last executing test programs: 7m11.530909647s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) 7m10.530027737s ago: executing program 3 (id=8): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@user_xattr}]}, 0x1, 0x5f1, &(0x7f0000001200)="$eJzs3c9vVNUeAPDvnf6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJo45k7vLe30Tn9M25nS+/kkQ++9Zy7nezv99pw5PedOAKU1mP5TiTgYEdNJRH8yv1jWGVnh4MLzHv350fn0kUS1+trvSSTZsfz5Sfa1Lzu5JyJ+/CGJAx0r652Zu3F5fGpq8nq2Pzx7ZXp4Zu7G0UtXxi9OXpy8OvrC6KmTJ06eGjnW1HXdLDh29va77/d/MvbmN1/9lYx8+8tYEqfj5eyJS69jqwzGYO17kqws6ju11ZW1SUf2c7L0JU462xgQG5K/fl0R8b/oj44lr2Z/fPxKu+MDtk81iaiuU9d6nwg8IZJ15z+wu+T9gPy9ff374EpbeiVAKzw8szAAsDL/OxfGBqOnNjaw91ESS4d1kohobmRuuX0Rcf/e2O0L98ZuxzaNwwHF5m9FxP+L8j+p5f9A9MRALf8ry/I/7Recy76mx19tsv76oWL5D62zkP89q+Z/NMj/t5bk/9tN1j/4ePOd3mX539vsJQEAAAAAAEBp3T0TEc8X/f2/sjj/Jwrm//RFxOktqH+wbn/l3/8rD7agGqDAwzMRLxXO/63ks38HOrKtf9XmA3QlFy5NTR6LiH9HxJHo2pPuj6xSx9FPD3zZqGwwm/+XP9L672dzAbM4HnTuWX7OxPjs+GavG4h4eCviqcL5v8li+58UtP/p74PpddZx4Nk75xqVrZ3/dbrXWSmwpurXEYcL2//Hd61IVr8/x3CtPzCc9wpWevrDz75rVP+G8z/jFhOweWn7v3f1/B9Ilt6vZ2bjdRyf66w2Kmu2/9+dvF67SUneHfhgfHb2+khEd3K2Iz267PjoxmOG3SjPhzxf0vw/8szq439F/f/eiJiv+7+TP5avKc799+++XxvF02z7D2xemv8TG2r/N74xemfg+0b1r6/9P1Fr649kR4z/wYIv8jStGxcrSMfOoqJWxwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu0ElIvZFUhla3K5UhoYi+iLiP7G3MnVtZva5C9feuzqRltU+/7+Sf9Jv/8J+kn/+/8CS/dG6/eMRsT8iPu/ore0Pnb82NdHuiwcAAAAAAAAAAAAAAAAAAIAdoq/B+v/Ubx3tjg7Ydp3tDgBom4L8/6kdcQCtp/2H8pL/UF7yH8pL/kN5yX8oL/kP5SX/obzkPwAAAAAA7Cr7D939OYmI+Rd7a49Ud1bW1dbIgO1WaXcAQNu4xQ+U15pTf25VWxMI0HLe4wPJGuU9DU9a68zVTJ/fxMkAAAAAAAAAAAAAUDqHD1r/D2Vl/T+Ul/X/UF75+v9DbY4DaD3v8YFYYyV/4fr/Nc8CAAAAAAAAAAAAALbSzNyNy+NTU5PXbbyxM8Jo5Ua1Wr2Z/hTslHie8I18KvxOiaduI1/rt76z2vc7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWO6fAAAA//84kyVU") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010100}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0x13) 7m10.029530791s ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000002c0)={@host, 0x2}) unshare(0xa000400) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 7m8.433609241s ago: executing program 3 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000000)={0x12f, &(0x7f0000000080)=[{}, {}, {}]}) 7m7.271101745s ago: executing program 3 (id=15): mkdir(&(0x7f0000000040)='./file1\x00', 0x160) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000009ec0)='./file0\x00', 0x880b, &(0x7f0000009e80)=ANY=[], 0xfd, 0x9df0, &(0x7f0000000000)="$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") 7m4.406243569s ago: executing program 3 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 6m48.35281017s ago: executing program 32 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5m58.629029631s ago: executing program 0 (id=141): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x2480, 0x1) mount(&(0x7f0000000580)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 5m56.778141199s ago: executing program 0 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 5m55.318456408s ago: executing program 0 (id=145): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0xa, 0xbc, 0x3ff, 0x100000001, 0x7, 0x4, 0x4, 0x5}, 0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 5m54.356569799s ago: executing program 0 (id=146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x80, 0x100000}, 0x20) 5m45.803909105s ago: executing program 0 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m44.258500682s ago: executing program 0 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) 5m35.749339534s ago: executing program 1 (id=191): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 5m33.194695115s ago: executing program 1 (id=194): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 5m32.386394868s ago: executing program 1 (id=195): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x800, 0x6, 0x353}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5m30.989562784s ago: executing program 1 (id=201): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m30.3864826s ago: executing program 1 (id=204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 5m20.65182343s ago: executing program 1 (id=224): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3f, 0x2}, &(0x7f0000000300)=0x90) 5m18.764439498s ago: executing program 33 (id=224): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3f, 0x2}, &(0x7f0000000300)=0x90) 2m15.926203576s ago: executing program 2 (id=611): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x5885, 0x101, 0x0, 0x30}, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 2m13.408955948s ago: executing program 2 (id=616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000000b0601020000000000000000000000090900020073797a32000006"], 0x50}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x2) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m13.0642881s ago: executing program 2 (id=618): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$eJzs3M9vFFUcAPDv7LallR+tiCgIWkEj8UdLCyoHD2o08aCJiR7wWNuCyEINrQmQRosxeDQk3o1HE/8Cb16MejAmXjXxaEiINiYUTzWzM0OX7bZ0S9uV7ueTbPe9nZl97zvz3u6beZ0NoG31p3+SiG0R8VtE9GbZW1foz57mZqdHb8xOjyYxP//WX0l1veuz06PFqsV2W/PMoVJE6dMkXkwWlzt54eLpkUpl/FyeH5w688Hg5IWLz5w6M3Jy/OT42eFjx44eGXr+ueFn1yTONK7rez+a2LfntXeuvDF6/Mq7P36TVmv3/mx5bRy3daNBQA30p3vt7/mq+mWPN1H3u8H2mnTS0cKK0JRyRKSHq7Pa/3ujHAsHrzde/aSllQPWVfrdtGXpxTPzwCaWRKtrALRG8UWfnv8Wjw0aevwvXHspoitPz81Oj87djL8jSvnrnetYfn9EHJ/598v0Ec1ehwAAWIXq2ObpRuO/UuyuPmdzHTvyOZS+iLg3InZGxH0RsSsi7o+orvtARDyYbTzfu8Ly++vyi8c/pasN67xG0vHfCzVjv7ma+POnvnKe216NvzM5caoyfjjfJ4eic0uaH1qmjO9e+fXzpZbVjv/SR1p+MRbMK3C1o+4C3djI1Mha7YRrlyL2djSKP7k5E5C2gD0Rsbe5t95RJE49+fW+pVa6ffzLWIN5pvmvIp7Ijv9M1MVfSJafnxzsjsr44cGiVSz20y+X31yq/DuKfw1cO/BQllg4/nVr9P6T9OTJSmX83GTzZVz+/bMlz2lW2/67krerc9Y/v5e9dn5kaurcUERX8no1X5zTVV8fXtj2/MhUT5ov1k/b/6GDjfv/znyb9PineyltxPsj4uGIeCSv+6MRcSAiDi4T/w8vP/b+MvEnkUTrjv+liLGGn383239fUjtfv4pE+fT33y41Y76y4380ZqqftZnq599trLSCd7j7AAAA4K5QiohtkZQGsnT/tiiVBgay/+HfFfeUKhOTU0+dmPjw7Fh2j0BfdJaKK129NddDh5KZ/B2z/HB+rbhYfiS/bvxFuaeaHxidqIy1OHZod1tv7f9R9P/Un+VW1w5Yd+7XgvZV3/9LLaoHsPFW8v3vXAA2p1v7f3f6p6dVdQE2lvN/aF+N+v/HdXnjf9icFvf/Pxr8ZB2wGRn/Q/vS/6F96f/Qlu7kvv6FRHdENLNVcbPA6gvtXvEd/u2SKH7xYj3L6omLp7vyV6LUokjLTTa2TZFIe8zGFrrwGyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3s/8CAAD//90I3/s=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008ffd000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m11.254779042s ago: executing program 2 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 2m10.04890863s ago: executing program 2 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x23010, 0x0) 2m9.652562315s ago: executing program 2 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x8, @private1, 0x2}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0) 1m53.693928168s ago: executing program 34 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x8, @private1, 0x2}], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0) 15.31028792s ago: executing program 6 (id=804): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 15.089698368s ago: executing program 6 (id=807): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000abc0)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x8) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x4a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 13.740640686s ago: executing program 5 (id=809): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = dup(r1) r4 = accept4(r2, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x10000000000000) sendfile(r4, r3, 0x0, 0x8a000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) 12.165925488s ago: executing program 6 (id=811): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setrlimit(0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 11.704647236s ago: executing program 5 (id=812): openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x80101, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) recvmmsg$unix(r1, &(0x7f0000003100), 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001580)=""/52, 0x34}], 0x1}, 0x3ff0}], 0x1, 0x2001, 0x0) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f00000000c0)=0x8000, 0x4) request_key(&(0x7f00000030c0)='dns_resolver\x00', 0x0, &(0x7f00000057c0)='\'[}*:]\t-\x00', 0xfffffffffffffffb) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, &(0x7f0000007840)) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xff00, 0x0, 'syz0\x00', 0xfffffffd}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880) openat$uinput(0xffffff9c, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) 10.778437901s ago: executing program 6 (id=813): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.859737267s ago: executing program 5 (id=814): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xc87b, 0x400, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.205615005s ago: executing program 4 (id=817): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x10aa, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) 5.695000039s ago: executing program 6 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, 0x0}, 0x0) 4.378479033s ago: executing program 6 (id=819): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket(0x11, 0x5, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="0100000000000600", 0x8) close(r2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) syz_usb_connect(0x4, 0x210, 0x0, 0x0) 4.299743907s ago: executing program 5 (id=820): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) readv(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1) getuid() 4.189771306s ago: executing program 4 (id=821): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x80000002, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x40, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x2, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x7, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x9, 0x6, 0x400, 0x401, 0x6, 0x1, 0xfffff836, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fffffff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x800008, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x40004, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0xfd, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0xfffffff9, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa) mincore(&(0x7f0000001000/0x800000)=nil, 0x800000, &(0x7f0000000380)=""/4096) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffbfffffffffd, 0x20000000002, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0xd}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x771c, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.281290159s ago: executing program 5 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x39) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x80}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0xc845) read$alg(r4, &(0x7f0000002dc0)=""/4096, 0x1000) 2.113923877s ago: executing program 5 (id=823): socket$netlink(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.760549323s ago: executing program 4 (id=825): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) io_uring_setup(0x30d3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2402, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x2, 0x1006, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x1, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x4, 0xd, 0x7, 0x5, 0x502]}) 1.629620768s ago: executing program 4 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) 410.585612ms ago: executing program 4 (id=827): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x29, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000207000000ffe9ffffffff160005001a"], 0x38}}, 0x1400c0d4) 0s ago: executing program 4 (id=828): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) kernel console output (not intermixed with test programs): _slave_1) entered blocking state [ 85.642106][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.649307][ T5841] bridge_slave_1: entered allmulticast mode [ 85.657372][ T5841] bridge_slave_1: entered promiscuous mode [ 85.679692][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.686634][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.712829][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.801776][ T5855] team0: Port device team_slave_0 added [ 85.808258][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.815439][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.841594][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.875912][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.885148][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.911437][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.925430][ T5842] team0: Port device team_slave_0 added [ 85.934603][ T5842] team0: Port device team_slave_1 added [ 85.943488][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.954756][ T5855] team0: Port device team_slave_1 added [ 85.984292][ T5843] team0: Port device team_slave_0 added [ 85.991188][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.998124][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.024350][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.077954][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.147628][ T5843] team0: Port device team_slave_1 added [ 86.231530][ T5841] team0: Port device team_slave_0 added [ 86.238315][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.246747][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.278133][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.377263][ T5848] hsr_slave_0: entered promiscuous mode [ 86.385351][ T5848] hsr_slave_1: entered promiscuous mode [ 86.393982][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.401877][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.432806][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.462055][ T5841] team0: Port device team_slave_1 added [ 86.468769][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.476264][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.532471][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.549554][ T5845] hsr_slave_0: entered promiscuous mode [ 86.556828][ T5845] hsr_slave_1: entered promiscuous mode [ 86.566358][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.574130][ T5845] Cannot create hsr debugfs directory [ 