last executing test programs: 8m50.674959541s ago: executing program 3 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) 8m47.646743758s ago: executing program 3 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) close_range(r1, 0xffffffffffffffff, 0x0) 8m44.611451643s ago: executing program 3 (id=264): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0xeaff, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 8m42.465566702s ago: executing program 3 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_io_uring_setup(0x23d, &(0x7f0000000680)={0x0, 0x425e5, 0x10100, 0x3, 0x202e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r3, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000000)={0x0, {0x0, 0x0, @ofdm}}) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}}) 8m42.219980043s ago: executing program 3 (id=273): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m40.948375402s ago: executing program 3 (id=278): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r3, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8m25.696571038s ago: executing program 32 (id=278): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r3, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m40.500530715s ago: executing program 2 (id=539): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) lstat(&(0x7f0000000640)='.\x02/file0\x00', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0000000000000000000000000200"}, 0x2000000000001005, 0x19dff}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7fff}}, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29a}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getdents64(r0, &(0x7f0000001f80)=""/4108, 0x100c) 6m40.255588691s ago: executing program 2 (id=541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6m39.996343905s ago: executing program 2 (id=542): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x200021, 0x0) 6m38.937457875s ago: executing program 5 (id=543): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)=0xffffffffffffffff, 0x12) syz_open_dev$evdev(0x0, 0x0, 0x802) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r3, r0, 0x2, 0x3, 0x3}, 0x50) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 6m38.901483444s ago: executing program 2 (id=544): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0xc2040) ioctl$KDENABIO(r1, 0x4b36) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002300), 0x22040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000023c0)={0x0, 0x1100, &(0x7f0000002380)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xa890}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80040}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000001d80)={0x2, 0x4e21, @broadcast}, 0x10) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000002340)=0xa78c045e6826a5f9) ioctl$TIOCNXCL(r2, 0x540d) 6m38.695776899s ago: executing program 2 (id=545): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22ffe2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) close(r0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r3, 0x2000002, 0x88, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m38.588631814s ago: executing program 5 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf94d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30, 0x84}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x7, 0x3f0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 6m38.52769245s ago: executing program 2 (id=547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) 6m37.402807968s ago: executing program 5 (id=548): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) 6m36.199941327s ago: executing program 5 (id=551): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r2, 0xa, 0x21) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x122) close_range(r2, 0xffffffffffffffff, 0x0) 6m32.772596938s ago: executing program 5 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 6m31.232512219s ago: executing program 5 (id=561): open(0x0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x50, 0x0, &(0x7f0000000140)) 6m22.475388181s ago: executing program 33 (id=547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) 6m15.198112279s ago: executing program 34 (id=561): open(0x0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x50, 0x0, &(0x7f0000000140)) 5m18.080172109s ago: executing program 1 (id=690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) 5m15.687157305s ago: executing program 1 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x401, "5debca56de5667430241dbfaf876b2ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 5m13.168482562s ago: executing program 1 (id=698): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8], 0x1, 0x37c, &(0x7f0000001680)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x2}, 0x1c) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002d40)={0x2, 0x0, [{0x9000, 0x78, &(0x7f0000001b00)=""/120}, {0x1, 0xe6, &(0x7f0000001b80)=""/230}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5m12.452414865s ago: executing program 1 (id=700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001040)=0x6) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cff", 0x45, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}}) 5m9.274646347s ago: executing program 1 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00073c002400000000000100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 5m4.764002936s ago: executing program 1 (id=711): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x40080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0xff, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @local}]}, &(0x7f0000000240)=0x10) 4m47.800660461s ago: executing program 35 (id=711): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x40080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0xff, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @local}]}, &(0x7f0000000240)=0x10) 3m57.018779185s ago: executing program 6 (id=813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='c::;\xf8\x81N\x80\x1a\x81\x85L\x89\xb4\xb6;o$:\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3m55.181961836s ago: executing program 6 (id=815): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 3m53.597239193s ago: executing program 6 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630afcff000000009500"], &(0x7f0000000100)='GPL\x00'}, 0x94) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m50.015759045s ago: executing program 6 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) unshare(0x2c020400) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0xc, @empty, 0x1}}, 0x6, 0x3}, &(0x7f0000000180)=0x90) 3m48.949616348s ago: executing program 6 (id=821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) 3m48.765226299s ago: executing program 6 (id=822): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) 3m33.247024025s ago: executing program 36 (id=822): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) 9.185196367s ago: executing program 4 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 8.104676686s ago: executing program 0 (id=1090): r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000740)={&(0x7f0000000440)=[0x0, 0x0], 0x0, 0x2, r5}) fcntl$setlease(r0, 0x400, 0x2) 8.067799541s ago: executing program 4 (id=1091): socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.037162556s ago: executing program 0 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000004}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000240), 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) ptrace$peek(0xffffffffffffffff, r0, 0x0) userfaultfd(0x1) 5.664091815s ago: executing program 0 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) unshare(0x28000600) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000003080)=0xfffffffffffffd10) writev(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000f80)="56da", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f00000001c0)='./file3\x00', 0x8cc8, &(0x7f0000000280)={[{@noacl}, {@cache_strategy_disabled}, {@cache_strategy_readahead}, {@dax_always}, {@dax_never}, {@nouser_xattr}, {@noacl}]}, 0x1, 0x174, &(0x7f00000003c0)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") 5.404518515s ago: executing program 4 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) io_setup(0x7, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r3, 0x4, 0x7c00) dup3(r4, r3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x4000084) 3.797796185s ago: executing program 4 (id=1095): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="7ce4", 0x2}], 0x1, 0x0, 0x0, 0x40011}, 0x20048000) accept4(r4, 0x0, 0x0, 0x0) 3.70839434s ago: executing program 0 (id=1096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = io_uring_setup(0x197b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2.07550772s ago: executing program 0 (id=1097): epoll_create(0x7) lseek(0xffffffffffffffff, 0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) socket(0x10, 0x3, 0x0) socket(0x26, 0x803, 0x0) 2.055274182s ago: executing program 4 (id=1098): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) r6 = fanotify_init(0x4, 0x1000) fanotify_mark(r6, 0x2, 0x40001012, r5, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) 876.76528ms ago: executing program 4 (id=1099): syz_open_dev$sndctrl(0x0, 0x9, 0x400000) eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r3, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x2, 0xc1}) 0s ago: executing program 0 (id=1100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): 81] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.917204][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.139012][ T8281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.177345][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.185924][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.212422][ T8281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.366965][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.374446][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.338333][ T8572] loop6: detected capacity change from 0 to 2048 [ 388.372402][ T8572] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 388.423722][ T8572] UDF-fs: Scanning with blocksize 512 failed [ 388.504943][ T8572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.534721][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.567909][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.872753][ T6799] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.230540][ T8281] hsr_slave_0: entered promiscuous mode [ 389.237209][ T8281] hsr_slave_1: entered promiscuous mode [ 390.247455][ T8281] debugfs: 'hsr0' already exists in 'hsr' [ 390.257516][ T8281] Cannot create hsr debugfs directory [ 390.658524][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.683820][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.712408][ T6799] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.263880][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.894336][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.966280][ T6799] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.239633][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.664'. [ 397.953669][ T31] audit: type=1804 audit(1770971487.283:11): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.668" name="bus" dev="ramfs" ino=18172 res=1 errno=0 [ 398.070702][ T31] audit: type=1804 audit(1770971487.283:12): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.668" name="bus" dev="ramfs" ino=18172 res=1 errno=0 [ 398.306100][ T8244] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 398.338601][ T8244] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.359169][ T31] audit: type=1326 audit(1770971487.693:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f19bf79 code=0x0 [ 398.412023][ T8244] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 398.445024][ T8244] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 398.708293][ T6799] bridge_slave_1: left allmulticast mode [ 398.724397][ T6799] bridge_slave_1: left promiscuous mode [ 398.743514][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.813100][ T6799] bridge_slave_0: left allmulticast mode [ 398.828126][ T6799] bridge_slave_0: left promiscuous mode [ 398.844324][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.983867][ T8704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.999168][ T8716] loop4: detected capacity change from 0 to 256 [ 402.006947][ T8716] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 403.039683][ T8716] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.620796][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.794201][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.849379][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 404.858153][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 404.866324][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 404.874419][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 404.884196][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 405.762737][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 405.928938][ T6799] bond0 (unregistering): Released all slaves [ 406.577101][ T8281] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 406.681823][ T8281] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 407.031858][ T5827] Bluetooth: hci6: command tx timeout [ 407.398262][ T8281] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 408.653287][ T8281] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 409.610377][ T5827] Bluetooth: hci6: command tx timeout [ 409.647069][ T8774] loop6: detected capacity change from 0 to 1024 [ 409.889019][ T8774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.691816][ T8774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.910393][ T5827] Bluetooth: hci6: command tx timeout [ 412.081034][ T8281] kthread_run failed with err -4 [ 412.111977][ T8739] lo speed is unknown, defaulting to 1000 [ 412.257481][ T8798] loop0: detected capacity change from 0 to 128 [ 412.518867][ T7647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.544233][ T8798] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.596782][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 412.605472][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 412.613716][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 