last executing test programs: 4m6.896704964s ago: executing program 3 (id=4): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}, {0x0, 0x0, 0x0, 0x8000}], 0x0) 4m5.696392193s ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) 4m4.513677622s ago: executing program 2 (id=9): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x2, 0x7e, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4m3.333810083s ago: executing program 2 (id=10): syz_io_uring_setup(0x3559, &(0x7f00000000c0)={0x0, 0x301, 0x0, 0x3, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r4, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000f0095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x67, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8080c61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x0, 0x8000c62) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 4m2.535519468s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x3, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2026e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0af93a13e4e8bbf599394bafa3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee972f16215eca9709985ca147df97db00"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x103800) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f00000004c0)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m2.412019121s ago: executing program 2 (id=12): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) 4m2.22706226s ago: executing program 0 (id=1): kexec_load(0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}, {0x0, 0x0, 0x0, 0x8000}], 0x0) 4m1.29143242s ago: executing program 3 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x5, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m1.159790361s ago: executing program 0 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x3, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2026e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0af93a13e4e8bbf599394bafa3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee972f16215eca9709985ca147df97db00"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x103800) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, &(0x7f00000004c0)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m0.023938468s ago: executing program 2 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x5, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 3m58.896685081s ago: executing program 0 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x3, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2026e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0af93a13e4e8bbf599394bafa3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee972f16215eca9709985ca147df97db00"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$media(&(0x7f0000000040), 0x4, 0x103800) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m56.837587433s ago: executing program 0 (id=19): socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000002010400008000000000000200000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000400)="a38d1ebaa67401aa83cea1a04052671e5687f8e3516041a71afa8e21b1b77d7f00764f0000604e03c30ab9948dd0f840e98c69febbcf358320ab61770c480fdf791feb9259ac97428ab35a663658a6c7be0250e82302c3a49ef7f584cd219f0062bd3c7429168c2ada56720bc3994c03d68d4d94ef5dde7b1dce376d47514d785fd513cb9695ead24de25f4dd027c5ff024add6679b6b25c22b79047f328d64f947d086f5f09490b56530093099f506efa155f65bbdcb8cb948eb23536c90ca6a399497977939d285c1eabcb70906b41c9affd7aa7761841d66a8b43e437b500"/236, 0xec) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x24, 0x0, {0x7, 0x28, 0x8001, 0x7130d800, 0x1, 0x5, 0x4003ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, 0x50) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x400000, 0x3010}, 0x0, &(0x7f0000000080)=0x0) ioctl$sock_bt_hci(r6, 0x400448e3, &(0x7f00000002c0)="5f81d4b03fe350fd67a9b5b68118176bcca74668580463654436b8fcda3a3d2ba697cbcdccbd584dd09ebc938caf1ac64c7dc815282731dc1146f456df24240d5340cec7b1b5c661c962b0a07b582914010d5ec393aa6e95ae9f71ba4296cd4a3fc1e0dd90ec094c20a5e965b358ddb715fedf9ab5055a3102f8b3136287b774582fd5b0614a2172ade1e6b410865793d5d86564") syz_io_uring_submit(0x0, r7, 0x0) pselect6(0x40, &(0x7f0000000600)={0xfffffffffffffffe, 0x10000000000000, 0x100000000000, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) 3m56.197804652s ago: executing program 2 (id=20): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef3, 0x0, 0x2, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3m45.681292775s ago: executing program 32 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x5, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m40.751881248s ago: executing program 33 (id=19): socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000002010400008000000000000200000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000400)="a38d1ebaa67401aa83cea1a04052671e5687f8e3516041a71afa8e21b1b77d7f00764f0000604e03c30ab9948dd0f840e98c69febbcf358320ab61770c480fdf791feb9259ac97428ab35a663658a6c7be0250e82302c3a49ef7f584cd219f0062bd3c7429168c2ada56720bc3994c03d68d4d94ef5dde7b1dce376d47514d785fd513cb9695ead24de25f4dd027c5ff024add6679b6b25c22b79047f328d64f947d086f5f09490b56530093099f506efa155f65bbdcb8cb948eb23536c90ca6a399497977939d285c1eabcb70906b41c9affd7aa7761841d66a8b43e437b500"/236, 0xec) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x24, 0x0, {0x7, 0x28, 0x8001, 0x7130d800, 0x1, 0x5, 0x4003ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, 0x50) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x400000, 0x3010}, 0x0, &(0x7f0000000080)=0x0) ioctl$sock_bt_hci(r6, 0x400448e3, &(0x7f00000002c0)="5f81d4b03fe350fd67a9b5b68118176bcca74668580463654436b8fcda3a3d2ba697cbcdccbd584dd09ebc938caf1ac64c7dc815282731dc1146f456df24240d5340cec7b1b5c661c962b0a07b582914010d5ec393aa6e95ae9f71ba4296cd4a3fc1e0dd90ec094c20a5e965b358ddb715fedf9ab5055a3102f8b3136287b774582fd5b0614a2172ade1e6b410865793d5d86564") syz_io_uring_submit(0x0, r7, 0x0) pselect6(0x40, &(0x7f0000000600)={0xfffffffffffffffe, 0x10000000000000, 0x100000000000, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) 3m40.628227745s ago: executing program 34 (id=20): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef3, 0x0, 0x2, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3m26.873989839s ago: executing program 5 (id=62): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) umount2(&(0x7f0000000100)='./bus\x00', 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x2, [0x2], [0x2000, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x200002], [0x400000000000001, 0x0, 0x9]}) 3m25.641991519s ago: executing program 5 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m25.359337317s ago: executing program 5 (id=65): r0 = socket(0x10, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x1, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2d, 0x0, 0xc, 0x8, 0x0, 0x4, 0x2}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44004}, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x5c2ea7ef7e63be04) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 3m24.423465546s ago: executing program 5 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x5, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 3m22.614385957s ago: executing program 5 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x5, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 3m19.363954932s ago: executing program 5 (id=74): socket(0x10, 0x80002, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 3m3.747506415s ago: executing program 35 (id=74): socket(0x10, 0x80002, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 10.373180144s ago: executing program 1 (id=318): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18) setfsuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$misdntimer(0xffffff9c, &(0x7f0000000040), 0x143, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYBLOB="a54baa6446b4638b802e458656a6161b3f1327092c59c8a8810a090cd01a3d85a7a56a7768a792caa91632bce2c7aabba8f6fbbd258ff08a248f74221ebc6835695e1c39a23188862f9b350a63f5bf0484dabc232812b59dcfa9c76a", @ANYBLOB="03000000009aadc8a7c547fbfc460c0000000000000000002100000093", @ANYBLOB="8f2d60f191316ddbff5836434723a64936c248df6ea18af97b104575caf8049b132a761b37b248b60b3d11b6fde95afebae5e0928c6c0e62", @ANYRES16=r0, @ANYRESHEX=r1], 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc044054) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0x0, 0x100, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x86, 0xfffffffffffffffe, 0x80000002}, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x240, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42717afad7d48ed21d3a10810639d0f01000000000000f200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000001300)={"3c24139ad44aec57f2e2ad238a14fd00", r5, 0xffffffffffffffff}) ppoll(&(0x7f0000001280)=[{r7}, {r5, 0x410c}], 0x2, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9.122498148s ago: executing program 1 (id=320): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r1, @ANYBLOB="fe000400000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011005704000000000000000010000000", @ANYRES32=r5], 0x20}}, 0x0) 8.220974435s ago: executing program 4 (id=321): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="a87bd9ee0f576b7f154d335c2fc98bc19437485733999bcced68ee36d32fa86eda06129a4b4ef469cc3b15535be1fac5a3e57a8782598899a58b6f55870a666d57ea2cc1e9d382acbf80bc9b6b6b167abe318df21221f16789f450082e30e20684f5ade1a81fae6e5942567a9e386fa19dade09af668ed210193c04d972b5e8c16eaf89fadad4ec880bfb31b6b8056d73988bf", @ANYRES64=0x0], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x1}, &(0x7f0000000180), 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r5 = socket$key(0xf, 0x3, 0x2) readv(r5, &(0x7f00000005c0)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') 6.98539584s ago: executing program 4 (id=322): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[], 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x2000, 0x1}) io_uring_enter(r10, 0x3516, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0xf, 0xf9}) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x430, 0x1a0, 0x238, 0x108, 0x1a0, 0x108, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, &(0x7f0000000100), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x0, 'veth0_to_hsr\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x5e, 0x2, 0x52}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x5, 0x5, 0x3, 0x0, 0x5, 0x6], 0x4, 0x6}}}, @common=@ttl={{0x28}, {0x3, 0x7f}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x64, 0x6, @rand_addr=0x64010100, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x1}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xff000000, 0xff, 'vlan0\x00', 'wlan0\x00', {}, {}, 0xcb, 0x3, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0xb}}}, {{@ip={@multicast1, @empty, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x1d, 0x0, 0x36051bb9c8d8f960}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40, 0x81, @empty, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x4, 0x4}) write$dsp(r14, &(0x7f0000000040)="3576d0a530ab9f2c02a92838a1f946d33efdbd1f47227efcd119d65c4439def275a74d8e3d7aa2ad45a71abcc0f7d29d1ca2896c3e792974421796a86230b2f8a2e4231c30849c0f855d0dd45d9af90a2a6b0ea0bf9a94c9bdb41cf3067fb02546789808c0b44f", 0x67) 5.247042243s ago: executing program 1 (id=323): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x138) 5.097588058s ago: executing program 4 (id=324): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00089fe844fcc92e7d8a"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="8500000008000000760000000000000027000000000000009500000000000000d9e029f8c1652bc575bc1dc3a9fa16094393337a693d6504978ceb558b41537525a394249a1506da9ac69561c187afa3ba7ebc3af563e1e94ceec996695d1d26bbfb2feebab62478775a18852a3359fb20d4d020daf585b85d18b24cf00e3ac10552a5c9acddcb10eae4445de245fe9c7bf90262293683e504b59ef6d4568f30efe6465b5e0aeb3c6f9f5c6ad0a0891670e48b75f800"/192], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001b00)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 4.079948226s ago: executing program 1 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000003c0)="a4677dfc2133806eecf49820871b9e6af2e2", 0x12, 0x1, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000007c0)=""/87, 0x57}], 0x2}}], 0x1, 0x2002, 0x0) 2.38360559s ago: executing program 1 (id=326): r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000700000000000000"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_io_uring_setup(0x5020, 0x0, 0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.332192349s ago: executing program 4 (id=327): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x138) 1.334220664s ago: executing program 1 (id=328): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x43) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getrandom(&(0x7f0000000000)=""/56, 0x38, 0x1) 784.062051ms ago: executing program 4 (id=329): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpid() socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x5f, 0x2e]}}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) chdir(&(0x7f0000000140)='./bus\x00') link(0x0, &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') 0s ago: executing program 4 (id=330): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x2968, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x9f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x80, 0xb5}}}}}]}}]}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x8000) kernel console output (not intermixed with test programs): : (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.680037][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.687694][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.695479][ T5839] bridge_slave_0: entered allmulticast mode [ 93.703327][ T5839] bridge_slave_0: entered promiscuous mode [ 93.728220][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.735556][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.743009][ T5826] bridge_slave_0: entered allmulticast mode [ 93.750675][ T5826] bridge_slave_0: entered promiscuous mode [ 93.798468][ T5827] team0: Port device team_slave_1 added [ 93.814032][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.823551][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.830709][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.839542][ T5839] bridge_slave_1: entered allmulticast mode [ 93.847233][ T5839] bridge_slave_1: entered promiscuous mode [ 93.853119][ T5829] Bluetooth: hci1: command tx timeout [ 93.853253][ T5829] Bluetooth: hci0: command tx timeout [ 93.875751][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.883276][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.890541][ T5826] bridge_slave_1: entered allmulticast mode [ 93.898302][ T5826] bridge_slave_1: entered promiscuous mode [ 93.920800][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.932206][ T5829] Bluetooth: hci2: command tx timeout [ 93.935353][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.944875][ T5835] bridge_slave_0: entered allmulticast mode [ 93.953686][ T5835] bridge_slave_0: entered promiscuous mode [ 94.002209][ T5829] Bluetooth: hci3: command tx timeout [ 94.029033][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.058063][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.068853][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.076504][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.084400][ T5143] Bluetooth: hci5: command tx timeout [ 94.084666][ T5829] Bluetooth: hci4: command tx timeout [ 94.091342][ T5835] bridge_slave_1: entered allmulticast mode [ 94.103531][ T5835] bridge_slave_1: entered promiscuous mode [ 94.160606][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.174050][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.201542][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.208582][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.235100][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.247122][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.255324][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.262781][ T5833] bridge_slave_0: entered allmulticast mode [ 94.270348][ T5833] bridge_slave_0: entered promiscuous mode [ 94.281602][ T5837] team0: Port device team_slave_0 added [ 