86.582012][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.588959][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.614900][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.627986][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.635411][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.661537][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.673736][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.680776][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.706698][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.792015][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.798986][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.826149][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.919249][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.926303][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.952332][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.006016][ T5855] hsr_slave_0: entered promiscuous mode [ 87.012684][ T5855] hsr_slave_1: entered promiscuous mode [ 87.018938][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.026585][ T5855] Cannot create hsr debugfs directory [ 87.121435][ T5842] hsr_slave_0: entered promiscuous mode [ 87.127867][ T5842] hsr_slave_1: entered promiscuous mode [ 87.134193][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.141821][ T5842] Cannot create hsr debugfs directory [ 87.204650][ T5843] hsr_slave_0: entered promiscuous mode [ 87.211136][ T5843] hsr_slave_1: entered promiscuous mode [ 87.217307][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.224909][ T5843] Cannot create hsr debugfs directory [ 87.359673][ T5162] Bluetooth: hci1: command tx timeout [ 87.407868][ T5841] hsr_slave_0: entered promiscuous mode [ 87.414435][ T5841] hsr_slave_1: entered promiscuous mode [ 87.420847][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.428396][ T5841] Cannot create hsr debugfs directory [ 87.445479][ T5856] Bluetooth: hci2: command tx timeout [ 87.451555][ T51] Bluetooth: hci3: command tx timeout [ 87.453582][ T5162] Bluetooth: hci4: command tx timeout [ 87.519588][ T5162] Bluetooth: hci5: command tx timeout [ 87.519765][ T5856] Bluetooth: hci0: command tx timeout [ 87.937877][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.984348][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.012365][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.037632][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.093924][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.105085][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.127000][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.141987][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.214641][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.235347][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.247005][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.280154][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.396088][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.423354][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.447094][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.489942][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.516865][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.536477][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.581138][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.588336][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.625025][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.632180][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.651612][ T5842] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.663530][ T5842] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.677315][ T5842] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.692734][ T5842] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.740011][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.884077][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.904499][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.927054][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.962089][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.969275][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.983403][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.004256][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.038974][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.086183][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.093316][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.236264][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.266469][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.273593][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.285048][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.292393][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.375270][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.440656][ T5856] Bluetooth: hci1: command tx timeout [ 89.456198][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.473191][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.520200][ T5856] Bluetooth: hci4: command tx timeout [ 89.525646][ T5856] Bluetooth: hci2: command tx timeout [ 89.528740][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.539512][ T5162] Bluetooth: hci3: command tx timeout [ 89.585763][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.592963][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.601108][ T5856] Bluetooth: hci0: command tx timeout [ 89.613008][ T5856] Bluetooth: hci5: command tx timeout [ 89.635264][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.668478][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.675617][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.737473][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.744624][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.754269][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.761415][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.808231][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.957731][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.121803][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.202038][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.209228][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.221782][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.228925][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.244913][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.276296][ T5845] veth0_vlan: entered promiscuous mode [ 90.376008][ T5845] veth1_vlan: entered promiscuous mode [ 90.446930][ T5848] veth0_vlan: entered promiscuous mode [ 90.524160][ T5843] veth0_vlan: entered promiscuous mode [ 90.538612][ T5848] veth1_vlan: entered promiscuous mode [ 90.574915][ T5843] veth1_vlan: entered promiscuous mode [ 90.614824][ T5845] veth0_macvtap: entered promiscuous mode [ 90.663124][ T5845] veth1_macvtap: entered promiscuous mode [ 90.742409][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.766976][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.779356][ T5848] veth0_macvtap: entered promiscuous mode [ 90.796328][ T5848] veth1_macvtap: entered promiscuous mode [ 90.843674][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.897029][ T5843] veth0_macvtap: entered promiscuous mode [ 90.915631][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.926594][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.943505][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.953211][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.964609][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.979395][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.993550][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.016805][ T5843] veth1_macvtap: entered promiscuous mode [ 91.066532][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077539][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.090764][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.099732][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.124682][ T2143] cfg80211: failed to load regulatory.db [ 91.142413][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.192275][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.203594][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.242366][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.268349][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.281162][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.291352][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.393872][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.408116][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.466996][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.477106][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.484298][ T5855] veth0_vlan: entered promiscuous mode [ 91.520446][ T5856] Bluetooth: hci1: command tx timeout [ 91.558946][ T5842] veth0_vlan: entered promiscuous mode [ 91.586302][ T5855] veth1_vlan: entered promiscuous mode [ 91.600548][ T5856] Bluetooth: hci2: command tx timeout [ 91.605989][ T5856] Bluetooth: hci3: command tx timeout [ 91.611790][ T5856] Bluetooth: hci4: command tx timeout [ 91.638509][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.651401][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.677475][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.677661][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.686407][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.700710][ T5162] Bluetooth: hci5: command tx timeout [ 91.706114][ T5856] Bluetooth: hci0: command tx timeout [ 91.713216][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.714746][ T5842] veth1_vlan: entered promiscuous mode [ 91.736244][ T5841] veth0_vlan: entered promiscuous mode [ 91.797111][ T5841] veth1_vlan: entered promiscuous mode [ 91.844549][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.876191][ T5842] veth0_macvtap: entered promiscuous mode [ 91.894220][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.897942][ T5855] veth0_macvtap: entered promiscuous mode [ 91.908923][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.939297][ T5842] veth1_macvtap: entered promiscuous mode [ 92.021746][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.030341][ T5855] veth1_macvtap: entered promiscuous mode [ 92.105878][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.135080][ T5841] veth0_macvtap: entered promiscuous mode [ 92.258643][ T5992] loop4: detected capacity change from 0 to 4096 [ 92.288679][ T5992] EXT4-fs: Ignoring removed orlov option [ 92.298659][ T5842] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.357119][ T5842] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.422658][ T5842] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518177][ T5992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.541903][ T5842] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.680105][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.693751][ T5841] veth1_macvtap: entered promiscuous mode [ 92.735640][ T30] audit: type=1800 audit(1751853506.422:2): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 92.739926][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.790956][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.830271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.842907][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.872067][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.906937][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059525][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.116658][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.241390][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.249686][ T30] audit: type=1804 audit(1751853506.932:3): pid=6004 uid=0 auid=0 ses=1 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7" name="file0" dev="ramfs" ino=6962 res=1 errno=0 [ 93.299536][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.308244][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.321452][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.350287][ T6006] loop3: detected capacity change from 0 to 1024 [ 93.365257][ T6006] EXT4-fs: Ignoring removed orlov option [ 93.384644][ T6006] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (23153!=20869) [ 93.448438][ T6006] EXT4-fs (loop3): group descriptors corrupted! [ 93.608821][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.639505][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.764276][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.781893][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.828269][ T6010] loop0: detected capacity change from 0 to 256 [ 93.837213][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.320768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.437338][ T6010] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 94.529896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.573057][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.612279][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.619766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.622295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.800764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.800797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.808950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.827955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.879916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.251497][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.267013][ T6017] lo speed is unknown, defaulting to 1000 [ 95.277822][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.329050][ T6017] lo speed is unknown, defaulting to 1000 [ 95.628794][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.650242][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.430220][ T6017] lo speed is unknown, defaulting to 1000 [ 96.463543][ T6017] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.539071][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.548585][ T6017] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.587546][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.705928][ T6025] loop3: detected capacity change from 0 to 128 [ 97.731026][ T6017] lo speed is unknown, defaulting to 1000 [ 97.738455][ T6017] lo speed is unknown, defaulting to 1000 [ 97.770142][ T6017] lo speed is unknown, defaulting to 1000 [ 97.782697][ T6025] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 97.887935][ T6017] lo speed is unknown, defaulting to 1000 [ 99.202351][ T6017] lo speed is unknown, defaulting to 1000 [ 99.298144][ T6042] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[6042] [ 99.424359][ T6017] lo speed is unknown, defaulting to 1000 [ 115.582276][ T6143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.808624][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.810305][ T5162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.840293][ T5162] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.869901][ T5162] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 119.000499][ T5162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.008477][ T5162] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.250064][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 119.879096][ T6169] lo speed is unknown, defaulting to 1000 [ 120.093225][ T10] usb 1-1: config 7 has an invalid interface number: 192 but max is 0 [ 121.063255][ T10] usb 1-1: config 7 has no interface number 0 [ 121.069590][ T10] usb 1-1: config 7 interface 192 has no altsetting 0 [ 121.790395][ T5856] Bluetooth: hci6: command tx timeout [ 121.854562][ T10] usb 1-1: string descriptor 0 read error: -71 [ 121.860972][ T10] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 121.879548][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.897036][ T10] usb 1-1: can't set config #7, error -71 [ 121.999649][ T10] usb 1-1: USB disconnect, device number 2 [ 123.337440][ T6190] warning: `syz.5.