous mode [ 90.255733][ T5614] veth0_vlan: entered promiscuous mode [ 90.270079][ T1204] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.276336][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.326346][ T5616] veth0_macvtap: entered promiscuous mode [ 90.356310][ T5614] veth1_vlan: entered promiscuous mode [ 90.370139][ T5609] veth1_vlan: entered promiscuous mode [ 90.375295][ T5610] veth0_vlan: entered promiscuous mode [ 90.383180][ T5616] veth1_macvtap: entered promiscuous mode [ 90.463701][ T5610] veth1_vlan: entered promiscuous mode [ 90.515416][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.547987][ T143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.548045][ T143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.552233][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.570168][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.570187][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.595663][ T5611] veth0_vlan: entered promiscuous mode [ 90.612543][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.622692][ T1204] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.623644][ T1204] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.623718][ T1204] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.623793][ T1204] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.645491][ T5614] veth0_macvtap: entered promiscuous mode [ 90.717235][ T5614] veth1_macvtap: entered promiscuous mode [ 90.724581][ T5609] veth0_macvtap: entered promiscuous mode [ 90.762689][ T5611] veth1_vlan: entered promiscuous mode [ 90.774720][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.774747][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.787919][ T5610] veth0_macvtap: entered promiscuous mode [ 90.796820][ T5609] veth1_macvtap: entered promiscuous mode [ 90.823413][ T5610] veth1_macvtap: entered promiscuous mode [ 90.893547][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.916206][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.934320][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.934347][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.950518][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.003621][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.091225][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.108187][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.108240][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.108283][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.110209][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.140573][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.165660][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.165684][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.171094][ T31] audit: type=1800 audit(1790217549.570:2): pid=5847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 91.183191][ T5611] veth0_macvtap: entered promiscuous mode [ 91.239117][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.273990][ T5611] veth1_macvtap: entered promiscuous mode [ 91.336570][ T1204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.523803][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.356702][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.357603][ T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.378809][ T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.388292][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.388503][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.388664][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.944069][ T1204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.944146][ T1204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.133499][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.183948][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.439125][ T143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.439193][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.439209][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.439211][ T143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.439265][ T143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.439335][ T143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.066879][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.066904][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.176016][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.176043][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.357230][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.357255][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.430799][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.430825][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.525922][ T5866] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 95.360773][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.360799][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.442753][ T5871] loop1: detected capacity change from 0 to 8 [ 95.473093][ T5870] loop3: detected capacity change from 0 to 512 [ 95.489886][ T5870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.634668][ T5871] SQUASHFS error: xz decompression failed, data probably corrupt [ 95.644157][ T5871] SQUASHFS error: Failed to read block 0x108: -5 [ 95.644184][ T5871] SQUASHFS error: Unable to read metadata cache entry [106] [ 95.644200][ T5871] SQUASHFS error: Unable to read inode 0x11f [ 95.827030][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.827054][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.986200][ T5870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.051208][ T5870] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.316845][ T5885] Zero length message leads to an empty skb [ 96.341116][ T5871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.341225][ T5871] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.346825][ T5871] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.349927][ T5871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.349990][ T5871] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.379430][ T5755] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.395098][ T5871] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.413487][ T5871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.413556][ T5871] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.414664][ T5725] udevd[5725]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 96.426451][ T5871] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.473386][ T5871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.473451][ T5871] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.514136][ T5871] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.542995][ T5871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 96.543063][ T5871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.577957][ T5871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 96.602314][ T5755] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 96.626386][ T5871] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 96.626452][ T5871] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 96.630364][ T5755] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.630423][ T5755] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.630471][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.702297][ T5871] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 96.881413][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.207580][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.334632][ T5914] loop5: detected capacity change from 0 to 2048 [ 98.351068][ T5914] udf: Unknown parameter '00000000000000000000' [ 98.397199][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.447141][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.527115][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.670687][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.723503][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 99.919270][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 100.309954][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.334530][ T5927] IPVS: starting estimator thread 0... [ 100.447888][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.479524][ T5932] IPVS: using max 24 ests per chain, 57600 per kthread [ 100.528548][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.609349][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.697628][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 100.769112][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 102.219940][ T5755] usb 1-1: USB disconnect, device number 2 [ 102.377895][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.529287][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.592335][ T1204] rtsx_usb_ms rtsx_usb_ms.2.auto: Runtime PM usage count underflow! [ 102.607350][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.680623][ T5970] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 102.687291][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.780138][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.847323][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 102.872337][ T5969] syzkaller0: entered promiscuous mode [ 102.872362][ T5969] syzkaller0: entered allmulticast mode [ 102.889414][ T5969] tipc: Started in network mode [ 102.889449][ T5969] tipc: Node identity 7edd9f6f3c0c, cluster identity 4711 [ 102.890094][ T5969] tipc: Enabled bearer , priority 0 [ 102.896760][ T5969] tipc: Resetting bearer [ 102.983436][ T5966] tipc: Resetting bearer [ 103.062270][ T5966] tipc: Disabling bearer [ 103.247074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.477194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.566282][ T5989] sd 0:0:1:0: PR command failed: 1026 [ 107.566516][ T5989] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 107.566751][ T5989] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 111.193638][ T1032] IPVS: starting estimator thread 0... [ 111.357343][ T6011] IPVS: using max 34 ests per chain, 81600 per kthread [ 111.624633][ T5989] syz.2.26 (5989): drop_caches: 2 [ 113.030602][ T6027] sch_tbf: burst 6 is lower than device ip6tnl0 mtu (1452) ! [ 113.030687][ T6027] FAULT_INJECTION: forcing a failure. [ 113.030687][ T6027] name failslab, interval 1, probability 0, space 0, times 1 [ 113.030719][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: syz.3.36 Not tainted syzkaller #0 PREEMPT(full) [ 113.030746][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 113.030762][ T6027] Call Trace: [ 113.030771][ T6027] [ 113.030782][ T6027] dump_stack_lvl+0xe8/0x150 [ 113.030825][ T6027] should_fail_ex+0x410/0x560 [ 113.030861][ T6027] should_failslab+0xa8/0x100 [ 113.030900][ T6027] __kmalloc_cache_noprof+0xa3/0x600 [ 113.030929][ T6027] ? fifo_create_dflt+0x143/0x2c0 [ 113.030969][ T6027] ? fifo_create_dflt+0x143/0x2c0 [ 113.031015][ T6027] ? qdisc_create_dflt+0x2ca/0x4e0 [ 113.031058][ T6027] fifo_create_dflt+0x143/0x2c0 [ 113.031104][ T6027] tbf_change+0x861/0x1670 [ 113.031135][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031183][ T6027] ? __pfx_tbf_change+0x10/0x10 [ 113.031273][ T6027] ? lockdep_hardirqs_on+0x7b/0x110 [ 113.031313][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031344][ T6027] ? seqcount_lockdep_reader_access+0xea/0x100 [ 113.031373][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031407][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031439][ T6027] ? __pfx_tbf_init+0x10/0x10 [ 113.031468][ T6027] qdisc_create+0x7b5/0xf00 [ 113.031502][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031549][ T6027] tc_modify_qdisc+0x17af/0x2390 [ 113.031597][ T6027] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 113.031630][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031688][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031726][ T6027] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 113.031757][ T6027] rtnetlink_rcv_msg+0x7b9/0xc00 [ 113.031796][ T6027] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 113.031828][ T6027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 113.031860][ T6027] ? ref_tracker_free+0x689/0x830 [ 113.031896][ T6027] ? __pfx_ref_tracker_free+0x10/0x10 [ 113.031928][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.031957][ T6027] ? __asan_memcpy+0x40/0x70 [ 113.031981][ T6027] ? __skb_clone+0x5c/0x6c0 [ 113.032026][ T6027] netlink_rcv_skb+0x226/0x4a0 [ 113.032070][ T6027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 113.032106][ T6027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.032162][ T6027] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.032203][ T6027] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.032250][ T6027] netlink_unicast+0x7bd/0x940 [ 113.032301][ T6027] netlink_sendmsg+0x813/0xb40 [ 113.032345][ T6027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.032378][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.032409][ T6027] ? apparmor_socket_sendmsg+0x18b/0x360 [ 113.032437][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.032470][ T6027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.032494][ T6027] sock_sendmsg_nosec+0x13a/0x180 [ 113.032526][ T6027] ____sys_sendmsg+0x54e/0x850 [ 113.032570][ T6027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.032610][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.032646][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.032676][ T6027] ? import_iovec+0x73/0xa0 [ 113.032714][ T6027] ___sys_sendmsg+0x2a5/0x360 [ 113.032749][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.032778][ T6027] ? __lock_acquire+0x747/0x2de0 [ 113.032811][ T6027] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.032852][ T6027] ? futex_wake+0x51b/0x5f0 [ 113.032926][ T6027] ? __fget_files+0x2a/0x420 [ 113.032961][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.032991][ T6027] ? __fget_files+0x3a2/0x420 [ 113.033039][ T6027] __x64_sys_sendmsg+0x1b1/0x290 [ 113.033076][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.033109][ T6027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.033156][ T6027] ? srso_alias_return_thunk+0x5/0xfbef5 [ 113.033200][ T6027] do_syscall_64+0x166/0x520 [ 113.033233][ T6027] ? trace_irq_disable+0x3b/0x140 [ 113.033260][ T6027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.033292][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.033325][ T6027] RIP: 0033:0x7f927159e159 [ 113.033347][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.033368][ T6027] RSP: 002b:00007f9272491028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.033395][ T6027] RAX: ffffffffffffffda RBX: 00007f9271826090 RCX: 00007f927159e159 [ 113.033414][ T6027] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007 [ 113.033431][ T6027] RBP: 00007f927163506b R08: 0000000000000000 R09: 0000000000000000 [ 113.033447][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.033463][ T6027] R13: 00007f9271826128 R14: 00007f9271826090 R15: 00007ffd4bfc5e88 [ 113.033502][ T6027] [ 116.163873][ T6048] capability: warning: `syz.4.44' uses deprecated v2 capabilities in a way that may be insecure [ 116.867382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 117.331359][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.506769][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 117.514988][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.589221][ T9] usb 2-1: config 0 descriptor?? [ 118.243350][ T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 118.537270][ T1211] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 118.675947][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 118.675981][ T9] [drm] Initialized udl on minor 1 [ 118.816863][ T6043] loop1: detected capacity change from 0 to 512 [ 118.832751][ T6043] ext4: Unknown parameter 'nogrpid"errors' [ 118.973998][ T1211] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.041917][ T6072] loop0: detected capacity change from 0 to 164 [ 119.129049][ T1211] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 119.129457][ T1211] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 119.129542][ T1211] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 119.344639][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.344829][ T1211] usb 6-1: Product: syz [ 119.345201][ T1211] usb 6-1: Manufacturer: syz [ 119.345539][ T1211] usb 6-1: SerialNumber: syz [ 119.845418][ T6077] serial 00:02: in use; can't configure [ 119.857787][ T6058] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 119.869009][ T6077] serial 00:02: in use; can't configure [ 119.872730][ T6077] serial 00:02: in use; can't configure [ 119.874673][ T6077] serial 00:02: in use; can't configure [ 119.920734][ T6077] serial 00:03: in use; can't configure [ 119.922532][ T6077] serial 00:03: in use; can't configure [ 119.924272][ T6077] serial 00:03: in use; can't configure [ 120.649848][ T6073] printk: console [ttyS0] disabled can't open /dev/ttyS0: No such file or directory [ 123.938358][ T6077] printk: console [ttyS0] enabled [ 124.137029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 126.633755][ T6117] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 127.850510][ T6080] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 132.282101][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.282189][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.340634][ T6158] loop5: detected capacity change from 0 to 128 [ 134.951438][ T6158] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 134.970313][ T6158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.197153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 135.499713][ T6160] loop1: detected capacity change from 0 to 512 [ 135.569318][ T6160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 135.569462][ T6160] System zones: 1-12 [ 135.691303][ T6160] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.74: missing EA_INODE flag [ 135.691435][ T6160] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 135.697396][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 135.697416][ C0] EXT4-fs (loop1): initial error at time 1790217594: ext4_xattr_inode_iget:437: inode 12 [ 135.697452][ C0] EXT4-fs (loop1): last error at time 1790217594: ext4_xattr_inode_iget:437: inode 12 [ 135.745256][ T6160] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.74: error while reading EA inode 12 err=-117 [ 135.745479][ T6160] loop1: lost filesystem error report for type 5 error -117 [ 135.766112][ T6160] EXT4-fs (loop1): 1 orphan inode deleted [ 135.786160][ T6160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.869088][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.995803][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 137.047911][ T9] usb 3-1: config index 0 descriptor too short (expected 50, got 32) [ 137.047960][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.117557][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 137.117651][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.342600][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.342627][ T9] usb 3-1: Product: syz [ 137.342640][ T9] usb 3-1: Manufacturer: syz [ 137.342652][ T9] usb 3-1: SerialNumber: syz [ 137.586578][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 137.594742][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 137.598385][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 137.613646][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 137.615858][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 137.672214][ T6163] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.718797][ T9] usb_debug 3-1:1.0: debug converter detected [ 137.783060][ T31] audit: type=1800 audit(1790217596.180:3): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.78" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 138.598619][ T6180] tipc: Enabled bearer , priority 0 [ 138.599974][ T6180] syzkaller0: entered promiscuous mode [ 138.599996][ T6180] syzkaller0: entered allmulticast mode [ 138.605816][ T6180] tipc: Resetting bearer [ 138.677480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 138.724201][ T6177] tipc: Resetting bearer [ 138.750082][ T9] usb 3-1: debug converter now attached to ttyUSB0 [ 138.906413][ T6177] tipc: Disabling bearer [ 138.952558][ T9] usb 3-1: USB disconnect, device number 2 [ 138.976069][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 138.991430][ T9] usb_debug 3-1:1.0: device disconnected [ 139.177952][ T6194] loop5: detected capacity change from 0 to 1024 [ 139.187257][ T6194] EXT4-fs: Ignoring removed bh option [ 139.369814][ T6194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.699435][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.719461][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.731398][ T5628] Bluetooth: hci6: command tx timeout [ 