94.336633][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.344303][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.370459][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.381809][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.389462][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.397534][ T5833] bridge_slave_1: entered allmulticast mode [ 94.405241][ T5833] bridge_slave_1: entered promiscuous mode [ 94.413759][ T5837] team0: Port device team_slave_1 added [ 94.452317][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.501519][ T5839] team0: Port device team_slave_0 added [ 94.515055][ T5826] team0: Port device team_slave_0 added [ 94.523918][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.574313][ T5839] team0: Port device team_slave_1 added [ 94.582741][ T5826] team0: Port device team_slave_1 added [ 94.623120][ T5835] team0: Port device team_slave_0 added [ 94.648275][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.663050][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.670031][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.696558][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.738097][ T5835] team0: Port device team_slave_1 added [ 94.788783][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.798974][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.806661][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.833359][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.904420][ T5827] hsr_slave_0: entered promiscuous mode [ 94.910990][ T5827] hsr_slave_1: entered promiscuous mode [ 94.952766][ T5833] team0: Port device team_slave_0 added [ 94.959691][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.975349][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.002450][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.014539][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.021513][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.048183][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.060166][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.067975][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.094285][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.107277][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.114379][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.141953][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.175869][ T5833] team0: Port device team_slave_1 added [ 95.182915][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.189893][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.217105][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.229314][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.236935][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.263383][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.375356][ T5837] hsr_slave_0: entered promiscuous mode [ 95.381901][ T5837] hsr_slave_1: entered promiscuous mode [ 95.389122][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.396982][ T5837] Cannot create hsr debugfs directory [ 95.421832][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.429431][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.456044][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.528014][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.535113][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.561465][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.656449][ T5839] hsr_slave_0: entered promiscuous mode [ 95.663827][ T5839] hsr_slave_1: entered promiscuous mode [ 95.671235][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.678934][ T5839] Cannot create hsr debugfs directory [ 95.690588][ T5835] hsr_slave_0: entered promiscuous mode [ 95.697530][ T5835] hsr_slave_1: entered promiscuous mode [ 95.704244][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.711804][ T5835] Cannot create hsr debugfs directory [ 95.831492][ T5833] hsr_slave_0: entered promiscuous mode [ 95.838258][ T5833] hsr_slave_1: entered promiscuous mode [ 95.845259][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.853017][ T5833] Cannot create hsr debugfs directory [ 95.885933][ T5826] hsr_slave_0: entered promiscuous mode [ 95.892608][ T5826] hsr_slave_1: entered promiscuous mode [ 95.898741][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.906936][ T5826] Cannot create hsr debugfs directory [ 95.922980][ T5143] Bluetooth: hci0: command tx timeout [ 95.928535][ T5829] Bluetooth: hci1: command tx timeout [ 96.006672][ T5829] Bluetooth: hci2: command tx timeout [ 96.082496][ T5829] Bluetooth: hci3: command tx timeout [ 96.162247][ T5143] Bluetooth: hci5: command tx timeout [ 96.167935][ T5829] Bluetooth: hci4: command tx timeout [ 96.556818][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.599806][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.620676][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.633473][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.698364][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.724425][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.749392][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.761964][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.821068][ T5839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.843347][ T5839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.863000][ T5839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.879306][ T5839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.023432][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.040887][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.070803][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.093418][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.151316][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.198399][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.241572][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.260178][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.287268][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.300219][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.319106][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.326780][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.356462][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.390868][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.398067][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.477125][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.500542][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.531368][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.557658][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.570922][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.612529][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.626640][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.653773][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.660906][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.709577][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.719676][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.726934][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.738930][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.746124][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.793945][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.801094][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.866053][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.938834][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.946085][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.993887][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.005753][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.010859][ T5829] Bluetooth: hci1: command tx timeout [ 98.016192][ T5143] Bluetooth: hci0: command tx timeout [ 98.079305][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.086533][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.102403][ T5829] Bluetooth: hci2: command tx timeout [ 98.161014][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.176764][ T5829] Bluetooth: hci3: command tx timeout [ 98.242912][ T5829] Bluetooth: hci4: command tx timeout [ 98.248426][ T5829] Bluetooth: hci5: command tx timeout [ 98.330668][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.379207][ T5010] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.386438][ T5010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.466391][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.496433][ T5010] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.503684][ T5010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.521592][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.660118][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.695876][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.797647][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.835228][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.842498][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.869028][ T5837] veth0_vlan: entered promiscuous mode [ 98.900564][ T5837] veth1_vlan: entered promiscuous mode [ 98.920154][ T5010] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.927388][ T5010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.164682][ T5837] veth0_macvtap: entered promiscuous mode [ 99.230125][ T5837] veth1_macvtap: entered promiscuous mode [ 99.240608][ T5827] veth0_vlan: entered promiscuous mode [ 99.289240][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.355621][ T5827] veth1_vlan: entered promiscuous mode [ 99.409957][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.507184][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.591647][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.612709][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.621455][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.630462][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.660913][ T5839] veth0_vlan: entered promiscuous mode [ 99.696971][ T5827] veth0_macvtap: entered promiscuous mode [ 99.761180][ T5827] veth1_macvtap: entered promiscuous mode [ 99.801369][ T5839] veth1_vlan: entered promiscuous mode [ 99.869157][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.915416][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.980749][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.992908][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.997765][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.002397][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.080700][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.083731][ T5829] Bluetooth: hci1: command tx timeout [ 100.091289][ T5143] Bluetooth: hci0: command tx timeout [ 100.100667][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.109732][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.119569][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.140363][ T5839] veth0_macvtap: entered promiscuous mode [ 100.162745][ T5143] Bluetooth: hci2: command tx timeout [ 100.199542][ T5839] veth1_macvtap: entered promiscuous mode [ 100.205516][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.224680][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.242737][ T5143] Bluetooth: hci3: command tx timeout [ 100.267729][ T5833] veth0_vlan: entered promiscuous mode [ 100.309939][ T5833] veth1_vlan: entered promiscuous mode [ 100.323383][ T5826] veth0_vlan: entered promiscuous mode [ 100.324323][ T5143] Bluetooth: hci5: command tx timeout [ 100.328902][ T5829] Bluetooth: hci4: command tx timeout [ 100.377907][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.406270][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.434918][ T5826] veth1_vlan: entered promiscuous mode [ 100.462864][ T5010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.470740][ T5010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.505424][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.569003][ T5835] veth0_vlan: entered promiscuous mode [ 100.742826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.748865][ T5928] syz.2.3: attempt to access beyond end of device [ 100.748865][ T5928] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 100.760731][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.777638][ T5928] hpfs: hpfs_map_sector(): read error [ 100.778168][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.822954][ T5839] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.832222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 100.840985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 100.943736][ T5839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.971325][ T5839] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.986536][ T5839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.303654][ T5826] veth0_macvtap: entered promiscuous mode [ 101.323089][ T5826] veth1_macvtap: entered promiscuous mode [ 101.368725][ T5833] veth0_macvtap: entered promiscuous mode [ 101.390859][ T5835] veth1_vlan: entered promiscuous mode [ 101.489389][ T5833] veth1_macvtap: entered promiscuous mode [ 101.555456][ T5932] hub 6-0:1.0: USB hub found [ 101.583080][ T5932] hub 6-0:1.0: 1 port detected [ 101.692975][ T5932] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 5932 comm: syz.2.7) [ 101.855430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 101.855553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.932361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.002671][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.014700][ T30] audit: type=1800 audit(1748820091.416:2): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=7190 res=0 errno=0 [ 102.100262][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.187040][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.603416][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.611320][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.614110][ T5835] veth0_macvtap: entered promiscuous mode [ 102.667038][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.695733][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.725174][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.740178][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.762148][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.991693][ T5835] veth1_macvtap: entered promiscuous mode [ 103.671822][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.681680][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.690671][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.702483][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.916061][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.136305][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.303793][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.987708][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.028858][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.042095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 105.080867][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.091781][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.103598][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.270271][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.270297][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.322415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.515399][ T5947] loop2: detected capacity change from 0 to 1024 [ 105.524230][ T5947] ======================================================= [ 105.524230][ T5947] WARNING: The mand mount option has been deprecated and [ 105.524230][ T5947] and is ignored by this kernel. Remove the mand [ 105.524230][ T5947] option from the mount to silence this warning. [ 105.524230][ T5947] ======================================================= [ 105.559772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.581123][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.608526][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.679121][ T5951] netlink: 'syz.5.6': attribute type 4 has an invalid length. [ 105.686207][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.698053][ T5947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.704871][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.738270][ T5947] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.10: Allocating blocks 385-513 which overlap fs metadata [ 105.768022][ T5946] EXT4-fs (loop2): pa ffff888033cf8828: logic 16, phys. 129, len 24 [ 105.776232][ T5946] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 105.790052][ T5952] netlink: 'syz.5.6': attribute type 4 has an invalid length. [ 105.896939][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.953773][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.025822][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.211318][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.032180][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.102296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 108.254378][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.317974][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.103211][ T6007] process 'syz.1.23' launched './file1' with NULL argv: empty string added [ 119.073633][ T6027] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 119.910690][ T6032] xt_CT: No such helper "snmp" [ 120.485616][ T6027] netlink: 252 bytes leftover after parsing attributes in process `syz.1.28'. [ 124.956038][ T5883] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.622418][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 125.748638][ T5883] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 125.862720][ T5883] usb 2-1: config 0 has no interface number 0 [ 125.906711][ T5883] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 125.906789][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.906829][ T5883] usb 2-1: Product: syz [ 125.906887][ T5883] usb 2-1: Manufacturer: syz [ 125.906945][ T5883] usb 2-1: SerialNumber: syz [ 126.051444][ T5883] usb 2-1: config 0 descriptor?? [ 126.196993][ T5883] asix 2-1:0.251: probe with driver asix failed with error -22 [ 127.115265][ T6064] loop5: detected capacity change from 0 to 1024 [ 127.400291][ T6064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.438084][ T5883] usb 2-1: USB disconnect, device number 2 [ 128.115873][ T5143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 128.662434][ T5143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 128.670820][ T5143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 128.679754][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 128.692349][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 128.759556][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.581543][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.592673][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.639457][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.152298][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 130.174387][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.182790][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.540155][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 130.548770][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 130.556697][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 130.605492][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 130.618146][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 130.805552][ T5829] Bluetooth: hci6: command tx timeout [ 132.201952][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.212761][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.252267][ T5829] Bluetooth: hci1: command tx timeout [ 132.722964][ T5829] Bluetooth: hci7: command tx timeout [ 132.884572][ T5829] Bluetooth: hci6: command tx timeout [ 133.048680][ T6114] netlink: 252 bytes leftover after parsing attributes in process `syz.4.47'. [ 134.322563][ T5829] Bluetooth: hci1: command tx timeout [ 134.638569][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.802760][ T5829] Bluetooth: hci7: command tx timeout [ 134.972480][ T5829] Bluetooth: hci6: command tx timeout [ 135.584389][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.710874][ T6074] chnl_net:caif_netlink_parms(): no params data found [ 135.782969][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.402295][ T5829] Bluetooth: hci1: command tx timeout [ 136.814704][ T6138] loop6: detected capacity change from 0 to 524287999 [ 136.882147][ T5143] Bluetooth: hci7: command tx timeout [ 137.053334][ T5829] Bluetooth: hci6: command tx timeout [ 138.056917][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.343587][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.493567][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.501166][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.512642][ T6074] bridge_slave_0: entered allmulticast mode [ 138.522333][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 138.540518][ T6074] bridge_slave_0: entered promiscuous mode [ 138.540531][ T5884] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 138.540559][ T5884] usb 5-1: config 0 has no interface number 0 [ 138.578000][ T5884] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 138.588241][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.597060][ T5884] usb 5-1: Product: syz [ 138.601381][ T5884] usb 5-1: Manufacturer: syz [ 138.606204][ T5884] usb 5-1: SerialNumber: syz [ 138.633899][ T5884] usb 5-1: config 0 descriptor?? [ 138.670404][ T5884] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 138.815546][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.847719][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.855883][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.871231][ T6074] bridge_slave_1: entered allmulticast mode [ 138.880163][ T6074] bridge_slave_1: entered promiscuous mode [ 138.888896][ T5884] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 138.907844][ T5884] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 138.962776][ T5143] Bluetooth: hci1: command tx timeout [ 138.987673][ T5829] Bluetooth: hci7: command tx timeout [ 139.079383][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 139.102060][ T24] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 139.201319][ T24] usb 6-1: config 0 has no interface number 0 [ 139.238196][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.376360][ T24] usb 6-1: config 0 interface 12 has no altsetting 0 [ 139.631758][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.668253][ T24] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 139.697322][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.728348][ T24] usb 6-1: Product: syz [ 139.748380][ T24] usb 6-1: Manufacturer: syz [ 139.769898][ T24] usb 6-1: SerialNumber: syz [ 139.804499][ T24] usb 6-1: config 0 descriptor?? [ 139.827830][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.848447][ T24] f81534 6-1:0.12: required endpoints missing [ 140.481888][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 140.482933][ T24] usb 5-1: USB disconnect, device number 2 [ 140.510656][ T6091] chnl_net:caif_netlink_parms(): no params data found [ 140.553532][ T5901] usb 6-1: USB disconnect, device number 2 [ 140.592875][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 140.633858][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.654810][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 140.699257][ T24] quatech2 5-1:0.51: device disconnected [ 141.429031][ T6074] team0: Port device team_slave_0 added [ 141.556245][ T6174] loop4: detected capacity change from 0 to 512 [ 141.599860][ T6174] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 141.624228][ T6174] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.708379][ T6174] EXT4-fs (loop4): 1 truncate cleaned up [ 141.761851][ T6174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.791072][ T6074] team0: Port device team_slave_1 added [ 143.287057][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.294253][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.371940][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.505822][ T49] bridge_slave_1: left allmulticast mode [ 143.516413][ T49] bridge_slave_1: left promiscuous mode [ 143.558363][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.616284][ T49] bridge_slave_0: left allmulticast mode [ 143.622524][ T49] bridge_slave_0: left promiscuous mode [ 143.660402][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.709154][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.942741][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.990649][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.004687][ T49] bond0 (unregistering): Released all slaves [ 145.130528][ T6085] chnl_net:caif_netlink_parms(): no params data found [ 145.245947][ T6210] hub 6-0:1.0: USB hub found [ 145.262710][ T6210] hub 6-0:1.0: 1 port detected [ 145.293309][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.320321][ T6207] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 6207 comm: syz.4.68) [ 145.335190][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.361327][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.412842][ T30] audit: type=1800 audit(1748820134.806:3): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.68" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8662 res=0 errno=0 [ 145.413295][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.444214][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.844204][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.851484][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.885620][ T6091] bridge_slave_0: entered allmulticast mode [ 147.222372][ T6091] bridge_slave_0: entered promiscuous mode [ 148.782801][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.795426][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.803093][ T6091] bridge_slave_1: entered allmulticast mode [ 148.874851][ T6091] bridge_slave_1: entered promiscuous mode [ 148.906886][ T6229] sctp: failed to load transform for md5: -2 [ 150.289673][ T6091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.872964][ T1766] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 151.177832][ T1766] usb 5-1: Using ep0 maxpacket: 16 [ 151.248908][ T1766] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 151.333967][ T1766] usb 5-1: config 0 has no interface number 0 [ 151.436825][ T1766] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 151.526399][ T1766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.536681][ T6258] loop1: detected capacity change from 0 to 512 [ 151.585524][ T1766] usb 5-1: Product: syz [ 151.622707][ T6258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.645738][ T1766] usb 5-1: Manufacturer: syz [ 151.692668][ T1766] usb 5-1: SerialNumber: syz [ 151.821579][ T6258] EXT4-fs (loop1): 1 truncate cleaned up [ 151.920687][ T1766] usb 5-1: config 0 descriptor?? [ 151.960357][ T6258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.042957][ T1766] asix 5-1:0.251: probe with driver asix failed with error -22 [ 154.092287][ T1766] usb 5-1: USB disconnect, device number 3 [ 154.258586][ T6091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.382524][ T6272] ./cgroup: Can't lookup blockdev [ 154.644974][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 154.823183][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.917672][ T6074] hsr_slave_0: entered promiscuous mode [ 154.943383][ T6074] hsr_slave_1: entered promiscuous mode [ 154.950121][ T6074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.972072][ T6074] Cannot create hsr debugfs directory [ 155.316269][ T6282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'. [ 155.509615][ T49] hsr_slave_0: left promiscuous mode [ 155.543889][ T49] hsr_slave_1: left promiscuous mode [ 155.550477][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.572213][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.594085][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.602891][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.669551][ T49] veth1_macvtap: left promiscuous mode [ 155.701186][ T49] veth0_macvtap: left promiscuous mode [ 155.726721][ T49] veth1_vlan: left promiscuous mode [ 155.735984][ T49] veth0_vlan: left promiscuous mode [ 158.553741][ T49] team0 (unregistering): Port device team_slave_1 removed [ 158.671785][ T49] team0 (unregistering): Port device team_slave_0 removed [ 159.434478][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 159.477482][ T43] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.829837][ T6314] fido_id[6314]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.099969][ T6322] syz.4.93: attempt to access beyond end of device [ 160.099969][ T6322] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 160.116367][ T6322] hpfs: hpfs_map_sector(): read error [ 162.068001][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 162.211721][ T6091] team0: Port device team_slave_0 added [ 162.294487][ T6091] team0: Port device team_slave_1 added [ 162.369609][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.391719][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.409662][ T6085] bridge_slave_0: entered allmulticast mode [ 162.418609][ T6085] bridge_slave_0: entered promiscuous mode [ 162.464698][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 162.486780][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.520983][ T43] usb 2-1: config 0 has no interface number 0 [ 162.599310][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 162.645664][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.758430][ T6341] loop4: detected capacity change from 0 to 8 [ 162.848640][ T6341] SQUASHFS error: zstd decompression error: 10 [ 162.855431][ T6341] SQUASHFS error: zstd decompression failed, data probably corrupt [ 162.864071][ T6341] SQUASHFS error: Failed to read block 0x4ec: -5 [ 162.870511][ T6341] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 162.877958][ T6341] SQUASHFS error: Unable to read inode 0x2011f [ 163.118205][ T43] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.128486][ T43] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 163.137880][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.144769][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.158320][ T43] usb 2-1: config 0 descriptor?? [ 163.171978][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.201874][ T6091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.216719][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.224482][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.231937][ T6085] bridge_slave_1: entered allmulticast mode [ 163.241296][ T6085] bridge_slave_1: entered promiscuous mode [ 163.303149][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.310325][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.342531][ T6091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.417954][ T6085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.430775][ T6085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.580384][ T6085] team0: Port device team_slave_0 added [ 164.307504][ T6085] team0: Port device team_slave_1 added [ 164.689491][ T43] usbhid 2-1:0.1: can't add hid device: -71 [ 164.697458][ T43] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 164.721064][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.751296][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.769085][ T43] usb 2-1: USB disconnect, device number 3 [ 164.837093][ T6085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.877330][ T6091] hsr_slave_0: entered promiscuous mode [ 165.757585][ T6091] hsr_slave_1: entered promiscuous mode [ 166.046204][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 166.259396][ T6085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.322133][ T6085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.348366][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.436486][ T6372] overlayfs: failed to resolve './file0': -2 [ 166.542557][ T6373] netlink: 36 bytes leftover after parsing attributes in process `syz.4.103'. [ 166.978634][ T6085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.237087][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.261049][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.267240][ T6363] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 167.295976][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.333575][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.460314][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.691716][ T5143] Bluetooth: hci2: command tx timeout [ 169.756797][ T6085] hsr_slave_0: entered promiscuous mode [ 169.765979][ T6085] hsr_slave_1: entered promiscuous mode [ 169.777903][ T6085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.791581][ T6085] Cannot create hsr debugfs directory [ 170.868151][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.762413][ T5143] Bluetooth: hci2: command 0x041b tx timeout [ 172.319234][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 172.557717][ T6414] program syz.4.112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.569216][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.675680][ T30] audit: type=1800 audit(1748820162.096:4): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.111" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 172.712580][ T6412] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 172.758148][ T6412] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 172.870247][ T6412] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 173.407597][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.845465][ T5143] Bluetooth: hci2: command 0x041b tx timeout [ 173.946603][ T5143] Bluetooth: hci3: command tx timeout [ 174.690736][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.161752][ T6074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.307384][ T6074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.874525][ T6074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.922188][ T5143] Bluetooth: hci2: command 0x041b tx timeout [ 175.946958][ T6074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.607687][ T6459] program syz.1.