412.622683][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 412.631265][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 412.800553][ T8798] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.980693][ T5827] Bluetooth: hci6: command tx timeout [ 414.729896][ T5832] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 414.784810][ T5827] Bluetooth: hci7: command tx timeout [ 416.046965][ T8811] bridge1: entered promiscuous mode [ 417.016197][ T5827] Bluetooth: hci7: command tx timeout [ 420.326196][ T5836] Bluetooth: hci7: command tx timeout [ 421.830395][ T8804] lo speed is unknown, defaulting to 1000 [ 422.839650][ T5836] Bluetooth: hci7: command tx timeout [ 423.590881][ T6799] hsr_slave_0: left promiscuous mode [ 424.388695][ T6799] hsr_slave_1: left promiscuous mode [ 424.430576][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.482677][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.518602][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.542909][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.522457][ T6799] veth1_macvtap: left promiscuous mode [ 425.527981][ T6799] veth0_macvtap: left promiscuous mode [ 425.608581][ T6799] veth1_vlan: left promiscuous mode [ 425.631472][ T6799] veth0_vlan: left promiscuous mode [ 425.719169][ T8898] fuse: Bad value for 'group_id' [ 425.759466][ T8898] fuse: Bad value for 'group_id' [ 425.811385][ T8902] overlayfs: failed to resolve './bus': -2 [ 427.744560][ T8919] loop0: detected capacity change from 0 to 256 [ 427.764704][ T8919] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 427.821596][ T8919] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 428.834525][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.709'. [ 429.930521][ T8918] loop4: detected capacity change from 0 to 64 [ 429.997868][ T8914] ALSA: seq fatal error: cannot create timer (-19) [ 431.358519][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 431.425284][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 433.200904][ T5921] lo speed is unknown, defaulting to 1000 [ 433.206774][ T5921] infiniband syz0: ib_query_port failed (-19) [ 434.057178][ T8950] loop0: detected capacity change from 0 to 512 [ 434.063746][ T8739] chnl_net:caif_netlink_parms(): no params data found [ 434.072152][ T8869] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 434.101300][ T8950] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 434.125586][ T8869] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 434.343106][ T31] audit: type=1326 audit(1770971523.483:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 435.248688][ T8869] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 435.410561][ T31] audit: type=1326 audit(1770971523.483:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 435.510249][ T6797] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 435.533681][ T31] audit: type=1326 audit(1770971523.483:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 437.202123][ T31] audit: type=1326 audit(1770971523.483:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 437.225377][ T31] audit: type=1326 audit(1770971523.483:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 437.247562][ T31] audit: type=1326 audit(1770971523.483:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 437.539092][ T31] audit: type=1326 audit(1770971523.483:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 438.360396][ T31] audit: type=1326 audit(1770971523.483:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 438.382897][ T31] audit: type=1326 audit(1770971523.483:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 438.700413][ T31] audit: type=1326 audit(1770971523.483:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 439.672747][ T31] audit: type=1326 audit(1770971523.483:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 439.799345][ T31] audit: type=1326 audit(1770971523.483:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 440.030407][ T31] audit: type=1326 audit(1770971523.483:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 440.060634][ T31] audit: type=1326 audit(1770971523.483:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 440.084892][ T31] audit: type=1326 audit(1770971523.483:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 440.698434][ T31] audit: type=1326 audit(1770971523.483:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 440.726102][ T31] audit: type=1326 audit(1770971523.493:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 441.290401][ T31] audit: type=1326 audit(1770971523.493:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 441.386535][ T31] audit: type=1326 audit(1770971523.493:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 441.429139][ T6943] syz_tun (unregistering): left allmulticast mode [ 441.461244][ T31] audit: type=1326 audit(1770971523.493:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 441.501180][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 441.521300][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.528535][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 441.695839][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.703192][ T8739] bridge_slave_0: entered allmulticast mode [ 441.711369][ T8739] bridge_slave_0: entered promiscuous mode [ 442.068585][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.480501][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.488483][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.556750][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.615315][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.656347][ T8739] bridge_slave_1: entered allmulticast mode [ 442.715911][ T8739] bridge_slave_1: entered promiscuous mode [ 443.105142][ T8739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.730989][ T8804] chnl_net:caif_netlink_parms(): no params data found [ 444.980458][ T5839] Bluetooth: hci1: command tx timeout [ 444.988466][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.995192][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.479799][ T8739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.705262][ T8739] team0: Port device team_slave_0 added [ 446.893410][ T8739] team0: Port device team_slave_1 added [ 448.952292][ T5836] Bluetooth: hci1: command tx timeout [ 449.176054][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.220493][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.266238][ T8739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.421539][ T6799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.525252][ T8804] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.532467][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.539639][ T8804] bridge_slave_0: entered allmulticast mode [ 449.548073][ T8804] bridge_slave_0: entered promiscuous mode [ 449.671681][ T5955] IPVS: starting estimator thread 0... [ 449.725189][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.763413][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.821224][ T9059] IPVS: using max 22 ests per chain, 52800 per kthread [ 449.927059][ T8739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.615050][ T9071] netlink: 200 bytes leftover after parsing attributes in process `syz.4.750'. [ 450.779648][ T9072] o2cb: This node has not been configured. [ 450.785703][ T9072] o2cb: Cluster check failed. Fix errors before retrying. [ 450.793124][ T9072] (syz.6.752,9072,0):user_dlm_register:674 ERROR: status = -22 [ 450.800775][ T9072] (syz.6.752,9072,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 451.076053][ T6799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.090440][ T5839] Bluetooth: hci1: command tx timeout [ 451.291922][ T8804] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.330619][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.338833][ T8804] bridge_slave_1: entered allmulticast mode [ 451.511505][ T8804] bridge_slave_1: entered promiscuous mode [ 452.610088][ T8804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.681864][ T8804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.804640][ T8739] hsr_slave_0: entered promiscuous mode [ 452.821636][ T8739] hsr_slave_1: entered promiscuous mode [ 452.859101][ T8739] debugfs: 'hsr0' already exists in 'hsr' [ 452.883600][ T8739] Cannot create hsr debugfs directory [ 453.101076][ T5839] Bluetooth: hci1: command tx timeout [ 454.915494][ T8804] team0: Port device team_slave_0 added [ 454.955562][ T8804] team0: Port device team_slave_1 added [ 455.044627][ T9114] loop0: detected capacity change from 0 to 128 [ 455.117234][ T9114] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.199828][ T9114] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.210190][ T5832] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.304017][ T6799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.513579][ T9127] loop6: detected capacity change from 0 to 256 [ 457.599865][ T9127] dlm: no local IP address has been set [ 457.606143][ T9127] dlm: cannot start dlm midcomms -107 [ 457.694084][ T6799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.771195][ T8804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.800448][ T8804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.870406][ T8804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.926789][ T8993] chnl_net:caif_netlink_parms(): no params data found [ 457.982116][ T8804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.989084][ T8804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.084477][ T8804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.765658][ T8804] hsr_slave_0: entered promiscuous mode [ 459.811785][ T8804] hsr_slave_1: entered promiscuous mode [ 459.848107][ T8804] debugfs: 'hsr0' already exists in 'hsr' [ 459.897861][ T8804] Cannot create hsr debugfs directory [ 460.131833][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.148383][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.171303][ T8993] bridge_slave_0: entered allmulticast mode [ 460.182486][ T8993] bridge_slave_0: entered promiscuous mode [ 460.366814][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.394480][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.410721][ T8993] bridge_slave_1: entered allmulticast mode [ 460.425609][ T8993] bridge_slave_1: entered promiscuous mode [ 460.549762][ T9163] loop6: detected capacity change from 0 to 4096 [ 460.640271][ T9163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.453992][ T8993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.456958][ T8993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.588096][ T7647] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.962547][ T8993] team0: Port device team_slave_0 added [ 464.162929][ T8993] team0: Port device team_slave_1 added [ 465.440432][ T9205] mmap: syz.0.773 (9205) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 466.182320][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 466.207403][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 466.215941][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 466.237604][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 466.245449][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 466.345367][ T9188] syzkaller0: entered promiscuous mode [ 466.357092][ T9188] syzkaller0: entered allmulticast mode [ 467.880766][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.898408][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 467.899304][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.951270][ T8993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.088038][ T5839] Bluetooth: hci3: command tx timeout [ 469.089708][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.102602][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.563501][ T8993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.828521][ T5839] Bluetooth: hci2: unexpected event 0x0f length: 18 > 4 [ 469.829616][ T5839] Bluetooth: hci2: unexpected event for opcode 0x0803 [ 469.952036][ T8993] hsr_slave_0: entered promiscuous mode [ 469.979404][ T8993] hsr_slave_1: entered promiscuous mode [ 470.035779][ T8993] debugfs: 'hsr0' already exists in 'hsr' [ 470.054701][ T8993] Cannot create hsr debugfs directory [ 470.441859][ T9236] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 470.469954][ T9236] CIFS: Unable to determine destination address [ 470.827232][ T9238] ufs: You didn't specify the type of your ufs filesystem [ 470.827232][ T9238] [ 470.827232][ T9238] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 470.827232][ T9238] [ 470.827232][ T9238] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 470.861164][ T9238] ufs: ufstype=old is supported read-only [ 471.111666][ T9238] ufs: ufs_fill_super(): bad magic number [ 471.150949][ T5839] Bluetooth: hci3: command tx timeout [ 473.183376][ T5839] Bluetooth: hci3: command tx timeout [ 473.905315][ T5839] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 473.914043][ T5839] Bluetooth: hci2: Injecting HCI hardware error event [ 473.924932][ T5839] Bluetooth: hci2: hardware error 0x00 [ 475.261061][ T5836] Bluetooth: hci3: command tx timeout [ 475.553260][ T9271] loop6: detected capacity change from 0 to 40427 [ 475.980410][ T5839] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 476.020198][ T9271] F2FS-fs (loop6): invalid crc value [ 476.150142][ T9271] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 476.162081][ T9271] F2FS-fs (loop6): Start checkpoint disabled! [ 476.184685][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 476.194962][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 476.203485][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 476.219496][ T9271] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 476.219498][ T6799] bridge_slave_1: left allmulticast mode [ 476.235416][ T9271] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 476.239932][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 476.254917][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 476.258523][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 476.258539][ T31] audit: type=1800 audit(1770971565.593:48): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.790" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 476.263391][ T6799] bridge_slave_1: left promiscuous mode [ 476.294414][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.503143][ T6799] bridge_slave_0: left allmulticast mode [ 476.632458][ T9282] syz.6.790: attempt to access beyond end of device [ 476.632458][ T9282] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 476.655367][ T9282] syz.6.790: attempt to access beyond end of device [ 476.655367][ T9282] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 476.679219][ T9282] syz.6.790: attempt to access beyond end of device [ 476.679219][ T9282] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 476.696208][ T9282] syz.6.790: attempt to access beyond end of device [ 476.696208][ T9282] loop6: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 476.712977][ T9282] syz.6.790: attempt to access beyond end of device [ 476.712977][ T9282] loop6: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 476.733753][ T9282] syz.6.790: attempt to access beyond end of device [ 476.733753][ T9282] loop6: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 476.796159][ T9282] syz.6.790: attempt to access beyond end of device [ 476.796159][ T9282] loop6: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 476.814015][ T9282] syz.6.790: attempt to access beyond end of device [ 476.814015][ T9282] loop6: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 476.831313][ T9282] syz.6.790: attempt to access beyond end of device [ 476.831313][ T9282] loop6: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 476.850774][ T9282] syz.6.790: attempt to access beyond end of device [ 476.850774][ T9282] loop6: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 477.111474][ T6799] bridge_slave_0: left promiscuous mode [ 477.124771][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.177754][ T6799] bridge_slave_1: left allmulticast mode [ 477.211862][ T6799] bridge_slave_1: left promiscuous mode [ 477.219629][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.411579][ T6799] bridge_slave_0: left allmulticast mode [ 477.418988][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 477.419018][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 477.419033][ T13] Workqueue: writeback wb_workfn (flush-7:6) [ 477.419078][ T13] Call Trace: [ 477.419087][ T13] [ 477.419097][ T13] dump_stack_lvl+0xe8/0x150 [ 477.419135][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 477.419171][ T13] f2fs_write_end_io+0xc1d/0xfd0 [ 477.419220][ T13] __submit_merged_bio+0x256/0x650 [ 477.419254][ T13] __submit_merged_write_cond+0x269/0x530 [ 477.419304][ T13] f2fs_write_data_pages+0x280b/0x3360 [ 477.419372][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 477.419417][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 477.419490][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 477.419541][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.419570][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 477.419621][ T13] ? f2fs_write_inode+0x3fb/0x5f0 [ 477.419652][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 477.419683][ T13] do_writepages+0x32e/0x550 [ 477.419720][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.419750][ T13] ? reacquire_held_locks+0x104/0x190 [ 477.419783][ T13] ? writeback_sb_inodes+0x42a/0x1940 [ 477.419816][ T13] __writeback_single_inode+0x133/0x1060 [ 477.419845][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 477.419889][ T13] writeback_sb_inodes+0x92e/0x1940 [ 477.419921][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 477.419979][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 477.420002][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.420085][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420114][ T13] ? rcu_is_watching+0x15/0xb0 [ 477.420146][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420185][ T13] wb_writeback+0x445/0xad0 [ 477.420215][ T13] ? queue_io+0x1e1/0x450 [ 477.420249][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 477.420271][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.420333][ T13] wb_workfn+0x3f8/0xef0 [ 477.420365][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420394][ T13] ? look_up_lock_class+0x57/0x110 [ 477.420440][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 477.420474][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420507][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420542][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.420578][ T13] ? lock_acquire+0x106/0x330 [ 477.420608][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 477.420650][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420682][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420715][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420747][ T13] ? process_scheduled_works+0xa0f/0x17a0 [ 477.420773][ T13] ? process_scheduled_works+0xa0f/0x17a0 [ 477.420802][ T13] process_scheduled_works+0xaec/0x17a0 [ 477.420856][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.420889][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.420914][ T13] ? assign_work+0x3d5/0x5e0 [ 477.420945][ T13] worker_thread+0xa50/0xfc0 [ 477.420990][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.421025][ T13] kthread+0x388/0x470 [ 477.421058][ T13] ? __pfx_worker_thread+0x10/0x10 [ 477.421083][ T13] ? __pfx_kthread+0x10/0x10 [ 477.421117][ T13] ret_from_fork+0x51e/0xb90 [ 477.421147][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 477.421172][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 477.421197][ T13] ? __switch_to+0xc7d/0x1400 [ 477.421224][ T13] ? __pfx_kthread+0x10/0x10 [ 477.421258][ T13] ret_from_fork_asm+0x1a/0x30 [ 477.421308][ T13] [ 477.490429][ T6799] bridge_slave_0: left promiscuous mode [ 477.537781][ T13] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 477.620786][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.919261][ T6799] bridge_slave_1: left allmulticast mode [ 477.925274][ T6799] bridge_slave_1: left promiscuous mode [ 477.941854][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.972872][ T6799] bridge_slave_0: left allmulticast mode [ 477.980564][ T6799] bridge_slave_0: left promiscuous mode [ 477.992239][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.327173][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.343943][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.367975][ T6799] bond0 (unregistering): Released all slaves [ 478.542200][ T5839] Bluetooth: hci4: command tx timeout [ 479.066901][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.106338][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.122924][ T6799] bond0 (unregistering): Released all slaves [ 479.447997][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.506059][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.523447][ T6799] bond0 (unregistering): Released all slaves [ 480.660982][ T5839] Bluetooth: hci4: command tx timeout [ 482.720496][ T5839] Bluetooth: hci4: command tx timeout [ 483.632389][ T9328] ALSA: mixer_oss: invalid OSS volume '' [ 484.780921][ T5839] Bluetooth: hci4: command tx timeout [ 486.250171][ T9203] chnl_net:caif_netlink_parms(): no params data found [ 487.909462][ T31] audit: type=1804 audit(1770971577.243:49): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.810" name="/newroot/171/file1" dev="fuse" ino=1 res=1 errno=0 [ 488.030905][ T6799] hsr_slave_0: left promiscuous mode [ 488.320478][ T6799] hsr_slave_1: left promiscuous mode [ 488.947036][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.985680][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.064024][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.110357][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.326843][ T6799] hsr_slave_0: left promiscuous mode [ 489.390359][ T9386] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 490.368021][ T6799] hsr_slave_1: left promiscuous mode [ 490.388313][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.413666][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.801250][ T6799] hsr_slave_0: left promiscuous mode [ 491.820558][ T6799] hsr_slave_1: left promiscuous mode [ 491.840510][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.874223][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.078519][ T6799] veth1_macvtap: left promiscuous mode [ 492.086664][ T6799] veth0_macvtap: left promiscuous mode [ 492.100534][ T6799] veth1_vlan: left promiscuous mode [ 492.105778][ T6799] veth0_vlan: left promiscuous mode [ 493.254136][ T5955] IPVS: starting estimator thread 0... [ 493.350653][ T9404] IPVS: using max 28 ests per chain, 67200 per kthread [ 493.911169][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 493.973658][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 494.563331][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 495.353432][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 496.459579][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 496.492629][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 498.203270][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 498.217022][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 498.224954][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 498.233060][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 498.247306][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 500.705358][ T5839] Bluetooth: hci6: command tx timeout [ 502.790980][ T5839] Bluetooth: hci6: command tx timeout [ 503.176560][ T9203] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.252058][ T9203] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.270106][ T9203] bridge_slave_0: entered allmulticast mode [ 503.520824][ T9203] bridge_slave_0: entered promiscuous mode [ 504.293373][ T9203] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.352258][ T9203] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.359507][ T9203] bridge_slave_1: entered allmulticast mode [ 505.330226][ T5839] Bluetooth: hci6: command tx timeout [ 507.003545][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.210360][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.240920][ T9203] bridge_slave_1: entered promiscuous mode [ 507.340410][ T5839] Bluetooth: hci6: command tx timeout [ 507.938221][ T9203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.889720][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 509.053734][ T9203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.801894][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.837533][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.863531][ T9277] bridge_slave_0: entered allmulticast mode [ 509.875543][ T9277] bridge_slave_0: entered promiscuous mode [ 509.941094][ T9203] team0: Port device team_slave_0 added [ 509.961877][ T9203] team0: Port device team_slave_1 added [ 509.967770][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.999307][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.024450][ T9277] bridge_slave_1: entered allmulticast mode [ 510.044265][ T9277] bridge_slave_1: entered promiscuous mode [ 510.848355][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.883905][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.924849][ T9203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.954760][ T9203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.997192][ T9203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.039285][ T9203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.056943][ T9203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.085387][ T9203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.357648][ T9277] team0: Port device team_slave_0 added [ 511.669089][ T9203] hsr_slave_0: entered promiscuous mode [ 511.736582][ T9203] hsr_slave_1: entered promiscuous mode [ 511.807369][ T9203] debugfs: 'hsr0' already exists in 'hsr' [ 511.838021][ T9203] Cannot create hsr debugfs directory [ 512.248177][ T9277] team0: Port device team_slave_1 added [ 513.435180][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.501024][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.583030][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.612546][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 513.630908][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 513.639796][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 513.652370][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 513.803823][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.597863][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.618432][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.689598][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.819712][ T9551] loop4: detected capacity change from 0 to 512 [ 515.914689][ T9432] chnl_net:caif_netlink_parms(): no params data found [ 515.927455][ T31] audit: type=1800 audit(1770971605.243:50): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.846" name="file2" dev="loop4" ino=1048651 res=0 errno=0 [ 516.462212][ T5839] Bluetooth: hci1: command tx timeout [ 517.353054][ T9277] hsr_slave_0: entered promiscuous mode [ 517.377809][ T9277] hsr_slave_1: entered promiscuous mode [ 517.489677][ T9559] loop4: detected capacity change from 0 to 512 [ 518.109307][ T9277] debugfs: 'hsr0' already exists in 'hsr' [ 518.128984][ T9277] Cannot create hsr debugfs directory [ 518.540386][ T5839] Bluetooth: hci1: command tx timeout [ 519.305129][ T9570] loop0: detected capacity change from 0 to 4096 [ 519.309565][ T9432] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.329455][ T9432] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.373138][ T9432] bridge_slave_0: entered allmulticast mode [ 519.383033][ T9432] bridge_slave_0: entered promiscuous mode [ 519.398900][ T9432] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.406971][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.437449][ T9432] bridge_slave_1: entered allmulticast mode [ 519.478878][ T9432] bridge_slave_1: entered promiscuous mode [ 519.542488][ T31] audit: type=1800 audit(1770971608.883:51): pid=9573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.849" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 520.407455][ T9578] loop0: detected capacity change from 0 to 128 [ 520.423936][ T9432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.497924][ T9578] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.561572][ T9578] ext4 filesystem being mounted at /176/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 520.628616][ T5839] Bluetooth: hci1: command tx timeout [ 520.670816][ T9432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.288407][ T9203] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 521.334556][ T6799] bridge_slave_1: left allmulticast mode [ 521.341347][ T6799] bridge_slave_1: left promiscuous mode [ 521.347096][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.358329][ T6799] bridge_slave_0: left allmulticast mode [ 521.364207][ T6799] bridge_slave_0: left promiscuous mode [ 521.370052][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.383390][ T6799] bridge_slave_1: left allmulticast mode [ 521.389033][ T6799] bridge_slave_1: left promiscuous mode [ 521.397669][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.408628][ T6799] bridge_slave_0: left allmulticast mode [ 521.418659][ T6799] bridge_slave_0: left promiscuous mode [ 521.425557][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.438136][ T6799] bridge_slave_1: left allmulticast mode [ 521.444076][ T6799] bridge_slave_1: left promiscuous mode [ 521.449816][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.462704][ T6799] bridge_slave_0: left allmulticast mode [ 521.468459][ T6799] bridge_slave_0: left promiscuous mode [ 521.474592][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.528106][ T5832] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.746545][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.943292][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.982266][ T6799] bond0 (unregistering): Released all slaves [ 522.514088][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.549331][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.576056][ T6799] bond0 (unregistering): Released all slaves [ 522.703493][ T5839] Bluetooth: hci1: command tx timeout [ 522.872244][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.889572][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.939870][ T6799] bond0 (unregistering): Released all slaves [ 523.202382][ T9203] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 523.230059][ T9203] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 524.105808][ T9432] team0: Port device team_slave_0 added [ 524.120749][ T9203] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 524.446190][ T9432] team0: Port device team_slave_1 added [ 525.254382][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 525.269122][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 525.289331][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 525.307321][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.330359][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.359400][ T9532] chnl_net:caif_netlink_parms(): no params data found [ 527.500487][ T5839] Bluetooth: hci2: command tx timeout [ 527.693416][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.700937][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.728235][ T9432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.180993][ T6799] hsr_slave_0: left promiscuous mode [ 528.205190][ T6799] hsr_slave_1: left promiscuous mode [ 528.225647][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.251780][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.269062][ T6799] hsr_slave_0: left promiscuous mode [ 528.308873][ T6799] hsr_slave_1: left promiscuous mode [ 528.323876][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.365202][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.394372][ T6799] hsr_slave_0: left promiscuous mode [ 528.407176][ T6799] hsr_slave_1: left promiscuous mode [ 528.417470][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.430249][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.580422][ T5839] Bluetooth: hci2: command tx timeout [ 529.750054][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 529.791139][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 529.885868][ T9670] affs: No valid root block on device nullb0 [ 531.848864][ T5839] Bluetooth: hci2: command tx timeout [ 533.035592][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 533.071626][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 533.329185][ T9704] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 533.973598][ T5839] Bluetooth: hci2: command tx timeout [ 534.171342][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 534.183796][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 534.194335][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 534.217105][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 534.235587][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 534.317558][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 534.336297][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 534.501523][ T9432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.508518][ T9432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.541059][ T9432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.561350][ T9277] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 535.541334][ T9277] netdevsim netdevsim8 netdevsim0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 535.703946][ T9697] tipc: Enabling of bearer rejected, failed to enable media [ 536.030910][ T9432] hsr_slave_0: entered promiscuous mode [ 536.051487][ T9432] hsr_slave_1: entered promiscuous mode [ 536.071537][ T9432] debugfs: 'hsr0' already exists in 'hsr' [ 536.097588][ T9432] Cannot create hsr debugfs directory [ 536.138168][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.170741][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.177992][ T9532] bridge_slave_0: entered allmulticast mode [ 536.225383][ T9532] bridge_slave_0: entered promiscuous mode [ 536.302572][ T5836] Bluetooth: hci3: command tx timeout [ 536.355195][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.370492][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.387260][ T9532] bridge_slave_1: entered allmulticast mode [ 536.404714][ T9532] bridge_slave_1: entered promiscuous mode [ 536.957229][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.625454][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.942312][ T9532] team0: Port device team_slave_0 added [ 538.017952][ T9532] team0: Port device team_slave_1 added [ 538.074545][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.081652][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.107922][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.234373][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.255199][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.284379][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.380566][ T5836] Bluetooth: hci3: command tx timeout [ 538.461094][ T9532] hsr_slave_0: entered promiscuous mode [ 538.468286][ T9532] hsr_slave_1: entered promiscuous mode [ 538.474689][ T9532] debugfs: 'hsr0' already exists in 'hsr' [ 538.482580][ T9532] Cannot create hsr debugfs directory [ 538.736109][ T9714] chnl_net:caif_netlink_parms(): no params data found [ 538.900756][ T9622] chnl_net:caif_netlink_parms(): no params data found [ 539.830862][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.849146][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.871507][ T9714] bridge_slave_0: entered allmulticast mode [ 539.880192][ T9714] bridge_slave_0: entered promiscuous mode [ 539.919127][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.927361][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.935034][ T9714] bridge_slave_1: entered allmulticast mode [ 539.971398][ T9714] bridge_slave_1: entered promiscuous mode [ 540.454940][ T9622] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.476322][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.485172][ T5836] Bluetooth: hci3: command tx timeout [ 540.510219][ T9622] bridge_slave_0: entered allmulticast mode [ 540.538242][ T9622] bridge_slave_0: entered promiscuous mode [ 540.925106][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.932870][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.941436][ T9622] bridge_slave_1: entered allmulticast mode [ 540.949519][ T9622] bridge_slave_1: entered promiscuous mode [ 540.997665][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.024669][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.346242][ T9432] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 541.463654][ T9791] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 542.550927][ T5836] Bluetooth: hci3: command tx timeout [ 543.156802][ T9432] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 544.178623][ T9432] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 544.437125][ T9714] team0: Port device team_slave_0 added [ 544.456413][ T9622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.470722][ T9622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.081223][ T9432] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 546.271396][ T9714] team0: Port device team_slave_1 added [ 547.372723][ T9622] team0: Port device team_slave_0 added [ 548.742638][ T9622] team0: Port device team_slave_1 added [ 548.869641][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.887917][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.917105][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.930117][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.937343][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.963392][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.623268][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.630231][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.691826][ T9622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.804856][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.812467][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.882521][ T9622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.942437][ T9714] hsr_slave_0: entered promiscuous mode [ 549.950023][ T9714] hsr_slave_1: entered promiscuous mode [ 549.974262][ T9714] debugfs: 'hsr0' already exists in 'hsr' [ 549.980010][ T9714] Cannot create hsr debugfs directory [ 550.685633][ T9622] hsr_slave_0: entered promiscuous mode [ 550.705297][ T9622] hsr_slave_1: entered promiscuous mode [ 550.721960][ T9622] debugfs: 'hsr0' already exists in 'hsr' [ 550.733341][ T9622] Cannot create hsr debugfs directory [ 551.502680][ T9532] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.524090][ T9532] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 551.596639][ T9432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.661360][ T9532] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 551.734704][ T9532] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 551.899438][ T9432] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.144149][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.151323][ T6150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.267998][ T6799] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.505074][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.512251][ T6150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.607505][ T6799] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.760955][ T6799] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.849052][ T6799] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.697526][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.810874][ T9878] loop4: detected capacity change from 0 to 1024 [ 555.818032][ T9878] hfsplus: Bad value for 'session' [ 556.873430][ T9714] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 556.930630][ T9532] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.978297][ T9714] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 556.992214][ T9714] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 557.014654][ T9714] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 557.769394][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.776574][ T6797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.954397][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.961585][ T6797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.240126][ T6799] bridge_slave_1: left allmulticast mode [ 559.257303][ T6799] bridge_slave_1: left promiscuous mode [ 559.280724][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.311707][ T6799] bridge_slave_0: left allmulticast mode [ 559.317387][ T6799] bridge_slave_0: left promiscuous mode [ 559.353951][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.397628][ T6799] bridge_slave_1: left allmulticast mode [ 559.449848][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.461972][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.471220][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.479154][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.487794][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.259577][ T6799] bridge_slave_1: left promiscuous mode [ 561.186599][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.347741][ T6799] bridge_slave_0: left allmulticast mode [ 561.378927][ T6799] bridge_slave_0: left promiscuous mode [ 561.390578][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.487372][ T6799] bridge_slave_1: left allmulticast mode [ 561.510997][ T6799] bridge_slave_1: left promiscuous mode [ 561.522002][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.533478][ T6799] bridge_slave_0: left allmulticast mode [ 561.539115][ T6799] bridge_slave_0: left promiscuous mode [ 561.554840][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.391938][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.404525][ T9925] loop0: detected capacity change from 0 to 256 [ 562.418358][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.433985][ T9925] exfat: Deprecated parameter 'utf8' [ 562.437128][ T6799] bond0 (unregistering): Released all slaves [ 562.440167][ T9925] exfat: Bad value for 'time_offset' [ 562.637979][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.654609][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.665003][ T6799] bond0 (unregistering): Released all slaves [ 562.918585][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.930693][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.942677][ T6799] bond0 (unregistering): Released all slaves [ 563.144868][ T9925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.302002][ T5836] Bluetooth: hci4: command tx timeout [ 563.937126][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.043461][ T9622] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 564.226553][ T9941] loop4: detected capacity change from 0 to 512 [ 564.241873][ T9941] EXT4-fs: Ignoring