139.871120][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.873304][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.873337][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.873364][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 139.873408][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.958726][ T9] usb 3-1: config 0 descriptor?? [ 140.087115][ T5612] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.257093][ T5612] usb 4-1: Using ep0 maxpacket: 32 [ 140.260187][ T6200] fuse: Bad value for 'fd' [ 140.265541][ T5612] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 140.288628][ T5612] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.288657][ T5612] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 140.288679][ T5612] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.998733][ T5612] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.998766][ T5612] usb 4-1: Product: syz [ 140.998783][ T5612] usb 4-1: Manufacturer: syz [ 140.998800][ T5612] usb 4-1: SerialNumber: syz [ 141.005404][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 141.005437][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 141.279091][ T5612] usb 4-1: config 0 descriptor?? [ 141.647256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 142.057217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 142.467433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.769785][ T5628] Bluetooth: hci6: command tx timeout [ 142.770339][ T5612] gs_usb 4-1:0.0: Couldn't send data format (err=-110) [ 142.770373][ T5612] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -110 [ 142.798144][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 142.802618][ T9] usb 3-1: USB disconnect, device number 3 [ 143.121256][ T5907] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.353315][ T5762] usb 4-1: USB disconnect, device number 2 [ 144.201184][ T6216] fido_id[6216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 144.857235][ T5628] Bluetooth: hci6: command tx timeout [ 145.891870][ T5907] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.177294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.812396][ T5628] Bluetooth: hci6: command tx timeout [ 148.173526][ T5907] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.202807][ T6237] loop2: detected capacity change from 0 to 164 [ 149.507291][ T5907] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.638588][ T6246] loop2: detected capacity change from 0 to 8 [ 149.654043][ T6246] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 150.513484][ T5960] udevd[5960]: incorrect cramfs checksum on /dev/loop2 [ 150.924580][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.929731][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.939317][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.949449][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.950105][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.982389][ T5725] udevd[5725]: incorrect cramfs checksum on /dev/loop2 [ 154.264893][ T52] Bluetooth: hci1: command tx timeout [ 154.730455][ T6246] syz.2.95 (6246): drop_caches: 2 [ 155.089814][ T6252] syz.5.96 (6252): drop_caches: 2 [ 155.403315][ T5907] bridge_slave_1: left allmulticast mode [ 155.403360][ T5907] bridge_slave_1: left promiscuous mode [ 155.405176][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.700152][ T5907] bridge_slave_0: left allmulticast mode [ 155.714686][ T5907] bridge_slave_0: left promiscuous mode [ 155.714944][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.322009][ T31] audit: type=1326 audit(1790217614.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.322072][ T31] audit: type=1326 audit(1790217614.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.323310][ T31] audit: type=1326 audit(1790217614.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f927155e98e code=0x7ffc0000 [ 156.323363][ T31] audit: type=1326 audit(1790217614.720:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.323410][ T31] audit: type=1326 audit(1790217614.720:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.326732][ T31] audit: type=1326 audit(1790217614.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.326785][ T31] audit: type=1326 audit(1790217614.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.326833][ T31] audit: type=1326 audit(1790217614.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.326879][ T31] audit: type=1326 audit(1790217614.720:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.326929][ T31] audit: type=1326 audit(1790217614.720:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz.3.92" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927159e159 code=0x7ffc0000 [ 156.351837][ T52] Bluetooth: hci1: command tx timeout [ 156.449456][ T6283] xt_HMARK: proto mask must be zero with L3 mode [ 158.011601][ T6174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.717021][ T52] Bluetooth: hci1: command tx timeout [ 161.766325][ T52] Bluetooth: hci1: command tx timeout [ 162.271719][ T6305] loop5: detected capacity change from 0 to 128 [ 163.254139][ T6309] loop2: detected capacity change from 0 to 512 [ 163.267679][ T6309] ext4: Bad value for 'data' [ 163.293785][ T6305] EXT4-fs (loop5): Test dummy encryption mode enabled [ 163.397774][ T6305] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.432675][ T6305] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.098665][ T6321] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 164.921871][ T5615] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.163876][ T6338] binder: 6334:6338 ioctl c0306201 0 returned -14 [ 169.350293][ T6344] loop5: detected capacity change from 0 to 512 [ 169.374894][ T6344] EXT4-fs (loop5): Test dummy encryption mode enabled [ 171.118364][ T6344] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.111: bg 0: block 7: invalid block bitmap [ 171.118404][ T6344] loop5: lost filesystem error report for type 5 error -117 [ 171.127061][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 171.127082][ C0] EXT4-fs (loop5): initial error at time 1790217629: ext4_validate_block_bitmap:436 [ 171.127107][ C0] EXT4-fs (loop5): last error at time 1790217629: ext4_validate_block_bitmap:436 [ 171.154167][ T6344] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 171.154196][ T6344] loop5: lost filesystem error report for type 5 error -117 [ 171.162472][ T6344] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2933: inode #11: comm syz.5.111: corrupted xattr block 95: invalid header [ 171.162543][ T6344] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 171.165730][ T6344] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 171.165832][ T6344] EXT4-fs (loop5): 1 orphan inode deleted [ 171.173567][ T6344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.237929][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.331008][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.353017][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.354202][ T5907] bond0 (unregistering): Released all slaves [ 173.943898][ T6371] loop2: detected capacity change from 0 to 512 [ 173.970020][ T6371] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 173.970044][ T6371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.013174][ T6371] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.116: bad orphan inode 131083 [ 174.013211][ T6371] loop2: lost filesystem error report for type 5 error -117 [ 174.034709][ T6371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.309494][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 175.520426][ T6176] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.521232][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.522213][ T6176] bridge_slave_0: entered allmulticast mode [ 175.618214][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.618910][ T6176] bridge_slave_0: entered promiscuous mode [ 177.644762][ T6383] loop2: detected capacity change from 0 to 1024 [ 177.826419][ T6383] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 178.370425][ T6176] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.370584][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.370768][ T6176] bridge_slave_1: entered allmulticast mode [ 178.399179][ T6176] bridge_slave_1: entered promiscuous mode [ 178.418141][ T6385] input: syz0 as /devices/virtual/input/input6 [ 178.837117][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 179.624576][ T6176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.853404][ T6399] loop2: detected capacity change from 0 to 1024 [ 179.859528][ T6399] hfsplus: Unknown parameter '00000000000000000000ÿ0x0000000000000000' [ 180.699856][ T5907] hsr_slave_0: left promiscuous mode [ 181.990251][ T5907] hsr_slave_1: left promiscuous mode [ 181.991432][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.991474][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.102706][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.102734][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.179566][ T6406] loop0: detected capacity change from 0 to 512 [ 182.391963][ T6406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.392205][ T6406] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.717748][ T5907] veth1_macvtap: left promiscuous mode [ 182.717812][ T5907] veth0_macvtap: left promiscuous mode [ 182.718152][ T5907] veth1_vlan: left promiscuous mode [ 182.735880][ T5907] veth0_vlan: left promiscuous mode [ 182.922287][ T6414] loop2: detected capacity change from 0 to 4096 [ 183.217223][ T6417] comedi comedi1: pc212e: a I/O base address must be specified [ 183.347842][ T6417] overlayfs: upper fs does not support tmpfile. [ 183.438586][ T6417] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 183.473741][ T6417] overlayfs: overlapping lowerdir path [ 187.446493][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.460345][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.462586][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.465051][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.494370][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.660827][ T6444] loop5: detected capacity change from 0 to 256 [ 187.662023][ T6444] exfat: Unknown parameter 'ut' [ 187.997538][ T6450] process 'syz.3.129' launched './file2' with NULL argv: empty string added [ 188.068833][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 188.068877][ T31] audit: type=1400 audit(1790217646.450:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6445 comm="syz.3.129" [ 188.797227][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 189.821755][ T5628] Bluetooth: hci5: command tx timeout [ 190.195745][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 191.699748][ T6176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.752736][ T6405] geneve2: entered allmulticast mode [ 191.940909][ T5628] Bluetooth: hci5: command tx timeout [ 191.944012][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 191.987844][ T6464] batman_adv: batadv0: Adding interface: dummy0 [ 191.987865][ T6464] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.987900][ T6464] batman_adv: batadv0: Interface activated: dummy0 [ 192.314688][ T6176] team0: Port device team_slave_0 added [ 192.375065][ T6464] batadv0: mtu less than device minimum [ 192.376612][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.378925][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.380432][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.381970][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.383467][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.384989][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.386510][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.388080][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 192.389674][ T6464] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 193.403053][ T6176] team0: Port device team_slave_1 added [ 193.653071][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.653175][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.978278][ T5628] Bluetooth: hci5: command tx timeout [ 195.410008][ T6405] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.047294][ T5628] Bluetooth: hci5: command tx timeout [ 196.319817][ T5628] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 196.669585][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.675378][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.692785][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.700054][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.701790][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.206127][ T5907] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.963232][ T52] Bluetooth: hci0: command tx timeout [ 199.372683][ T5907] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.425197][ T6503] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 200.062625][ T5907] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.166436][ T6541] fuse: Unknown parameter 'dont_measure' [ 200.845112][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.845224][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.845376][ T6248] bridge_slave_0: entered allmulticast mode [ 200.882292][ T6248] bridge_slave_0: entered promiscuous mode [ 200.919047][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 201.007050][ T5628] Bluetooth: hci0: command tx timeout [ 201.029607][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.030295][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.030593][ T6248] bridge_slave_1: entered allmulticast mode [ 201.032678][ T6248] bridge_slave_1: entered promiscuous mode [ 201.174908][ T5907] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.318772][ T6248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.346126][ T6248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.666510][ T6560] loop5: detected capacity change from 0 to 4096 [ 