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.703293][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.817343][ T6091] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 178.005503][ T5143] Bluetooth: hci2: command 0x041b tx timeout [ 178.272475][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 178.453084][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 178.477032][ T43] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 178.530092][ T43] usb 2-1: config 0 has no interface number 0 [ 178.568248][ T43] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 178.609367][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.671478][ T43] usb 2-1: Product: syz [ 178.711701][ T43] usb 2-1: Manufacturer: syz [ 178.749178][ T43] usb 2-1: SerialNumber: syz [ 178.918742][ T43] usb 2-1: config 0 descriptor?? [ 178.992181][ T6091] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 179.063735][ T43] asix 2-1:0.251: probe with driver asix failed with error -22 [ 179.979680][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.226959][ T6091] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 180.513942][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.631017][ T6091] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 181.063778][ T43] usb 2-1: USB disconnect, device number 4 [ 181.247123][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.371935][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 182.488941][ T6085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.261698][ T6085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.359412][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.502374][ T6085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.542662][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 183.583617][ T5883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.591694][ T5883] usb 2-1: config 0 has no interface number 0 [ 183.603945][ T6085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.696559][ T5883] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.720470][ T5883] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.740709][ T5883] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 183.786482][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.909045][ T5883] usb 2-1: config 0 descriptor?? [ 184.968125][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.987065][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.989861][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.010206][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.023986][ T6375] bridge_slave_0: entered allmulticast mode [ 185.030240][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.038893][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.047879][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.057713][ T6375] bridge_slave_0: entered promiscuous mode [ 185.097512][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.137895][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.154625][ T6375] bridge_slave_1: entered allmulticast mode [ 185.163278][ T6375] bridge_slave_1: entered promiscuous mode [ 185.246101][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.277192][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.351158][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.420691][ T6375] team0: Port device team_slave_0 added [ 185.431305][ T5883] usbhid 2-1:0.1: can't add hid device: -71 [ 185.450837][ T5883] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 185.475328][ T5883] usb 2-1: USB disconnect, device number 5 [ 185.551830][ T6375] team0: Port device team_slave_1 added [ 186.307343][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.359696][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.369803][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.404604][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.417910][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.425040][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.452665][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.513524][ T5884] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 186.730788][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.102070][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 187.116161][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.132325][ T5143] Bluetooth: hci4: command tx timeout [ 187.148146][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.188623][ T5884] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 187.199064][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.209921][ T5884] usb 5-1: Product: syz [ 187.214295][ T5884] usb 5-1: Manufacturer: syz [ 187.220366][ T5884] usb 5-1: SerialNumber: syz [ 187.237266][ T6091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.245402][ T5884] usb 5-1: config 0 descriptor?? [ 187.264903][ T5884] hub 5-1:0.0: bad descriptor, ignoring hub [ 187.277275][ T5884] hub 5-1:0.0: probe with driver hub failed with error -5 [ 187.348105][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.439022][ T6375] hsr_slave_0: entered promiscuous mode [ 187.446915][ T6375] hsr_slave_1: entered promiscuous mode [ 187.465936][ T6375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.711181][ T6524] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.202463][ T5143] Bluetooth: hci4: command tx timeout [ 189.255875][ T6375] Cannot create hsr debugfs directory [ 189.482409][ T43] usb 5-1: USB disconnect, device number 4 [ 191.362575][ T5143] Bluetooth: hci4: command tx timeout [ 191.863301][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.874427][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.883444][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.921692][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.952322][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.455038][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.467737][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.477308][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.490810][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.500343][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.287936][ T6500] chnl_net:caif_netlink_parms(): no params data found [ 193.444968][ T5829] Bluetooth: hci4: command tx timeout [ 193.613331][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.619732][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.173682][ T5829] Bluetooth: hci5: command tx timeout [ 194.382180][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 194.466839][ T49] bridge_slave_1: left allmulticast mode [ 194.472643][ T49] bridge_slave_1: left promiscuous mode [ 194.478658][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.511582][ T49] bridge_slave_0: left allmulticast mode [ 194.525948][ T49] bridge_slave_0: left promiscuous mode [ 194.538996][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.555936][ T49] bridge_slave_1: left allmulticast mode [ 194.561754][ T49] bridge_slave_1: left promiscuous mode [ 194.569004][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.580431][ T49] bridge_slave_0: left allmulticast mode [ 194.586577][ T49] bridge_slave_0: left promiscuous mode [ 194.604052][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.623000][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 194.634321][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.650201][ T49] bridge_slave_1: left allmulticast mode [ 194.654428][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.657667][ T49] bridge_slave_1: left promiscuous mode [ 194.676275][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.687352][ T49] bridge_slave_0: left allmulticast mode [ 194.694885][ T49] bridge_slave_0: left promiscuous mode [ 194.700694][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.701096][ T5886] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 194.718444][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.727322][ T5886] usb 5-1: Product: syz [ 194.731636][ T5886] usb 5-1: Manufacturer: syz [ 194.754398][ T5886] usb 5-1: SerialNumber: syz [ 194.788249][ T5886] usb 5-1: config 0 descriptor?? [ 194.800260][ T5886] hub 5-1:0.0: bad descriptor, ignoring hub [ 194.819253][ T5886] hub 5-1:0.0: probe with driver hub failed with error -5 [ 194.962665][ T5829] Bluetooth: hci1: command tx timeout [ 196.076113][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 196.252316][ T5829] Bluetooth: hci5: command tx timeout [ 196.642733][ T5886] usb 5-1: USB disconnect, device number 5 [ 196.734662][ T5829] Bluetooth: hci3: command tx timeout [ 197.052338][ T5829] Bluetooth: hci1: command tx timeout [ 197.221024][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.241538][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.256616][ T49] bond0 (unregistering): Released all slaves [ 197.701192][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.726544][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.737742][ T49] bond0 (unregistering): Released all slaves [ 198.322252][ T5829] Bluetooth: hci5: command tx timeout [ 198.356998][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.064905][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.089145][ T49] bond0 (unregistering): Released all slaves [ 199.124226][ T5829] Bluetooth: hci1: command tx timeout [ 199.218849][ T6586] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 199.222599][ T30] audit: type=1800 audit(1748820188.636:5): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.142" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 199.228795][ T6586] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 199.260541][ T6586] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 200.398495][ T6609] program syz.4.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.418486][ T5829] Bluetooth: hci5: command tx timeout [ 200.520879][ T6375] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 200.543076][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.560975][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.577858][ T6500] bridge_slave_0: entered allmulticast mode [ 200.795005][ T6500] bridge_slave_0: entered promiscuous mode [ 201.216457][ T5829] Bluetooth: hci1: command tx timeout [ 201.419904][ T6375] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 201.441605][ T6375] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 201.457636][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.465390][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.472996][ T6500] bridge_slave_1: entered allmulticast mode [ 201.480583][ T6500] bridge_slave_1: entered promiscuous mode [ 201.520669][ T6618] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 201.520669][ T6618] The task syz.1.151 (6618) triggered the difference, watch for misbehavior. [ 201.561805][ T6616] loop1: detected capacity change from 0 to 512 [ 201.590445][ T6616] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.620360][ T6616] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 201.634574][ T6375] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 201.676480][ T6616] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 201.688321][ T6616] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 201.702147][ T6616] System zones: 0-2, 18-18, 34-34 [ 201.711169][ T6616] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.151: iget: bad i_size value: 360287970189639680 [ 201.737178][ T6616] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.151: couldn't read orphan inode 15 (err -117) [ 201.769156][ T6616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.796764][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.918608][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.218022][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 202.265296][ T6500] team0: Port device team_slave_0 added [ 202.317905][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.428411][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 202.486464][ T6500] team0: Port device team_slave_1 added [ 203.557357][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.591931][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.630065][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.645000][ T6644] netlink: 252 bytes leftover after parsing attributes in process `syz.1.152'. [ 204.648199][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 204.802976][ T6658] loop4: detected capacity change from 0 to 8 [ 204.864655][ T6658] SQUASHFS error: zstd decompression error: 10 [ 204.871371][ T6658] SQUASHFS error: zstd decompression failed, data probably corrupt [ 204.880100][ T6658] SQUASHFS error: Failed to read block 0x4ec: -5 [ 204.886532][ T6658] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 204.893909][ T6658] SQUASHFS error: Unable to read inode 0x2011f [ 205.097832][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.135332][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.211038][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.443396][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.450829][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.459540][ T6563] bridge_slave_0: entered allmulticast mode [ 208.467842][ T6563] bridge_slave_0: entered promiscuous mode [ 208.520429][ T6500] hsr_slave_0: entered promiscuous mode [ 208.537158][ T6500] hsr_slave_1: entered promiscuous mode [ 208.544497][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.552576][ T6500] Cannot create hsr debugfs directory [ 208.559082][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.568490][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.576362][ T6555] bridge_slave_0: entered allmulticast mode [ 208.600702][ T6555] bridge_slave_0: entered promiscuous mode [ 208.630351][ T6680] bridge0: entered promiscuous mode [ 208.640827][ T6680] batman_adv: batadv0: Adding interface: macsec1 [ 208.653772][ T6680] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.703909][ T6680] batman_adv: batadv0: Interface activated: macsec1 [ 208.714532][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.732623][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.740098][ T6563] bridge_slave_1: entered allmulticast mode [ 208.770492][ T6563] bridge_slave_1: entered promiscuous mode [ 208.951580][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.983526][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.034071][ T6555] bridge_slave_1: entered allmulticast mode [ 209.083297][ T6555] bridge_slave_1: entered promiscuous mode [ 209.298998][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.752401][ T49] hsr_slave_0: left promiscuous mode [ 209.784849][ T49] hsr_slave_1: left promiscuous mode [ 209.831264][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.875171][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.910589][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.919103][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.951735][ T49] hsr_slave_0: left promiscuous mode [ 209.962445][ T49] hsr_slave_1: left promiscuous mode [ 