last executing test programs: 5m22.080596602s ago: executing program 3 (id=4): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x2, 0x0, 0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x804) 5m15.130817455s ago: executing program 3 (id=11): bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) 5m14.464503237s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 5m14.380144252s ago: executing program 4 (id=5): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x2, 0x0, 0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x804) 5m12.45090489s ago: executing program 4 (id=13): bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_open_procfs(0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) 5m10.285274559s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() wait4(r0, &(0x7f00000001c0), 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r3 = userfaultfd(0x80801) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x740, 0x25, 0x2}, 0x18) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 5m7.769840981s ago: executing program 1 (id=16): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x2, 0x0, 0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x804) 4m59.759812899s ago: executing program 32 (id=11): bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) 4m59.712243131s ago: executing program 1 (id=21): bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) 4m56.973508768s ago: executing program 1 (id=26): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x6, 0x20000006) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000040000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7f", 0x8) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f00000006c0), 0x0) 4m56.729376103s ago: executing program 33 (id=13): bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_open_procfs(0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) 4m40.886382501s ago: executing program 34 (id=26): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x6, 0x20000006) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000040000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7f", 0x8) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x6, &(0x7f00000006c0), 0x0) 3m23.98929919s ago: executing program 5 (id=101): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000080)) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xc) 3m22.124625773s ago: executing program 5 (id=104): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x2, 0x0, 0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 3m19.374615592s ago: executing program 5 (id=105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x2, 0x0, 0x7fffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x804) 3m11.132990351s ago: executing program 5 (id=111): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 3m9.593794219s ago: executing program 5 (id=114): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpriority(0x2, 0x0, 0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 3m7.785243356s ago: executing program 5 (id=115): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0) 2m52.478853126s ago: executing program 35 (id=115): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, 0x0) 15.919268981s ago: executing program 0 (id=264): socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 14.725188382s ago: executing program 0 (id=265): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x5400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000580)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x248}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x2800080, &(0x7f0000000480)=ANY=[], 0x1, 0x632a, &(0x7f0000013cc0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28180ff, 0x0, 0xfc, 0x0, &(0x7f0000000400)) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0xd681, 0xfffffffa, 0x7, 0xb}, 0x0, 0x7, &(0x7f0000000300)={{0x40, 0x200, 0x4, 0x1fb6}, &(0x7f00000002c0)={{0xb579, 0x0, 0x845, 0x7}, &(0x7f0000000240)={{0x3ff, 0x80000000, 0x9}}}}, 0x6, 0x0, 0x1}}) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000200)=0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) 11.356405143s ago: executing program 0 (id=268): setpriority(0x2, 0x0, 0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x804) 11.342283785s ago: executing program 2 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x8, 0x13, r0, 0xee4ea000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r1, r1, 0xa, &(0x7f0000000400)={0x6, 0xfffffefb, 0x20a0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) capset(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x210) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 9.322246698s ago: executing program 0 (id=270): socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 7.142797599s ago: executing program 2 (id=271): socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 5.757633752s ago: executing program 0 (id=272): setpriority(0x2, 0x0, 0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4c00}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x804) 5.683478391s ago: executing program 2 (id=273): socket$kcm(0x10, 0x7, 0x0) creat(0x0, 0xe8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 3.714784572s ago: executing program 0 (id=274): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r4}) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.503198986s ago: executing program 2 (id=275): socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 1.144254534s ago: executing program 2 (id=276): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x2000}, 0x10) syz_clone(0x5400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000580)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x248}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f0000000440)='./file0\x00', 0x2800080, &(0x7f0000000480)=ANY=[], 0x1, 0x632a, &(0x7f0000013cc0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28180ff, 0x0, 0xfc, 0x0, &(0x7f0000000400)) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0xd681, 0xfffffffa, 0x7, 0xb}, 0x0, 0x7, &(0x7f0000000300)={{0x40, 0x200, 0x4, 0x1fb6}, &(0x7f00000002c0)={{0xb579, 0x0, 0x845, 0x7}, &(0x7f0000000240)={{0x3ff, 0x80000000, 0x9}}}}, 0x6, 0x0, 0x1}}) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000200)=0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=277): socket$kcm(0x10, 0x7, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x6c) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x644140, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) kernel console output (not intermixed with test programs): ed state [ 110.966888][ T5833] bridge_slave_0: entered allmulticast mode [ 110.974570][ T5833] bridge_slave_0: entered promiscuous mode [ 111.012523][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.020236][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.028263][ T5831] bridge_slave_1: entered allmulticast mode [ 111.036059][ T5841] Bluetooth: hci2: command tx timeout [ 111.036064][ T5848] Bluetooth: hci0: command tx timeout [ 111.046223][ T5831] bridge_slave_1: entered promiscuous mode [ 111.088879][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.098344][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.107603][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.115086][ T5841] Bluetooth: hci4: command tx timeout [ 111.115708][ T5838] Bluetooth: hci1: command tx timeout [ 111.125090][ T5833] bridge_slave_1: entered allmulticast mode [ 111.128044][ T5848] Bluetooth: hci3: command tx timeout [ 111.136801][ T5833] bridge_slave_1: entered promiscuous mode [ 111.191041][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.198330][ T5848] Bluetooth: hci5: command tx timeout [ 111.198978][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.211929][ T5847] bridge_slave_0: entered allmulticast mode [ 111.219682][ T5847] bridge_slave_0: entered promiscuous mode [ 111.230161][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.261978][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.271574][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.280180][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.289329][ T5832] bridge_slave_0: entered allmulticast mode [ 111.296973][ T5832] bridge_slave_0: entered promiscuous mode [ 111.320219][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.327467][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.335225][ T5847] bridge_slave_1: entered allmulticast mode [ 111.343196][ T5847] bridge_slave_1: entered promiscuous mode [ 111.382845][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.415554][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.423086][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.430639][ T5832] bridge_slave_1: entered allmulticast mode [ 111.444862][ T5832] bridge_slave_1: entered promiscuous mode [ 111.455715][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.499602][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.543988][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.571380][ T5834] team0: Port device team_slave_0 added [ 111.580150][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.591756][ T5849] team0: Port device team_slave_0 added [ 111.631668][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.643285][ T5834] team0: Port device team_slave_1 added [ 111.666234][ T5849] team0: Port device team_slave_1 added [ 111.675744][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.703193][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.761286][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.773352][ T5831] team0: Port device team_slave_0 added [ 111.812381][ T5833] team0: Port device team_slave_0 added [ 111.850349][ T5831] team0: Port device team_slave_1 added [ 111.873437][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.881013][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.907342][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.923285][ T5833] team0: Port device team_slave_1 added [ 111.930413][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.937576][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.964162][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.008795][ T5847] team0: Port device team_slave_0 added [ 112.015843][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.023116][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.050737][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.076816][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.083784][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.110346][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.135708][ T5832] team0: Port device team_slave_0 added [ 112.158452][ T5847] team0: Port device team_slave_1 added [ 112.165603][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.172554][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.199006][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.248567][ T5832] team0: Port device team_slave_1 added [ 112.270498][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.278145][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.304502][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.317540][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.324495][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.351517][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.402537][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.409665][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.436528][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.462710][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.470118][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.497361][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.510403][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.517443][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.543716][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.592671][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.599901][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.626729][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.640696][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.648214][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.674404][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.729745][ T5849] hsr_slave_0: entered promiscuous mode [ 112.737015][ T5849] hsr_slave_1: entered promiscuous mode [ 112.775712][ T5834] hsr_slave_0: entered promiscuous mode [ 112.782299][ T5834] hsr_slave_1: entered promiscuous mode [ 112.789211][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 112.795825][ T5834] Cannot create hsr debugfs directory [ 112.843036][ T5831] hsr_slave_0: entered promiscuous mode [ 112.849875][ T5831] hsr_slave_1: entered promiscuous mode [ 112.857666][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 112.863398][ T5831] Cannot create hsr debugfs directory [ 112.988693][ T5833] hsr_slave_0: entered promiscuous mode [ 112.995803][ T5833] hsr_slave_1: entered promiscuous mode [ 113.002285][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 113.008895][ T5833] Cannot create hsr debugfs directory [ 113.043931][ T5847] hsr_slave_0: entered promiscuous mode [ 113.051462][ T5847] hsr_slave_1: entered promiscuous mode [ 113.058107][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 113.063841][ T5847] Cannot create hsr debugfs directory [ 113.075829][ T5832] hsr_slave_0: entered promiscuous mode [ 113.082823][ T5832] hsr_slave_1: entered promiscuous mode [ 113.089596][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 113.095848][ T5832] Cannot create hsr debugfs directory [ 113.115607][ T5848] Bluetooth: hci0: command tx timeout [ 113.125087][ T5848] Bluetooth: hci2: command tx timeout [ 113.195250][ T5838] Bluetooth: hci1: command tx timeout [ 113.196211][ T5841] Bluetooth: hci4: command tx timeout [ 113.200751][ T5848] Bluetooth: hci3: command tx timeout [ 113.275486][ T5848] Bluetooth: hci5: command tx timeout [ 113.874715][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.894178][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.909000][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.933327][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.006765][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.023530][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.038355][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.062660][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.146231][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.159825][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.172842][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.209213][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.292999][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.305959][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.329002][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.362687][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.470323][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.483289][ T5847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.498656][ T5847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.516011][ T5847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.530030][ T5847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.650559][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.673854][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.688704][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.701347][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.714505][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.749813][ T3841] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.757284][ T3841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.800021][ T3841] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.807313][ T3841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.897649][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.011385][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.025983][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.059618][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.082367][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.089773][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.119983][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.127141][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.158743][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.189734][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.197044][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.205152][ T5848] Bluetooth: hci2: command tx timeout [ 115.210581][ T5848] Bluetooth: hci0: command tx timeout [ 115.248018][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.274575][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.275674][ T5848] Bluetooth: hci3: command tx timeout [ 115.281833][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.287435][ T5848] Bluetooth: hci1: command tx timeout [ 115.297622][ T5841] Bluetooth: hci4: command tx timeout [ 115.322743][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.355243][ T5841] Bluetooth: hci5: command tx timeout [ 115.389018][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.396282][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.441196][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.476503][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.483625][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.510325][ T3917] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.517532][ T3917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.543985][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.572710][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.579928][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.650386][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.702869][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.710132][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.769577][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.776792][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.794113][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.128480][ T5849] veth0_vlan: entered promiscuous mode [ 116.230980][ T5849] veth1_vlan: entered promiscuous mode [ 116.272524][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.433848][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.602223][ T5849] veth0_macvtap: entered promiscuous mode [ 116.671272][ T5849] veth1_macvtap: entered promiscuous mode [ 116.699934][ T5831] veth0_vlan: entered promiscuous mode [ 116.763543][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.809667][ T5831] veth1_vlan: entered promiscuous mode [ 116.824407][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.879047][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.910490][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.933745][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.968957][ T3841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.992736][ T3841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.006006][ T3841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.033908][ T3841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.112270][ T5831] veth0_macvtap: entered promiscuous mode [ 117.149344][ T5831] veth1_macvtap: entered promiscuous mode [ 117.275391][ T5841] Bluetooth: hci0: command tx timeout [ 117.286079][ T5841] Bluetooth: hci2: command tx timeout [ 117.294319][ T5832] veth0_vlan: entered promiscuous mode [ 117.341131][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.355205][ T5841] Bluetooth: hci1: command tx timeout [ 117.356661][ T5848] Bluetooth: hci3: command tx timeout [ 117.367222][ T5838] Bluetooth: hci4: command tx timeout [ 117.381201][ T5833] veth0_vlan: entered promiscuous mode [ 117.402973][ T3917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.420379][ T3917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.431757][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.441170][ T5848] Bluetooth: hci5: command tx timeout [ 117.465635][ T5834] veth0_vlan: entered promiscuous mode [ 117.475358][ T3917] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.486377][ T3841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.496076][ T5832] veth1_vlan: entered promiscuous mode [ 117.514633][ T5833] veth1_vlan: entered promiscuous mode [ 117.527785][ T3917] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.536853][ T3917] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.565405][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.581537][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.591840][ T5834] veth1_vlan: entered promiscuous mode [ 117.723236][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 117.773257][ T5847] veth0_vlan: entered promiscuous mode [ 117.816420][ T5833] veth0_macvtap: entered promiscuous mode [ 117.836841][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.844704][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.904929][ T5832] veth0_macvtap: entered promiscuous mode [ 117.920454][ T5832] veth1_macvtap: entered promiscuous mode [ 117.948382][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.962325][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.098100][ T5833] veth1_macvtap: entered promiscuous mode [ 118.119705][ T1090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.136483][ T1090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.145497][ T1090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.154262][ T1090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.180259][ T5834] veth0_macvtap: entered promiscuous mode [ 118.188267][ T5847] veth1_vlan: entered promiscuous mode [ 118.204480][ T3508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.263694][ T3508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.785684][ T5834] veth1_macvtap: entered promiscuous mode [ 118.884602][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.945041][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.986311][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.033390][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.386642][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.845994][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.853905][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.959910][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.197104][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.214525][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.248832][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.281677][ T5847] veth0_macvtap: entered promiscuous mode [ 120.288027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.296633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.305385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.715800][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.735917][ T3917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.857612][ T3917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.902437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 122.005060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 122.128211][ T5847] veth1_macvtap: entered promiscuous mode [ 122.209986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.517281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.096991][ T3917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.119951][ T3917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.155799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.164156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.565007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 125.309224][ T5989] loop2: detected capacity change from 0 to 2048 [ 125.489626][ T5996] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.898866][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.989178][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.136385][ T5979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.144677][ T5979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.229934][ T1090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.239237][ T3841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.247138][ T1090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.247228][ T1090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.269113][ T1090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.297812][ T5996] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 126.306144][ T3841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.312753][ T5996] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 126.343812][ T5996] Remounting filesystem read-only [ 126.382357][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 126.479115][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.495859][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.554138][ T5979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.599289][ T5979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.705318][ T6000] loop2: detected capacity change from 0 to 512 [ 126.751458][ T6000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.787052][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.808462][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.967805][ T6000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.037383][ T6000] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.048922][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.063528][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.854248][ T31] audit: type=1800 audit(1768299405.874:2): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 131.442399][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.215013][ T6045] loop0: detected capacity change from 0 to 512 [ 136.504336][ T6045] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.930767][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.075280][ T6045] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.193200][ T31] audit: type=1800 audit(1768299414.244:3): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 138.548380][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.026631][ T6061] loop3: detected capacity change from 0 to 512 [ 139.047160][ T6061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.162496][ T6061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.205494][ T6061] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.205085][ T31] audit: type=1800 audit(1768299417.264:4): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 141.458131][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.481465][ T6073] loop0: detected capacity change from 0 to 512 [ 141.551184][ T6073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.710424][ T6073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.795504][ T6073] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.924189][ T6079] loop5: detected capacity change from 0 to 512 [ 141.931067][ T31] audit: type=1800 audit(1768299418.984:5): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 142.005207][ T6081] loop4: detected capacity change from 0 to 512 [ 142.037119][ T6081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.060405][ T6079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.403833][ T6079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.419066][ T6081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.508629][ T6089] loop1: detected capacity change from 0 to 512 [ 142.558195][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.564651][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.633098][ T6079] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.656961][ T6089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.675813][ T6081] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.831709][ T6089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.842462][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.943698][ T6089] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.959692][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 142.988916][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 143.026662][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 143.059850][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 143.080484][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 143.492037][ T31] audit: type=1800 audit(1768299420.494:6): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 143.728187][ T31] audit: type=1800 audit(1768299420.724:7): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.23" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 143.834792][ T31] audit: type=1800 audit(1768299420.874:8): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 144.006028][ T6103] loop0: detected capacity change from 0 to 512 [ 144.234113][ T6103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.268009][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.384797][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.483888][ T6103] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.655010][ T5838] Bluetooth: hci6: command tx timeout [ 146.782204][ T31] audit: type=1800 audit(1768299423.804:9): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.24" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 146.898911][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.927405][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.936831][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.947554][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.955622][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 147.250412][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.294665][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.949868][ T6092] chnl_net:caif_netlink_parms(): no params data found [ 148.714998][ T5848] Bluetooth: hci6: command tx timeout [ 148.976797][ T6128] loop5: detected capacity change from 0 to 512 [ 148.996883][ T6128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.045670][ T5848] Bluetooth: hci7: command tx timeout [ 149.083355][ T6128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.187277][ T6128] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.210640][ T5981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.228738][ T31] audit: type=1800 audit(1768299426.284:10): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.30" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 150.488403][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.577003][ T5981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.766747][ T5981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.820143][ T5848] Bluetooth: hci6: command tx timeout [ 151.115527][ T5848] Bluetooth: hci7: command tx timeout [ 152.142789][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.203120][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.253686][ T6092] bridge_slave_0: entered allmulticast mode [ 152.287432][ T6092] bridge_slave_0: entered promiscuous mode [ 152.300817][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.988188][ T5848] Bluetooth: hci6: command tx timeout [ 155.994100][ T5838] Bluetooth: hci7: command tx timeout [ 156.059033][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.097446][ T6092] bridge_slave_1: entered allmulticast mode [ 156.114059][ T6092] bridge_slave_1: entered promiscuous mode [ 156.312817][ T6159] loop2: detected capacity change from 0 to 512 [ 156.325682][ T5981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.384073][ T6159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.426999][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.482514][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.496726][ T6159] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.629697][ T31] audit: type=1800 audit(1768299433.684:11): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 156.796618][ T6092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.079531][ T5838] Bluetooth: hci7: command tx timeout [ 160.248527][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.374412][ T6092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.040874][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.052521][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.061253][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.074334][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.095926][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.183117][ T6116] chnl_net:caif_netlink_parms(): no params data found [ 163.284665][ T6092] team0: Port device team_slave_0 added [ 163.338586][ T6092] team0: Port device team_slave_1 added [ 163.658467][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.692205][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.744939][ T6092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.920200][ T5981] bridge_slave_1: left allmulticast mode [ 163.945156][ T5981] bridge_slave_1: left promiscuous mode [ 163.952228][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.027037][ T5981] bridge_slave_0: left allmulticast mode [ 164.032842][ T5981] bridge_slave_0: left promiscuous mode [ 164.067532][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.535048][ T5838] Bluetooth: hci0: command tx timeout [ 167.595360][ T5838] Bluetooth: hci0: command tx timeout [ 167.791715][ T6206] loop2: detected capacity change from 0 to 512 [ 167.825744][ T6206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.091521][ T6208] loop5: detected capacity change from 0 to 512 [ 168.209438][ T6206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.680037][ T6208] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.692224][ T6206] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.760198][ T6208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.864493][ T6208] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.889738][ T31] audit: type=1800 audit(1768299445.844:12): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 169.026641][ T31] audit: type=1800 audit(1768299446.084:13): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.42" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 169.140397][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.409693][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.797338][ T5838] Bluetooth: hci0: command tx timeout [ 169.830173][ T5981] bond0 (unregistering): Released all slaves [ 169.856999][ T6092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.581811][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.591471][ T6092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.826971][ T6092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.133698][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.592495][ T6228] loop2: detected capacity change from 0 to 2048 [ 172.304390][ T5838] Bluetooth: hci0: command tx timeout [ 173.120086][ T6236] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.548295][ T6242] loop0: detected capacity change from 0 to 512 [ 173.728690][ T6242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.793671][ T6244] loop5: detected capacity change from 0 to 2048 [ 173.829305][ T6242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.923565][ T6249] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.944628][ T6242] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.122636][ T31] audit: type=1800 audit(1768299451.144:14): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.48" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 174.430296][ T6236] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 175.420863][ T6236] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 175.510054][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.511083][ T6236] Remounting filesystem read-only [ 175.610652][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 179.635177][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.648559][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.675358][ T6116] bridge_slave_0: entered allmulticast mode [ 179.705017][ T6116] bridge_slave_0: entered promiscuous mode [ 179.719324][ T6116] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.745480][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.753357][ T6116] bridge_slave_1: entered allmulticast mode [ 179.784371][ T6116] bridge_slave_1: entered promiscuous mode [ 179.805521][ T6011] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 179.933938][ T6249] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 179.960028][ T6249] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 179.988500][ T6092] hsr_slave_0: entered promiscuous mode [ 179.994694][ T6249] Remounting filesystem read-only [ 180.002439][ T6092] hsr_slave_1: entered promiscuous mode [ 180.009245][ T6011] usb 1-1: Using ep0 maxpacket: 32 [ 180.009287][ T5847] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 180.028178][ T6092] debugfs: 'hsr0' already exists in 'hsr' [ 180.033991][ T6092] Cannot create hsr debugfs directory [ 180.042215][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.067346][ T6011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.105080][ T6011] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 180.114256][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.220860][ T6011] usb 1-1: config 0 descriptor?? [ 180.256954][ T6011] usb 1-1: can't set config #0, error -71 [ 180.385218][ T6011] usb 1-1: USB disconnect, device number 2 [ 180.584529][ T6116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.213686][ T6274] loop0: detected capacity change from 0 to 2048 [ 181.296493][ T6276] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.820597][ T6116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.926295][ T6279] loop5: detected capacity change from 0 to 512 [ 181.956462][ T6279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.027676][ T6279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.116571][ T6279] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.149079][ T6116] team0: Port device team_slave_0 added [ 182.181765][ T6276] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 182.195428][ T6276] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 182.207381][ T6276] Remounting filesystem read-only [ 182.213844][ T5849] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 182.229769][ T31] audit: type=1800 audit(1768299459.284:15): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.55" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 182.230012][ T5981] hsr_slave_0: left promiscuous mode [ 182.498282][ T5981] hsr_slave_1: left promiscuous mode [ 182.504670][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.512693][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.521742][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.532023][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.526209][ T5981] veth1_macvtap: left promiscuous mode [ 183.538131][ T5981] veth0_macvtap: left promiscuous mode [ 183.544826][ T5981] veth1_vlan: left promiscuous mode [ 183.552953][ T5981] veth0_vlan: left promiscuous mode [ 184.139064][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.221596][ T6291] loop2: detected capacity change from 0 to 512 [ 184.258776][ T6291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.341426][ T6291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.405502][ T6291] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.561338][ T6298] loop5: detected capacity change from 0 to 2048 [ 184.795956][ T31] audit: type=1800 audit(1768299461.854:16): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.52" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 185.126417][ T6301] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.456181][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.489228][ T6309] loop2: detected capacity change from 0 to 2048 [ 187.556121][ T6310] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.094599][ T6301] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 189.105958][ T6301] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 189.134921][ T6301] Remounting filesystem read-only [ 189.145221][ T5847] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 193.346177][ T6310] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 193.404934][ T6310] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 193.436985][ T6310] Remounting filesystem read-only [ 193.459087][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 195.929496][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 196.036747][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 196.978911][ T6331] loop5: detected capacity change from 0 to 512 [ 197.015034][ T6331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.111631][ T6331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.125818][ T6331] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.089105][ T31] audit: type=1800 audit(1768299474.994:17): pid=6337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.66" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 198.354621][ T6116] team0: Port device team_slave_1 added [ 201.125887][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.211250][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.265081][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.337834][ T6116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.360702][ T6116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.423479][ T6116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.424718][ T6348] loop5: detected capacity change from 0 to 512 [ 201.487042][ T6348] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.494914][ T6116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.728654][ T6348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.822340][ T6348] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.465259][ T31] audit: type=1800 audit(1768299479.484:18): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.70" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 203.922388][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.930785][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.975737][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.685625][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.695420][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.704175][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.728783][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.750589][ T6116] hsr_slave_0: entered promiscuous mode [ 204.756369][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.796500][ T6116] hsr_slave_1: entered promiscuous mode [ 204.803609][ T6116] debugfs: 'hsr0' already exists in 'hsr' [ 204.811552][ T6116] Cannot create hsr debugfs directory [ 204.945488][ T6183] chnl_net:caif_netlink_parms(): no params data found [ 205.215191][ T6375] loop0: detected capacity change from 0 to 2048 [ 205.329833][ T6378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.795269][ T5838] Bluetooth: hci1: command tx timeout [ 208.992433][ T5838] Bluetooth: hci1: command tx timeout [ 211.043021][ T5838] Bluetooth: hci1: command tx timeout [ 211.059345][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.069241][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.106159][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.136698][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.169122][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.342639][ T6378] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 211.394918][ T6378] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 211.453678][ T6378] Remounting filesystem read-only [ 211.498698][ T5849] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 211.869243][ T5981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.115032][ T5848] Bluetooth: hci1: command tx timeout [ 214.781924][ T5848] Bluetooth: hci2: command tx timeout [ 214.848659][ T5981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.911612][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.945104][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.952442][ T6183] bridge_slave_0: entered allmulticast mode [ 214.995272][ T6183] bridge_slave_0: entered promiscuous mode [ 215.088956][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.105628][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.112944][ T6183] bridge_slave_1: entered allmulticast mode [ 215.158024][ T6183] bridge_slave_1: entered promiscuous mode [ 215.293418][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.379727][ T5981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.484285][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.604271][ T5981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.938528][ T5848] Bluetooth: hci2: command tx timeout [ 217.828129][ T6436] loop5: detected capacity change from 0 to 512 [ 219.782375][ T5848] Bluetooth: hci2: command tx timeout [ 219.847317][ T6436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.008211][ T6436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.094305][ T6436] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.038016][ T31] audit: type=1800 audit(1768299498.094:19): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.83" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 221.193069][ T6183] team0: Port device team_slave_0 added [ 221.748294][ T5981] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.833424][ T6393] chnl_net:caif_netlink_parms(): no params data found [ 221.842556][ T5848] Bluetooth: hci2: command tx timeout [ 221.891903][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 221.980703][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 221.995281][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.003788][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.013948][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.022165][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 222.367504][ T5981] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.627214][ T5981] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.075832][ T5841] Bluetooth: hci6: command tx timeout [ 224.869661][ T5981] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.560519][ T6488] loop2: detected capacity change from 0 to 2048 [ 225.749136][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.765055][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.772440][ T6393] bridge_slave_0: entered allmulticast mode [ 225.790877][ T6491] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.797132][ T6393] bridge_slave_0: entered promiscuous mode [ 226.155019][ T5841] Bluetooth: hci6: command tx timeout [ 227.105262][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.112676][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.175631][ T6393] bridge_slave_1: entered allmulticast mode [ 227.209674][ T6393] bridge_slave_1: entered promiscuous mode [ 227.275913][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.293523][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.308349][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.317261][ T6369] bridge_slave_0: entered allmulticast mode [ 227.318980][ T6491] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 227.325788][ T6369] bridge_slave_0: entered promiscuous mode [ 227.350711][ T6498] loop0: detected capacity change from 0 to 2048 [ 227.365661][ T6491] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 227.396168][ T6491] Remounting filesystem read-only [ 227.422420][ T6499] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.530606][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.623879][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.728058][ T6369] bridge_slave_1: entered allmulticast mode [ 228.127004][ T6504] FAT-fs (loop11): unable to read boot sector [ 228.235003][ T5841] Bluetooth: hci6: command tx timeout [ 228.822195][ T6369] bridge_slave_1: entered promiscuous mode [ 229.158598][ T6393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.327182][ T5841] Bluetooth: hci6: command tx timeout [ 230.685996][ T6499] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 230.686320][ T6393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.697566][ T6499] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 230.726302][ T6499] Remounting filesystem read-only [ 230.732989][ T6515] loop2: detected capacity change from 0 to 2048 [ 230.756471][ T5849] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 230.819284][ T6518] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.450057][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 232.456674][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 232.462880][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 233.994335][ T6528] loop5: detected capacity change from 0 to 2048 [ 234.248829][ T6533] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.407661][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.457833][ T6393] team0: Port device team_slave_0 added [ 234.498041][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.676025][ T6393] team0: Port device team_slave_1 added [ 234.807036][ T6533] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 234.833911][ T6533] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 234.878347][ T5981] bridge_slave_1: left allmulticast mode [ 234.888800][ T6533] Remounting filesystem read-only [ 234.894335][ T5981] bridge_slave_1: left promiscuous mode [ 234.905857][ T5847] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 234.918280][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.924550][ T6518] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 234.945027][ T6518] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 234.966777][ T5981] bridge_slave_0: left allmulticast mode [ 234.972878][ T6518] Remounting filesystem read-only [ 234.982685][ T5981] bridge_slave_0: left promiscuous mode [ 234.992329][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 235.012246][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.059722][ T5981] bridge_slave_1: left allmulticast mode [ 235.070873][ T5981] bridge_slave_1: left promiscuous mode [ 235.095966][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.128739][ T5981] bridge_slave_0: left allmulticast mode [ 235.134443][ T5981] bridge_slave_0: left promiscuous mode [ 235.170347][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.216296][ T6543] loop5: detected capacity change from 0 to 512 [ 235.306236][ T6543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.454530][ T6543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.515499][ T6543] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.815304][ T31] audit: type=1800 audit(1768299512.854:20): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.99" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 235.920134][ T6532] loop0: detected capacity change from 0 to 32768 [ 236.131209][ T6532] [ 236.131209][ T6532] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.131209][ T6532] [ 236.708620][ T6530] [ 236.708620][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.708620][ T6530] [ 236.810596][ T6530] [ 236.810596][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.810596][ T6530] [ 237.036725][ T6530] [ 237.036725][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.036725][ T6530] [ 237.105342][ T6530] [ 237.105342][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.105342][ T6530] [ 237.163236][ T6530] [ 237.163236][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.163236][ T6530] [ 237.216057][ T6530] [ 237.216057][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.216057][ T6530] [ 237.272441][ T111] [ 237.272441][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.272441][ T111] [ 237.294481][ T5847] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.322282][ T6530] [ 237.322282][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.322282][ T6530] [ 237.335507][ T6530] [ 237.335507][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.335507][ T6530] [ 237.375893][ T6530] [ 237.375893][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.375893][ T6530] [ 237.403446][ T6530] [ 237.403446][ T6530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.403446][ T6530] [ 238.717628][ T111] [ 238.717628][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.717628][ T111] [ 238.769734][ T6532] [ 238.769734][ T6532] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.769734][ T6532] [ 238.801956][ T6532] [ 238.801956][ T6532] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.801956][ T6532] [ 238.813327][ T6532] [ 238.813327][ T6532] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.813327][ T6532] [ 238.825241][ T6532] [ 238.825241][ T6532] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.825241][ T6532] [ 238.841601][ T110] [ 238.841601][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 238.841601][ T110] [ 239.207692][ T1127] [ 239.207692][ T1127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.207692][ T1127] [ 239.235059][ T1127] [ 239.235059][ T1127] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.235059][ T1127] [ 239.487612][ T5849] [ 239.487612][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.487612][ T5849] [ 239.515331][ T111] [ 239.515331][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 239.515331][ T111] [ 241.864777][ T5849] [ 241.864777][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 241.864777][ T5849] [ 242.335612][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.344778][ T6581] loop2: detected capacity change from 0 to 2048 [ 242.379304][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.411658][ T5981] bond0 (unregistering): Released all slaves [ 243.863081][ T6586] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.925771][ T6586] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 244.954960][ T6586] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 244.976521][ T6586] Remounting filesystem read-only [ 244.982434][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 245.387925][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.460788][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.518591][ T5981] bond0 (unregistering): Released all slaves [ 245.671821][ T6369] team0: Port device team_slave_0 added [ 246.281292][ T6369] team0: Port device team_slave_1 added [ 246.296910][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.305047][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.336637][ T6393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.616457][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.623621][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.844984][ T6393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.485704][ T6605] loop0: detected capacity change from 0 to 2048 [ 249.579804][ T6606] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.507049][ T6393] hsr_slave_0: entered promiscuous mode [ 250.513645][ T6393] hsr_slave_1: entered promiscuous mode [ 250.566151][ T6393] debugfs: 'hsr0' already exists in 'hsr' [ 250.571925][ T6393] Cannot create hsr debugfs directory [ 253.455423][ T6606] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 