201.902281][ T6248] team0: Port device team_slave_0 added [ 202.544121][ T6248] team0: Port device team_slave_1 added [ 202.797574][ T6577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.147'. [ 203.210570][ T5628] Bluetooth: hci0: command tx timeout [ 205.579559][ T5628] Bluetooth: hci0: command tx timeout [ 205.668810][ T6560] bond1: option ad_actor_sys_prio: invalid value (0) [ 205.668841][ T6560] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 205.700246][ T6560] bond1 (unregistering): Released all slaves [ 205.785106][ T6597] loop2: detected capacity change from 0 to 512 [ 205.797950][ T6597] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.837505][ T6597] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.153: corrupted in-inode xattr: invalid ea_ino [ 205.837543][ T6597] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 205.841171][ T6597] EXT4-fs (loop2): Remounting filesystem read-only [ 205.854314][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.959300][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.959323][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.959354][ T6248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.961914][ T6248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.961936][ T6248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.961965][ T6248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.038802][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.159643][ T5907] bridge_slave_1: left allmulticast mode [ 209.159675][ T5907] bridge_slave_1: left promiscuous mode [ 209.159891][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.210119][ T5907] bridge_slave_0: left allmulticast mode [ 209.210154][ T5907] bridge_slave_0: left promiscuous mode [ 209.214245][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.817253][ T6624] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 209.848018][ T6624] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 210.341511][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.344226][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.345128][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.346361][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.351305][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.659362][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.684327][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.722468][ T5907] bond0 (unregistering): Released all slaves [ 210.757543][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.757691][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.757875][ T6440] bridge_slave_0: entered allmulticast mode [ 210.764466][ T6440] bridge_slave_0: entered promiscuous mode [ 210.803456][ T6629] loop2: detected capacity change from 0 to 32768 [ 210.804727][ T6629] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 210.811462][ T6629] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.159 (6629) [ 210.852902][ T6629] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 210.852938][ T6629] BTRFS info (device loop2): using crc32c checksum algorithm [ 210.888629][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 210.916524][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.916637][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.916786][ T6440] bridge_slave_1: entered allmulticast mode [ 210.929494][ T6440] bridge_slave_1: entered promiscuous mode [ 211.080224][ T6629] BTRFS info (device loop2): rebuilding free space tree [ 211.125991][ T6629] BTRFS info (device loop2): disabling free space tree [ 211.126080][ T6629] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 211.126111][ T6629] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.141677][ T6629] BTRFS info (device loop2): enabling ssd optimizations [ 211.141706][ T6629] BTRFS info (device loop2): turning on async discard [ 211.141725][ T6629] BTRFS info (device loop2): force clearing of disk cache [ 211.141746][ T6629] BTRFS info (device loop2): use zstd compression, level 3 [ 211.328681][ T6440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.457857][ T52] Bluetooth: hci6: command tx timeout [ 212.689289][ T5611] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 212.716546][ T6440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.057301][ T5935] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 213.447995][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 213.448888][ T5935] usb 4-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 213.450109][ T5935] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 213.450137][ T5935] usb 4-1: config 0 has no interface number 0 [ 213.450168][ T5935] usb 4-1: config 0 interface 66 has no altsetting 0 [ 213.452368][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.452396][ T5935] usb 4-1: Product: syz [ 213.452413][ T5935] usb 4-1: Manufacturer: syz [ 213.452429][ T5935] usb 4-1: SerialNumber: syz [ 214.155965][ T5935] usb 4-1: config 0 descriptor?? [ 214.364500][ T6440] team0: Port device team_slave_0 added [ 214.390571][ T6440] team0: Port device team_slave_1 added [ 214.538504][ T52] Bluetooth: hci6: command tx timeout [ 214.590618][ T5935] usb 4-1: selecting invalid altsetting 3 [ 214.590647][ T5935] comedi comedi5: could not set alternate setting 3 in high speed [ 214.590664][ T5935] usbduxsigma 4-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 214.637315][ T5935] usbduxsigma 4-1:0.66: probe with driver usbduxsigma failed with error -22 [ 214.664294][ T5935] usb 4-1: USB disconnect, device number 3 [ 214.747750][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.747771][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.747801][ T6440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.799373][ T6675] loop2: detected capacity change from 0 to 256 [ 216.700208][ T52] Bluetooth: hci6: command tx timeout [ 216.761999][ T5907] hsr_slave_0: left promiscuous mode [ 216.782022][ T5907] hsr_slave_1: left promiscuous mode [ 216.784314][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.784338][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.823422][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.823449][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.889495][ T5907] veth1_macvtap: left promiscuous mode [ 216.889543][ T5907] veth0_macvtap: left promiscuous mode [ 216.889657][ T5907] veth1_vlan: left promiscuous mode [ 216.889731][ T5907] veth0_vlan: left promiscuous mode [ 218.854585][ T5628] Bluetooth: hci6: command tx timeout [ 220.848281][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 220.883273][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 221.081316][ T6440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.081338][ T6440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.081368][ T6440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.226369][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 222.469468][ T143] IPVS: starting estimator thread 