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.850206][ T5856] Bluetooth: hci6: command tx timeout [ 124.713982][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.769698][ T5968] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.803284][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.933917][ T5856] Bluetooth: hci6: command tx timeout [ 125.982982][ T5968] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 125.992127][ T5968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.040200][ T5968] usb 1-1: config 0 descriptor?? [ 126.366716][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.319554][ T5968] ath6kl: Failed to submit usb control message: -110 [ 127.326363][ T5968] ath6kl: unable to send the bmi data to the device: -110 [ 127.341265][ T6214] Zero length message leads to an empty skb [ 127.345137][ T5968] ath6kl: Unable to send get target info: -110 [ 127.404372][ T5968] ath6kl: Failed to init ath6kl core: -110 [ 127.440241][ T5968] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 127.536488][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.559813][ T5968] usb 1-1: USB disconnect, device number 3 [ 127.999717][ T5856] Bluetooth: hci6: command tx timeout [ 128.068616][ T6219] loop1: detected capacity change from 0 to 32768 [ 128.075813][ T6219] XFS: ikeep mount option is deprecated. [ 128.160436][ T12] wlan1: Trigger new scan to find an IBSS to join [ 128.160917][ T6219] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.254400][ T6169] chnl_net:caif_netlink_parms(): no params data found [ 128.558195][ T6219] XFS (loop1): Ending clean mount [ 128.567966][ T6219] XFS (loop1): Quotacheck needed: Please wait. [ 129.521572][ T6219] XFS (loop1): Quotacheck: Done. [ 131.081865][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.293987][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.359082][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.387215][ T6169] bridge_slave_0: entered allmulticast mode [ 131.579927][ T6169] bridge_slave_0: entered promiscuous mode [ 131.594930][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.602669][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.610020][ T6169] bridge_slave_1: entered allmulticast mode [ 131.759301][ T6262] loop4: detected capacity change from 0 to 512 [ 131.772268][ T6262] ======================================================= [ 131.772268][ T6262] WARNING: The mand mount option has been deprecated and [ 131.772268][ T6262] and is ignored by this kernel. Remove the mand [ 131.772268][ T6262] option from the mount to silence this warning. [ 131.772268][ T6262] ======================================================= [ 132.457012][ T6169] bridge_slave_1: entered promiscuous mode [ 132.463869][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.473511][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.533767][ T6262] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 132.554859][ T6262] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 132.564066][ T6262] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.570944][ T6262] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.71: invalid indirect mapped block 2185560079 (level 1) [ 132.587345][ T6262] EXT4-fs (loop4): Remounting filesystem read-only [ 132.594483][ T6262] EXT4-fs (loop4): 1 truncate cleaned up [ 132.603293][ T6262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 132.982517][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 133.125991][ T2978] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 133.245403][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.329910][ T13] bridge_slave_1: left allmulticast mode [ 133.448599][ T13] bridge_slave_1: left promiscuous mode [ 133.499577][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.402577][ T30] audit: type=1326 audit(1751853547.872:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4178e929 code=0x7fc00000 [ 134.413328][ T6271] loop2: detected capacity change from 0 to 4096 [ 134.433075][ T13] bridge_slave_0: left allmulticast mode [ 134.438726][ T13] bridge_slave_0: left promiscuous mode [ 134.510015][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.552565][ T30] audit: type=1326 audit(1751853548.202:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e4178e929 code=0x7fc00000 [ 134.644232][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 134.662164][ T6287] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.366887][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.485513][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.512356][ T13] bond0 (unregistering): Released all slaves [ 138.636719][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.669393][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.678187][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.702207][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.728340][ T6286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.798480][ T6329] /dev/nullb0: Can't open blockdev [ 142.800679][ T6340] loop1: detected capacity change from 0 to 512 [ 142.898242][ T6169] team0: Port device team_slave_0 added [ 143.284654][ T6340] journal_path: Non-blockdev passed as './bus' [ 143.309256][ T6169] team0: Port device team_slave_1 added [ 143.321427][ T6340] EXT4-fs: error: could not find journal device path [ 143.334524][ T30] audit: type=1804 audit(1751853557.012:6): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.90" name="/newroot/18/file1" dev="fuse" ino=1 res=1 errno=0 [ 143.419343][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 143.444010][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 143.905338][ T6352] loop0: detected capacity change from 0 to 256 [ 143.973474][ T6352] exfat: Bad value for 'uid' [ 143.978093][ T6352] exfat: Bad value for 'uid' [ 144.025820][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.059076][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.176681][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.369295][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.379373][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.471338][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.001084][ T13] hsr_slave_0: left promiscuous mode [ 145.149910][ T13] hsr_slave_1: left promiscuous mode [ 145.210261][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.286203][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.505715][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.543251][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.686575][ T13] veth1_macvtap: left promiscuous mode [ 146.695440][ T13] veth0_macvtap: left promiscuous mode [ 146.824145][ T13] veth1_vlan: left promiscuous mode [ 146.829655][ T13] veth0_vlan: left promiscuous mode [ 148.423978][ T6394] loop5: detected capacity change from 0 to 2048 [ 148.743226][ T6394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.536273][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.029624][ T6408] mmap: syz.4.106 (6408) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.224351][ T6411] loop0: detected capacity change from 0 to 2048 [ 152.391630][ T6411] NILFS (loop0): The specified checkpoint is not a snapshot (checkpoint number=2) [ 152.695112][ T6408] gfs2: gfs2 mount does not exist [ 153.157061][ T6413] loop5: detected capacity change from 0 to 512 [ 153.265969][ T6413] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 154.239716][ T6415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.247048][ T6415] IPv6: NLM_F_CREATE should be set when creating new route [ 154.267491][ T6424] loop4: detected capacity change from 0 to 1024 [ 154.417553][ T6424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.460671][ T6413] EXT4-fs (loop5): 1 orphan inode deleted [ 154.483463][ T6413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.501399][ T2978] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.597983][ T2978] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 154.627015][ T6413] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.825777][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.876250][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.996313][ T30] audit: type=1326 audit(1751853568.682:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.134356][ T30] audit: type=1326 audit(1751853568.682:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.248640][ T30] audit: type=1326 audit(1751853568.682:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.357560][ T6442] loop0: detected capacity change from 0 to 32768 [ 155.365809][ T30] audit: type=1326 audit(1751853568.682:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.446377][ T30] audit: type=1326 audit(1751853568.682:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.468807][ T30] audit: type=1326 audit(1751853568.682:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.567888][ T30] audit: type=1326 audit(1751853568.682:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.607740][ T30] audit: type=1326 audit(1751853568.682:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.655332][ T30] audit: type=1326 audit(1751853568.682:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.1.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7078e929 code=0x7fc00000 [ 155.682345][ T6442] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 155.682370][ T6442] allowing incompatible features above 0.0: (unknown version) [ 155.682385][ T6442] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 155.691822][ T6450] loop1: detected capacity change from 0 to 1024 [ 155.698861][ T6442] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 155.735334][ T6442] bcachefs (loop0): initializing new filesystem [ 155.751872][ T6442] bcachefs (loop0): going read-write [ 155.808388][ T6442] bcachefs (loop0): marking superblocks [ 155.827476][ T6442] bcachefs (loop0): initializing freespace [ 155.837664][ T6442] bcachefs (loop0): done initializing freespace [ 155.848094][ T6442] bcachefs (loop0): reading snapshots table [ 155.854095][ T6442] bcachefs (loop0): reading snapshots done [ 155.904351][ T6442] bcachefs (loop0): done starting filesystem [ 155.937932][ T6442] bcachefs (loop0): going read-only [ 155.943508][ T6442] bcachefs (loop0): finished waiting for writes to stop [ 155.960082][ T6442] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 155.971451][ T13] team0 (unregistering): Port device team_slave_1 removed [ 156.031434][ T6442] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 2 [ 156.080368][ T6442] bcachefs (loop0): clean shutdown complete, journal seq 3 [ 156.088687][ T6442] bcachefs (loop0): marking filesystem clean [ 156.169371][ T13] team0 (unregistering): Port device team_slave_0 removed [ 156.852464][ T6442] syz.0.116 (6442) used greatest stack depth: 16152 bytes left [ 156.874099][ T5845] bcachefs (loop0): shutting down [ 157.016937][ T5845] bcachefs (loop0): shutdown complete [ 157.048135][ T6169] hsr_slave_0: entered promiscuous mode [ 157.066382][ T6169] hsr_slave_1: entered promiscuous mode [ 157.251687][ T6169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.259282][ T6169] Cannot create hsr debugfs directory [ 160.219883][ T6169] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.296871][ T6169] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.372282][ T6169] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.442337][ T6169] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.873251][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.084967][ T6505] loop5: detected capacity change from 0 to 32768 [ 161.092181][ T6505] XFS: noikeep mount option is deprecated. [ 161.119731][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 161.138961][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.159131][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.166318][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.192161][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 161.208935][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.216123][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.236330][ T6505] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.303374][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 161.380468][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.391165][ T6169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.487563][ T6505] XFS (loop5): Ending clean mount [ 161.496973][ T6505] XFS (loop5): Quotacheck needed: Please wait. [ 161.506790][ T10] usb 5-1: config 1 has no interface number 1 [ 161.559783][ T6517] netlink: 'syz.1.130': attribute type 10 has an invalid length. [ 161.569022][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.610698][ T6505] XFS (loop5): Quotacheck: Done. [ 161.655905][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.714155][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.756340][ T10] usb 5-1: Product: syz [ 161.769463][ T10] usb 5-1: Manufacturer: syz [ 161.774136][ T10] usb 5-1: SerialNumber: syz [ 161.868437][ T13] wlan1: Selected IBSS BSSID 00:00:00:8d:00:00 based on configured SSID [ 161.888729][ T6517] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 161.897792][ T5842] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.174140][ T6533] process 'syz.2.133' launched './file1' with NULL argv: empty string added [ 162.235313][ T6494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.270884][ T5968] lo speed is unknown, defaulting to 1000 [ 162.313960][ T10] usb 5-1: 2:1 : unsupported format bits 0x100 [ 162.413152][ T10] usb 5-1: USB disconnect, device number 2 [ 