209.976733][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.991563][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.003268][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.010680][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.051542][ T49] hsr_slave_0: left promiscuous mode [ 210.058342][ T49] hsr_slave_1: left promiscuous mode [ 210.067850][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.080020][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.089146][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.098983][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.190867][ T49] veth1_macvtap: left promiscuous mode [ 210.197636][ T49] veth0_macvtap: left promiscuous mode [ 210.221957][ T49] veth1_vlan: left promiscuous mode [ 210.229566][ T49] veth0_vlan: left promiscuous mode [ 210.238098][ T49] veth1_macvtap: left promiscuous mode [ 210.248124][ T49] veth0_macvtap: left promiscuous mode [ 210.259360][ T49] veth1_vlan: left promiscuous mode [ 210.268042][ T49] veth0_vlan: left promiscuous mode [ 210.281923][ T49] veth1_macvtap: left promiscuous mode [ 210.290890][ T49] veth0_macvtap: left promiscuous mode [ 210.296714][ T49] veth1_vlan: left promiscuous mode [ 210.317097][ T49] veth0_vlan: left promiscuous mode [ 212.736652][ T49] team0 (unregistering): Port device team_slave_1 removed [ 212.775550][ T49] team0 (unregistering): Port device team_slave_0 removed [ 213.807335][ T6700] netlink: 252 bytes leftover after parsing attributes in process `syz.1.164'. [ 214.278119][ T49] team0 (unregistering): Port device team_slave_1 removed [ 214.319277][ T49] team0 (unregistering): Port device team_slave_0 removed [ 215.081880][ T49] team0 (unregistering): Port device team_slave_1 removed [ 215.136515][ T49] team0 (unregistering): Port device team_slave_0 removed [ 215.576651][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.631066][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.647113][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.993731][ T6555] team0: Port device team_slave_0 added [ 216.035119][ T6563] team0: Port device team_slave_0 added [ 216.340179][ T6563] team0: Port device team_slave_1 added [ 216.373508][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 216.836625][ T6555] team0: Port device team_slave_1 added [ 218.385306][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.617027][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.667561][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.753487][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.773074][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.782076][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.819320][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.341344][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.362068][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.422198][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.446390][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.472275][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.482434][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.526915][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.996710][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.003979][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.553617][ T6726] bridge_slave_0: left allmulticast mode [ 220.574329][ T6726] bridge_slave_0: left promiscuous mode [ 220.589172][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.987141][ T6726] bridge_slave_1: left allmulticast mode [ 220.993780][ T6726] bridge_slave_1: left promiscuous mode [ 221.117884][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.460528][ T6726] bond0: (slave bond_slave_0): Releasing backup interface [ 221.784889][ T6726] bond0: (slave bond_slave_1): Releasing backup interface [ 222.089420][ T6726] team0: Port device team_slave_0 removed [ 222.190698][ T6726] team0: Port device team_slave_1 removed [ 222.238339][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.288518][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.353400][ T6726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.400809][ T6726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.619965][ T6726] batman_adv: batadv0: Interface deactivated: macsec1 [ 222.627647][ T6726] batman_adv: batadv0: Removing interface: macsec1 [ 222.691646][ T6563] hsr_slave_0: entered promiscuous mode [ 222.698269][ T6563] hsr_slave_1: entered promiscuous mode [ 222.707169][ T6563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.722283][ T6563] Cannot create hsr debugfs directory [ 222.894764][ T6555] hsr_slave_0: entered promiscuous mode [ 222.901668][ T6555] hsr_slave_1: entered promiscuous mode [ 222.905983][ T6746] loop1: detected capacity change from 0 to 512 [ 222.936023][ T6555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.952153][ T6555] Cannot create hsr debugfs directory [ 222.965702][ T6746] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.004915][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.012150][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.049926][ T6746] EXT4-fs (loop1): 1 truncate cleaned up [ 223.113468][ T6746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.907770][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.565222][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 228.664050][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 228.672491][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 228.701507][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 228.720922][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.932812][ T6500] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.010189][ T6500] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.335954][ T6500] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.535677][ T6500] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.802818][ T5829] Bluetooth: hci6: command tx timeout [ 231.062573][ T6784] chnl_net:caif_netlink_parms(): no params data found [ 231.379997][ T49] bridge_slave_1: left allmulticast mode [ 231.408004][ T49] bridge_slave_1: left promiscuous mode [ 231.422484][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.446386][ T49] bridge_slave_0: left allmulticast mode [ 231.459295][ T49] bridge_slave_0: left promiscuous mode [ 231.468588][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.519297][ T49] bridge_slave_1: left allmulticast mode [ 231.543807][ T49] bridge_slave_1: left promiscuous mode [ 231.562554][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.584868][ T49] bridge_slave_0: left allmulticast mode [ 231.600917][ T49] bridge_slave_0: left promiscuous mode [ 231.610028][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.696413][ T49] bridge_slave_1: left allmulticast mode [ 231.720500][ T49] bridge_slave_1: left promiscuous mode [ 231.730244][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.766051][ T49] bridge_slave_0: left allmulticast mode [ 231.791821][ T49] bridge_slave_0: left promiscuous mode [ 231.906498][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.617387][ T49] bridge_slave_1: left allmulticast mode [ 232.624612][ T49] bridge_slave_1: left promiscuous mode [ 232.631199][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.676480][ T49] bridge_slave_0: left allmulticast mode [ 232.702266][ T49] bridge_slave_0: left promiscuous mode [ 232.710201][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.901339][ T5829] Bluetooth: hci6: command tx timeout [ 233.132895][ T6830] loop4: detected capacity change from 0 to 512 [ 233.193957][ T6830] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 233.292747][ T6830] EXT4-fs (loop4): 1 truncate cleaned up [ 233.300304][ T6830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.848318][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.962109][ T5829] Bluetooth: hci6: command tx timeout [ 235.732886][ T6847] hub 6-0:1.0: USB hub found [ 235.762431][ T6847] hub 6-0:1.0: 1 port detected [ 235.806113][ T6849] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 6849 comm: syz.4.184) [ 235.868491][ T30] audit: type=1800 audit(1748820225.286:6): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.184" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8662 res=0 errno=0 [ 236.564568][ T6855] netlink: 252 bytes leftover after parsing attributes in process `syz.1.186'. [ 237.052124][ T5829] Bluetooth: hci6: command tx timeout [ 237.140859][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.152672][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.180895][ T49] bond0 (unregistering): Released all slaves [ 237.629900][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.651721][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.664865][ T49] bond0 (unregistering): Released all slaves [ 238.315576][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.360017][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.402383][ T49] bond0 (unregistering): Released all slaves [ 238.669127][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.681117][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.694045][ T49] bond0 (unregistering): Released all slaves [ 239.064018][ T6784] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.071222][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.123148][ T6784] bridge_slave_0: entered allmulticast mode [ 239.131121][ T6784] bridge_slave_0: entered promiscuous mode [ 239.277397][ T6784] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.310951][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.352965][ T6784] bridge_slave_1: entered allmulticast mode [ 239.389788][ T6784] bridge_slave_1: entered promiscuous mode [ 239.614325][ T49] hsr_slave_0: left promiscuous mode [ 239.624192][ T49] hsr_slave_1: left promiscuous mode [ 239.647700][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.668091][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.717715][ T49] hsr_slave_0: left promiscuous mode [ 239.730184][ T49] hsr_slave_1: left promiscuous mode [ 239.745745][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.763489][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.809799][ T49] hsr_slave_0: left promiscuous mode [ 239.832873][ T49] hsr_slave_1: left promiscuous mode [ 239.857226][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.878254][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.903373][ T49] hsr_slave_0: left promiscuous mode [ 239.921740][ T49] hsr_slave_1: left promiscuous mode [ 239.937118][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.968959][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.751096][ T49] team0 (unregistering): Port device team_slave_1 removed [ 240.822300][ T49] team0 (unregistering): Port device team_slave_0 removed [ 241.659406][ T49] team0 (unregistering): Port device team_slave_1 removed [ 241.691876][ T49] team0 (unregistering): Port device team_slave_0 removed [ 242.227815][ T49] team0 (unregistering): Port device team_slave_1 removed [ 242.295139][ T49] team0 (unregistering): Port device team_slave_0 removed [ 244.086334][ T6896] hub 6-0:1.0: USB hub found [ 244.122719][ T6896] hub 6-0:1.0: 1 port detected [ 244.335495][ T49] team0 (unregistering): Port device team_slave_1 removed [ 244.336449][ T6896] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 6896 comm: syz.1.192) [ 244.479492][ T30] audit: type=1800 audit(1748820233.886:7): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.192" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=12605 res=0 errno=0 [ 246.473972][ T49] team0 (unregistering): Port device team_slave_0 removed [ 246.613158][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.636220][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.645133][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.664495][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.676264][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.710187][ T6907] xt_CT: No such helper "snmp" [ 247.043246][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.215423][ T6784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.239135][ T6555] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 247.427281][ T6784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.447199][ T6555] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 247.720727][ T6555] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 248.056119][ T6555] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 248.734193][ T5143] Bluetooth: hci2: command tx timeout [ 249.056998][ T6784] team0: Port device team_slave_0 added [ 249.071687][ T6784] team0: Port device team_slave_1 added [ 250.614743][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.621779][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.803977][ T5143] Bluetooth: hci2: command tx timeout [ 250.912451][ T6784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.332933][ T6784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.426330][ T6784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.635006][ T6784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.275780][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.287547][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.305347][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.437713][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.453202][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.882142][ T5143] Bluetooth: hci2: command tx timeout [ 253.270236][ T6784] hsr_slave_0: entered promiscuous mode [ 253.297814][ T6784] hsr_slave_1: entered promiscuous mode [ 253.419050][ T5143] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.432278][ T5143] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.440880][ T5143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.451095][ T5143] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.459704][ T5143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.563391][ T5143] Bluetooth: hci4: command tx timeout [ 254.962466][ T5143] Bluetooth: hci2: command tx timeout [ 255.052685][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.059389][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.607783][ T5143] Bluetooth: hci7: command tx timeout [ 255.833202][ T6974] netlink: 44 bytes leftover after parsing attributes in process `syz.4.206'. [ 256.664228][ T5143] Bluetooth: hci4: command tx timeout [ 257.613171][ T6908] chnl_net:caif_netlink_parms(): no params data found [ 257.692800][ T5143] Bluetooth: hci7: command tx timeout [ 258.732365][ T5143] Bluetooth: hci4: command tx timeout [ 259.886198][ T5143] Bluetooth: hci7: command tx timeout [ 260.802111][ T5143] Bluetooth: hci4: command tx timeout [ 260.817300][ T6908] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.868791][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 260.887158][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.959611][ T6908] bridge_slave_0: entered allmulticast mode [ 260.991390][ T6908] bridge_slave_0: entered promiscuous mode [ 261.019934][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.040366][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.052634][ T6908] bridge_slave_1: entered allmulticast mode [ 261.061851][ T6908] bridge_slave_1: entered promiscuous mode [ 261.082196][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 261.096251][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 261.128490][ T24] usb 5-1: config 0 has no interface number 0 [ 261.154695][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 261.180606][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.212269][ T24] usb 5-1: Product: syz [ 261.216518][ T24] usb 5-1: Manufacturer: syz [ 261.221130][ T24] usb 5-1: SerialNumber: syz [ 261.256859][ T24] usb 5-1: config 0 descriptor?? [ 261.270183][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 261.882158][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 261.919098][ T7016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.932156][ T5143] Bluetooth: hci7: command tx timeout [ 261.955527][ T7016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.982477][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 262.121651][ T6908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.157319][ T6908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.238958][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 262.240457][ T5886] usb 5-1: USB