removed nobh option [ 564.289876][ T9941] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.909: iget: bad i_size value: 38620345925642 [ 564.305891][ T9941] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 564.310445][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 564.326236][ C1] EXT4-fs (loop4): initial error at time 1770971653: ext4_orphan_get:1391: inode 15 [ 564.335666][ C1] EXT4-fs (loop4): last error at time 1770971653: ext4_orphan_get:1391: inode 15 [ 564.370464][ T9941] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.909: couldn't read orphan inode 15 (err -117) [ 564.383344][ T9941] loop4: lost filesystem error report for type 5 error -117 [ 564.387049][ T9941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.395031][ T9622] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 564.419538][ T9622] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 564.432210][ T9622] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 565.189173][ T9943] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 565.223506][ T9714] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.389862][ T5836] Bluetooth: hci4: command tx timeout [ 565.425399][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.512399][ T9958] loop4: detected capacity change from 0 to 128 [ 566.027525][ T9958] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.170647][ T9958] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 567.527678][ T5836] Bluetooth: hci4: command tx timeout [ 567.533684][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.540049][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.572767][ T9532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.591882][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.599006][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.038293][ T9976] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 568.068379][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.075676][ T1346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.408476][ T5817] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.520037][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 568.599049][ T6799] hsr_slave_0: left promiscuous mode [ 568.628193][ T9979] loop4: detected capacity change from 0 to 1024 [ 568.634746][ T6799] hsr_slave_1: left promiscuous mode [ 568.641599][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.654109][ T9979] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 568.665835][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.682471][ T6799] hsr_slave_0: left promiscuous mode [ 568.712747][ T9979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.752009][ T6799] hsr_slave_1: left promiscuous mode [ 568.758126][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.887159][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.734001][ T5836] Bluetooth: hci4: command tx timeout [ 569.797143][ T31] audit: type=1800 audit(1770971659.133:52): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.914" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 571.579254][ T6799] hsr_slave_0: left promiscuous mode [ 571.725034][ T6799] hsr_slave_1: left promiscuous mode [ 571.736579][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.746680][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.761294][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.769436][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.777041][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.811422][ T6799] veth1_macvtap: left promiscuous mode [ 571.816919][ T6799] veth0_macvtap: left promiscuous mode [ 571.840680][ T6799] veth1_vlan: left promiscuous mode [ 571.846119][ T6799] veth0_vlan: left promiscuous mode [ 573.083499][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 573.093143][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 573.101373][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 573.109368][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 573.117645][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 574.027691][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 574.092039][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 575.563572][ T5836] Bluetooth: hci6: command tx timeout [ 575.659184][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 575.678351][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 577.163446][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 577.222691][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 577.582290][ T5836] Bluetooth: hci6: command tx timeout [ 578.624666][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.657357][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.683616][ T9911] bridge_slave_0: entered allmulticast mode [ 578.729834][ T9911] bridge_slave_0: entered promiscuous mode [ 578.879606][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.933651][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.949884][ T9911] bridge_slave_1: entered allmulticast mode [ 578.977720][ T9911] bridge_slave_1: entered promiscuous mode [ 579.222756][T10037] netlink: 44 bytes leftover after parsing attributes in process `syz.0.926'. [ 579.636439][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.655087][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.674452][ T5836] Bluetooth: hci6: command tx timeout [ 580.078444][ T9911] team0: Port device team_slave_0 added [ 580.293845][ T9911] team0: Port device team_slave_1 added [ 581.224658][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.240282][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.310290][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.343903][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.374944][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.447941][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.695804][ T9622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.745782][ T5836] Bluetooth: hci6: command tx timeout [ 582.556087][ T9911] hsr_slave_0: entered promiscuous mode [ 582.781542][ T9911] hsr_slave_1: entered promiscuous mode [ 582.795986][ T9622] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.953245][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.960424][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.269609][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.276805][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.600387][ T9997] chnl_net:caif_netlink_parms(): no params data found [ 585.586897][ T6799] IPVS: stop unused estimator thread 0... [ 585.649705][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.726824][T10080] loop4: detected capacity change from 0 to 64 [ 586.647081][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 586.680560][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 586.688820][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 586.698202][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 586.706399][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.757312][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.780493][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.788307][ T9997] bridge_slave_0: entered allmulticast mode [ 586.810743][ T9997] bridge_slave_0: entered promiscuous mode [ 586.860914][T10087] lo speed is unknown, defaulting to 1000 [ 586.866726][T10087] lo speed is unknown, defaulting to 1000 [ 586.873337][T10087] lo speed is unknown, defaulting to 1000 [ 586.890014][T10087] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 586.973233][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.984230][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.992465][ T9997] bridge_slave_1: entered allmulticast mode [ 587.000690][ T9997] bridge_slave_1: entered promiscuous mode [ 587.007907][T10087] lo speed is unknown, defaulting to 1000 [ 587.015881][T10087] lo speed is unknown, defaulting to 1000 [ 587.026152][T10087] lo speed is unknown, defaulting to 1000 [ 587.034016][T10087] lo speed is unknown, defaulting to 1000 [ 587.042560][T10087] lo speed is unknown, defaulting to 1000 [ 587.050335][T10087] lo speed is unknown, defaulting to 1000 [ 587.057836][T10087] lo speed is unknown, defaulting to 1000 [ 587.065616][T10087] lo speed is unknown, defaulting to 1000 [ 587.453657][ T9997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.146203][T10088] lo speed is unknown, defaulting to 1000 [ 588.175114][ T9997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.476580][ T9911] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 588.487896][ T9911] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 588.499539][ T9911] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 588.514714][ T9911] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 588.598843][ T9997] team0: Port device team_slave_0 added [ 588.676476][ T9997] team0: Port device team_slave_1 added [ 588.781337][ T5839] Bluetooth: hci1: command tx timeout [ 590.934705][ T5839] Bluetooth: hci1: command tx timeout [ 591.669995][ T9714] veth0_vlan: entered promiscuous mode [ 591.734060][ T9714] veth1_vlan: entered promiscuous mode [ 591.800365][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.829508][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.896896][ T9997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.091811][ T5839] Bluetooth: hci1: command tx timeout [ 593.732446][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.739421][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.779535][ T9997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.912064][ T31] audit: type=1326 audit(1770971684.033:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.010148][ T31] audit: type=1326 audit(1770971684.033:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.033741][ T31] audit: type=1326 audit(1770971684.033:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.070643][ T31] audit: type=1326 audit(1770971684.033:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.104705][ T5839] Bluetooth: hci1: command tx timeout [ 595.119533][ T31] audit: type=1326 audit(1770971684.033:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.167424][ T31] audit: type=1326 audit(1770971684.033:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.179661][ T9997] hsr_slave_0: entered promiscuous mode [ 595.193928][ T31] audit: type=1326 audit(1770971684.033:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.218472][ T31] audit: type=1326 audit(1770971684.033:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.229850][ T9997] hsr_slave_1: entered promiscuous mode [ 595.241187][ T31] audit: type=1326 audit(1770971684.033:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.270809][ T31] audit: type=1326 audit(1770971684.033:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10127 comm="syz.4.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7fc00000 [ 595.293224][ T9997] debugfs: 'hsr0' already exists in 'hsr' [ 595.301283][ T9997] Cannot create hsr debugfs directory [ 595.343210][T10088] chnl_net:caif_netlink_parms(): no params data found [ 596.009648][T10142] loop0: detected capacity change from 0 to 65536 [ 597.780598][T10142] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 597.797772][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.809918][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.817779][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.833549][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.841744][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.917454][T10142] XFS (loop0): Ending clean mount [ 597.928986][T10142] XFS (loop0): Quotacheck needed: Please wait. [ 597.993289][T10142] XFS (loop0): Quotacheck: Done. [ 598.019133][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.873641][ T5832] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 598.903247][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.153386][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.206757][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.245066][T10088] bridge_slave_0: entered allmulticast mode [ 599.340081][T10088] bridge_slave_0: entered promiscuous mode [ 599.710741][T10152] lo speed is unknown, defaulting to 1000 [ 599.752245][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.759378][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.777658][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.784780][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.839315][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.847363][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.857111][T10088] bridge_slave_1: entered allmulticast mode [ 599.868482][T10088] bridge_slave_1: entered promiscuous mode [ 599.905606][ T5839] Bluetooth: hci2: command tx timeout [ 600.049014][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.311335][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.567470][T10088] team0: Port device team_slave_0 added [ 601.577391][T10088] team0: Port device team_slave_1 added [ 601.583784][T10152] chnl_net:caif_netlink_parms(): no params data found [ 601.980356][ T5839] Bluetooth: hci2: command tx timeout [ 603.224712][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.231706][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.275263][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.483458][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.663482][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.440704][ T5839] Bluetooth: hci2: command tx timeout [ 604.480408][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.756770][T10088] hsr_slave_0: entered promiscuous mode [ 605.771660][T10088] hsr_slave_1: entered promiscuous mode [ 605.782027][T10088] debugfs: 'hsr0' already exists in 'hsr' [ 605.787827][T10088] Cannot create hsr debugfs directory [ 606.490393][ T5839] Bluetooth: hci2: command tx timeout [ 606.815078][ T6799] bridge_slave_1: left allmulticast mode [ 607.460819][ T6799] bridge_slave_1: left promiscuous mode [ 607.480953][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.559761][ T6799] bridge_slave_0: left allmulticast mode [ 607.569942][ T6799] bridge_slave_0: left promiscuous mode [ 607.597380][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.599189][T10211] loop0: detected capacity change from 0 to 128 [ 607.651434][T10211] hpfs: hpfs_map_4sectors(): unaligned read [ 607.687493][T10211] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 