162.698419][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.308299][ T6169] veth0_vlan: entered promiscuous mode [ 165.555330][ T6169] veth1_vlan: entered promiscuous mode [ 166.350073][ T6589] Invalid source name [ 166.354097][ T6589] UBIFS error (pid: 6589): cannot open "/dev/sg0", error -22 [ 167.018359][ T6169] veth0_macvtap: entered promiscuous mode [ 167.127574][ T6169] veth1_macvtap: entered promiscuous mode [ 167.270053][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.325032][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.422774][ T6169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.519692][ T6169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.528429][ T6169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.633532][ T6169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.581734][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.706866][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.902733][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.974577][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.119555][ T6630] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 172.867630][ T6637] loop6: detected capacity change from 0 to 128 [ 172.919278][ T6637] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.052920][ T6637] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.111148][ T6641] veth1_macvtap: left promiscuous mode [ 174.151113][ T6641] macsec0: entered promiscuous mode [ 176.112983][ T6667] loop4: detected capacity change from 0 to 8 [ 176.131157][ T6655] evm: overlay not supported [ 176.138152][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 176.147081][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 176.147093][ T30] audit: type=1804 audit(1751853589.822:60): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.156" name="/newroot/24/bus/file0" dev="overlay" ino=151 res=1 errno=0 [ 176.307225][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 178.701775][ T6695] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.910284][ T6710] gretap1: entered promiscuous mode [ 180.666964][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 180.908489][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.338375][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.665053][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.902426][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.653295][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.661531][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.671927][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.925813][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.933546][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.979665][ T5856] Bluetooth: hci2: command tx timeout [ 187.013485][ T49] bridge_slave_1: left allmulticast mode [ 187.035202][ T49] bridge_slave_1: left promiscuous mode [ 187.042994][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.315395][ T6786] cgroup: Unknown subsys name 'cpuset' [ 187.358334][ T49] bridge_slave_0: left allmulticast mode [ 187.522259][ T49] bridge_slave_0: left promiscuous mode [ 187.528115][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.152380][ T6791] netlink: 156 bytes leftover after parsing attributes in process `syz.5.192'. [ 189.046366][ T5856] Bluetooth: hci2: command tx timeout [ 191.129455][ T5856] Bluetooth: hci2: command tx timeout [ 191.557938][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.626910][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.812424][ T49] bond0 (unregistering): Released all slaves [ 191.874828][ T6755] lo speed is unknown, defaulting to 1000 [ 191.888681][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 192.131528][ T6808] trusted_key: syz.5.197 sent an empty control message without MSG_MORE. [ 192.390806][ T30] audit: type=1800 audit(1751853606.082:61): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.196" name="/" dev="9p" ino=2 res=0 errno=0 [ 192.968800][ T6817] Unknown options in mask 5 [ 193.199663][ T5856] Bluetooth: hci2: command tx timeout [ 193.225018][ T6816] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 193.234977][ T6816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.830119][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.843486][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.667257][ T49] hsr_slave_0: left promiscuous mode [ 197.559539][ T49] hsr_slave_1: left promiscuous mode [ 197.565895][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.606107][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.721725][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.735320][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.629577][ T49] veth1_macvtap: left promiscuous mode [ 198.659537][ T49] veth0_macvtap: left promiscuous mode [ 198.686924][ T49] veth1_vlan: left promiscuous mode [ 198.701158][ T49] veth0_vlan: left promiscuous mode [ 200.352041][ T6888] syz.6.217 uses obsolete (PF_INET,SOCK_PACKET) [ 200.532160][ T6891] netlink: 'syz.6.217': attribute type 10 has an invalid length. [ 201.423599][ T49] team0 (unregistering): Port device team_slave_1 removed [ 201.559079][ T49] team0 (unregistering): Port device team_slave_0 removed [ 204.466133][ T6891] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.837715][ T6755] chnl_net:caif_netlink_parms(): no params data found [ 205.080529][ T6921] overlayfs: failed to clone upperpath [ 206.152823][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.6.231'. [ 206.232909][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 206.240699][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 206.256999][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 206.263576][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 206.356371][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.231'. [ 206.662325][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.676528][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 206.696875][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.406272][ T24] usb 6-1: config 0 descriptor?? [ 207.434816][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.442112][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.453369][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 207.462498][ T6755] bridge_slave_0: entered allmulticast mode [ 207.473859][ T6755] bridge_slave_0: entered promiscuous mode [ 207.614869][ T6940] hsr_slave_0: left promiscuous mode [ 207.633806][ T6940] hsr_slave_1: left promiscuous mode [ 207.754865][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.793278][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.804437][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.815921][ T5162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.830038][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 207.836629][ T5162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.973806][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 207.980941][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.028567][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 208.035327][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.103914][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 208.110817][ T6755] bridge_slave_1: entered allmulticast mode [ 208.137899][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 208.157242][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.236'. [ 208.167085][ T6755] bridge_slave_1: entered promiscuous mode [ 208.208534][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 208.240371][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 208.263057][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 208.321389][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 209.436372][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 209.459947][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 209.469882][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 209.500079][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 209.538969][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 209.552699][ T6755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.566347][ T6976] loop6: detected capacity change from 0 to 512 [ 209.595817][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 209.629486][ T6976] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz.6.239: casefold flag without casefold feature [ 209.668398][ T24] pwc: Registered as video103. [ 209.715665][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5 [ 209.734747][ T6755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.803564][ T6976] EXT4-fs (loop6): get root inode failed [ 209.824717][ T24] usb 6-1: USB disconnect, device number 2 [ 209.833417][ T6976] EXT4-fs (loop6): mount failed [ 210.120286][ T51] Bluetooth: hci0: command tx timeout [ 212.258206][ T51] Bluetooth: hci0: command tx timeout [ 212.369345][ T6755] team0: Port device team_slave_0 added [ 212.473027][ T6997] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.852157][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.186518][ T6958] lo speed is unknown, defaulting to 1000 [ 213.920455][ T6755] team0: Port device team_slave_1 added [ 214.319541][ T51] Bluetooth: hci0: command tx timeout [ 214.494543][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.075548][ T7025] sctp: failed to load transform for md5: -4 [ 216.103489][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.212672][ T51] Bluetooth: hci0: command tx timeout [ 218.598708][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.755064][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.202150][ T6755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.233512][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.808272][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.887260][ T30] audit: type=1326 audit(1751853634.572:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.5.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df0d8e929 code=0x7ffc0000 [ 220.962413][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.085711][ T30] audit: type=1326 audit(1751853634.602:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.5.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2df0d8e929 code=0x7ffc0000 [ 221.108920][ T6755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.003840][ T7080] TCP: out of memory -- consider tuning tcp_mem [ 222.395946][ T6755] hsr_slave_0: entered promiscuous mode [ 222.406929][ T7096] loop6: detected capacity change from 0 to 164 [ 222.427836][ T6755] hsr_slave_1: entered promiscuous mode [ 222.732293][ T7096] rock: directory entry would overflow storage [ 222.832001][ T7096] rock: sig=0x5053, size=7, remaining=4 [ 222.941065][ T7096] isofs_fill_super: root inode is not a directory. Corrupted media? [ 223.131070][ T3021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 223.210076][ T6755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.217662][ T6755] Cannot create hsr debugfs directory [ 224.428548][ T7124] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 224.472151][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 224.579736][ T49] bridge_slave_1: left allmulticast mode [ 224.612164][ T49] bridge_slave_1: left promiscuous mode [ 224.650255][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.770654][ T49] bridge_slave_0: left allmulticast mode [ 224.815340][ T49] bridge_slave_0: left promiscuous mode [ 224.866098][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.217067][ T7140] trusted_key: encrypted_key: insufficient parameters specified [ 227.883476][ T972] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 227.928484][ T7150] loop5: detected capacity change from 0 to 164 [ 228.061598][ T7150] Unable to read rock-ridge attributes [ 228.093378][ T972] usb 7-1: Using ep0 maxpacket: 8 [ 228.298058][ T972] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 228.324763][ T972] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.367307][ T972] usb 7-1: config 0 has no interface number 0 [ 228.374503][ T972] usb 7-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.428502][ T972] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 228.444276][ T972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.465867][ T972] usb 7-1: Product: syz [ 228.470321][ T972] usb 7-1: Manufacturer: syz [ 228.474921][ T972] usb 7-1: SerialNumber: syz [ 228.510720][ T972] usb 7-1: config 0 descriptor?? [ 228.540180][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.556084][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.567690][ T49] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 228.613993][ T49] bond0 (unregistering): Released all slaves [ 229.600492][ T972] ath6kl: Failed to submit usb control message: -110 [ 229.613400][ T972] ath6kl: unable to send the bmi data to the device: -110 [ 229.621459][ T972] ath6kl: Unable to send get target info: -110 [ 229.630311][ T972] ath6kl: Failed to init ath6kl core: -110 [ 229.648842][ T972] ath6kl_usb 7-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 230.143736][ T49] hsr_slave_0: left promiscuous mode [ 230.187182][ T49] hsr_slave_1: left promiscuous mode [ 230.215069][ T49] veth1_macvtap: left promiscuous mode [ 230.244493][ T49] veth0_macvtap: left promiscuous mode [ 230.259984][ T49] veth1_vlan: left promiscuous mode [ 230.265285][ T49] veth0_vlan: left promiscuous mode [ 231.384399][ T5930] usb 7-1: USB disconnect, device number 2 [ 231.756021][ T2143] Process accounting resumed [ 231.833163][ T7194] Process accounting resumed [ 232.758170][ T49] team0 (unregistering): Port device team_slave_1 removed [ 232.808647][ T49] team0 (unregistering): Port device team_slave_0 removed [ 233.115901][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 233.128261][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 233.141258][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 233.158581][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 233.168520][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 233.326821][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.337977][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.365601][ T6958] bridge_slave_0: entered allmulticast mode [ 233.388691][ T6958] bridge_slave_0: entered promiscuous mode [ 233.431572][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.444558][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.452416][ T6958] bridge_slave_1: entered allmulticast mode [ 233.467377][ T6958] bridge_slave_1: entered promiscuous mode [ 233.533540][ T7192] batman_adv: batadv0: Adding interface: dummy0 [ 233.541540][ T7192] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.576651][ T7192] batman_adv: batadv0: Interface activated: dummy0 [ 234.006494][ T7196] batadv0: mtu less than device minimum [ 234.095464][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 234.107610][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 234.119551][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 234.131464][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 234.143384][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 234.155306][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 234.167275][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 234.179222][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 234.191181][ T7196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.435808][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.302'. [ 236.246632][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.303710][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.679716][ T30] audit: type=1326 audit(1751853650.342:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4178e929 code=0x7ffc0000 [ 236.733891][ T30] audit: type=1326 audit(1751853650.342:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4178e929 code=0x7ffc0000 [ 236.757153][ T30] audit: type=1326 audit(1751853650.342:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9e4178e929 code=0x7ffc0000 [ 236.783308][ T30] audit: type=1326 audit(1751853650.342:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4178e929 code=0x7ffc0000 [ 236.819445][ T30] audit: type=1326 audit(1751853650.352:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9e4178e929 code=0x7ffc0000 [ 236.878933][ T30] audit: type=1326 audit(1751853650.352:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4178e929 code=0x7ffc0000 [ 236.941518][ T6958] team0: Port device team_slave_0 added [ 236.964292][ T30] audit: type=1326 audit(1751853650.352:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f9e4178e929 code=0x7ffc0000 [ 237.010696][ T30] audit: type=1326 audit(1751853650.352:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7241 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4178e929 code=0x7ffc0000 [ 237.762030][ T7239] veth3: entered promiscuous mode [ 238.023272][ T6958] team0: Port device team_slave_1 added [ 240.468332][ T7275] loop6: detected capacity change from 0 to 4096 [ 240.973393][ T7280] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.071873][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.115339][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.253628][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.327297][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.364028][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.659457][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.014433][ T5162] Bluetooth: hci6: command 0x0406 tx timeout [ 242.495157][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.319'. [ 243.932651][ T7297] bridge1: entered allmulticast mode [ 244.003677][ T6958] hsr_slave_0: entered promiscuous mode [ 244.046043][ T6958] hsr_slave_1: entered promiscuous mode [ 244.065590][ T6958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.092522][ T6958] Cannot create hsr debugfs directory [ 244.468536][ T7313] netlink: 220 bytes leftover after parsing attributes in process `syz.2.322'. [ 244.995955][ T5162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.005045][ T5162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.013027][ T5162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.154792][ T5162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.164503][ T5162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.632280][ T6837] bridge_slave_1: left allmulticast mode [ 245.651724][ T6837] bridge_slave_1: left promiscuous mode [ 245.673322][ T6837] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.711839][ T6837] bridge_slave_0: left allmulticast mode [ 245.729322][ T6837] bridge_slave_0: left promiscuous mode [ 245.756291][ T6837] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.097766][ T2143] IPVS: starting estimator thread 0... [ 246.220747][ T7337] IPVS: using max 32 ests per chain, 76800 per kthread [ 246.313379][ T6837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.414037][ T6837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.520375][ T7335] loop6: detected capacity change from 0 to 8192 [ 246.580641][ T6837] bond0 (unregistering): Released all slaves [ 246.747906][ T7342] tipc: Started in network mode [ 246.757180][ T7342] tipc: Node identity ac14140f, cluster identity 4711 [ 246.781689][ T7342] tipc: New replicast peer: 255.255.255.255 [ 246.804569][ T7342] tipc: Enabled bearer , priority 10 [ 247.351692][ T6837] hsr_slave_0: left promiscuous mode [ 247.361231][ T5162] Bluetooth: hci2: command tx timeout [ 247.437157][ T6837] hsr_slave_1: left promiscuous mode [ 247.446961][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.496496][ T6837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.920398][ T5930] tipc: Node number set to 2886997007 [ 249.596924][ T5162] Bluetooth: hci2: command tx timeout [ 251.084286][ T6837] team0 (unregistering): Port device team_slave_1 removed [ 251.357997][ T6837] team0 (unregistering): Port device team_slave_0 removed [ 251.679678][ T5162] Bluetooth: hci2: command tx timeout [ 252.020847][ T7318] lo speed is unknown, defaulting to 1000 [ 252.361940][ T7428] capability: warning: `syz.2.340' uses 32-bit capabilities (legacy support in use) [ 252.871598][ T7438] virtio-fs: tag not found [ 253.759675][ T5162] Bluetooth: hci2: command tx timeout [ 254.332631][ T6958] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 254.487529][ T6958] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 254.524660][ T6958] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 254.577861][ T6958] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 254.838378][ T7318] chnl_net:caif_netlink_parms(): no params data found [ 254.967747][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.974438][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.376507][ T7474] x_tables: ip_tables: osf match: only valid for protocol 6 [ 256.706500][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.078318][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.160643][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.198796][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.341468][ T7318] bridge_slave_0: entered allmulticast mode [ 259.363164][ T7318] bridge_slave_0: entered promiscuous mode [ 260.282496][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.326785][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.376976][ T7318] bridge_slave_1: entered allmulticast mode [ 260.628571][ T7318] bridge_slave_1: entered promiscuous mode [ 261.541517][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.548693][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.745370][ T7318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.798379][ T7527] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[7527] [ 261.846478][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.853644][ T6838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.042761][ T7318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.077848][ T7537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.363'. [ 263.163687][ T7318] team0: Port device team_slave_0 added [ 263.173470][ T7318] team0: Port device team_slave_1 added [ 264.086976][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.363'. [ 268.401935][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.408911][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.524054][ T7318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.571392][ T7318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.743804][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.753205][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.761074][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.769601][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.791564][ T7318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.838557][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.867706][ T7318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.879722][ T51] Bluetooth: hci4: command tx timeout [ 272.098414][ T7318] hsr_slave_0: entered promiscuous mode [ 272.210625][ T7318] hsr_slave_1: entered promiscuous mode [ 272.216955][ T7318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.949502][ T7318] Cannot create hsr debugfs directory [ 272.989725][ T51] Bluetooth: hci4: command tx timeout [ 273.187751][ T7574] lo speed is unknown, defaulting to 1000 [ 275.050086][ T51] Bluetooth: hci4: command tx timeout [ 275.152504][ T5865] IPVS: starting estimator thread 0... [ 275.289522][ T7626] IPVS: using max 24 ests per chain, 57600 per kthread [ 277.585012][ T51] Bluetooth: hci4: command tx timeout [ 281.277924][ T7574] chnl_net:caif_netlink_parms(): no params data found [ 282.143175][ T7318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.188267][ T7318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.270216][ T7318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 283.120226][ T7702] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.400'. [ 283.393783][ T7318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 284.798016][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.835452][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.898055][ T7574] bridge_slave_0: entered allmulticast mode [ 284.926940][ T7574] bridge_slave_0: entered promiscuous mode [ 285.014799][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.239586][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.256131][ T7574] bridge_slave_1: entered allmulticast mode [ 285.955550][ T7574] bridge_slave_1: entered promiscuous mode [ 287.235994][ T6838] bridge_slave_1: left allmulticast mode [ 287.359518][ T7747] net_ratelimit: 10 callbacks suppressed [ 287.359541][ T7747] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 287.870055][ T6838] bridge_slave_1: left promiscuous mode [ 287.875865][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.054694][ T6838] bridge_slave_0: left allmulticast mode [ 288.085635][ T6838] bridge_slave_0: left promiscuous mode [ 288.102349][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.427737][ T7786] ptrace attach of "./syz-executor exec"[5855] was attempted by " [ 295.567887][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.695918][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.775085][ T6838] bond0 (unregistering): Released all slaves [ 295.847149][ T7574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.895100][ T7574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.912159][ T7802] overlayfs: failed to clone upperpath [ 296.142168][ T7804] Device name cannot be null; rc = [-22] [ 296.977781][ T7811] loop6: detected capacity change from 0 to 512 [ 297.091554][ T7574] team0: Port device team_slave_0 added [ 297.101768][ T7574] team0: Port device team_slave_1 added [ 298.736898][ T7811] EXT4-fs error (device loop6): __ext4_fill_super:5500: inode #2: comm syz.6.431: casefold flag without casefold feature [ 298.756327][ T7811] EXT4-fs (loop6): get root inode failed [ 298.805570][ T7811] EXT4-fs (loop6): mount failed [ 298.962230][ T6838] hsr_slave_0: left promiscuous mode [ 299.040973][ T6838] hsr_slave_1: left promiscuous mode [ 299.086732][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.181371][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.916006][ T7836] loop6: detected capacity change from 0 to 32768 [ 299.923632][ T7836] XFS: noikeep mount option is deprecated. [ 299.947535][ T7836] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 299.983174][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 300.012720][ T7836] XFS (loop6): Ending clean mount [ 300.021431][ T7836] XFS (loop6): Quotacheck needed: Please wait. [ 300.057890][ T7836] XFS (loop6): Quotacheck: Done. [ 300.108508][ T6169] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 300.121587][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 302.470225][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.477196][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.656514][ T7574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.749596][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.786721][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.816889][ T7574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.099766][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.126040][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.139789][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.160230][ T5162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.168366][ T5162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.795969][ T7574] hsr_slave_0: entered promiscuous mode [ 304.822520][ T7574] hsr_slave_1: entered promiscuous mode [ 304.852738][ T7574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.881723][ T7574] Cannot create hsr debugfs directory [ 306.569477][ T5162] Bluetooth: hci0: command tx timeout [ 308.096831][ T7871] lo speed is unknown, defaulting to 1000 [ 308.639571][ T5162] Bluetooth: hci0: command tx timeout [ 310.917070][ T5162] Bluetooth: hci0: command tx timeout [ 311.331380][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 311.767830][ T7871] chnl_net:caif_netlink_parms(): no params data found [ 313.181587][ T51] Bluetooth: hci0: command tx timeout [ 314.499681][ T7973] netlink: 68 bytes leftover after parsing attributes in process `syz.5.464'. [ 315.215745][ T3521] af_packet: tpacket_rcv: packet too big, clamped from 196 to 4294967272. macoff=96 [ 316.480052][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.486405][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.779945][ T51] Bluetooth: hci6: unexpected event for opcode 0x2023 [ 318.321132][ T8014] overlayfs: failed to resolve './file1': -2 [ 325.277919][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.403432][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.446240][ T7871] bridge_slave_0: entered allmulticast mode [ 325.501548][ T7871] bridge_slave_0: entered promiscuous mode [ 325.526142][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.574935][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.596279][ T7871] bridge_slave_1: entered allmulticast mode [ 325.622820][ T7871] bridge_slave_1: entered promiscuous mode [ 325.955751][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.966813][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.5.484'. [ 