disconnect, device number 6 [ 262.320295][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 262.414528][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 262.473882][ T5886] quatech2 5-1:0.51: device disconnected [ 262.675561][ T6908] team0: Port device team_slave_0 added [ 263.058947][ T7045] netlink: 252 bytes leftover after parsing attributes in process `syz.1.218'. [ 263.353131][ T6908] team0: Port device team_slave_1 added [ 265.595928][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.655807][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.728730][ T6908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.845393][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.852589][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.879923][ T6908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.892661][ T6947] chnl_net:caif_netlink_parms(): no params data found [ 265.966149][ T7063] netlink: 72 bytes leftover after parsing attributes in process `syz.4.221'. [ 267.193816][ T6951] chnl_net:caif_netlink_parms(): no params data found [ 267.612273][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 267.694460][ T6908] hsr_slave_0: entered promiscuous mode [ 267.708487][ T6908] hsr_slave_1: entered promiscuous mode [ 267.720892][ T6908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.734658][ T6908] Cannot create hsr debugfs directory [ 267.773163][ T6784] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 267.803458][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 267.820281][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 267.832195][ T24] usb 5-1: config 0 has no interface number 0 [ 267.864570][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 267.874357][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.994497][ T24] usb 5-1: Product: syz [ 268.008170][ T24] usb 5-1: Manufacturer: syz [ 268.015417][ T24] usb 5-1: SerialNumber: syz [ 268.119631][ T24] usb 5-1: config 0 descriptor?? [ 268.269116][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 268.448852][ T6784] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 268.477048][ T6784] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 268.506824][ T6784] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 268.531275][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 268.606859][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 268.856963][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.890315][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.123560][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.147525][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.159625][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 269.169079][ T6951] bridge_slave_0: entered allmulticast mode [ 269.173145][ T24] usb 5-1: USB disconnect, device number 7 [ 269.231047][ T6951] bridge_slave_0: entered promiscuous mode [ 269.242776][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 269.304779][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 269.350789][ T24] quatech2 5-1:0.51: device disconnected [ 269.431241][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.465671][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.483354][ T6951] bridge_slave_1: entered allmulticast mode [ 269.491881][ T6951] bridge_slave_1: entered promiscuous mode [ 269.542368][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.549510][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.585455][ T6947] bridge_slave_0: entered allmulticast mode [ 269.595666][ T6947] bridge_slave_0: entered promiscuous mode [ 269.662670][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.671400][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.679984][ T6947] bridge_slave_1: entered allmulticast mode [ 269.701603][ T6947] bridge_slave_1: entered promiscuous mode [ 269.831434][ T6951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.129655][ T6951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.146941][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.470187][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.704555][ T6951] team0: Port device team_slave_0 added [ 270.885534][ T6947] team0: Port device team_slave_0 added [ 270.935607][ T6947] team0: Port device team_slave_1 added [ 271.177117][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 271.518025][ T6951] team0: Port device team_slave_1 added [ 271.810825][ T30] audit: type=1800 audit(1748820261.226:8): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.228" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 271.811105][ T7101] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 271.841571][ T7101] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 271.851842][ T7101] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 272.402103][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 272.802311][ T5143] Bluetooth: hci3: command tx timeout [ 272.860596][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.954345][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.022231][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.157530][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.166519][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.206046][ T6951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.270630][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.280606][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.307568][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.859516][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.898936][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.962638][ T6951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.333217][ T6947] hsr_slave_0: entered promiscuous mode [ 276.374680][ T6947] hsr_slave_1: entered promiscuous mode [ 276.381123][ T6947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.430191][ T6947] Cannot create hsr debugfs directory [ 276.515363][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 276.584942][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 276.649236][ T6951] hsr_slave_0: entered promiscuous mode [ 276.663004][ T6951] hsr_slave_1: entered promiscuous mode [ 276.678418][ T6951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.689508][ T6951] Cannot create hsr debugfs directory [ 277.351103][ T7134] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 277.565814][ T6784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.562233][ T7156] netlink: 252 bytes leftover after parsing attributes in process `syz.1.237'. [ 280.273557][ T7164] hub 6-0:1.0: USB hub found [ 280.278464][ T7164] hub 6-0:1.0: 1 port detected [ 280.295974][ T7164] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 7164 comm: syz.4.239) [ 280.314626][ T30] audit: type=1800 audit(1748820269.726:9): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.239" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8662 res=0 errno=0 [ 280.777749][ T6784] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.799724][ T7176] loop4: detected capacity change from 0 to 512 [ 280.858133][ T7176] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 280.907400][ T7176] EXT4-fs (loop4): 1 truncate cleaned up [ 280.937613][ T7176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.858737][ T5829] Bluetooth: hci3: command tx timeout [ 282.916337][ T49] bridge_slave_1: left allmulticast mode [ 282.928288][ T49] bridge_slave_1: left promiscuous mode [ 282.936440][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.946457][ T49] bridge_slave_0: left allmulticast mode [ 282.955396][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.966043][ T49] bridge_slave_0: left promiscuous mode [ 282.973146][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.532572][ T49] bridge_slave_1: left allmulticast mode [ 283.538298][ T49] bridge_slave_1: left promiscuous mode [ 283.553879][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.578644][ T49] bridge_slave_0: left allmulticast mode [ 283.588023][ T49] bridge_slave_0: left promiscuous mode [ 283.599393][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.804582][ T49] bridge_slave_1: left allmulticast mode [ 283.813469][ T49] bridge_slave_1: left promiscuous mode [ 283.819269][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.663280][ T49] bridge_slave_0: left allmulticast mode [ 284.669009][ T49] bridge_slave_0: left promiscuous mode [ 284.687929][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.550024][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.838343][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.946213][ T49] bond0 (unregistering): Released all slaves [ 286.480136][ T7210] Zero length message leads to an empty skb [ 287.560018][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.569350][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.578265][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.589260][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.597266][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.610322][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.674067][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.696444][ T49] bond0 (unregistering): Released all slaves [ 287.960794][ T7221] netlink: 252 bytes leftover after parsing attributes in process `syz.1.249'. [ 288.616472][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.627566][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.639557][ T49] bond0 (unregistering): Released all slaves [ 288.663491][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.672304][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.692130][ T6908] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.028905][ T6908] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.061267][ T6908] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.181681][ T49] hsr_slave_0: left promiscuous mode [ 289.213090][ T49] hsr_slave_1: left promiscuous mode [ 289.219398][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.460909][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.686562][ T5829] Bluetooth: hci1: command tx timeout [ 289.806685][ T49] hsr_slave_0: left promiscuous mode [ 289.940372][ T49] hsr_slave_1: left promiscuous mode [ 290.077304][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.223444][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.319366][ T49] hsr_slave_0: left promiscuous mode [ 290.349808][ T49] hsr_slave_1: left promiscuous mode [ 290.526636][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.543472][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.762466][ T5829] Bluetooth: hci1: command tx timeout [ 291.966946][ T7243] netlink: 252 bytes leftover after parsing attributes in process `syz.1.255'. [ 292.331386][ T49] team0 (unregistering): Port device team_slave_1 removed [ 292.381460][ T49] team0 (unregistering): Port device team_slave_0 removed [ 292.897447][ T49] team0 (unregistering): Port device team_slave_1 removed [ 292.935808][ T49] team0 (unregistering): Port device team_slave_0 removed [ 293.408042][ T49] team0 (unregistering): Port device team_slave_1 removed [ 293.458932][ T49] team0 (unregistering): Port device team_slave_0 removed [ 293.842352][ T5829] Bluetooth: hci1: command tx timeout [ 294.250200][ T6908] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 294.989010][ T7253] overlayfs: failed to resolve './file1': -2 [ 295.380188][ T7256] program syz.1.259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.924401][ T5829] Bluetooth: hci1: command tx timeout [ 296.656534][ T7267] macsec0: entered promiscuous mode [ 296.662279][ T7267] macsec0: entered allmulticast mode [ 296.667583][ T7267] veth1_macvtap: entered allmulticast mode [ 298.106995][ T7212] chnl_net:caif_netlink_parms(): no params data found [ 298.171095][ T7284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.261'. [ 298.210742][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.320517][ T6908] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.583416][ T7291] netlink: 252 bytes leftover after parsing attributes in process `syz.1.264'. [ 298.948962][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.956200][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.034648][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.042031][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.333940][ T7212] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.413736][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.421072][ T7212] bridge_slave_0: entered allmulticast mode [ 300.778550][ T7212] bridge_slave_0: entered promiscuous mode [ 300.913603][ T7212] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.920867][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.942436][ T7212] bridge_slave_1: entered allmulticast mode [ 300.954656][ T7212] bridge_slave_1: entered promiscuous mode [ 301.115803][ T7212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.145584][ T7212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.178393][ T7309] program syz.1.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.305823][ T6947] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 301.348202][ T7212] team0: Port device team_slave_0 added [ 301.419708][ T7212] team0: Port device team_slave_1 added [ 301.626684][ T6947] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.680611][ T6947] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 302.660239][ T6947] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 302.754593][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.778578][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.829241][ T7212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.700186][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.714888][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.754388][ T7212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.191819][ T6951] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 307.246880][ T7350] program syz.4.279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.285636][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.299470][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.308691][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.322999][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.330739][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.366501][ T7212] hsr_slave_0: entered promiscuous mode [ 307.424048][ T7212] hsr_slave_1: entered promiscuous mode [ 307.430481][ T7212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.462325][ T7212] Cannot create hsr debugfs directory [ 307.503282][ T6951] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 307.526429][ T6951] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 308.058563][ T7354] netlink: 252 bytes leftover after parsing attributes in process `syz.4.280'. [ 308.185202][ T6951] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 308.197590][ T7360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.278'. [ 309.507390][ T5829] Bluetooth: hci5: command tx timeout [ 309.865022][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.890059][ T6947] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.263123][ T7372] syz.4.282: attempt to access beyond end of device [ 310.263123][ T7372] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 310.282294][ T7372] hpfs: hpfs_map_sector(): read error [ 310.621670][ T49] bridge_slave_1: left allmulticast mode [ 310.632574][ T49] bridge_slave_1: left promiscuous mode [ 310.638708][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.683307][ T49] bridge_slave_0: left allmulticast mode [ 310.689093][ T49] bridge_slave_0: left promiscuous mode [ 310.707222][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.272076][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 311.832964][ T5829] Bluetooth: hci5: command tx timeout [ 312.689535][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.747934][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.782056][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.820988][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.833669][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.962325][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 313.745211][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 313.757392][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 313.765373][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 