0... [ 222.557255][ T6715] IPVS: using max 25 ests per chain, 60000 per kthread [ 222.900616][ T6440] hsr_slave_0: entered promiscuous mode [ 222.901840][ T6440] hsr_slave_1: entered promiscuous mode [ 222.902961][ T6440] debugfs: 'hsr0' already exists in 'hsr' [ 222.903002][ T6440] Cannot create hsr debugfs directory [ 224.846446][ T6727] xt_hashlimit: size too large, truncated to 1048576 [ 224.846678][ T6727] xt_hashlimit: max too large, truncated to 1048576 [ 227.457216][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.458998][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.459195][ T6505] bridge_slave_0: entered allmulticast mode [ 227.473910][ T5907] IPVS: stop unused estimator thread 0... [ 227.474782][ T6505] bridge_slave_0: entered promiscuous mode [ 227.589690][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.589801][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.589934][ T6505] bridge_slave_1: entered allmulticast mode [ 227.597250][ T6505] bridge_slave_1: entered promiscuous mode [ 227.752043][ T5907] bridge_slave_1: left allmulticast mode [ 227.752076][ T5907] bridge_slave_1: left promiscuous mode [ 227.752291][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.773436][ T5907] bridge_slave_0: left allmulticast mode [ 227.773467][ T5907] bridge_slave_0: left promiscuous mode [ 227.773715][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.845752][ T5907] bridge_slave_1: left allmulticast mode [ 227.845783][ T5907] bridge_slave_1: left promiscuous mode [ 227.845989][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.855651][ T5907] bridge_slave_0: left allmulticast mode [ 227.855675][ T5907] bridge_slave_0: left promiscuous mode [ 227.855926][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.240496][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.319645][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.326181][ T5907] bond0 (unregistering): Released all slaves [ 230.795712][ T6765] loop2: detected capacity change from 0 to 64 [ 232.712112][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.751352][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.799750][ T5907] bond0 (unregistering): Released all slaves [ 232.844536][ T6505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.728514][ T31] audit: type=1326 audit(1790217692.120:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.2.177" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb62a79e159 code=0x0 [ 233.816133][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 233.844340][ T6505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.558632][ T6783] fuse: Bad value for 'fd' [ 235.952436][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.710862][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.769445][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 236.822861][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 237.018291][ T5935] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 237.772342][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 237.775651][ T5935] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 237.776908][ T5935] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.777051][ T5935] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.820644][ T5935] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 237.820677][ T5935] usb 6-1: Product: syz [ 237.820694][ T5935] usb 6-1: Manufacturer: syz [ 237.820711][ T5935] usb 6-1: SerialNumber: syz [ 237.867293][ T5935] usb 6-1: config 0 descriptor?? [ 237.945211][ T5935] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 238.067687][ T6816] ================================================================== [ 238.067709][ T6816] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 238.067738][ T6816] Read of size 1 at addr ffff888025ed29c0 by task syz.3.187/6816 [ 238.067758][ T6816] [ 238.067773][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.3.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.067810][ T6816] Tainted: [L]=SOFTLOCKUP [ 238.067819][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 238.067834][ T6816] Call Trace: [ 238.067844][ T6816] [ 238.067854][ T6816] dump_stack_lvl+0xe8/0x150 [ 238.067892][ T6816] print_address_description+0x55/0x1e0 [ 238.067927][ T6816] ? string+0x216/0x2d0 [ 238.067949][ T6816] print_report+0x58/0x70 [ 238.067980][ T6816] kasan_report+0x117/0x150 [ 238.068013][ T6816] ? string+0x216/0x2d0 [ 238.068041][ T6816] string+0x216/0x2d0 [ 238.068068][ T6816] vsnprintf+0x74a/0xef0 [ 238.068100][ T6816] seq_printf+0x188/0x290 [ 238.068135][ T6816] ? __pfx_seq_printf+0x10/0x10 [ 238.068166][ T6816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.068197][ T6816] ? seq_put_decimal_ull_width+0x290/0x370 [ 238.068231][ T6816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.068264][ T6816] irq_seq_show+0x5f3/0x860 [ 238.068300][ T6816] traverse+0x229/0x620 [ 238.068335][ T6816] seq_lseek+0x134/0x260 [ 238.068365][ T6816] proc_reg_llseek+0x1bc/0x290 [ 238.068395][ T6816] __x64_sys_lseek+0x14f/0x1e0 [ 238.068433][ T6816] do_syscall_64+0x166/0x520 [ 238.068466][ T6816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.068491][ T6816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.068523][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.068548][ T6816] RIP: 0033:0x7f927159e159 [ 238.068569][ T6816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.068590][ T6816] RSP: 002b:00007f9272491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 238.068616][ T6816] RAX: ffffffffffffffda RBX: 00007f9271826090 RCX: 00007f927159e159 [ 238.068643][ T6816] RDX: 0000000000000000 RSI: 0000002000000008 RDI: 0000000000000009 [ 238.068659][ T6816] RBP: 00007f927163506b R08: 0000000000000000 R09: 0000000000000000 [ 238.068675][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.068690][ T6816] R13: 00007f9271826128 R14: 00007f9271826090 R15: 00007ffd4bfc5e88 [ 238.068724][ T6816] [ 238.068733][ T6816] [ 238.068739][ T6816] Allocated by task 6176: [ 238.068751][ T6816] kasan_save_track+0x3e/0x80 [ 238.068776][ T6816] __kasan_kmalloc+0x93/0xb0 [ 238.068801][ T6816] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 238.068826][ T6816] kstrdup+0x42/0x100 [ 238.068848][ T6816] kobject_set_name_vargs+0x61/0x110 [ 238.068882][ T6816] dev_set_name+0xe2/0x140 [ 238.068915][ T6816] netdev_register_kobject+0xb7/0x350 [ 238.068941][ T6816] register_netdevice+0x1433/0x1eb0 [ 238.068976][ T6816] br_dev_newlink+0x6a/0x150 [ 238.069004][ T6816] rtnl_newlink_create+0x305/0x7b0 [ 238.069037][ T6816] rtnl_newlink+0x166d/0x1c30 [ 238.069066][ T6816] rtnetlink_rcv_msg+0x802/0xc00 [ 238.069094][ T6816] netlink_rcv_skb+0x226/0x4a0 [ 238.069130][ T6816] netlink_unicast+0x7bd/0x940 [ 238.069162][ T6816] netlink_sendmsg+0x813/0xb40 [ 238.069183][ T6816] sock_sendmsg_nosec+0x13a/0x180 [ 238.069206][ T6816] __sys_sendto+0x408/0x5a0 [ 238.069234][ T6816] __x64_sys_sendto+0xde/0x100 [ 238.069262][ T6816] do_syscall_64+0x166/0x520 [ 238.069291][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.069314][ T6816] [ 238.069320][ T6816] Freed by task 5907: [ 238.069332][ T6816] kasan_save_track+0x3e/0x80 [ 238.069355][ T6816] kasan_save_free_info+0x40/0x50 [ 238.069389][ T6816] __kasan_slab_free+0x5c/0x80 [ 238.069414][ T6816] kfree+0x1c5/0x650 [ 238.069447][ T6816] kobject_put+0x267/0x550 [ 238.069480][ T6816] netdev_run_todo+0xeee/0x1060 [ 238.069516][ T6816] ops_undo_list+0x396/0x8d0 [ 238.069545][ T6816] cleanup_net+0x572/0x810 [ 238.069572][ T6816] process_scheduled_works+0xc3d/0x1630 [ 238.069604][ T6816] worker_thread+0xa47/0xfb0 [ 238.069641][ T6816] kthread+0x38b/0x480 [ 238.069663][ T6816] ret_from_fork+0x514/0xb70 [ 238.069684][ T6816] ret_from_fork_asm+0x1a/0x30 [ 238.069720][ T6816] [ 238.069727][ T6816] The buggy address belongs to the object at ffff888025ed29c0 [ 238.069727][ T6816] which belongs to the cache kmalloc-8 of size 8 [ 238.069746][ T6816] The buggy address is located 0 bytes inside of [ 238.069746][ T6816] freed 8-byte region [ffff888025ed29c0, ffff888025ed29c8) [ 238.069770][ T6816] [ 238.069777][ T6816] The buggy address belongs to the physical page: [ 238.069788][ T6816] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25ed2 [ 238.069810][ T6816] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 238.069830][ T6816] page_type: f5(slab) [ 238.069852][ T6816] raw: 00fff00000000000 ffff88801b041500 dead000000000100 dead000000000122 [ 238.069874][ T6816] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 238.069887][ T6816] page dumped because: kasan: bad access detected [ 238.069898][ T6816] page_owner tracks the page as allocated [ 238.069907][ T6816] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5134351080 [ 238.069943][ T6816] post_alloc_hook+0x1f9/0x250 [ 238.069979][ T6816] get_page_from_freelist+0x2209/0x2280 [ 238.070004][ T6816] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 238.070028][ T6816] allocate_slab+0x7d/0x620 [ 238.070058][ T6816] refill_objects+0x2d5/0x350 [ 238.070089][ T6816] __pcs_replace_empty_main+0x2c8/0x6c0 [ 238.070118][ T6816] __kmalloc_node_track_caller_noprof+0x548/0x720 [ 238.070142][ T6816] kstrdup+0x42/0x100 [ 238.070164][ T6816] __kernfs_new_node+0xa9/0x980 [ 238.070187][ T6816] kernfs_create_dir_ns+0xfe/0x230 [ 238.070210][ T6816] sysfs_create_dir_ns+0x12f/0x2a0 [ 238.070245][ T6816] kobject_add_internal+0x622/0xcd0 [ 238.070281][ T6816] kobject_add+0x163/0x240 [ 238.070313][ T6816] device_add+0x3fa/0xb80 [ 238.070335][ T6816] tty_register_device_attr+0x425/0x990 [ 238.070362][ T6816] tty_register_driver+0x868/0xe50 [ 238.070387][ T6816] page last free pid 78 tgid 78 ts 5133960179 stack trace: [ 238.070403][ T6816] __free_frozen_pages+0xc93/0xd90 [ 238.070439][ T6816] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 238.070461][ T6816] alloc_vmap_area+0xd1a/0x1420 [ 238.070493][ T6816] __get_vm_area_node+0x200/0x2f0 [ 238.070525][ T6816] __vmalloc_node_range_noprof+0x343/0x1540 [ 238.070561][ T6816] __vmalloc_node_noprof+0xc2/0x100 [ 238.070618][ T6816] dup_task_struct+0x2c6/0xa00 [ 238.070655][ T6816] copy_process+0x7e0/0x4400 [ 238.070684][ T6816] kernel_clone+0x2d7/0x940 [ 238.070716][ T6816] user_mode_thread+0x115/0x180 [ 238.070748][ T6816] call_usermodehelper_exec_work+0x5c/0x230 [ 238.070778][ T6816] process_scheduled_works+0xc3d/0x1630 [ 238.070809][ T6816] worker_thread+0xa47/0xfb0 [ 238.070840][ T6816] kthread+0x38b/0x480 [ 238.070860][ T6816] ret_from_fork+0x514/0xb70 [ 238.070881][ T6816] ret_from_fork_asm+0x1a/0x30 [ 238.070917][ T6816] [ 238.070923][ T6816] Memory state around the buggy address: [ 238.070936][ T6816] ffff888025ed2880: 06 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 238.070952][ T6816] ffff888025ed2900: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 238.070968][ T6816] >ffff888025ed2980: 05 fc fc fc 05 fc fc fc fa fc fc fc 05 fc fc fc [ 238.070981][ T6816] ^ [ 238.070994][ T6816] ffff888025ed2a00: fa fc fc fc fa fc fc fc 05 fc fc fc 05 fc fc fc [ 238.071010][ T6816] ffff888025ed2a80: fa fc fc fc 05 fc fc fc 04 fc fc fc 00 fc fc fc [ 238.071023][ T6816] ================================================================== [ 238.071036][ T6816] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 238.826636][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.3.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.837425][ T6816] Tainted: [L]=SOFTLOCKUP [ 238.841760][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 238.851821][ T6816] Call Trace: [ 238.855116][ T6816] [ 238.858220][ T6816] vpanic+0x56d/0xa60 [ 238.862425][ T6816] ? __pfx_vpanic+0x10/0x10 [ 238.866973][ T6816] panic+0xc5/0xd0 [ 238.870726][ T6816] ? __pfx_panic+0x10/0x10 [ 238.875174][ T6816] ? string+0x216/0x2d0 [ 238.879342][ T6816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.884991][ T6816] ? rcu_is_watching+0x16/0xb0 [ 238.889773][ T6816] ? string+0x216/0x2d0 [ 238.893921][ T6816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.899551][ T6816] ? string+0x216/0x2d0 [ 238.903787][ T6816] check_panic_on_warn+0x89/0xb0 [ 238.908903][ T6816] ? string+0x216/0x2d0 [ 238.913097][ T6816] end_report+0x73/0x170 [ 238.917348][ T6816] ? string+0x216/0x2d0 [ 238.921510][ T6816] kasan_report+0x128/0x150 [ 238.926017][ T6816] ? string+0x216/0x2d0 [ 238.930200][ T6816] string+0x216/0x2d0 [ 238.934187][ T6816] vsnprintf+0x74a/0xef0 [ 238.938440][ T6816] seq_printf+0x188/0x290 [ 238.942781][ T6816] ? __pfx_seq_printf+0x10/0x10 [ 238.947679][ T6816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.953581][ T6816] ? seq_put_decimal_ull_width+0x290/0x370 [ 238.959423][ T6816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 238.965175][ T6816] irq_seq_show+0x5f3/0x860 [ 238.969690][ T6816] traverse+0x229/0x620 [ 238.973978][ T6816] seq_lseek+0x134/0x260 [ 238.978228][ T6816] proc_reg_llseek+0x1bc/0x290 [ 238.983113][ T6816] __x64_sys_lseek+0x14f/0x1e0 [ 238.987982][ T6816] do_syscall_64+0x166/0x520 [ 238.992576][ T6816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.998645][ T6816] ? srso_alias_return_thunk+0x5/0xfbef5 [ 239.004283][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.010213][ T6816] RIP: 0033:0x7f927159e159 [ 239.014663][ T6816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.034731][ T6816] RSP: 002b:00007f9272491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 239.043171][ T6816] RAX: ffffffffffffffda RBX: 00007f9271826090 RCX: 00007f927159e159 [ 239.051263][ T6816] RDX: 0000000000000000 RSI: 0000002000000008 RDI: 0000000000000009 [ 239.059261][ T6816] RBP: 00007f927163506b R08: 0000000000000000 R09: 0000000000000000 [ 239.067351][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.075319][ T6816] R13: 00007f9271826128 R14: 00007f9271826090 R15: 00007ffd4bfc5e88 [ 239.083315][ T6816] [ 239.086601][ T6816] Kernel Offset: disabled [ 239.090933][ T6816] Rebooting in 86400 seconds..