326.051992][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.137959][ T8065] netfs: Couldn't get user pages (rc=-14) [ 327.215813][ T7871] team0: Port device team_slave_0 added [ 327.471322][ T7871] team0: Port device team_slave_1 added [ 329.775623][ T5865] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 330.019309][ T5865] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.350843][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.456257][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.869416][ T5865] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 330.909742][ T5865] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.918868][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.033766][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.052408][ T5162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.074298][ T5162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.084086][ T5162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.096522][ T5162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.104959][ T5162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.153426][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.165018][ T8088] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 331.168952][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.198855][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.285913][ T5865] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.293369][ T8105] loop6: detected capacity change from 0 to 1024 [ 332.301935][ T8105] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 332.827479][ T8105] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 332.846637][ T6838] bridge_slave_1: left allmulticast mode [ 332.907582][ T8105] EXT4-fs (loop6): invalid journal inode [ 332.935566][ T6838] bridge_slave_1: left promiscuous mode [ 332.957296][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.096625][ T2143] usb 6-1: USB disconnect, device number 3 [ 333.199771][ T51] Bluetooth: hci2: command tx timeout [ 333.519927][ T8118] xt_nat: multiple ranges no longer supported [ 334.228693][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.5.501'. [ 334.456253][ T6838] bridge_slave_0: left allmulticast mode [ 334.507402][ T6838] bridge_slave_0: left promiscuous mode [ 334.608949][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.279578][ T51] Bluetooth: hci2: command tx timeout [ 336.038900][ T8154] loop6: detected capacity change from 0 to 512 [ 336.292482][ T8154] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 337.360694][ T51] Bluetooth: hci2: command tx timeout [ 337.452959][ T8154] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 337.632915][ T8154] System zones: 1-12 [ 337.691655][ T8154] EXT4-fs (loop6): 1 truncate cleaned up [ 337.752839][ T8154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.098299][ T51] Bluetooth: hci6: unexpected event for opcode 0x2006 [ 339.350337][ T6169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.439795][ T51] Bluetooth: hci2: command tx timeout [ 339.842891][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 339.930193][ T8183] loop5: detected capacity change from 0 to 1024 [ 340.248671][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.200536][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.247116][ T6838] bond0 (unregistering): Released all slaves [ 341.543303][ T7871] hsr_slave_0: entered promiscuous mode [ 341.569635][ T7871] hsr_slave_1: entered promiscuous mode [ 341.613396][ T7871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.769195][ T7871] Cannot create hsr debugfs directory [ 341.839692][ T8182] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 341.846234][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.961182][ T8102] lo speed is unknown, defaulting to 1000 [ 342.347982][ T6838] hsr_slave_0: left promiscuous mode [ 342.379563][ T6838] hsr_slave_1: left promiscuous mode [ 342.390841][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.437990][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.330211][ T8216] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 343.330211][ T8216] The task syz.2.521 (8216) triggered the difference, watch for misbehavior. [ 343.516804][ T3002] hfsplus: b-tree write err: -5, ino 4 [ 343.710827][ T8220] tmpfs: Bad value for 'nr_blocks' [ 343.804380][ T8222] loop5: detected capacity change from 0 to 16 [ 343.867937][ T8222] erofs (device loop5): mounted with root inode @ nid 36. [ 344.175552][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 344.220910][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.523'. [ 344.710345][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 349.908607][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.297442][ T8278] loop5: detected capacity change from 0 to 2048 [ 351.718457][ T8278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.771968][ T8278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.970276][ T8276] uprobe: syz.5.541:8276 failed to unregister, leaking uprobe [ 353.677317][ T8306] TCP: out of memory -- consider tuning tcp_mem [ 353.957154][ T8102] chnl_net:caif_netlink_parms(): no params data found [ 355.308216][ T7871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.261869][ T7871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.697461][ T7871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.556177][ T7871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.804871][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.824878][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.969906][ T8102] bridge_slave_0: entered allmulticast mode [ 359.030694][ T8102] bridge_slave_0: entered promiscuous mode [ 360.419744][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.427013][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.474653][ T8102] bridge_slave_1: entered allmulticast mode [ 360.520745][ T8102] bridge_slave_1: entered promiscuous mode [ 361.634701][ T8382] loop5: detected capacity change from 0 to 128 [ 361.642169][ T8382] adfs: Bad value for 'uid' [ 361.646699][ T8382] adfs: Bad value for 'uid' [ 363.056773][ T8102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.079943][ T8102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.390480][ T8102] team0: Port device team_slave_0 added [ 363.442830][ T8102] team0: Port device team_slave_1 added [ 366.561659][ T6838] bridge_slave_1: left allmulticast mode [ 366.567352][ T6838] bridge_slave_1: left promiscuous mode [ 366.619616][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.915594][ T6838] bridge_slave_0: left allmulticast mode [ 367.934486][ T6838] bridge_slave_0: left promiscuous mode [ 368.348217][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.715622][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.724311][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.733116][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.700054][ T5162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.717722][ T5162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.238115][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.575'. [ 372.289766][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.440548][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.657023][ T6838] bond0 (unregistering): Released all slaves [ 372.786055][ T8463] netlink: 71 bytes leftover after parsing attributes in process `syz.2.582'. [ 372.801576][ T51] Bluetooth: hci0: command tx timeout [ 372.954890][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.976572][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.110050][ T8102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.124357][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.136074][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.163326][ T8102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.597763][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.585'. [ 373.609779][ T6838] hsr_slave_0: left promiscuous mode [ 373.629438][ T6838] hsr_slave_1: left promiscuous mode [ 373.635500][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.658771][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.290866][ T8481] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.311442][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 374.357577][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 374.747401][ T8472] 8021q: VLANs not supported on vcan0 [ 374.802906][ T8102] hsr_slave_0: entered promiscuous mode [ 374.832423][ T8102] hsr_slave_1: entered promiscuous mode [ 374.852935][ T8102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.869444][ T8102] Cannot create hsr debugfs directory [ 374.885773][ T51] Bluetooth: hci0: command tx timeout [ 376.955233][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 376.964469][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.594'. [ 376.995781][ T51] Bluetooth: hci0: command tx timeout [ 377.890103][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.900993][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.923602][ T8434] lo speed is unknown, defaulting to 1000 [ 379.039684][ T51] Bluetooth: hci0: command tx timeout [ 384.639524][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 388.215515][ T8585] loop5: detected capacity change from 0 to 16 [ 389.153975][ T8595] loop6: detected capacity change from 0 to 512 [ 389.434790][ T8595] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 389.452983][ T8595] EXT4-fs (loop6): mount failed [ 389.711469][ T8585] erofs (device loop5): mounted with root inode @ nid 36. [ 390.188929][ T8607] fuse: root generation should be zero [ 390.821632][ T8614] ptrace attach of "./syz-executor exec"[6169] was attempted by "./syz-executor exec"[8614] [ 391.585618][ T5162] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.598973][ T5162] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.607760][ T5162] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.456339][ T5162] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.466002][ T5162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.828955][ T8618] lo speed is unknown, defaulting to 1000 [ 393.776919][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 394.488762][ T5162] Bluetooth: hci4: command tx timeout [ 395.151926][ T8636] loop5: detected capacity change from 0 to 512 [ 396.305763][ T8649] lo speed is unknown, defaulting to 1000 [ 396.314242][ T8649] lo speed is unknown, defaulting to 1000 [ 396.320783][ T8649] lo speed is unknown, defaulting to 1000 [ 396.490731][ T8649] infiniband syz0: set active [ 396.495616][ T8649] infiniband syz0: added lo [ 396.501533][ T8649] syz0: rxe_create_cq: returned err = -12 [ 396.507421][ T8649] infiniband syz0: Couldn't create ib_mad CQ [ 396.513667][ T8649] infiniband syz0: Couldn't open port 1 [ 396.538167][ T8649] RDS/IB: syz0: added [ 396.542652][ T8649] smc: adding ib device syz0 with port count 1 [ 396.548940][ T8649] smc: ib device syz0 port 1 has pnetid [ 396.560038][ T5162] Bluetooth: hci4: command tx timeout [ 397.416964][ T5968] lo speed is unknown, defaulting to 1000 [ 398.454619][ T8636] EXT4-fs (loop5): Test dummy encryption mode enabled [ 398.546434][ T8636] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 398.620435][ T8636] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 398.620594][ T8636] EXT4-fs: failed to create workqueue [ 398.659617][ T5162] Bluetooth: hci4: command tx timeout [ 398.785512][ T8636] EXT4-fs (loop5): mount failed [ 399.121124][ T8649] lo speed is unknown, defaulting to 1000 [ 399.991880][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.009501][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.032458][ T8434] bridge_slave_0: entered allmulticast mode [ 400.051449][ T8434] bridge_slave_0: entered promiscuous mode [ 400.074474][ T972] lo speed is unknown, defaulting to 1000 [ 400.142142][ T6838] bridge_slave_1: left allmulticast mode [ 400.179563][ T6838] bridge_slave_1: left promiscuous mode [ 400.185843][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.294704][ T6838] bridge_slave_0: left allmulticast mode [ 400.304700][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.306827][ T6838] bridge_slave_0: left promiscuous mode [ 400.402535][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.630'. [ 400.430179][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.631'. [ 400.474027][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.479757][ T8686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 400.722524][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.631'. [ 400.729441][ T5162] Bluetooth: hci4: command tx timeout [ 401.099273][ T8686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.631'. [ 401.606412][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.617542][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.632836][ T6838] bond0 (unregistering): Released all slaves [ 403.859784][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.094276][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.106702][ T8434] bridge_slave_1: entered allmulticast mode [ 404.115623][ T8434] bridge_slave_1: entered promiscuous mode [ 405.811567][ T8716] loop5: detected capacity change from 0 to 32768 [ 405.819115][ T8716] btrfs: Deprecated parameter 'usebackuproot' [ 405.826031][ T8716] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 405.836327][ T8649] lo speed is unknown, defaulting to 1000 [ 405.876431][ T8716] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.637 (8716) [ 406.552561][ T5162] Bluetooth: hci6: unexpected event for opcode 0x0c7b [ 407.620160][ T8716] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 407.631097][ T8716] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 407.640109][ T8716] BTRFS info (device loop5): using free-space-tree [ 407.798197][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.841601][ T8649] lo speed is unknown, defaulting to 1000 [ 407.960683][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 407.963193][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 407.972901][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 407.982193][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 407.991560][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 408.002000][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 408.011203][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 408.022712][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 408.033168][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 408.043388][ T8716] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 408.087672][ T8649] lo speed is unknown, defaulting to 1000 [ 408.141898][ T8716] BTRFS