253.507386][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.514485][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.545251][ T6606] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 253.590462][ T6606] Remounting filesystem read-only [ 253.634923][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.665341][ T5849] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 253.791746][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.835097][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.909331][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.357489][ T6369] hsr_slave_0: entered promiscuous mode [ 258.375575][ T6369] hsr_slave_1: entered promiscuous mode [ 258.382470][ T6369] debugfs: 'hsr0' already exists in 'hsr' [ 258.414930][ T6369] Cannot create hsr debugfs directory [ 258.479311][ T6464] chnl_net:caif_netlink_parms(): no params data found [ 261.299149][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.325100][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.332385][ T6464] bridge_slave_0: entered allmulticast mode [ 261.357819][ T6464] bridge_slave_0: entered promiscuous mode [ 261.679344][ T5981] hsr_slave_0: left promiscuous mode [ 261.782792][ T5981] hsr_slave_1: left promiscuous mode [ 261.806011][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.813689][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.966845][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.974267][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.177188][ T5981] hsr_slave_0: left promiscuous mode [ 262.214006][ T5981] hsr_slave_1: left promiscuous mode [ 262.224798][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.232403][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.338348][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.349715][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.846479][ T6659] FAT-fs (loop1): unable to read boot sector [ 263.842553][ T5981] veth1_macvtap: left promiscuous mode [ 263.855254][ T5981] veth0_macvtap: left promiscuous mode [ 263.860954][ T5981] veth1_vlan: left promiscuous mode [ 263.869816][ T5981] veth0_vlan: left promiscuous mode [ 264.297760][ T5981] veth1_macvtap: left promiscuous mode [ 264.303338][ T5981] veth0_macvtap: left promiscuous mode [ 264.336228][ T5981] veth1_vlan: left promiscuous mode [ 264.354279][ T5981] veth0_vlan: left promiscuous mode [ 265.395466][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.401882][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.656165][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.666957][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.686915][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.709164][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.718812][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.646032][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 266.656568][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 266.698456][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 266.706733][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 266.714980][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 267.417243][ T6678] loop2: detected capacity change from 0 to 32768 [ 267.462846][ T6678] [ 267.462846][ T6678] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.462846][ T6678] [ 267.548862][ T6673] [ 267.548862][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.548862][ T6673] [ 267.584596][ T6673] [ 267.584596][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.584596][ T6673] [ 267.627465][ T6673] [ 267.627465][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.627465][ T6673] [ 267.678372][ T6673] [ 267.678372][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.678372][ T6673] [ 267.696278][ T6673] [ 267.696278][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.696278][ T6673] [ 267.765290][ T6673] [ 267.765290][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.765290][ T6673] [ 267.944951][ T5848] Bluetooth: hci0: command tx timeout [ 267.987342][ T110] [ 267.987342][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 267.987342][ T110] [ 268.726916][ T6673] [ 268.726916][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.726916][ T6673] [ 268.792853][ T6673] [ 268.792853][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.792853][ T6673] [ 268.795083][ T5848] Bluetooth: hci7: command tx timeout [ 268.925544][ T6673] [ 268.925544][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.925544][ T6673] [ 268.974929][ T6673] [ 268.974929][ T6673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 268.974929][ T6673] [ 269.067387][ T110] [ 269.067387][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.067387][ T110] [ 269.446775][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 269.455913][ T6112] [ 269.455913][ T6112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.455913][ T6112] [ 269.472450][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 269.486927][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 269.497275][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 269.510353][ T6112] [ 269.510353][ T6112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.510353][ T6112] [ 269.529095][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 269.600551][ T5832] [ 269.600551][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.600551][ T5832] [ 269.625459][ T111] [ 269.625459][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.625459][ T111] [ 269.671319][ T5832] [ 269.671319][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 269.671319][ T5832] [ 269.994914][ T5848] Bluetooth: hci0: command tx timeout [ 270.934083][ T5848] Bluetooth: hci7: command tx timeout [ 271.595930][ T5848] Bluetooth: hci8: command tx timeout [ 271.793084][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 273.724122][ T5848] Bluetooth: hci0: command tx timeout [ 273.724153][ T5835] Bluetooth: hci7: command tx timeout [ 273.724208][ T5835] Bluetooth: hci8: command tx timeout [ 274.310930][ T6709] FAT-fs (loop5): unable to read boot sector [ 275.016959][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 275.755015][ T5835] Bluetooth: hci8: command tx timeout [ 275.755157][ T5838] Bluetooth: hci7: command tx timeout [ 275.765937][ T5848] Bluetooth: hci0: command tx timeout [ 276.347485][ T6715] loop2: detected capacity change from 0 to 2048 [ 276.520986][ T6716] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.714333][ T6716] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 277.774910][ T6716] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 277.787211][ T6716] Remounting filesystem read-only [ 277.805452][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 277.835252][ T5848] Bluetooth: hci8: command tx timeout [ 280.773908][ T6723] loop0: detected capacity change from 0 to 2048 [ 280.967161][ T6724] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.435445][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.444952][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.453035][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.461246][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.462722][ T6724] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 282.495585][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.564930][ T6724] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 282.585731][ T6724] Remounting filesystem read-only [ 282.595580][ T5849] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 282.628214][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 284.020547][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 284.565013][ T5838] Bluetooth: hci4: command tx timeout [ 286.765084][ T5838] Bluetooth: hci4: command tx timeout [ 288.752628][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.760463][ T6464] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.775098][ T6464] bridge_slave_1: entered allmulticast mode [ 288.794983][ T6464] bridge_slave_1: entered promiscuous mode [ 288.795126][ T5838] Bluetooth: hci4: command tx timeout [ 290.875150][ T5838] Bluetooth: hci4: command tx timeout [ 291.436785][ T6756] loop2: detected capacity change from 0 to 2048 [ 291.597177][ T6768] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.572376][ T6768] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 292.619017][ T6768] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 292.635579][ T6768] Remounting filesystem read-only [ 292.771718][ T6780] loop0: detected capacity change from 0 to 2048 [ 292.846548][ T6784] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.342934][ T6788] FAT-fs (loop5): unable to read boot sector [ 294.991927][ T6791] loop2: detected capacity change from 0 to 2048 [ 295.119461][ T6799] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.310309][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 296.021022][ T6784] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 296.050166][ T6674] chnl_net:caif_netlink_parms(): no params data found [ 296.092719][ T6784] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 296.165563][ T6784] Remounting filesystem read-only [ 297.361632][ T6799] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 297.378533][ T6799] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 297.463006][ T6799] Remounting filesystem read-only [ 297.477637][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 298.697458][ T6727] chnl_net:caif_netlink_parms(): no params data found [ 299.559196][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.593271][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.618829][ T6679] bridge_slave_0: entered allmulticast mode [ 299.673598][ T6679] bridge_slave_0: entered promiscuous mode [ 301.565219][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.572589][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.580078][ T6679] bridge_slave_1: entered allmulticast mode [ 301.597581][ T6679] bridge_slave_1: entered promiscuous mode [ 301.816692][ T6674] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.836117][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.845972][ T6674] bridge_slave_0: entered allmulticast mode [ 301.875297][ T6674] bridge_slave_0: entered promiscuous mode [ 301.932832][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.969287][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.978667][ T6674] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.996849][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.004273][ T6674] bridge_slave_1: entered allmulticast mode [ 302.059777][ T6674] bridge_slave_1: entered promiscuous mode [ 302.101340][ T6693] chnl_net:caif_netlink_parms(): no params data found [ 304.228610][ T6679] team0: Port device team_slave_0 added [ 304.270813][ T6679] team0: Port device team_slave_1 added [ 304.288104][ T6674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.550071][ T6674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.593198][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.615425][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.622718][ T6727] bridge_slave_0: entered allmulticast mode [ 304.635785][ T6727] bridge_slave_0: entered promiscuous mode [ 304.865039][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.872427][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.885177][ T6727] bridge_slave_1: entered allmulticast mode [ 304.917221][ T6727] bridge_slave_1: entered promiscuous mode [ 304.927868][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.935556][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.036716][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.268521][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.276054][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.335125][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.378080][ T6674] team0: Port device team_slave_0 added [ 305.776930][ T6674] team0: Port device team_slave_1 added [ 305.995086][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.002451][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.025120][ T6693] bridge_slave_0: entered allmulticast mode [ 306.033500][ T6693] bridge_slave_0: entered promiscuous mode [ 306.065229][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.226397][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.233657][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.265282][ T6693] bridge_slave_1: entered allmulticast mode [ 306.287610][ T6693] bridge_slave_1: entered promiscuous mode [ 306.598234][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.403386][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.435692][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.502667][ T6674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.311306][ T6674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.334955][ T6674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.449400][ T6859] FAT-fs (loop5): unable to read boot sector [ 308.534070][ T6674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.020138][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.060443][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.299346][ T6727] team0: Port device team_slave_0 added [ 310.312164][ T6727] team0: Port device team_slave_1 added [ 311.466954][ T6679] hsr_slave_0: entered promiscuous mode [ 311.473769][ T6679] hsr_slave_1: entered promiscuous mode [ 311.510207][ T6679] debugfs: 'hsr0' already exists in 'hsr' [ 311.516326][ T6679] Cannot create hsr debugfs directory [ 312.015634][ T6876] netlink: 'syz.2.154': attribute type 2 has an invalid length. [ 312.701964][ T6693] team0: Port device team_slave_0 added [ 312.711546][ T6693] team0: Port device team_slave_1 added [ 