607.728816][ T6799] bridge_slave_1: left allmulticast mode [ 607.740740][T10211] hpfs: hpfs_map_sector(): read error [ 607.748222][ T6799] bridge_slave_1: left promiscuous mode [ 607.758504][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.781082][ T6799] bridge_slave_0: left allmulticast mode [ 607.786783][ T6799] bridge_slave_0: left promiscuous mode [ 607.978791][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.024819][ T6799] bridge_slave_1: left allmulticast mode [ 608.060731][ T6799] bridge_slave_1: left promiscuous mode [ 608.066462][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.121307][ T6799] bridge_slave_0: left allmulticast mode [ 608.130641][ T6799] bridge_slave_0: left promiscuous mode [ 608.136318][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.000759][T10222] loop0: detected capacity change from 0 to 32768 [ 610.893943][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.040911][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.162602][ T6799] bond0 (unregistering): Released all slaves [ 613.546301][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.758624][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.780773][ T6799] bond0 (unregistering): Released all slaves [ 619.244389][ T6799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.310930][ T6799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.352126][ T6799] bond0 (unregistering): Released all slaves [ 619.697804][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 619.698809][T10152] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.715807][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 619.736854][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 619.760782][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 619.770690][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 619.790370][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.852150][T10152] bridge_slave_0: entered allmulticast mode [ 619.890778][T10152] bridge_slave_0: entered promiscuous mode [ 619.913418][T10152] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.950115][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.971827][T10152] bridge_slave_1: entered allmulticast mode [ 619.990633][T10152] bridge_slave_1: entered promiscuous mode [ 621.034534][T10152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.097309][T10152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.158699][T10278] lo speed is unknown, defaulting to 1000 [ 621.200647][ T6799] hsr_slave_0: left promiscuous mode [ 621.230487][ T6799] hsr_slave_1: left promiscuous mode [ 621.250657][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.302000][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.820526][ T5836] Bluetooth: hci3: command tx timeout [ 622.068165][T10294] loop0: detected capacity change from 0 to 16 [ 622.107015][T10294] erofs (device loop0): mounted with root inode @ nid 36. [ 622.118353][ T6799] hsr_slave_0: left promiscuous mode [ 622.151428][ T6799] hsr_slave_1: left promiscuous mode [ 622.157609][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.175954][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.255252][ T6799] hsr_slave_0: left promiscuous mode [ 622.261780][ T6799] hsr_slave_1: left promiscuous mode [ 622.267863][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.278081][ T6799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.910413][ T5836] Bluetooth: hci3: command tx timeout [ 625.990867][ T5836] Bluetooth: hci3: command tx timeout [ 626.382646][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 626.432399][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 626.759443][T10314] loop0: detected capacity change from 0 to 512 [ 626.874120][T10314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.961805][T10314] ext4 filesystem being mounted at /253/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.008818][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.070453][ T5836] Bluetooth: hci3: command tx timeout [ 628.706960][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.714140][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.644599][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 629.691925][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 631.261524][ T5839] Bluetooth: hci5: unexpected event for opcode 0x1804 [ 631.510821][ T6799] team0 (unregistering): Port device team_slave_1 removed [ 631.539177][ T6799] team0 (unregistering): Port device team_slave_0 removed [ 632.616437][T10351] loop0: detected capacity change from 0 to 4096 [ 632.708885][T10351] ntfs3(loop0): ino=0, mi_enum_attr [ 632.921444][T10351] ntfs3(loop0): ino=0, mi_enum_attr [ 633.813589][T10361] loop0: detected capacity change from 0 to 8 [ 633.843398][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 633.858694][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 633.870425][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 633.881577][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 633.895803][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 634.863430][T10152] team0: Port device team_slave_0 added [ 635.082680][T10152] team0: Port device team_slave_1 added [ 635.725691][T10152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.742955][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.800661][T10152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.828668][T10152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.837534][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.926456][T10152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.981529][ T5836] Bluetooth: hci4: command tx timeout [ 635.997254][T10362] lo speed is unknown, defaulting to 1000 [ 637.532207][T10152] hsr_slave_0: entered promiscuous mode [ 637.657253][T10395] loop4: detected capacity change from 0 to 8 [ 637.664990][T10395] squashfs: Unknown parameter '0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 637.664990][T10395] 1 8 ram8 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 637.664990][T10395] 1 9 ram9 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 637.664990][T10395] 1 10 ram10 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 637.664990][T10395] 1 11 ram11 0 0 0 0 0 0 0 0 ' [ 638.306035][ T5836] Bluetooth: hci4: command tx timeout [ 638.331929][T10152] hsr_slave_1: entered promiscuous mode [ 638.521306][T10152] debugfs: 'hsr0' already exists in 'hsr' [ 638.527377][T10152] Cannot create hsr debugfs directory [ 639.659906][T10406] loop4: detected capacity change from 0 to 24 [ 639.692318][ T5836] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 639.705417][T10406] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 639.732994][T10406] romfs: bad initial checksum on dev loop4. [ 640.380592][ T5836] Bluetooth: hci4: command tx timeout [ 641.217045][T10404] loop0: detected capacity change from 0 to 32768 [ 641.432944][T10404] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 641.505178][T10404] XFS (loop0): Ending clean mount [ 641.820760][T10421] loop4: detected capacity change from 0 to 40427 [ 641.828803][T10421] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 641.836684][T10421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 641.846548][T10421] F2FS-fs (loop4): invalid crc value [ 641.964243][T10421] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 642.002545][T10421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 642.009986][T10421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 642.460732][ T5836] Bluetooth: hci4: command tx timeout [ 643.128339][ T5832] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 643.560655][T10278] chnl_net:caif_netlink_parms(): no params data found [ 643.723733][T10452] loop0: detected capacity change from 0 to 512 [ 643.738064][T10088] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 643.739467][T10452] EXT4-fs: Ignoring removed bh option [ 643.768093][T10452] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 643.795592][T10088] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 643.800352][T10452] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 643.835754][T10452] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 643.880356][T10088] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 643.904469][T10088] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 644.070106][T10452] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 644.086545][T10452] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 644.421780][T10362] chnl_net:caif_netlink_parms(): no params data found [ 644.766832][T10452] System zones: 0-2, 18-18, 34-35 [ 644.788198][T10452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.544168][T10278] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.572188][T10278] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.604826][T10278] bridge_slave_0: entered allmulticast mode [ 645.634247][T10278] bridge_slave_0: entered promiscuous mode [ 645.653616][T10278] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.682429][T10278] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.707486][T10278] bridge_slave_1: entered allmulticast mode [ 645.728035][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.743120][T10278] bridge_slave_1: entered promiscuous mode [ 646.275470][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.287678][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.296185][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.305779][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.315339][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.367476][T10278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.448096][T10278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.505152][T10505] loop4: detected capacity change from 0 to 256 [ 646.526346][T10505] exfat: Deprecated parameter 'utf8' [ 646.541277][T10505] exFAT-fs (loop4): failed to read boot sector [ 646.547436][T10505] exFAT-fs (loop4): failed to recognize exfat type [ 646.737808][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.756811][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.767129][T10362] bridge_slave_0: entered allmulticast mode [ 646.775302][T10362] bridge_slave_0: entered promiscuous mode [ 646.856640][T10278] team0: Port device team_slave_0 added [ 647.144728][T10500] lo speed is unknown, defaulting to 1000 [ 647.553161][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.568116][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.578552][T10362] bridge_slave_1: entered allmulticast mode [ 647.587413][T10362] bridge_slave_1: entered promiscuous mode [ 647.671115][T10278] team0: Port device team_slave_1 added [ 647.774463][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.881998][T10278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.919875][T10278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.002425][T10278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.298572][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.381633][ T5836] Bluetooth: hci1: command tx timeout [ 648.398342][T10278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.491616][T10278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.523907][T10278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.548918][T10500] chnl_net:caif_netlink_parms(): no params data found [ 648.721274][T10152] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 648.734865][T10152] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 648.996110][T10362] team0: Port device team_slave_0 added [ 649.003318][T10152] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 649.086986][T10522] overlayfs: failed to resolve './file0': -2 [ 649.477291][T10278] hsr_slave_0: entered promiscuous mode [ 649.499186][T10278] hsr_slave_1: entered promiscuous mode [ 649.634001][T10278] debugfs: 'hsr0' already exists in 'hsr' [ 649.639763][T10278] Cannot create hsr debugfs directory [ 649.692306][T10362] team0: Port device team_slave_1 added [ 649.724469][T10152] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 650.626752][ T5836] Bluetooth: hci1: command tx timeout [ 650.883253][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.890311][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.920991][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.933911][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.941078][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.967655][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.087821][T10500] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.095731][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.105701][T10500] bridge_slave_0: entered allmulticast mode [ 652.114130][T10500] bridge_slave_0: entered promiscuous mode [ 652.123773][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.131166][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.138452][T10500] bridge_slave_1: entered allmulticast mode [ 652.155133][T10500] bridge_slave_1: entered promiscuous mode [ 652.187290][ T37] bridge_slave_1: left allmulticast mode [ 652.193235][ T37] bridge_slave_1: left promiscuous mode [ 652.199031][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.209918][ T37] bridge_slave_0: left allmulticast mode [ 652.215645][ T37] bridge_slave_0: left promiscuous mode [ 652.221441][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.232194][ T37] bridge_slave_1: left allmulticast mode [ 652.238089][ T37] bridge_slave_1: left promiscuous mode [ 652.245276][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.262752][ T37] bridge_slave_0: left allmulticast mode [ 652.268503][ T37] bridge_slave_0: left promiscuous mode [ 652.274656][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.287362][ T37] bridge_slave_1: left allmulticast mode [ 652.293283][ T37] bridge_slave_1: left promiscuous mode [ 652.298999][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.310157][ T37] bridge_slave_0: left allmulticast mode [ 652.316550][ T37] bridge_slave_0: left promiscuous mode [ 652.325069][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.700473][ T5836] Bluetooth: hci1: command tx timeout [ 653.190893][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.203196][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.213845][ T37] bond0 (unregistering): Released all slaves [ 653.951730][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 653.951814][ T31] audit: type=1326 audit(1770971743.253:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 654.472686][ T31] audit: type=1326 audit(1770971743.253:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 654.520016][ T31] audit: type=1326 audit(1770971743.263:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c45d9bce2 code=0x7ffc0000 [ 654.675996][ T31] audit: type=1326 audit(1770971743.263:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c45d9bce2 code=0x7ffc0000 [ 654.717218][ T31] audit: type=1326 audit(1770971743.273:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 654.759833][ T31] audit: type=1326 audit(1770971743.283:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 654.784947][ T5836] Bluetooth: hci1: command tx timeout [ 654.806499][ T31] audit: type=1326 audit(1770971743.283:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 654.829062][ T31] audit: type=1326 audit(1770971743.293:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 654.906602][T10568] virtio-fs: tag not found [ 655.289236][ T31] audit: type=1326 audit(1770971743.363:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 655.312117][ T31] audit: type=1326 audit(1770971743.383:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.4.