error (device loop5): open_ctree failed: -12 [ 408.512516][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.175011][ T8649] lo speed is unknown, defaulting to 1000 [ 411.186639][ T8769] loop6: detected capacity change from 0 to 128 [ 411.203423][ T8649] lo speed is unknown, defaulting to 1000 [ 411.436172][ T8649] lo speed is unknown, defaulting to 1000 [ 411.749516][ T8774] Invalid source name [ 411.753602][ T8774] UBIFS error (pid: 8774): cannot open "./file0", error -22 [ 412.143341][ T8769] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.335032][ T8769] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 412.569589][ T8769] capability: warning: `syz.6.646' uses deprecated v2 capabilities in a way that may be insecure [ 412.656348][ T8769] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 412.728381][ T8769] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 413.823325][ T8649] lo speed is unknown, defaulting to 1000 [ 413.847005][ T8434] team0: Port device team_slave_0 added [ 413.874148][ T8434] team0: Port device team_slave_1 added [ 413.905161][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 414.007745][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.213131][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.224109][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.241933][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.419974][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.479607][ T6169] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.036022][ T8803] loop6: detected capacity change from 0 to 4096 [ 416.236113][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.277234][ T8809] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.304533][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.339112][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.366600][ T5162] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 416.461698][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.547105][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.754542][ T5162] Bluetooth: hci2: command tx timeout [ 416.907704][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.175605][ T6838] hsr_slave_0: left promiscuous mode [ 417.194577][ T6838] hsr_slave_1: left promiscuous mode [ 417.241434][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.276787][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.880641][ T5162] Bluetooth: hci2: command tx timeout [ 419.652396][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 419.747037][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 420.366028][ T8816] tipc: Enabling of bearer rejected, failed to enable media [ 420.401365][ T5162] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 420.410401][ T5162] Bluetooth: hci3: Injecting HCI hardware error event [ 420.418746][ T51] Bluetooth: hci3: hardware error 0x00 [ 421.029434][ T5162] Bluetooth: hci2: command tx timeout [ 421.728166][ T8434] hsr_slave_0: entered promiscuous mode [ 421.803661][ T8434] hsr_slave_1: entered promiscuous mode [ 421.865348][ T8434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.874058][ T8434] Cannot create hsr debugfs directory [ 421.880942][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.890720][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.898762][ T8618] bridge_slave_0: entered allmulticast mode [ 421.908279][ T8618] bridge_slave_0: entered promiscuous mode [ 421.931748][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.947287][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.966869][ T8618] bridge_slave_1: entered allmulticast mode [ 421.987563][ T8618] bridge_slave_1: entered promiscuous mode [ 422.014825][ T8794] lo speed is unknown, defaulting to 1000 [ 422.479718][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 422.672774][ T8794] lo speed is unknown, defaulting to 1000 [ 422.768342][ T8872] futex_wake_op: syz.4.663 tries to shift op by -1; fix this program [ 422.993671][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.040442][ T51] Bluetooth: hci2: command tx timeout [ 423.890582][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.332909][ T6838] bridge_slave_1: left allmulticast mode [ 424.346328][ T6838] bridge_slave_1: left promiscuous mode [ 424.355856][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.476156][ T6838] bridge_slave_0: left allmulticast mode [ 424.509475][ T6838] bridge_slave_0: left promiscuous mode [ 424.529677][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.852077][ T5162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.862149][ T5162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.871976][ T5162] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.910863][ T5162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.921289][ T5162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.087249][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.124090][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.218940][ T8907] loop6: detected capacity change from 0 to 128 [ 427.233355][ T8907] adfs: Bad value for 'uid' [ 427.237969][ T8907] adfs: Bad value for 'uid' [ 427.926273][ T8906] loop6: detected capacity change from 0 to 128 [ 427.970588][ T8906] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 427.985093][ T8906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.000732][ T6838] bond0 (unregistering): Released all slaves [ 428.152075][ T8618] team0: Port device team_slave_0 added [ 428.174397][ T8618] team0: Port device team_slave_1 added [ 429.482064][ T51] Bluetooth: hci0: command tx timeout [ 431.699357][ T5162] Bluetooth: hci0: command tx timeout [ 431.927773][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.241091][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.456212][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.581719][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.614045][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.719604][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.900584][ T8933] loop5: detected capacity change from 0 to 512 [ 432.981669][ T8618] hsr_slave_0: entered promiscuous mode [ 433.192622][ T8933] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.675: iget: bad extended attribute block 1 [ 433.222307][ T8618] hsr_slave_1: entered promiscuous mode [ 433.235670][ T8618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.255870][ T8933] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.675: couldn't read orphan inode 15 (err -117) [ 433.268154][ T8618] Cannot create hsr debugfs directory [ 433.366056][ T8933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.419435][ T8936] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 433.432574][ T6838] hsr_slave_0: left promiscuous mode [ 433.469577][ T6838] hsr_slave_1: left promiscuous mode [ 433.475864][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.518544][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.667904][ T8941] EXT4-fs warning (device loop5): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 433.763033][ T5162] Bluetooth: hci0: command tx timeout [ 435.591546][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.839660][ T5162] Bluetooth: hci0: command tx timeout [ 438.610124][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 439.287793][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 439.300168][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.306712][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.958370][ T8902] lo speed is unknown, defaulting to 1000 [ 441.976142][ T8955] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 441.985618][ T8955] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 441.995302][ T8955] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 442.045179][ T30] audit: type=1800 audit(1751853855.662:72): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.681" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 443.360602][ T8902] lo speed is unknown, defaulting to 1000 [ 443.708002][ T8994] netlink: 'syz.6.691': attribute type 1 has an invalid length. [ 443.860233][ T8994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.066742][ T9000] vlan2: entered allmulticast mode [ 444.080075][ T9000] bond1: entered allmulticast mode [ 445.099208][ T8794] chnl_net:caif_netlink_parms(): no params data found [ 445.108540][ T9006] loop5: detected capacity change from 0 to 1024 [ 446.045259][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.066456][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.093676][ T8794] bridge_slave_0: entered allmulticast mode [ 446.116101][ T8794] bridge_slave_0: entered promiscuous mode [ 446.169181][ T6838] bridge_slave_1: left allmulticast mode [ 446.182369][ T6838] bridge_slave_1: left promiscuous mode [ 446.188320][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.240667][ T6838] bridge_slave_0: left allmulticast mode [ 446.246400][ T6838] bridge_slave_0: left promiscuous mode [ 446.269136][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.985055][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.032681][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.070774][ T6838] bond0 (unregistering): Released all slaves [ 447.117821][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.135193][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.163514][ T8794] bridge_slave_1: entered allmulticast mode [ 447.191881][ T8794] bridge_slave_1: entered promiscuous mode [ 448.028233][ T30] audit: type=1107 audit(1751853861.502:73): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 448.736411][ T8794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.101449][ T8794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.744008][ T9042] loop6: detected capacity change from 0 to 2048 [ 450.975238][ T9042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.110065][ T30] audit: type=1800 audit(1751853864.802:74): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.700" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 451.640338][ T9047] Bluetooth: MGMT ver 1.23 [ 452.056419][ T30] audit: type=1800 audit(1751853865.512:75): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.700" name="file2" dev="loop6" ino=1416 res=0 errno=0 [ 453.018167][ T6838] hsr_slave_0: left promiscuous mode [ 453.070646][ T6838] hsr_slave_1: left promiscuous mode [ 453.335713][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.372827][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.393481][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.401905][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.425786][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.435368][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.444578][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.570658][ T9078] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 457.170041][ T9087] overlayfs: failed to clone upperpath [ 458.719442][ T51] Bluetooth: hci5: command tx timeout [ 461.185466][ T51] Bluetooth: hci5: command tx timeout [ 461.704193][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 461.917016][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 462.216935][ T9122] loop5: detected capacity change from 0 to 1024 [ 462.585864][ T9118] loop6: detected capacity change from 0 to 32768 [ 463.229506][ T51] Bluetooth: hci5: command tx timeout [ 464.211833][ T8794] team0: Port device team_slave_0 added [ 464.328007][ T8794] team0: Port device team_slave_1 added [ 464.549473][ T2143] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 464.765807][ T2143] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.369505][ T51] Bluetooth: hci5: command tx timeout [ 465.389427][ T9145] syz.5.727 (9145): drop_caches: 2 [ 465.443340][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.463017][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.471475][ T2143] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 465.516330][ T8794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.131970][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.138956][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.165632][ T8794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.212332][ T2143] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 466.235123][ T2143] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 466.257789][ T2143] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.273985][ T2143] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 466.337393][ T2143] usb 7-1: SerialNumber: syz [ 466.352969][ T9139] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 466.363332][ T9139] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 466.372695][ T2143] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 466.443411][ T9063] lo speed is unknown, defaulting to 1000 [ 466.540386][ T9063] lo speed is unknown, defaulting to 1000 [ 466.978990][ T2143] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 467.549713][ T8794] hsr_slave_0: entered promiscuous mode [ 467.584287][ T2143] usb 7-1: USB disconnect, device number 3 [ 467.609190][ T8794] hsr_slave_1: entered promiscuous mode [ 467.636466][ T8794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.687289][ T8794] Cannot create hsr debugfs directory [ 471.392132][ T8902] chnl_net:caif_netlink_parms(): no params data found [ 474.390113][ T9212] loop6: detected capacity change from 0 to 512 [ 474.410373][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 474.427627][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.441008][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.451145][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.473699][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.609534][ T9212] EXT4-fs (loop6): ea_inode feature is not supported for Hurd [ 476.738429][ T51] Bluetooth: hci4: command tx timeout [ 477.020600][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.039663][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.047016][ T8902] bridge_slave_0: entered allmulticast mode [ 477.121346][ T8902] bridge_slave_0: entered promiscuous mode [ 477.785995][ T9235] loop5: detected capacity change from 0 to 4096 [ 477.908456][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.924612][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.932206][ T8902] bridge_slave_1: entered allmulticast mode [ 477.942229][ T8902] bridge_slave_1: entered promiscuous mode [ 478.056550][ T9213] lo speed is unknown, defaulting to 1000 [ 478.194480][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.362554][ T9213] lo speed is unknown, defaulting to 1000 [ 479.029439][ T51] Bluetooth: hci4: command tx