314.264171][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.291512][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.369444][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.503529][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.555209][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.608426][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.836853][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.844020][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.874648][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.605498][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.612507][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.694939][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.732361][ T6674] hsr_slave_0: entered promiscuous mode [ 316.747404][ T6674] hsr_slave_1: entered promiscuous mode [ 316.775167][ T6674] debugfs: 'hsr0' already exists in 'hsr' [ 316.784853][ T6674] Cannot create hsr debugfs directory [ 317.232357][ T6893] loop0: detected capacity change from 0 to 2048 [ 317.526503][ T6897] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.886736][ T6897] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 319.141578][ T6693] hsr_slave_0: entered promiscuous mode [ 319.152376][ T6897] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 319.916739][ T6693] hsr_slave_1: entered promiscuous mode [ 319.923305][ T6693] debugfs: 'hsr0' already exists in 'hsr' [ 319.945653][ T6897] Remounting filesystem read-only [ 320.004545][ T6693] Cannot create hsr debugfs directory [ 320.011892][ T5849] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 320.034136][ T6727] hsr_slave_0: entered promiscuous mode [ 320.066340][ T6727] hsr_slave_1: entered promiscuous mode [ 320.097902][ T6727] debugfs: 'hsr0' already exists in 'hsr' [ 320.103682][ T6727] Cannot create hsr debugfs directory [ 323.509763][ T5981] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.853264][ T6936] loop2: detected capacity change from 0 to 2048 [ 325.120110][ T6941] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.767151][ T5981] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.875468][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.885721][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.894177][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.902342][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.910094][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.127263][ T6941] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 326.178155][ T6941] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 326.269761][ T6941] Remounting filesystem read-only [ 326.324987][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 326.723235][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 326.733610][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 326.742423][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 326.761075][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 326.769429][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 326.799632][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.821861][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.837922][ T5981] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.933157][ T6947] loop0: detected capacity change from 0 to 32768 [ 328.003722][ T5848] Bluetooth: hci1: command tx timeout [ 328.033776][ T6947] [ 328.033776][ T6947] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.033776][ T6947] [ 328.082015][ T6945] [ 328.082015][ T6945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.082015][ T6945] [ 328.105512][ T6945] [ 328.105512][ T6945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.105512][ T6945] [ 328.163171][ T6945] [ 328.163171][ T6945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.163171][ T6945] [ 328.232194][ T6945] [ 328.232194][ T6945] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.232194][ T6945] [ 328.314012][ T111] [ 328.314012][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.314012][ T111] [ 328.580484][ T6156] [ 328.580484][ T6156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.580484][ T6156] [ 328.582922][ T5981] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.604962][ T6156] [ 328.604962][ T6156] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.604962][ T6156] [ 328.650079][ T111] [ 328.650079][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.650079][ T111] [ 328.673234][ T6962] loop2: detected capacity change from 0 to 2048 [ 328.683961][ T5849] [ 328.683961][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.683961][ T5849] [ 328.764904][ T5849] [ 328.764904][ T5849] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 328.764904][ T5849] [ 328.766655][ T6963] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.875374][ T5848] Bluetooth: hci2: command tx timeout [ 329.922816][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.935831][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.945184][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.977409][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.987725][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.066594][ T6963] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 330.074994][ T5848] Bluetooth: hci1: command tx timeout [ 330.135141][ T6963] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 330.188304][ T6963] Remounting filesystem read-only [ 330.204992][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 330.550013][ T5981] bridge_slave_1: left allmulticast mode [ 330.565223][ T5981] bridge_slave_1: left promiscuous mode [ 330.571037][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.954898][ T5848] Bluetooth: hci2: command tx timeout [ 331.181431][ T5981] bridge_slave_0: left allmulticast mode [ 331.199425][ T5981] bridge_slave_0: left promiscuous mode [ 331.217423][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.236898][ T5981] bridge_slave_1: left allmulticast mode [ 331.242724][ T5981] bridge_slave_1: left promiscuous mode [ 331.250193][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.284134][ T5981] bridge_slave_0: left allmulticast mode [ 331.301841][ T5981] bridge_slave_0: left promiscuous mode [ 331.316771][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.635615][ T5981] bridge_slave_1: left allmulticast mode [ 331.641336][ T5981] bridge_slave_1: left promiscuous mode [ 332.076244][ T5848] Bluetooth: hci0: command tx timeout [ 332.351167][ T5848] Bluetooth: hci1: command tx timeout [ 332.521519][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.080636][ T5848] Bluetooth: hci2: command tx timeout [ 334.155198][ T5848] Bluetooth: hci0: command tx timeout [ 334.176195][ T5981] bridge_slave_0: left allmulticast mode [ 334.182659][ T5981] bridge_slave_0: left promiscuous mode [ 334.196203][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.377073][ T5981] bridge_slave_1: left allmulticast mode [ 334.384174][ T5981] bridge_slave_1: left promiscuous mode [ 334.405002][ T5848] Bluetooth: hci1: command tx timeout [ 334.435171][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.566187][ T5981] bridge_slave_0: left allmulticast mode [ 334.571971][ T5981] bridge_slave_0: left promiscuous mode [ 334.625169][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.889200][ T5981] bridge_slave_1: left allmulticast mode [ 334.911054][ T5981] bridge_slave_1: left promiscuous mode [ 334.946006][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.726289][ T5981] bridge_slave_0: left allmulticast mode [ 335.732165][ T5981] bridge_slave_0: left promiscuous mode [ 335.766507][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.793617][ T5981] bridge_slave_1: left allmulticast mode [ 335.799497][ T5981] bridge_slave_1: left promiscuous mode [ 335.815196][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.836007][ T5981] bridge_slave_0: left allmulticast mode [ 335.841951][ T5981] bridge_slave_0: left promiscuous mode [ 335.855120][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.878054][ T5981] bridge_slave_1: left allmulticast mode [ 336.101614][ T5981] bridge_slave_1: left promiscuous mode [ 336.135167][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.155021][ T5848] Bluetooth: hci2: command tx timeout [ 336.235137][ T5848] Bluetooth: hci0: command tx timeout [ 336.886356][ T5981] bridge_slave_0: left allmulticast mode [ 336.892039][ T5981] bridge_slave_0: left promiscuous mode [ 336.901077][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.511099][ T5848] Bluetooth: hci0: command tx timeout [ 338.967360][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.979037][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.992434][ T5981] bond0 (unregistering): Released all slaves [ 339.665374][ T7019] loop2: detected capacity change from 0 to 32768 [ 339.691768][ T7019] [ 339.691768][ T7019] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.691768][ T7019] [ 339.774253][ T7015] [ 339.774253][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.774253][ T7015] [ 339.806188][ T7015] [ 339.806188][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.806188][ T7015] [ 339.818403][ T7015] [ 339.818403][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.818403][ T7015] [ 339.828990][ T7015] [ 339.828990][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.828990][ T7015] [ 339.840598][ T111] [ 339.840598][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.840598][ T111] [ 339.868155][ T7015] [ 339.868155][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.868155][ T7015] [ 339.870281][ T5981] bond0 (unregistering): Released all slaves [ 339.880174][ T7015] [ 339.880174][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.880174][ T7015] [ 339.896088][ T7015] [ 339.896088][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.896088][ T7015] [ 339.906647][ T7015] [ 339.906647][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.906647][ T7015] [ 339.924010][ T7015] [ 339.924010][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.924010][ T7015] [ 339.935400][ T7015] [ 339.935400][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.935400][ T7015] [ 339.950219][ T7015] [ 339.950219][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.950219][ T7015] [ 339.961803][ T7015] [ 339.961803][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.961803][ T7015] [ 339.976545][ T7015] [ 339.976545][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.976545][ T7015] [ 339.994512][ T7015] [ 339.994512][ T7015] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 339.994512][ T7015] [ 340.055992][ T1109] [ 340.055992][ T1109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.055992][ T1109] [ 340.076195][ T1109] [ 340.076195][ T1109] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.076195][ T1109] [ 340.091448][ T5832] [ 340.091448][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.091448][ T5832] [ 340.103348][ T111] [ 340.103348][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.103348][ T111] [ 340.115020][ T5832] [ 340.115020][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 340.115020][ T5832] [ 340.191083][ T7025] netlink: 'syz.0.181': attribute type 2 has an invalid length. [ 340.713893][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.972257][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.983678][ T5981] bond0 (unregistering): Released all slaves [ 341.075890][ T7032] FAT-fs (loop5): unable to read boot sector [ 342.987693][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.009336][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.018802][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.027452][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.041981][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.125267][ T5838] Bluetooth: hci6: command tx timeout [ 345.401743][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.458142][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.489496][ T5981] bond0 (unregistering): Released all slaves [ 347.416009][ T5838] Bluetooth: hci6: command tx timeout [ 347.616194][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.639238][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.680593][ T5981] bond0 (unregistering): Released all slaves [ 347.916495][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.950948][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.967553][ T5981] bond0 (unregistering): Released all slaves [ 348.237006][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.265294][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.296746][ T5981] bond0 (unregistering): Released all slaves [ 349.438537][ T5838] Bluetooth: hci6: command tx timeout [ 351.514888][ T5838] Bluetooth: hci6: command tx timeout [ 351.714613][ T7083] FAT-fs (loop1): unable to read boot sector [ 353.996713][ T5981] hsr_slave_0: left promiscuous mode [ 354.003460][ T5981] hsr_slave_1: left promiscuous mode [ 354.009954][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.018604][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.033580][ T5981] hsr_slave_0: left promiscuous mode [ 354.041079][ T5981] hsr_slave_1: left promiscuous mode [ 354.196934][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.221140][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.276346][ T5981] hsr_slave_0: left promiscuous mode [ 354.292265][ T5981] hsr_slave_1: left promiscuous mode [ 354.303823][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.307437][ T7100] loop2: detected capacity change from 0 to 512 [ 354.318892][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.275021][ T7100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.326453][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.333980][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.359075][ T7100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.377943][ T7100] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.388475][ T5981] hsr_slave_0: left promiscuous mode [ 356.396598][ T5981] hsr_slave_1: left promiscuous mode [ 356.415881][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.432027][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.432731][ T31] audit: type=1800 audit(1768299633.484:21): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.196" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 356.469604][ T5981] hsr_slave_0: left promiscuous mode [ 356.545302][ T5981] hsr_slave_1: left promiscuous mode [ 356.563801][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.574195][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.643679][ T5981] veth1_macvtap: left promiscuous mode [ 356.652037][ T5981] veth0_macvtap: left promiscuous mode [ 356.665210][ T5981] veth1_vlan: left promiscuous mode [ 356.670612][ T5981] veth0_vlan: left promiscuous mode [ 357.354318][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.427178][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 357.533173][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 359.856025][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 359.896828][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 363.497137][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 363.595510][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 366.276984][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 368.070851][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 368.477755][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 369.375683][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 369.415731][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 373.057337][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 373.098812][ T6967] chnl_net:caif_netlink_parms(): no params data found [ 373.261277][ T6952] chnl_net:caif_netlink_parms(): no params data found [ 374.237571][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.245063][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.252477][ T6949] bridge_slave_0: entered allmulticast mode [ 374.261098][ T6949] bridge_slave_0: entered promiscuous mode [ 374.269594][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.306240][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.313592][ T6967] bridge_slave_0: entered allmulticast mode [ 374.355146][ T6967] bridge_slave_0: entered promiscuous mode [ 374.364114][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.394719][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.403394][ T6967] bridge_slave_1: entered allmulticast mode [ 374.415337][ T6967] bridge_slave_1: entered promiscuous mode [ 374.502284][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.534291][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.553572][ T6949] bridge_slave_1: entered allmulticast mode [ 374.578134][ T6949] bridge_slave_1: entered promiscuous mode [ 377.880597][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.899544][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.909600][ T6952] bridge_slave_0: entered allmulticast mode [ 377.918835][ T6952] bridge_slave_0: entered promiscuous mode [ 378.058703][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.076154][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.086633][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.093765][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.103271][ T6952] bridge_slave_1: entered allmulticast mode [ 378.116986][ T6952] bridge_slave_1: entered promiscuous mode [ 378.717318][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 378.774401][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.851052][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.866220][ T6952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.898261][ T6952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.957492][ T6949] team0: Port device team_slave_0 added [ 381.111775][ T6949] team0: Port device team_slave_1 added [ 381.138791][ T6967] team0: Port device team_slave_0 added [ 381.283620][ T6967] team0: Port device team_slave_1 added [ 381.357964][ T6952] team0: Port device team_slave_0 added [ 381.370349][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.384992][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.445190][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.543870][ T6952] team0: Port device team_slave_1 added [ 381.593683][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.615158][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.675323][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.889158][ T7237] random: crng reseeded on system resumption [ 382.969256][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.981285][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.052338][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.074917][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.082293][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.095693][ T7038] bridge_slave_0: entered allmulticast mode [ 383.147342][ T7038] bridge_slave_0: entered promiscuous mode [ 383.901637][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.944587][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.111061][ T6155] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 384.119429][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.152698][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.169242][ T6155] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 384.195367][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.207164][ T7038] bridge_slave_1: entered allmulticast mode [ 384.225662][ T7038] bridge_slave_1: entered promiscuous mode [ 384.260875][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.294823][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.384831][ T6952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.417977][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.434862][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.494850][ T6952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.665826][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.707980][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.857452][ T6949] hsr_slave_0: entered promiscuous mode [ 384.874595][ T6949] hsr_slave_1: entered promiscuous mode [ 384.903881][ T6949] debugfs: 'hsr0' already exists in 'hsr' [ 384.913860][ T6949] Cannot create hsr debugfs directory [ 385.054244][ T6967] hsr_slave_0: entered promiscuous mode [ 385.072718][ T6967] hsr_slave_1: entered promiscuous mode [ 385.086218][ T6967] debugfs: 'hsr0' already exists in 'hsr' [ 385.102218][ T6967] Cannot create hsr debugfs directory [ 385.134274][ T6952] hsr_slave_0: entered promiscuous mode [ 385.616298][ T6952] hsr_slave_1: entered promiscuous mode [ 385.632308][ T6952] debugfs: 'hsr0' already exists in 'hsr' [ 385.645027][ T6952] Cannot create hsr debugfs directory [ 385.653070][ T7038] team0: Port device team_slave_0 added [ 385.924686][ T7038] team0: Port device team_slave_1 added [ 387.376720][ T7267] vivid-007: kernel_thread() failed [ 387.636943][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.661544][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.669998][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.679069][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.691704][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.777292][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.784253][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.813875][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.882966][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.890455][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.964821][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.365407][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.384847][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.181143][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 389.190243][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 389.206911][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 389.215249][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 389.223092][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 389.773756][ T5838] Bluetooth: hci4: command tx timeout [ 391.235168][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.243992][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.252991][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.267261][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.275389][ T5848] Bluetooth: hci1: command tx timeout [ 391.277278][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.844924][ T5835] Bluetooth: hci4: command tx timeout [ 392.418548][ T7038] hsr_slave_0: entered promiscuous mode [ 392.436050][ T7038] hsr_slave_1: entered promiscuous mode [ 392.448735][ T7038] debugfs: 'hsr0' already exists in 'hsr' [ 392.459624][ T7038] Cannot create hsr debugfs directory [ 393.009414][ T7317] loop0: detected capacity change from 0 to 2048 [ 393.112940][ T7321] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 393.361606][ T5835] Bluetooth: hci2: command tx timeout [ 393.388299][ T5838] Bluetooth: hci1: command tx timeout [ 393.925106][ T5838] Bluetooth: hci4: command tx timeout [ 394.322394][ T7321] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 394.342370][ T7321] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 394.358615][ T7321] Remounting filesystem read-only [ 395.036168][ T6017] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 395.072665][ T6017] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.435179][ T5838] Bluetooth: hci1: command tx timeout [ 395.445201][ T5838] Bluetooth: hci2: command tx timeout [ 397.352051][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 397.359203][ T5838] Bluetooth: hci4: command tx timeout [ 397.485271][ T7275] chnl_net:caif_netlink_parms(): no params data found [ 397.514913][ T5838] Bluetooth: hci2: command tx timeout [ 397.514928][ T5835] Bluetooth: hci1: command tx timeout [ 397.687428][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 398.589160][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.605073][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.612599][ T7291] bridge_slave_0: entered allmulticast mode [ 398.678036][ T7291] bridge_slave_0: entered promiscuous mode [ 398.861428][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.887538][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.935569][ T7291] bridge_slave_1: entered allmulticast mode [ 398.943826][ T7291] bridge_slave_1: entered promiscuous mode [ 399.157475][ T7372] random: crng reseeded on system resumption [ 399.184362][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.594905][ T5835] Bluetooth: hci2: command tx timeout [ 399.939289][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.955186][ T7275] bridge_slave_0: entered allmulticast mode [ 399.963325][ T7275] bridge_slave_0: entered promiscuous mode [ 400.203978][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.230270][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.261984][ T7275] bridge_slave_1: entered allmulticast mode [ 400.294991][ T7275] bridge_slave_1: entered promiscuous mode [ 403.570783][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.595130][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.602746][ T7305] bridge_slave_0: entered allmulticast mode [ 403.626490][ T7305] bridge_slave_0: entered promiscuous mode [ 403.656051][ T5981] bridge_slave_1: left allmulticast mode [ 403.661839][ T5981] bridge_slave_1: left promiscuous mode [ 403.667973][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.727648][ T5981] bridge_slave_0: left allmulticast mode [ 403.733314][ T5981] bridge_slave_0: left promiscuous mode [ 403.755915][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.807967][ T5981] bridge_slave_1: left allmulticast mode [ 403.835083][ T5981] bridge_slave_1: left promiscuous mode [ 403.840874][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.916486][ T5981] bridge_slave_0: left allmulticast mode [ 403.922272][ T5981] bridge_slave_0: left promiscuous mode [ 403.945546][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.038591][ T5981] bridge_slave_1: left allmulticast mode [ 404.044284][ T5981] bridge_slave_1: left promiscuous mode [ 404.095604][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.137095][ T5981] bridge_slave_0: left allmulticast mode [ 404.142875][ T5981] bridge_slave_0: left promiscuous mode [ 404.165131][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.248717][ T5981] bridge_slave_1: left allmulticast mode [ 404.274873][ T5981] bridge_slave_1: left promiscuous mode [ 404.354380][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.354443][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.417859][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.438172][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.450688][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.462803][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.259101][ T5981] bridge_slave_0: left allmulticast mode [ 405.285169][ T5981] bridge_slave_0: left promiscuous mode [ 405.290979][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.338585][ T5981] bridge_slave_1: left allmulticast mode [ 405.344246][ T5981] bridge_slave_1: left promiscuous mode [ 405.366042][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.457402][ T5981] bridge_slave_0: left allmulticast mode [ 405.463086][ T5981] bridge_slave_0: left promiscuous mode [ 405.515182][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.538821][ T5981] bridge_slave_1: left allmulticast mode [ 405.544467][ T5981] bridge_slave_1: left promiscuous mode [ 