313.776051][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 313.786439][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.844067][ T5143] Bluetooth: hci5: command tx timeout [ 313.917672][ T7399] netlink: 252 bytes leftover after parsing attributes in process `syz.1.287'. [ 314.549359][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.568098][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.579277][ T49] bond0 (unregistering): Released all slaves [ 314.640564][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.647809][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.663691][ T30] audit: type=1800 audit(1748820304.086:10): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.283" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 314.663988][ T7381] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 314.694981][ T7381] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 314.704680][ T7381] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 315.036330][ T5143] Bluetooth: hci2: command tx timeout [ 315.254051][ T49] hsr_slave_0: left promiscuous mode [ 315.283631][ T49] hsr_slave_1: left promiscuous mode [ 315.297382][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.326988][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.576624][ T7405] loop1: detected capacity change from 0 to 2048 [ 315.641642][ T7405] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 315.680038][ T7405] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 315.786191][ T7405] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 315.821073][ T7405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.846004][ T5143] Bluetooth: hci6: command tx timeout [ 315.927524][ T5143] Bluetooth: hci5: command tx timeout [ 315.971540][ T30] audit: type=1800 audit(1748820305.396:11): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.289" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 316.094782][ T49] team0 (unregistering): Port device team_slave_1 removed [ 316.146602][ T49] team0 (unregistering): Port device team_slave_0 removed [ 316.490810][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.499510][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.125928][ T5143] Bluetooth: hci2: command tx timeout [ 317.160877][ T7351] chnl_net:caif_netlink_parms(): no params data found [ 317.560462][ T7419] netlink: 252 bytes leftover after parsing attributes in process `syz.4.292'. [ 317.922139][ T5143] Bluetooth: hci6: command tx timeout [ 319.204808][ T5143] Bluetooth: hci2: command tx timeout [ 320.064160][ T5143] Bluetooth: hci6: command tx timeout [ 320.893864][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.901813][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.909484][ T7351] bridge_slave_0: entered allmulticast mode [ 320.917593][ T7351] bridge_slave_0: entered promiscuous mode [ 320.938838][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.946183][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.972801][ T7351] bridge_slave_1: entered allmulticast mode [ 321.068343][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'. [ 321.283455][ T5143] Bluetooth: hci2: command tx timeout [ 321.647688][ T7351] bridge_slave_1: entered promiscuous mode [ 322.019376][ T7440] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 322.019662][ T30] audit: type=1800 audit(1748820311.436:12): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.296" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 322.028819][ T7440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 322.028850][ T7440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 322.096877][ T5143] Bluetooth: hci6: command tx timeout [ 322.131009][ T7393] chnl_net:caif_netlink_parms(): no params data found [ 322.241088][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 322.883817][ T7445] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 322.893677][ T7445] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 322.903329][ T7445] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 322.912072][ T30] audit: type=1800 audit(1748820312.296:13): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.297" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 323.366305][ T7453] netlink: 252 bytes leftover after parsing attributes in process `syz.1.298'. [ 323.719830][ T7351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.785064][ T7212] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 323.808431][ T7212] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 323.848975][ T7384] chnl_net:caif_netlink_parms(): no params data found [ 323.893871][ T7458] loop4: detected capacity change from 0 to 2048 [ 323.927745][ T7458] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 323.946568][ T7458] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 323.975678][ T7351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.985883][ T7458] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 324.013952][ T7458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.024058][ T7212] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 324.068514][ T30] audit: type=1800 audit(1748820313.486:14): pid=7458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 324.183827][ T7212] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 324.321683][ T7351] team0: Port device team_slave_0 added [ 324.335755][ T7351] team0: Port device team_slave_1 added [ 325.266438][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.274462][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.281762][ T7393] bridge_slave_0: entered allmulticast mode [ 325.290351][ T7393] bridge_slave_0: entered promiscuous mode [ 325.325985][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.349624][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.396657][ T7351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.434385][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.441398][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.473426][ T7351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.523823][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.532985][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.562809][ T7393] bridge_slave_1: entered allmulticast mode [ 325.579809][ T7393] bridge_slave_1: entered promiscuous mode [ 325.684052][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.692599][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.703693][ T7384] bridge_slave_0: entered allmulticast mode [ 325.735824][ T7384] bridge_slave_0: entered promiscuous mode [ 325.797774][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.806809][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.815257][ T7384] bridge_slave_1: entered allmulticast mode [ 325.828906][ T7384] bridge_slave_1: entered promiscuous mode [ 325.947464][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.071110][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.208655][ T7351] hsr_slave_0: entered promiscuous mode [ 326.237219][ T7351] hsr_slave_1: entered promiscuous mode [ 326.264214][ T7384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.528230][ T7384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.958449][ T7393] team0: Port device team_slave_0 added [ 327.920423][ T7393] team0: Port device team_slave_1 added [ 328.028907][ T7384] team0: Port device team_slave_0 added [ 328.055633][ T7384] team0: Port device team_slave_1 added [ 328.503699][ T7489] netlink: 44 bytes leftover after parsing attributes in process `syz.4.305'. [ 329.322914][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.338228][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.418661][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.443590][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.481238][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.163192][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.236468][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.278425][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.344839][ T7384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.358468][ T7384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.365545][ T7384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.402362][ T7384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.447279][ T7212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.650229][ T7393] hsr_slave_0: entered promiscuous mode [ 330.660879][ T7393] hsr_slave_1: entered promiscuous mode [ 330.667796][ T7393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.675644][ T7393] Cannot create hsr debugfs directory [ 330.829559][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 332.162697][ T7501] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 332.164200][ T30] audit: type=1800 audit(1748820321.576:15): pid=7501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.308" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 332.172638][ T7501] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 332.202402][ T7501] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 332.612908][ T7384] hsr_slave_0: entered promiscuous mode [ 332.692543][ T7384] hsr_slave_1: entered promiscuous mode [ 332.737799][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 333.338495][ T7384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.398355][ T7384] Cannot create hsr debugfs directory [ 333.475144][ T7515] netlink: 252 bytes leftover after parsing attributes in process `syz.1.311'. [ 334.005060][ T7514] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 334.014802][ T7514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 334.024858][ T7514] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.037937][ T30] audit: type=1800 audit(1748820323.426:16): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.310" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 334.220926][ T7212] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.037563][ T7527] netlink: 252 bytes leftover after parsing attributes in process `syz.4.314'. [ 336.639511][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.646741][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.282916][ T5010] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.290138][ T5010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.303168][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 339.410486][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.1.320'. [ 339.443259][ T49] bridge_slave_1: left allmulticast mode [ 339.455128][ T49] bridge_slave_1: left promiscuous mode [ 339.517341][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.694658][ T49] bridge_slave_0: left allmulticast mode [ 339.701041][ T49] bridge_slave_0: left promiscuous mode [ 339.707086][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.721458][ T7549] syz.4.319: attempt to access beyond end of device [ 339.721458][ T7549] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 339.739272][ T7549] hpfs: hpfs_map_sector(): read error [ 339.945343][ T49] bridge_slave_1: left allmulticast mode [ 339.962721][ T49] bridge_slave_1: left promiscuous mode [ 339.979923][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.000838][ T49] bridge_slave_0: left allmulticast mode [ 340.016562][ T49] bridge_slave_0: left promiscuous mode [ 340.025637][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.047087][ T49] bridge_slave_1: left allmulticast mode [ 340.053141][ T49] bridge_slave_1: left promiscuous mode [ 340.060535][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.080261][ T49] bridge_slave_0: left allmulticast mode [ 340.104610][ T49] bridge_slave_0: left promiscuous mode [ 340.117789][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.568710][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.637574][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.695706][ T49] bond0 (unregistering): Released all slaves [ 342.579970][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.591192][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.604995][ T49] bond0 (unregistering): Released all slaves [ 342.869392][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.884715][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.895709][ T49] bond0 (unregistering): Released all slaves [ 342.937061][ T7550] bond1 (unregistering): Released all slaves [ 343.110629][ T49] hsr_slave_0: left promiscuous mode [ 343.181087][ T49] hsr_slave_1: left promiscuous mode [ 343.208020][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.461094][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.764553][ T49] hsr_slave_0: left promiscuous mode [ 344.797247][ T49] hsr_slave_1: left promiscuous mode [ 344.813080][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.929391][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.316165][ T49] hsr_slave_0: left promiscuous mode [ 346.371626][ T49] hsr_slave_1: left promiscuous mode [ 346.435458][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.516868][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.555104][ T7594] loop4: detected capacity change from 0 to 2048 [ 348.649572][ T7594] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362 [ 348.698994][ T7594] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 348.743316][ T7594] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 348.783655][ T7594] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.828197][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.840145][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.856030][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.856910][ T30] audit: type=1800 audit(1748820338.276:17): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.330" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 348.905849][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.906817][ T49] team0 (unregistering): Port device team_slave_1 removed [ 348.927107][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.957240][ T49] team0 (unregistering): Port device team_slave_0 removed [ 349.283767][ T5883] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 349.786208][ T7594] [ 349.788632][ T7594] ============================================ [ 349.794801][ T7594] WARNING: possible recursive locking detected [ 349.800953][ T7594] 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 Not tainted [ 349.807706][ T7594] -------------------------------------------- [ 349.813840][ T7594] syz.4.330/7594 is trying to acquire lock: [ 349.819737][ T7594] ffff888057184128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_free_blocks+0x9e2/0x17f0 [ 349.829437][ T7594] [ 349.829437][ T7594] but task is already holding lock: [ 349.836787][ T7594] ffff888057184128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0xfab/0x1ba0 [ 349.846403][ T7594] [ 349.846403][ T7594] other info that might help us debug this: [ 349.854459][ T7594] Possible unsafe locking scenario: [ 349.854459][ T7594] [ 349.861904][ T7594] CPU0 [ 349.865181][ T7594] ---- [ 349.868455][ T7594] lock(&sbi->s_alloc_mutex); [ 349.873348][ T7594] lock(&sbi->s_alloc_mutex); [ 349.878113][ T7594] [ 349.878113][ T7594] *** DEADLOCK *** [ 349.878113][ T7594] [ 349.886255][ T7594] May be due to missing lock nesting notation [ 349.886255][ T7594] [ 349.894740][ T7594] 4 locks held by syz.4.330/7594: [ 349.899762][ T7594] #0: ffff88805e4f4428 (sb_writers#17){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 349.909559][ T7594] #1: ffff88805661a280 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: udf_file_write_iter+0x6e/0x6c0 [ 349.920576][ T7594] #2: ffff88805661a0b0 (&ei->i_data_sem#2){++++}-{4:4}, at: udf_map_block+0x291/0x42a0 [ 349.930387][ T7594] #3: ffff888057184128 (&sbi->s_alloc_mutex){+.+.