timeout [ 479.113138][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.346249][ T8902] team0: Port device team_slave_0 added [ 480.651735][ T8902] team0: Port device team_slave_1 added [ 481.122026][ T51] Bluetooth: hci4: command tx timeout [ 482.029603][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 482.193542][ T10] usb 7-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 482.290572][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.302685][ T10] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 482.316111][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.008561][ T10] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 483.020471][ T10] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 483.039496][ T8902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.161079][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.168089][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.194032][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.200993][ T51] Bluetooth: hci4: command tx timeout [ 483.248303][ T8902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.275588][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 483.299509][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.781383][ T9063] chnl_net:caif_netlink_parms(): no params data found [ 483.900939][ T9278] vxcan1: entered allmulticast mode [ 483.912455][ T10] ath6kl: Failed to submit usb control message: -71 [ 483.949415][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 484.003039][ T10] ath6kl: Unable to send get target info: -71 [ 484.066317][ T10] ath6kl: Failed to init ath6kl core: -71 [ 484.091474][ T10] ath6kl_usb 7-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 484.141020][ T10] usb 7-1: USB disconnect, device number 4 [ 487.689098][ T6838] bridge_slave_1: left allmulticast mode [ 487.721501][ T6838] bridge_slave_1: left promiscuous mode [ 487.755241][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.796309][ T5162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.819031][ T5162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.830144][ T5162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.844953][ T5162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.852181][ T6838] bridge_slave_0: left allmulticast mode [ 487.852209][ T6838] bridge_slave_0: left promiscuous mode [ 487.852507][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.882607][ T5162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 488.888666][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.926570][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.941070][ T6838] bond0 (unregistering): Released all slaves [ 490.489471][ T5162] Bluetooth: hci2: command tx timeout [ 492.206513][ T9339] Can't find ip_set type hash:net, [ 492.571438][ T5162] Bluetooth: hci2: command tx timeout [ 493.646353][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.823900][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.961093][ T9063] bridge_slave_0: entered allmulticast mode [ 494.170246][ T9063] bridge_slave_0: entered promiscuous mode [ 494.412862][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.429470][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.446368][ T9063] bridge_slave_1: entered allmulticast mode [ 494.476218][ T9063] bridge_slave_1: entered promiscuous mode [ 494.573753][ T6838] hsr_slave_0: left promiscuous mode [ 494.622030][ T6838] hsr_slave_1: left promiscuous mode [ 494.699810][ T5162] Bluetooth: hci2: command tx timeout [ 494.738275][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.755637][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.749450][ T5162] Bluetooth: hci2: command tx timeout [ 501.738532][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.744919][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.757350][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 502.075095][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 503.101370][ T9398] loop6: detected capacity change from 0 to 16 [ 503.239132][ T9398] erofs (device loop6): mounted with root inode @ nid 36. [ 506.201158][ T9311] lo speed is unknown, defaulting to 1000 [ 506.230841][ T8799] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 506.243173][ T9063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.313165][ T9311] lo speed is unknown, defaulting to 1000 [ 506.337431][ T9063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.419877][ T8799] usb 7-1: Using ep0 maxpacket: 16 [ 506.745479][ T8799] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 506.755916][ T8799] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.887072][ T8799] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.994212][ T8799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.023825][ T8799] usb 7-1: Product: syz [ 507.028083][ T8799] usb 7-1: Manufacturer: syz [ 507.053734][ T8799] usb 7-1: SerialNumber: syz [ 507.300561][ T8799] usb 7-1: 0:2 : does not exist [ 507.338185][ T8799] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 507.347892][ T9063] team0: Port device team_slave_0 added [ 507.391859][ T9213] chnl_net:caif_netlink_parms(): no params data found [ 507.620078][ T8799] usb 7-1: USB disconnect, device number 5 [ 507.654151][ T9063] team0: Port device team_slave_1 added [ 508.868297][ T8638] udevd[8638]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.470763][ T9438] orangefs_mount: mount request failed with -4 [ 513.091439][ T6838] bridge_slave_1: left allmulticast mode [ 513.097133][ T6838] bridge_slave_1: left promiscuous mode [ 513.106287][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.117902][ T6838] bridge_slave_0: left allmulticast mode [ 513.124289][ T6838] bridge_slave_0: left promiscuous mode [ 513.139556][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.153436][ T6838] bridge_slave_1: left allmulticast mode [ 513.178553][ T6838] bridge_slave_1: left promiscuous mode [ 513.277062][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.288039][ T6838] bridge_slave_0: left allmulticast mode [ 513.293902][ T6838] bridge_slave_0: left promiscuous mode [ 513.301025][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.557448][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.567373][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.578676][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.597521][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.635140][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.668351][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.680668][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.736077][ T6838] bond0 (unregistering): Released all slaves [ 514.268659][ T6838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.288116][ T6838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.030202][ T6838] bond0 (unregistering): Released all slaves [ 515.679974][ T51] Bluetooth: hci0: command tx timeout [ 516.279500][ T9213] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.286646][ T9213] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.382318][ T9213] bridge_slave_0: entered allmulticast mode [ 516.474892][ T9213] bridge_slave_0: entered promiscuous mode [ 516.544719][ T9213] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.604381][ T9213] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.639721][ T9213] bridge_slave_1: entered allmulticast mode [ 516.650697][ T9213] bridge_slave_1: entered promiscuous mode [ 517.759969][ T51] Bluetooth: hci0: command tx timeout [ 520.431573][ T51] Bluetooth: hci0: command tx timeout [ 520.458147][ T9213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.587836][ T9213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.876630][ T9470] lo speed is unknown, defaulting to 1000 [ 521.939178][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.948307][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.984653][ T6838] hsr_slave_0: left promiscuous mode [ 522.005962][ T6838] hsr_slave_1: left promiscuous mode [ 522.019118][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.040333][ T6838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.178112][ T6838] team0 (unregistering): Port device team_slave_1 removed [ 522.213345][ T6838] team0 (unregistering): Port device team_slave_0 removed [ 522.479507][ T51] Bluetooth: hci0: command tx timeout [ 523.750122][ T965] ------------[ cut here ]------------ [ 523.756005][ T965] WARNING: CPU: 1 PID: 965 at io_uring/io_uring.c:2922 io_ring_exit_work+0x4ed/0x930 [ 523.765967][ T965] Modules linked in: [ 523.770410][ T965] CPU: 1 UID: 0 PID: 965 Comm: kworker/u8:5 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 523.780842][ T965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 523.790949][ T965] Workqueue: iou_exit io_ring_exit_work [ 523.796534][ T965] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 523.802379][ T965] Code: c6 05 a9 6a 60 0e 01 48 c7 c7 e0 fb e1 8b be 24 00 00 00 48 c7 c2 40 fb e1 8b e8 5e 13 73 00 e9 7b fe ff ff e8 04 e0 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 523.822566][ T965] RSP: 0018:ffffc900037b78e0 EFLAGS: 00010293 [ 523.828662][ T965] RAX: ffffffff812b45fc RBX: 00000001000056ff RCX: ffff8880258b1e00 [ 523.836892][ T965] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 523.844977][ T965] RBP: ffffc900037b7a70 R08: ffffc900037b7867 R09: 1ffff920006f6f0c [ 523.853033][ T965] R10: dffffc0000000000 R11: fffff520006f6f0d R12: 00000001000056fb [ 523.861089][ T965] R13: ffff88807d0d8310 R14: ffff88807d0d8480 R15: dffffc0000000000 [ 523.869530][ T965] FS: 0000000000000000(0000) GS:ffff888125d1d000(0000) knlGS:0000000000000000 [ 523.878487][ T965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.885469][ T965] CR2: 00007f9e41785193 CR3: 0000000067305000 CR4: 0000000000350ef0 [ 523.893609][ T965] Call Trace: [ 523.896883][ T965] [ 523.899910][ T965] ? __pfx_io_ring_exit_work+0x10/0x10 [ 523.905386][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.911080][ T965] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.916283][ T965] ? process_scheduled_works+0x9ef/0x17b0 [ 523.922094][ T965] ? process_scheduled_works+0x9ef/0x17b0 [ 523.927835][ T965] process_scheduled_works+0xae1/0x17b0 [ 523.933505][ T965] ? __pfx_process_scheduled_works+0x10/0x10 [ 523.939638][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.945287][ T965] worker_thread+0x8a0/0xda0 [ 523.949956][ T965] kthread+0x711/0x8a0 [ 523.954071][ T965] ? __pfx_worker_thread+0x10/0x10 [ 523.959196][ T965] ? __pfx_kthread+0x10/0x10 [ 523.963891][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.969918][ T965] ? _raw_spin_unlock_irq+0x23/0x50 [ 523.975140][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.980942][ T965] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.986148][ T965] ? __pfx_kthread+0x10/0x10 [ 523.990803][ T965] ret_from_fork+0x3fc/0x770 [ 523.995397][ T965] ? __pfx_ret_from_fork+0x10/0x10 [ 524.000598][ T965] ? __switch_to_asm+0x39/0x70 [ 524.005371][ T965] ? __switch_to_asm+0x33/0x70 [ 524.010172][ T965] ? __pfx_kthread+0x10/0x10 [ 524.014766][ T965] ret_from_fork_asm+0x1a/0x30 [ 524.019621][ T965] [ 524.022660][ T965] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 524.029962][ T965] CPU: 1 UID: 0 PID: 965 Comm: kworker/u8:5 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 524.040290][ T965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 524.050370][ T965] Workqueue: iou_exit io_ring_exit_work [ 524.055952][ T965] Call Trace: [ 524.059239][ T965] [ 524.062177][ T965] dump_stack_lvl+0x99/0x250 [ 524.066770][ T965] ? __asan_memcpy+0x40/0x70 [ 524.071363][ T965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.076567][ T965] ? __pfx__printk+0x10/0x10 [ 524.081267][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.086905][ T965] panic+0x2db/0x790 [ 524.090829][ T965] ? __pfx_panic+0x10/0x10 [ 524.095256][ T965] ? show_trace_log_lvl+0x4fb/0x550 [ 524.100470][ T965] ? ret_from_fork_asm+0x1a/0x30 [ 524.105420][ T965] __warn+0x31b/0x4b0 [ 524.109407][ T965] ? io_ring_exit_work+0x4ed/0x930 [ 524.114525][ T965] ? io_ring_exit_work+0x4ed/0x930 [ 524.119642][ T965] report_bug+0x2be/0x4f0 [ 524.123991][ T965] ? io_ring_exit_work+0x4ed/0x930 [ 524.129110][ T965] ? io_ring_exit_work+0x4ed/0x930 [ 524.134231][ T965] ? io_ring_exit_work+0x4ef/0x930 [ 524.139352][ T965] handle_bug+0x84/0x160 [ 524.143595][ T965] exc_invalid_op+0x1a/0x50 [ 524.148118][ T965] asm_exc_invalid_op+0x1a/0x20 [ 524.152968][ T965] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 524.158746][ T965] Code: c6 05 a9 6a 60 0e 01 48 c7 c7 e0 fb e1 8b be 24 00 00 00 48 c7 c2 40 fb e1 8b e8 5e 13 73 00 e9 7b fe ff ff e8 04 e0 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 524.178379][ T965] RSP: 0018:ffffc900037b78e0 EFLAGS: 00010293 [ 524.184451][ T965] RAX: ffffffff812b45fc RBX: 00000001000056ff RCX: ffff8880258b1e00 [ 524.192442][ T965] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000 [ 524.200418][ T965] RBP: ffffc900037b7a70 R08: ffffc900037b7867 R09: 1ffff920006f6f0c [ 524.208384][ T965] R10: dffffc0000000000 R11: fffff520006f6f0d R12: 00000001000056fb [ 524.216361][ T965] R13: ffff88807d0d8310 R14: ffff88807d0d8480 R15: dffffc0000000000 [ 524.224347][ T965] ? io_ring_exit_work+0x4ec/0x930 [ 524.229504][ T965] ? __pfx_io_ring_exit_work+0x10/0x10 [ 524.234989][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.240631][ T965] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.245831][ T965] ? process_scheduled_works+0x9ef/0x17b0 [ 524.251547][ T965] ? process_scheduled_works+0x9ef/0x17b0 [ 524.257264][ T965] process_scheduled_works+0xae1/0x17b0 [ 524.262860][ T965] ? __pfx_process_scheduled_works+0x10/0x10 [ 524.268879][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.274537][ T965] worker_thread+0x8a0/0xda0 [ 524.279161][ T965] kthread+0x711/0x8a0 [ 524.283253][ T965] ? __pfx_worker_thread+0x10/0x10 [ 524.288366][ T965] ? __pfx_kthread+0x10/0x10 [ 524.292982][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.298640][ T965] ? _raw_spin_unlock_irq+0x23/0x50 [ 524.303842][ T965] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.309488][ T965] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.314695][ T965] ? __pfx_kthread+0x10/0x10 [ 524.319302][ T965] ret_from_fork+0x3fc/0x770 [ 524.323904][ T965] ? __pfx_ret_from_fork+0x10/0x10 [ 524.329020][ T965] ? __switch_to_asm+0x39/0x70 [ 524.333788][ T965] ? __switch_to_asm+0x33/0x70 [ 524.338557][ T965] ? __pfx_kthread+0x10/0x10 [ 524.343245][ T965] ret_from_fork_asm+0x1a/0x30 [ 524.348047][ T965] [ 524.351411][ T965] Kernel Offset: disabled [ 524.355734][ T965] Rebooting in 86400 seconds..