405.570857][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.593110][ T5981] bridge_slave_0: left allmulticast mode [ 405.604879][ T5981] bridge_slave_0: left promiscuous mode [ 405.610698][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.639312][ T5981] bridge_slave_1: left allmulticast mode [ 405.648499][ T5981] bridge_slave_1: left promiscuous mode [ 405.665245][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.713237][ T5981] bridge_slave_0: left allmulticast mode [ 405.748700][ T5981] bridge_slave_0: left promiscuous mode [ 405.812527][ T7401] random: crng reseeded on system resumption [ 405.877874][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.625378][ T5838] Bluetooth: hci0: command tx timeout [ 406.679383][ T7406] random: crng reseeded on system resumption [ 408.418124][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.448170][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.524053][ T5981] bond0 (unregistering): Released all slaves [ 408.634881][ T5838] Bluetooth: hci0: command tx timeout [ 409.906800][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.958520][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.999113][ T5981] bond0 (unregistering): Released all slaves [ 410.326462][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.353102][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.367374][ T5981] bond0 (unregistering): Released all slaves [ 410.715027][ T5838] Bluetooth: hci0: command tx timeout [ 412.073052][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.089382][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.103148][ T5981] bond0 (unregistering): Released all slaves [ 413.134947][ T5838] Bluetooth: hci0: command tx timeout [ 413.316973][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.330319][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.343149][ T5981] bond0 (unregistering): Released all slaves [ 413.682459][ T7436] random: crng reseeded on system resumption [ 414.819846][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.839454][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.958471][ T7440] FAT-fs (loop1): unable to read boot sector [ 415.179964][ T5981] bond0 (unregistering): Released all slaves [ 417.358997][ T7444] random: crng reseeded on system resumption [ 417.921411][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.956327][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.968041][ T5981] bond0 (unregistering): Released all slaves [ 417.968130][ T7451] loop2: detected capacity change from 0 to 2048 [ 418.019749][ T7452] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.023626][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.352737][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.366890][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.375102][ T7305] bridge_slave_1: entered allmulticast mode [ 418.384299][ T7305] bridge_slave_1: entered promiscuous mode [ 418.518487][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.547543][ T7275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.616192][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.699305][ T7452] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 418.710740][ T7452] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 418.721109][ T7452] Remounting filesystem read-only [ 418.726822][ T5832] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 418.737633][ T7275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.778127][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.883299][ T7291] team0: Port device team_slave_0 added [ 419.012963][ T7291] team0: Port device team_slave_1 added [ 419.099587][ T7305] team0: Port device team_slave_0 added [ 419.265569][ T7455] random: crng reseeded on system resumption [ 420.057902][ T7275] team0: Port device team_slave_0 added [ 420.105845][ T7305] team0: Port device team_slave_1 added [ 420.419170][ T7461] random: crng reseeded on system resumption [ 420.547816][ T7275] team0: Port device team_slave_1 added [ 421.238056][ T7467] random: crng reseeded on system resumption [ 421.284434][ T5981] hsr_slave_0: left promiscuous mode [ 421.322614][ T5981] hsr_slave_1: left promiscuous mode [ 421.370036][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.407966][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.603523][ T5981] hsr_slave_0: left promiscuous mode [ 421.616855][ T5981] hsr_slave_1: left promiscuous mode [ 421.623150][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.253444][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.701161][ T5981] hsr_slave_0: left promiscuous mode [ 422.710986][ T5981] hsr_slave_1: left promiscuous mode [ 422.717323][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.772710][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.553292][ T5981] hsr_slave_0: left promiscuous mode [ 423.574970][ T5981] hsr_slave_1: left promiscuous mode [ 423.581320][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.605805][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.630634][ T5981] hsr_slave_0: left promiscuous mode [ 423.637151][ T5981] hsr_slave_1: left promiscuous mode [ 423.643436][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.661697][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.676218][ T5981] hsr_slave_0: left promiscuous mode [ 423.682464][ T5981] hsr_slave_1: left promiscuous mode [ 423.689932][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.705702][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.720176][ T5981] hsr_slave_0: left promiscuous mode [ 423.727053][ T5981] hsr_slave_1: left promiscuous mode [ 423.733768][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.742425][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.088160][ T7481] random: crng reseeded on system resumption [ 425.147032][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 425.193810][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 425.635082][ T7492] random: crng reseeded on system resumption [ 426.787355][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 426.906235][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 427.019942][ T7498] random: crng reseeded on system resumption [ 429.573904][ T7494] loop0: detected capacity change from 0 to 32768 [ 429.670996][ T7494] [ 429.670996][ T7494] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 429.670996][ T7494] [ 429.686920][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 429.718313][ T7494] read_mapping_page failed! [ 429.723063][ T7494] diRead: read_metapage failed [ 429.768628][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 432.470945][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 432.519317][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 433.273312][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 433.441640][ T7512] FAT-fs (loop5): unable to read boot sector [ 434.113252][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 434.350152][ T7515] random: crng reseeded on system resumption [ 434.972558][ T7520] random: crng reseeded on system resumption [ 439.088357][ T7534] random: crng reseeded on system resumption [ 439.130303][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 439.402661][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 440.661806][ T7539] loop2: detected capacity change from 0 to 32768 [ 440.698345][ T7539] [ 440.698345][ T7539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.698345][ T7539] [ 440.772867][ T7537] [ 440.772867][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.772867][ T7537] [ 440.834960][ T7537] [ 440.834960][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.834960][ T7537] [ 440.848214][ T7537] [ 440.848214][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.848214][ T7537] [ 440.858910][ T7537] [ 440.858910][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.858910][ T7537] [ 440.885472][ T7537] [ 440.885472][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.885472][ T7537] [ 440.897093][ T7537] [ 440.897093][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.897093][ T7537] [ 440.909975][ T111] [ 440.909975][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.909975][ T111] [ 440.927066][ T7537] [ 440.927066][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.927066][ T7537] [ 440.937813][ T7537] [ 440.937813][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.937813][ T7537] [ 440.956149][ T7537] [ 440.956149][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.956149][ T7537] [ 440.978602][ T7537] [ 440.978602][ T7537] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 440.978602][ T7537] [ 441.018389][ T110] [ 441.018389][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.018389][ T110] [ 441.043523][ T7539] [ 441.043523][ T7539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.043523][ T7539] [ 441.066264][ T7539] [ 441.066264][ T7539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.066264][ T7539] [ 441.079566][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 441.089212][ T7539] [ 441.089212][ T7539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.089212][ T7539] [ 441.125464][ T7539] [ 441.125464][ T7539] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.125464][ T7539] [ 441.147363][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 441.157853][ T110] [ 441.157853][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.157853][ T110] [ 441.236583][ T4039] [ 441.236583][ T4039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.236583][ T4039] [ 441.247951][ T4039] [ 441.247951][ T4039] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.247951][ T4039] [ 441.261245][ T5832] [ 441.261245][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.261245][ T5832] [ 441.276103][ T5832] [ 441.276103][ T5832] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 441.276103][ T5832] [ 441.304872][ T110] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 441.316973][ T110] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 441.325398][ T110] CPU: 0 UID: 0 PID: 110 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 441.334530][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.344593][ T110] RIP: 0010:write_special_inodes+0xa9/0x170 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 441.350537][ T110] Code: 2e e8 4b 39 23 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 13 39 23 08 48 8d [ 441.370443][ T110] RSP: 0018:ffffc900026f7b58 EFLAGS: 00010216 [ 441.376524][ T110] RAX: 0000000000000006 RBX: ffff88805c76ac00 RCX: ffffffff81f664a5 [ 441.384793][ T110] RDX: ffff88801cfbdb80 RSI: ffffffff81f6641c RDI: 0000000000000030 [ 441.392774][ T110] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 441.400764][ T110] R10: 0000000000000000 R11: ffff88801cfbe6b0 R12: ffffffff81f665e0 [ 441.408839][ T110] R13: 0000000000000000 R14: ffff888053f2e800 R15: ffffc90002709112 [ 441.416821][ T110] FS: 0000000000000000(0000) GS:ffff8881248f3000(0000) knlGS:0000000000000000 [ 441.425758][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.432357][ T110] CR2: 000000110c2d179d CR3: 000000005e9cc000 CR4: 0000000000350ef0 [ 441.440330][ T110] Call Trace: [ 441.443608][ T110] [ 441.446631][ T110] lmLogSync+0xd2/0x820 [ 441.450818][ T110] ? __pfx_lmLogSync+0x10/0x10 [ 441.455643][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.461302][ T110] ? find_held_lock+0x2b/0x80 [ 441.466105][ T110] jfs_syncpt+0x89/0xa0 [ 441.470286][ T110] txEnd+0x30a/0x5a0 [ 441.474205][ T110] jfs_lazycommit+0x783/0xb30 [ 441.478915][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 441.484229][ T110] ? __pfx_default_wake_function+0x10/0x10 [ 441.490074][ T110] ? lockdep_hardirqs_on+0x7c/0x110 [ 441.495304][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.500959][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.506614][ T110] ? __kthread_parkme+0x19e/0x250 [ 441.511650][ T110] ? __pfx_jfs_lazycommit+0x10/0x10 [ 441.516888][ T110] kthread+0x3c5/0x780 [ 441.520984][ T110] ? __pfx_kthread+0x10/0x10 [ 441.525628][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.531284][ T110] ? rcu_is_watching+0x12/0xc0 [ 441.536122][ T110] ? __pfx_kthread+0x10/0x10 [ 441.540852][ T110] ret_from_fork+0x983/0xb10 [ 441.545466][ T110] ? __pfx_ret_from_fork+0x10/0x10 [ 441.550600][ T110] ? srso_alias_return_thunk+0x5/0xfbef5 [ 441.556252][ T110] ? __switch_to+0x7af/0x10d0 [ 441.561043][ T110] ? __pfx_kthread+0x10/0x10 [ 441.565823][ T110] ret_from_fork_asm+0x1a/0x30 [ 441.570814][ T110] [ 441.573833][ T110] Modules linked in: [ 441.578059][ T110] ---[ end trace 0000000000000000 ]--- [ 441.595795][ T110] RIP: 0010:write_special_inodes+0xa9/0x170 [ 441.602274][ T110] Code: 2e e8 4b 39 23 08 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 13 39 23 08 48 8d [ 441.628984][ T110] RSP: 0018:ffffc900026f7b58 EFLAGS: 00010216 [ 441.666572][ T110] RAX: 0000000000000006 RBX: ffff88805c76ac00 RCX: ffffffff81f664a5 [ 441.684833][ T110] RDX: ffff88801cfbdb80 RSI: ffffffff81f6641c RDI: 0000000000000030 [ 441.692846][ T110] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 441.721317][ T110] R10: 0000000000000000 R11: ffff88801cfbe6b0 R12: ffffffff81f665e0 [ 441.744844][ T110] R13: 0000000000000000 R14: ffff888053f2e800 R15: ffffc90002709112 [ 441.752942][ T110] FS: 0000000000000000(0000) GS:ffff8881248f3000(0000) knlGS:0000000000000000 [ 441.793963][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.807244][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.884776][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.891417][ T110] CR2: 000000110c2d179d CR3: 0000000031da9000 CR4: 0000000000350ef0 [ 441.943907][ T110] Kernel panic - not syncing: Fatal exception [ 441.950398][ T110] Kernel Offset: disabled [ 441.954718][ T110] Rebooting in 86400 seconds..