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45d9bf79 code=0x7ffc0000 [ 655.336326][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.354846][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.365319][ T37] bond0 (unregistering): Released all slaves [ 655.691017][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.720840][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.742268][ T37] bond0 (unregistering): Released all slaves [ 655.959428][T10574] hugetlbfs: syz.0.1025 (10574): Using mlock ulimits for SHM_HUGETLB is obsolete [ 656.353349][T10362] hsr_slave_0: entered promiscuous mode [ 656.516635][T10362] hsr_slave_1: entered promiscuous mode [ 656.541148][T10362] debugfs: 'hsr0' already exists in 'hsr' [ 656.547213][T10362] Cannot create hsr debugfs directory [ 656.755971][T10500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.120673][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 657.129074][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 657.138721][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 657.146736][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 657.167053][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 657.510920][T10500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.659529][ T37] hsr_slave_0: left promiscuous mode [ 657.682331][ T37] hsr_slave_1: left promiscuous mode [ 657.699397][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.743565][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.860731][ T37] hsr_slave_0: left promiscuous mode [ 657.869777][ T37] hsr_slave_1: left promiscuous mode [ 657.883177][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.938808][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.955898][ T37] hsr_slave_0: left promiscuous mode [ 657.976653][ T37] hsr_slave_1: left promiscuous mode [ 657.991196][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.019340][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.068910][ T37] veth1_vlan: left promiscuous mode [ 658.074408][ T37] veth0_vlan: left promiscuous mode [ 658.871365][T10592] loop0: detected capacity change from 0 to 256 [ 658.924581][T10592] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 659.062583][ T37] team0 (unregistering): Port device team_slave_1 removed [ 659.092925][ T37] team0 (unregistering): Port device team_slave_0 removed [ 659.363543][ T5839] Bluetooth: hci6: command tx timeout [ 660.199691][ T37] team0 (unregistering): Port device team_slave_1 removed [ 660.219465][ T37] team0 (unregistering): Port device team_slave_0 removed [ 660.582330][ T37] team0 (unregistering): Port device team_slave_1 removed [ 660.607410][ T37] team0 (unregistering): Port device team_slave_0 removed [ 660.888022][T10500] team0: Port device team_slave_0 added [ 660.916939][T10500] team0: Port device team_slave_1 added [ 662.777521][ T5839] Bluetooth: hci6: command tx timeout [ 662.866542][T10500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.875155][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.901923][T10500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.914882][T10500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.921879][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.947952][T10500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.186272][T10581] lo speed is unknown, defaulting to 1000 [ 663.825423][T10500] hsr_slave_0: entered promiscuous mode [ 663.875888][T10500] hsr_slave_1: entered promiscuous mode [ 664.870696][ T5839] Bluetooth: hci6: command tx timeout [ 665.339004][T10278] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 665.408031][T10278] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 665.698494][T10278] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 665.734546][T10278] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 666.512393][T10581] chnl_net:caif_netlink_parms(): no params data found [ 666.745817][T10652] loop0: detected capacity change from 0 to 1024 [ 666.761214][T10652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 666.940725][ T5839] Bluetooth: hci6: command tx timeout [ 666.998237][T10652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 667.180126][T10652] System zones: 0-1, 3-36 [ 667.327680][T10652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.468881][T10362] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 667.712632][T10665] loop4: detected capacity change from 0 to 128 [ 667.719879][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.733001][T10665] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 667.738034][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.774086][T10581] bridge_slave_0: entered allmulticast mode [ 667.953844][T10581] bridge_slave_0: entered promiscuous mode [ 668.375064][T10362] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.383975][T10665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 668.467472][T10362] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.487175][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.508809][T10671] binder: 10664:10671 ioctl c0306201 2000000001c0 returned -14 [ 668.631050][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.646047][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.873610][T10581] bridge_slave_1: entered allmulticast mode [ 668.882107][T10581] bridge_slave_1: entered promiscuous mode [ 668.912153][T10362] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 669.949210][T10691] loop0: detected capacity change from 0 to 1024 [ 670.184019][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.279864][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.863205][T10581] team0: Port device team_slave_0 added [ 672.872142][T10581] team0: Port device team_slave_1 added [ 673.835755][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.994137][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.092217][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.305483][T10278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.525639][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1046'. [ 674.736628][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.808693][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.941200][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.433346][T10581] hsr_slave_0: entered promiscuous mode [ 675.443814][T10581] hsr_slave_1: entered promiscuous mode [ 675.450141][T10581] debugfs: 'hsr0' already exists in 'hsr' [ 675.456069][T10581] Cannot create hsr debugfs directory [ 675.460619][T10746] loop4: detected capacity change from 0 to 512 [ 676.141193][T10746] EXT4-fs: Ignoring removed i_version option [ 676.147214][T10746] EXT4-fs: Ignoring removed bh option [ 676.227284][T10746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.257880][T10746] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 676.261219][T10278] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.519504][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.669773][T10500] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 676.954826][ T5839] Bluetooth: hci5: Unknown advertising packet type: 0x73 [ 676.955028][ T5839] Bluetooth: hci5: Malformed LE Event: 0x0d [ 677.681341][T10500] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 677.990827][T10362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.019880][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.027068][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.044183][T10500] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 679.074074][T10500] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 679.145515][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.152716][ T6150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.302095][T10362] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.379000][T10800] evm: overlay not supported [ 680.529275][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.536447][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.755255][T10500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.880703][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.887857][ T6150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.591555][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.602096][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.613776][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.635129][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.643781][ T50] bridge_slave_1: left allmulticast mode [ 681.649420][ T50] bridge_slave_1: left promiscuous mode [ 681.655489][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.701312][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.729748][ T50] bridge_slave_0: left allmulticast mode [ 681.735849][ T50] bridge_slave_0: left promiscuous mode [ 681.741776][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.994153][ T50] bridge_slave_1: left allmulticast mode [ 682.000309][ T50] bridge_slave_1: left promiscuous mode [ 682.006039][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.015868][ T50] bridge_slave_0: left allmulticast mode [ 682.025950][ T50] bridge_slave_0: left promiscuous mode [ 682.044829][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.094444][T10818] trusted_key: syz.4.1055 sent an empty control message without MSG_MORE. [ 682.885713][T10824] ref_ctr increment failed for inode: 0x626 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802a850c40 [ 682.902399][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.924682][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.990981][ T50] bond0 (unregistering): Released all slaves [ 683.741405][ T5839] Bluetooth: hci2: command tx timeout [ 684.120616][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.983263][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.003977][ T50] bond0 (unregistering): Released all slaves [ 685.031221][T10847] loop4: detected capacity change from 0 to 512 [ 685.075363][T10847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.093080][T10847] ext4 filesystem being mounted at /293/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 686.051261][ T5839] Bluetooth: hci2: command tx timeout [ 686.333879][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.791535][T10500] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.886507][T10862] loop4: detected capacity change from 0 to 128 [ 686.994268][ T50] hsr_slave_0: left promiscuous mode [ 687.009948][ T50] hsr_slave_1: left promiscuous mode [ 687.016149][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.028979][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.057989][ T50] hsr_slave_0: left promiscuous mode [ 687.072126][ T50] hsr_slave_1: left promiscuous mode [ 687.091481][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.099466][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.144225][T10862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 687.158761][T10862] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 688.126051][ T5839] Bluetooth: hci2: command tx timeout [ 688.129658][ T31] audit: type=1804 audit(1770971776.753:129): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1063" name="bus" dev="ramfs" ino=30933 res=1 errno=0 [ 688.892055][ T5817] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 689.071016][ T50] team0 (unregistering): Port device team_slave_1 removed [ 689.117584][ T50] team0 (unregistering): Port device team_slave_0 removed [ 690.260373][ T5839] Bluetooth: hci2: command tx timeout [ 690.290977][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.297262][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.962828][ T50] team0 (unregistering): Port device team_slave_1 removed [ 692.521743][ T50] team0 (unregistering): Port device team_slave_0 removed [ 692.968725][T10811] lo speed is unknown, defaulting to 1000 [ 692.997695][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.004874][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.300935][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.308177][ T6795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.018325][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 695.036016][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 695.044348][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 695.055703][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 695.075362][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 697.323479][ T5836] Bluetooth: hci3: command tx timeout [ 697.395241][T10581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 697.452687][T10581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 698.023187][T10581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 698.084672][T10927] lo speed is unknown, defaulting to 1000 [ 698.106952][T10811] chnl_net:caif_netlink_parms(): no params data found [ 698.206467][T10581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 699.371718][ T5836] Bluetooth: hci3: command tx timeout [ 701.090092][T10500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.481504][ T5836] Bluetooth: hci3: command tx timeout [ 703.525486][ T5836] Bluetooth: hci3: command tx timeout [ 703.776073][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.798734][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.820616][T10811] bridge_slave_0: entered allmulticast mode [ 703.835069][T10811] bridge_slave_0: entered promiscuous mode [ 703.853526][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.870338][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.877524][T10811] bridge_slave_1: entered allmulticast mode [ 703.903936][T10811] bridge_slave_1: entered promiscuous mode [ 704.155959][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.203354][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.395999][T10811] team0: Port device team_slave_0 added [ 704.589228][T10811] team0: Port device team_slave_1 added [ 705.411308][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.418275][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.457770][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.484294][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.495664][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.524958][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.536929][ T50] bridge_slave_1: left allmulticast mode [ 705.543027][ T50] bridge_slave_1: left promiscuous mode [ 705.550775][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.568902][ T50] bridge_slave_0: left allmulticast mode [ 705.574677][ T50] bridge_slave_0: left promiscuous mode [ 705.580852][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.765395][T10988] loop0: detected capacity change from 0 to 32768 [ 705.969578][ T109] ERROR: (device loop0): dbFree: error in block map [ 705.969578][ T109] [ 706.006875][ T109] ERROR: (device loop0): remounting filesystem as read-only [ 706.179708][ T109] blkno = 1580, nblocks = 1 [ 706.186997][ T109] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 706.186997][ T109] [ 706.234240][T10989] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 706.234240][T10989] [ 706.254788][T10989] bio_check_eod: 176 callbacks suppressed [ 706.254821][T10989] syz.0.1081: attempt to access beyond end of device [ 706.254821][T10989] loop0: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 706.592347][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.705890][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.741810][ T50] bond0 (unregistering): Released all slaves [ 706.751394][ T110] blkno = 1580, nblocks = 1 [ 706.755913][ T110] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 706.755913][ T110] [ 706.799338][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.434540][T10811] hsr_slave_0: entered promiscuous mode [ 707.456791][T10811] hsr_slave_1: entered promiscuous mode [ 707.463545][T10811] debugfs: 'hsr0' already exists in 'hsr' [ 707.469773][T10811] Cannot create hsr debugfs directory [ 707.492855][T10927] chnl_net:caif_netlink_parms(): no params data found [ 707.553374][ T50] hsr_slave_0: left promiscuous mode [ 707.559402][ T50] hsr_slave_1: left promiscuous mode [ 707.576899][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.621847][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.257231][T10997] ip6t_rpfilter: unknown options [ 709.446951][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 709.456574][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 709.468615][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 709.477908][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 709.487012][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 709.598290][T11002] loop0: detected capacity change from 0 to 128 [ 709.873011][ T50] team0 (unregistering): Port device team_slave_1 removed [ 709.908525][ T50] team0 (unregistering): Port device team_slave_0 removed [ 710.811553][ T5807] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 710.906036][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.985433][ T5807] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 710.988031][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.000226][ T5807] usb 1-1: config 179 has no interface number 0 [ 711.000863][ T6150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.006991][ T5807] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8 [ 711.039042][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.046242][ T6150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.068676][ T5807] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 711.098169][T10927] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.107801][ T5807] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 711.114669][T10927] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.121154][ T5807] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 711.133350][T10927] bridge_slave_0: entered allmulticast mode [ 711.144892][ T5807] usb 1-1: config 179 interface 65 has no altsetting 0 [ 711.151911][ T5807] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 712.870381][ T5836] Bluetooth: hci4: command tx timeout [ 712.936411][T10927] bridge_slave_0: entered promiscuous mode [ 712.965982][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.986452][T10927] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.032082][T10927] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.039341][T10927] bridge_slave_1: entered allmulticast mode [ 713.050351][ T5807] usb 1-1: can't set config #179, error -71 [ 713.099539][ T5807] usb 1-1: USB disconnect, device number 9 [ 713.107448][T10927] bridge_slave_1: entered promiscuous mode [ 713.238372][T10999] lo speed is unknown, defaulting to 1000 [ 714.107959][T10927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.125797][T10927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.080616][ T5836] Bluetooth: hci4: command tx timeout [ 715.433566][T10927] team0: Port device team_slave_0 added [ 716.192494][T10927] team0: Port device team_slave_1 added [ 716.497045][T10927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.504415][T10927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.530578][T10927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.125029][ T5836] Bluetooth: hci4: command tx timeout [ 717.501873][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 717.511209][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 717.519558][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 717.530858][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 717.567478][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 717.582956][T10927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.589994][T10927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.210970][T10927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.267244][T10927] hsr_slave_0: entered promiscuous mode [ 718.278720][T10927] hsr_slave_1: entered promiscuous mode [ 718.288893][T10927] debugfs: 'hsr0' already exists in 'hsr' [ 718.295897][T10927] Cannot create hsr debugfs directory [ 718.687853][T11047] hfs: can't find a HFS filesystem on dev nullb0 [ 719.340432][ T5839] Bluetooth: hci4: command tx timeout [ 719.911833][ T5839] Bluetooth: hci1: command tx timeout [ 720.138577][T11051] loop0: detected capacity change from 0 to 16 [ 720.552909][T11051] erofs (device loop0): mounted with root inode @ nid 36. [ 722.018264][ T5839] Bluetooth: hci1: command tx timeout [ 722.025253][T11038] lo speed is unknown, defaulting to 1000 [ 722.060597][T10999] chnl_net:caif_netlink_parms(): no params data found [ 723.405789][T11072] loop4: detected capacity change from 0 to 512 [ 723.414312][T11072] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 723.441937][T11072] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 723.455785][T11072] EXT4-fs (loop4): 1 truncate cleaned up [ 723.471893][T11072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.080411][ T5839] Bluetooth: hci1: command tx timeout [ 724.725855][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.651368][ T6148] ------------[ cut here ]------------ [ 725.657155][ T6148] time_after(jiffies, timeout) [ 725.657170][ T6148] WARNING: io_uring/io_uring.c:2341 at io_ring_exit_work+0x4a3/0x960, CPU#0: kworker/u8:10/6148 [ 725.672721][ T6148] Modules linked in: [ 725.676757][ T6148] CPU: 0 UID: 0 PID: 6148 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 725.686482][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 725.696636][ T6148] Workqueue: iou_exit io_ring_exit_work [ 725.702327][ T6148] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 725.708946][ T6148] Code: c6 05 2d dc cf 0e 01 48 c7 c7 20 43 26 8c be 25 00 00 00 48 c7 c2 e0 3e 26 8c e8 c8 b1 75 00 e9 88 fe ff ff e8 0e 45 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 725.728746][ T6148] RSP: 0018:ffffc90004a27960 EFLAGS: 00010293 [ 725.734872][ T6148] RAX: ffffffff812afe12 RBX: 000000010000a5df RCX: ffff88801d7a5ac0 [ 725.743097][ T6148] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 725.751292][ T6148] RBP: ffffc90004a27af0 R08: ffffc90004a278e7 R09: 1ffff92000944f1c [ 725.759344][ T6148] R10: dffffc0000000000 R11: fffff52000944f1d R12: dffffc0000000000 [ 725.767591][ T6148] R13: 000000010000a5dd R14: 0000000000002000 R15: ffff88806cb0c000 [ 725.775746][ T6148] FS: 0000000000000000(0000) GS:ffff8881254a0000(0000) knlGS:0000000000000000 [ 725.784738][ T6148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.791346][ T6148] CR2: 00007f4c45de96c0 CR3: 0000000051674000 CR4: 0000000000350ef0 [ 725.799321][ T6148] Call Trace: [ 725.802661][ T6148] [ 725.805603][ T6148] ? __pfx_io_ring_exit_work+0x10/0x10 [ 725.811151][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.816782][ T6148] ? process_scheduled_works+0xa0f/0x17a0 [ 725.822616][ T6148] ? process_scheduled_works+0xa0f/0x17a0 [ 725.828333][ T6148] process_scheduled_works+0xaec/0x17a0 [ 725.833988][ T6148] ? __pfx_process_scheduled_works+0x10/0x10 [ 725.839986][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.845700][ T6148] ? assign_work+0x3d5/0x5e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 725.850728][ T6148] worker_thread+0xa50/0xfc0 [ 725.855337][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.861044][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.866702][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.872609][ T6148] kthread+0x388/0x470 [ 725.877278][ T6148] ? __pfx_worker_thread+0x10/0x10 [ 725.882483][ T6148] ? __pfx_kthread+0x10/0x10 [ 725.887802][ T6148] ret_from_fork+0x51e/0xb90 [ 725.892497][ T6148] ? __pfx_ret_from_fork+0x10/0x10 [ 725.897617][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 725.904345][ T6148] ? __switch_to+0xc7d/0x1400 [ 725.909050][ T6148] ? __pfx_kthread+0x10/0x10 [ 725.913723][ T6148] ret_from_fork_asm+0x1a/0x30 [ 725.918526][ T6148] [ 725.921617][ T6148] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 725.928916][ T6148] CPU: 0 UID: 0 PID: 6148 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 725.938457][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 725.948497][ T6148] Workqueue: iou_exit io_ring_exit_work [ 725.954086][ T6148] Call Trace: [ 725.957353][ T6148] [ 725.960266][ T6148] vpanic+0x56c/0xa60 [ 725.964242][ T6148] ? __pfx__printk+0x10/0x10 [ 725.968814][ T6148] ? __pfx_vpanic+0x10/0x10 [ 725.973309][ T6148] ? is_bpf_text_address+0x292/0x2b0 [ 725.978590][ T6148] ? is_bpf_text_address+0x26/0x2b0 [ 725.983799][ T6148] panic+0xc5/0xd0 [ 725.987538][ T6148] ? __pfx_panic+0x10/0x10 [ 725.991984][ T6148] ? ret_from_fork_asm+0x1a/0x30 [ 725.996932][ T6148] __warn+0x315/0x4a0 [ 726.000921][ T6148] ? io_ring_exit_work+0x4a3/0x960 [ 726.006044][ T6148] ? io_ring_exit_work+0x4a3/0x960 [ 726.011156][ T6148] __report_bug+0x29a/0x540 [ 726.015663][ T6148] ? io_ring_exit_work+0x4a3/0x960 [ 726.020775][ T6148] ? __pfx___report_bug+0x10/0x10 [ 726.025793][ T6148] ? lockdep_hardirqs_on+0x7a/0x110 [ 726.030988][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.036618][ T6148] ? irqentry_exit+0x59e/0x620 [ 726.041378][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.047005][ T6148] ? rcu_is_watching+0x15/0xb0 [ 726.051776][ T6148] ? io_ring_exit_work+0x4a5/0x960 [ 726.056893][ T6148] ? io_ring_exit_work+0x4a3/0x960 [ 726.062017][ T6148] report_bug+0x16a/0x220 [ 726.066344][ T6148] ? io_ring_exit_work+0x4a3/0x960 [ 726.071458][ T6148] ? io_ring_exit_work+0x4a5/0x960 [ 726.076572][ T6148] handle_bug+0x98/0x200 [ 726.080820][ T6148] exc_invalid_op+0x1a/0x50 [ 726.085325][ T6148] asm_exc_invalid_op+0x1a/0x20 [ 726.090167][ T6148] RIP: 0010:io_ring_exit_work+0x4a3/0x960 [ 726.095902][ T6148] Code: c6 05 2d dc cf 0e 01 48 c7 c7 20 43 26 8c be 25 00 00 00 48 c7 c2 e0 3e 26 8c e8 c8 b1 75 00 e9 88 fe ff ff e8 0e 45 99 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 10 eb 9f c7 84 24 b0 00 00 00 [ 726.115502][ T6148] RSP: 0018:ffffc90004a27960 EFLAGS: 00010293 [ 726.121564][ T6148] RAX: ffffffff812afe12 RBX: 000000010000a5df RCX: ffff88801d7a5ac0 [ 726.129523][ T6148] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 726.137482][ T6148] RBP: ffffc90004a27af0 R08: ffffc90004a278e7 R09: 1ffff92000944f1c [ 726.145446][ T6148] R10: dffffc0000000000 R11: fffff52000944f1d R12: dffffc0000000000 [ 726.153406][ T6148] R13: 000000010000a5dd R14: 0000000000002000 R15: ffff88806cb0c000 [ 726.161374][ T6148] ? io_ring_exit_work+0x4a2/0x960 [ 726.166513][ T6148] ? __pfx_io_ring_exit_work+0x10/0x10 [ 726.171983][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.177617][ T6148] ? process_scheduled_works+0xa0f/0x17a0 [ 726.183334][ T6148] ? process_scheduled_works+0xa0f/0x17a0 [ 726.189057][ T6148] process_scheduled_works+0xaec/0x17a0 [ 726.194624][ T6148] ? __pfx_process_scheduled_works+0x10/0x10 [ 726.200607][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.206236][ T6148] ? assign_work+0x3d5/0x5e0 [ 726.210842][ T6148] worker_thread+0xa50/0xfc0 [ 726.215450][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.221082][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.226722][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.232358][ T6148] kthread+0x388/0x470 [ 726.236437][ T6148] ? __pfx_worker_thread+0x10/0x10 [ 726.241542][ T6148] ? __pfx_kthread+0x10/0x10 [ 726.246142][ T6148] ret_from_fork+0x51e/0xb90 [ 726.250738][ T6148] ? __pfx_ret_from_fork+0x10/0x10 [ 726.255849][ T6148] ? srso_alias_return_thunk+0x5/0xfbef5 [ 726.261479][ T6148] ? __switch_to+0xc7d/0x1400 [ 726.266154][ T6148] ? __pfx_kthread+0x10/0x10 [ 726.270748][ T6148] ret_from_fork_asm+0x1a/0x30 [ 726.275532][ T6148] [ 726.278807][ T6148] Kernel Offset: disabled [ 726.283121][ T6148] Rebooting in 86400 seconds..