}-{4:4}, at: udf_new_block+0xfab/0x1ba0 [ 349.940459][ T7594] [ 349.940459][ T7594] stack backtrace: [ 349.946372][ T7594] CPU: 1 UID: 0 PID: 7594 Comm: syz.4.330 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 349.946400][ T7594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.946413][ T7594] Call Trace: [ 349.946423][ T7594] [ 349.946432][ T7594] dump_stack_lvl+0x189/0x250 [ 349.946469][ T7594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.946508][ T7594] ? __pfx__printk+0x10/0x10 [ 349.946534][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.946559][ T7594] ? print_lock_name+0xde/0x100 [ 349.946579][ T7594] print_deadlock_bug+0x28b/0x2a0 [ 349.946609][ T7594] validate_chain+0x1a3f/0x2140 [ 349.946646][ T7594] ? finish_task_switch+0x266/0x950 [ 349.946670][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.946697][ T7594] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.946722][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.946745][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.946772][ T7594] __lock_acquire+0xab9/0xd20 [ 349.946803][ T7594] ? udf_free_blocks+0x9e2/0x17f0 [ 349.946835][ T7594] lock_acquire+0x120/0x360 [ 349.946858][ T7594] ? udf_free_blocks+0x9e2/0x17f0 [ 349.946886][ T7594] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 349.946914][ T7594] __mutex_lock+0x182/0xe80 [ 349.946947][ T7594] ? udf_free_blocks+0x9e2/0x17f0 [ 349.946981][ T7594] ? __pfx_folio_mark_accessed+0x10/0x10 [ 349.947005][ T7594] ? udf_free_blocks+0x9e2/0x17f0 [ 349.947031][ T7594] ? __pfx___mutex_lock+0x10/0x10 [ 349.947071][ T7594] ? __pfx___might_resched+0x10/0x10 [ 349.947106][ T7594] udf_free_blocks+0x9e2/0x17f0 [ 349.947142][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.947162][ T7594] ? bdev_getblk+0x7b/0x690 [ 349.947181][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.947206][ T7594] ? udf_get_fileshortad+0x6e/0x1b0 [ 349.947240][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.947268][ T7594] ? __pfx_udf_free_blocks+0x10/0x10 [ 349.947298][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.947329][ T7594] udf_delete_aext+0x4df/0xbc0 [ 349.947349][ T7594] ? udf_get_fileshortad+0x6e/0x1b0 [ 349.947388][ T7594] ? __pfx_udf_delete_aext+0x10/0x10 [ 349.947409][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.947441][ T7594] udf_new_block+0x1404/0x1ba0 [ 349.947475][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.947500][ T7594] ? bdev_getblk+0x7b/0x690 [ 349.947523][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.947549][ T7594] ? udf_get_filelongad+0x6e/0x1b0 [ 349.947579][ T7594] ? __pfx_udf_new_block+0x10/0x10 [ 349.947603][ T7594] ? udf_current_aext+0x660/0xad0 [ 349.947634][ T7594] udf_map_block+0x12b1/0x42a0 [ 349.947674][ T7594] ? __pfx_udf_map_block+0x10/0x10 [ 349.947720][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.947740][ T7594] ? do_raw_spin_unlock+0x122/0x240 [ 349.947758][ T7594] __udf_get_block+0x52/0x250 [ 349.947780][ T7594] __block_write_begin_int+0x6b5/0x1900 [ 349.947814][ T7594] ? folio_add_lru+0x1b2/0x3d0 [ 349.947838][ T7594] ? __pfx_udf_get_block+0x10/0x10 [ 349.947860][ T7594] ? __pfx___block_write_begin_int+0x10/0x10 [ 349.947884][ T7594] ? __pfx_udf_get_block+0x10/0x10 [ 349.947900][ T7594] block_write_begin+0x8a/0x120 [ 349.947919][ T7594] ? udf_write_begin+0x7d/0x260 [ 349.947956][ T7594] udf_write_begin+0x100/0x260 [ 349.947993][ T7594] generic_perform_write+0x2c7/0x910 [ 349.948026][ T7594] ? __pfx_generic_perform_write+0x10/0x10 [ 349.948049][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.948082][ T7594] ? generic_file_direct_write+0x385/0x3e0 [ 349.948111][ T7594] ? file_update_time+0x416/0x490 [ 349.948140][ T7594] __generic_file_write_iter+0x1ae/0x230 [ 349.948168][ T7594] udf_file_write_iter+0x2d5/0x6c0 [ 349.948198][ T7594] iter_file_splice_write+0x93a/0x1000 [ 349.948245][ T7594] ? __pfx_iter_file_splice_write+0x10/0x10 [ 349.948281][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.948307][ T7594] ? rcu_read_lock_any_held+0xb3/0x120 [ 349.948336][ T7594] ? direct_splice_actor+0x10c/0x160 [ 349.948364][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.948393][ T7594] ? __pfx_iter_file_splice_write+0x10/0x10 [ 349.948427][ T7594] direct_splice_actor+0x101/0x160 [ 349.948462][ T7594] splice_direct_to_actor+0x5a8/0xcc0 [ 349.948498][ T7594] ? __pfx_direct_splice_actor+0x10/0x10 [ 349.948530][ T7594] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 349.948566][ T7594] ? __pfx_aa_file_perm+0x10/0x10 [ 349.948603][ T7594] do_splice_direct+0x181/0x270 [ 349.948629][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.948651][ T7594] ? __pfx_do_splice_direct+0x10/0x10 [ 349.948687][ T7594] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 349.948711][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.948738][ T7594] ? rw_verify_area+0x258/0x650 [ 349.948766][ T7594] do_sendfile+0x4da/0x7e0 [ 349.948788][ T7594] ? __pfx_do_sendfile+0x10/0x10 [ 349.948806][ T7594] ? preempt_schedule_irq+0xde/0x150 [ 349.948835][ T7594] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 349.948868][ T7594] __se_sys_sendfile64+0x13e/0x190 [ 349.948889][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.948912][ T7594] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 349.948932][ T7594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 349.948957][ T7594] do_syscall_64+0xfa/0x3b0 [ 349.948991][ T7594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.949013][ T7594] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 349.949038][ T7594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.949064][ T7594] RIP: 0033:0x7f5c8d38e969 [ 349.949082][ T7594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.949099][ T7594] RSP: 002b:00007f5c8e29d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 349.949125][ T7594] RAX: ffffffffffffffda RBX: 00007f5c8d5b5fa0 RCX: 00007f5c8d38e969 [ 349.949143][ T7594] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 349.949157][ T7594] RBP: 00007f5c8d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 349.949172][ T7594] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000000 [ 349.949187][ T7594] R13: 0000000000000000 R14: 00007f5c8d5b5fa0 R15: 00007ffdfe73baa8 [ 349.949207][ T7594] [ 350.577230][ T49] team0 (unregistering): Port device team_slave_1 removed [ 350.607020][ T49] team0 (unregistering): Port device team_slave_0 removed [ 350.861266][ T49] team0 (unregistering): Port device team_slave_1 removed [ 350.900330][ T49] team0 (unregistering): Port device team_slave_0 removed [ 350.962011][ T5143] Bluetooth: hci4: command tx timeout [ 351.495738][ T7595] chnl_net:caif_netlink_parms(): no params data found [ 351.576905][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.585710][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.593438][ T7595] bridge_slave_0: entered allmulticast mode [ 351.600346][ T7595] bridge_slave_0: entered promiscuous mode [ 351.611801][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.620207][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.629092][ T7595] bridge_slave_1: entered allmulticast mode [ 351.637390][ T7595] bridge_slave_1: entered promiscuous mode [ 351.673743][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.685963][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.720846][ T7595] team0: Port device team_slave_0 added [ 351.728953][ T7595] team0: Port device team_slave_1 added [ 351.771829][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.779668][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.806369][ T7595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.822623][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.829709][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.857298][ T7595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.908840][ T7595] hsr_slave_0: entered promiscuous mode [ 351.915889][ T7595] hsr_slave_1: entered promiscuous mode [ 351.926798][ T7595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.935169][ T7595] Cannot create hsr debugfs directory [ 352.348404][ T7384] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.367094][ T7384] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.381466][ T7384] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.400153][ T7384] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.471388][ T7351] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.495132][ T7351] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.522494][ T7351] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 352.533163][ T7351] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 352.589846][ T7393] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 352.615584][ T7393] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 352.627044][ T7393] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 352.637248][ T7393] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 352.666973][ T7384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.720555][ T7384] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.755831][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.763043][ T6121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.799549][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.806757][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.923496][ T49] bridge_slave_1: left allmulticast mode [ 352.929219][ T49] bridge_slave_1: left promiscuous mode [ 352.938594][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.948245][ T49] bridge_slave_0: left allmulticast mode [ 352.954201][ T49] bridge_slave_0: left promiscuous mode [ 352.959925][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.042165][ T5143] Bluetooth: hci4: command tx timeout [ 353.078616][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.089562][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.099864][ T49] bond0 (unregistering): Released all slaves [ 353.135138][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.205414][ T49] hsr_slave_0: left promiscuous mode [ 353.211260][ T49] hsr_slave_1: left promiscuous mode [ 353.218512][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.226921][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.364665][ T49] team0 (unregistering): Port device team_slave_1 removed [ 353.389269][ T49] team0 (unregistering): Port device team_slave_0 removed [ 353.546873][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.568567][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.598661][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.605917][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.626740][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.633939][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.654064][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.688100][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.695337][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.736886][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.744087][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.867543][ T7595] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 353.899311][ T7595] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 353.919459][ T7595] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 353.946525][ T7595] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 354.071564][ T7384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.160922][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.227434][ T7595] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.250392][ T7351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.268799][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.276031][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.351747][ T6020] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.358925][ T6020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.483308][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 354.496151][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.508673][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 354.534969][ T5883] usb 5-1: chopping to 0 config(s) [ 354.563495][ T5883] usb 5-1: can't read configurations, error -32 [ 354.721823][ T7384] veth0_vlan: entered promiscuous mode [ 354.732996][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 354.767264][ T7384] veth1_vlan: entered promiscuous mode [ 354.858427][ T7384] veth0_macvtap: entered promiscuous mode [ 354.892985][ T5883] usb 5-1: device descriptor read/64, error -32 [ 354.900615][ T7384] veth1_macvtap: entered promiscuous mode [ 354.951034][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.996949][ T7384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.017190][ T5883] usb usb5-port1: attempt power cycle [ 355.028162][ T7351] veth0_vlan: entered promiscuous mode [ 355.065573][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.078904][ T7384] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.104329][ T7384] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.122461][ T5143] Bluetooth: hci4: command tx timeout [ 355.130712][ T7384] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.140147][ T7384] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.165759][ T7351] veth1_vlan: entered promiscuous mode [ 355.316270][ T7384] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 355.337399][ T7351] veth0_macvtap: entered promiscuous mode [ 355.347638][ T7393] veth0_vlan: entered promiscuous mode [ 355.368626][ T7351] veth1_macvtap: entered promiscuous mode [ 355.375479][ T5883] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 355.405523][ T5883] usb 5-1: device descriptor read/8, error -32 [ 355.425250][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.427764][ T7393] veth1_vlan: entered promiscuous mode [ 355.442861][ T7384] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 355.465296][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.485083][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.528364][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.559971][ T7351] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.571011][ T7351] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.583279][ T7351] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.599433][ T7351] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.615106][ T6267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.639442][ T6267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.661376][ T7595] veth0_vlan: entered promiscuous mode [ 355.676487][ T7595] veth1_vlan: entered promiscuous mode [ 355.683695][ T5883] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 355.700046][ T7393] veth0_macvtap: entered promiscuous mode [ 355.712680][ T5883] usb 5-1: device descriptor read/8, error -32 [ 355.744663][ T7393] veth1_macvtap: entered promiscuous mode [ 355.793039][ T7351] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 355.825086][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.835833][ T5883] usb usb5-port1: unable to enumerate USB device [ 355.844113][ T7595] veth0_macvtap: entered promiscuous mode [ 355.884055][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.893730][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.901660][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.912255][ T7595] veth1_macvtap: entered promiscuous mode [ 355.923908][ T7351] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 355.947016][ T7393] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.957458][ T7393] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.967640][ T7393] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.976640][ T7393] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.025130][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.057643][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.071198][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.073309][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.100115][ T7595] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.117936][ T7595] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.126783][ T7595] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.152129][ T7595] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.175638][ T7393] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 356.291606][ T7595] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 356.327446][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.348732][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.356255][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.356277][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.373643][ T7393] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 356.426724][ T7595] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 356.437608][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.456985][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.514273][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.543732][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.202266][ T5143] Bluetooth: hci4: command tx timeout