last executing test programs: 2.238217065s ago: executing program 3 (id=4): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket(0xa, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000180)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x200007, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x0, 0x1008002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x400, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x246}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000d00)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 2.077686979s ago: executing program 1 (id=2): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x100}, 0x0) pipe2$9p(0x0, 0x0) r0 = openat$smackfs_onlycap(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) mount$9p_fd(0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) add_key(&(0x7f0000000b00)='dns_resolver\x00', 0x0, &(0x7f0000000b40)="666f6f23646e736572726f723d3100a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xc1, 0xfffffffffffffffe) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000040000000000000feffffff18110000", @ANYBLOB="0000000000000000b7020000150000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r5}, 0xc) r6 = syz_open_dev$video4linux(&(0x7f0000000e80), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000ec0)={0x1, 0x0, {0x280, 0x1e0, 0x3014}}) r7 = syz_open_dev$video(&(0x7f0000000f40), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000f80)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000001080)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f00000010c0)=0x1) 1.594577221s ago: executing program 3 (id=6): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0xaa182, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x2fca, 0x80, 0x2, 0x1e2}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000580), 0x7218, 0x100) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000005c0)) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000004c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000280)="0003", 0x2, 0xffffffffffffffff) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x8000000, 0x1000, 0x1}}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x2, 0x0, 0x98, &(0x7f0000000080)={0x1, 0x100000000, 0x1}}) 1.496783437s ago: executing program 2 (id=3): r0 = epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x54, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xfffffffffffeffff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x404c041}, 0x2400c080) r6 = openat(0xffffff9c, &(0x7f0000000500)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/module/zswap/parameters/compressor\x00', 0x802, 0x0) write(r7, &(0x7f0000000580)='lz4', 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f00000002c0)={0x60000004}) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000240)=0x50a2, 0x4) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x12, 0x0, 0x0) mq_notify(r6, &(0x7f0000000300)={0x0, 0x24, 0x4, @tid=r1}) sendto(r9, 0x0, 0x0, 0x0, 0x0, 0x0) 1.487175703s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000300), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x200000b, 0x401d031, 0xffffffffffffffff, 0x0) setfsuid(0xee00) syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd2b, 0x25dedbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xe0a}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002780)="5c00000014006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000080) 1.463785981s ago: executing program 3 (id=7): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file2\x00', 0x280801f, &(0x7f0000000140)={[{@auto_da_alloc}, {@bh}]}, 0x0, 0x531, &(0x7f00000005c0)="$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") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x30, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe, 0x1, "7fc0b086a4891a294d3a"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30004050}, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r3 = gettid() timer_create(0x1, &(0x7f0000000500)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000001080)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000010c0)={0x0, 0x0, 0x10001, 0x7, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000001100), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000001180)='./bus\x00', 0x1001a, &(0x7f00000011c0)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000001280)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x143042, 0x58) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x3, 0x6, 0x7, 0x6, 0x6, 0x3, 0x9, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x9, 0x3, &(0x7f0000001840)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x54}}, &(0x7f0000001880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22}, 0x66) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000e09000/0xe000)=nil, &(0x7f0000d3a000/0x1000)=nil, &(0x7f0000000400)="061b6c25c22b6eadd89ddbcd913cf57baeedf5c298c8ba2130d78235a666ac340d47d146cd6bf26631d72aad5f41e64faffda3c6338201aaaa4dc1954168ebd75a68545ebe576d49a5b2b7e2ce51cfcfca1933462a6525fb1f035eae51da997bba806582e6f84cab710f090ee17beadff2718300478487412426f4b4bcf3cdc0c2f1217f9977f148f3ba191d76e473576dd692c7ffe494955d6eef094b7860e431cb35a1fb29fcd1bb3310b0daa6378247b3df0ca647015271be22c3267f39b04f7cafc2c9782da88b77b8833871ca6557835ce7", 0xd4, r0}, 0x68) 476.812334ms ago: executing program 1 (id=8): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x100}, 0x0) pipe2$9p(0x0, 0x0) r0 = openat$smackfs_onlycap(0xffffffffffffff9c, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) mount$9p_fd(0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000009c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000b00)='dns_resolver\x00', 0x0, &(0x7f0000000b40)="666f6f23646e736572726f723d3100a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xc1, 0xfffffffffffffffe) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1f, 0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000040000000000000feffffff18110000", @ANYBLOB="0000000000000000b7020000150000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r5}, 0xc) r6 = syz_open_dev$video4linux(&(0x7f0000000e80), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000ec0)={0x1, 0x0, {0x280, 0x1e0, 0x3014}}) r7 = syz_open_dev$video(&(0x7f0000000f40), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000f80)={0x1, @pix={0x280, 0x1e0, 0x42474752}}) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000001080)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f00000010c0)=0x1) 330.443302ms ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000200), 0x80002c1, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4000814) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000000700)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x42, 0x40) fallocate(r7, 0x0, 0x8e14, 0x8ffff) copy_file_range(r7, 0x0, r7, &(0x7f0000000b40)=0xf0, 0x9, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001180)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000006c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff3}, {0x1}, {0xffff, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 86.078274ms ago: executing program 0 (id=9): r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x804, &(0x7f00000006c0)={[{@uni_xlateno}, {@shortname_mixed}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@fat=@tz_utc}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}, {@rodir}, {@utf8}, {@fat=@sys_immutable}, {@utf8no}, {@uni_xlateno}]}, 0x1, 0x2a4, &(0x7f00000003c0)="$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") mkdirat(r0, &(0x7f00000002c0)='./file0\x00', 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$nfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000280)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x6, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000007c0)={r0, &(0x7f0000000300)='[^\x00', 0x40100, &(0x7f0000000340)={@align=0x4, {0x8000, 0x6, 0x2, 0x9}}, 0x8, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000680)=0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x2, 0x1, 0x1}) landlock_restrict_self(r4, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000200)=0x1) r5 = fsopen(&(0x7f0000000240)='gfs2\x00', 0x552ba0b57a97e128) fsmount(r5, 0x1, 0x9c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x201, 0x10000, 0x1, 0x5}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r6, 0x0) mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xb) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x40049}, 0x20004001) 80.108972ms ago: executing program 2 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) setns(0xc9, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000580)={'veth0_vlan\x00', {0x2, 0x4e20, @multicast2}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000020801010000000000ff000005000005045c5d4a740d4c7cbdc09319fc57aa7f582680d99ced01a17d6f4d4f1b7ed89225c1b23693c56664c98ed2bc1300"/78], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) setresgid(0xee00, 0xee01, 0x0) r6 = syz_clone(0x880b600, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpid() kcmp(r7, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4a}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0xcc, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x26}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa0, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "fc4cc0b3a12918f80d5849b8f69d193a1611db99602b6001973dd3ff4e7a8d60b9c1147b076fe7b5dfdab1cb3bb16c13d3b33c979836b7256c2b2d9587a10b9bdcb1a253a1591f5d12d463a94be9d238bdd125f8a42f588222dc576b1d42eb6e5f4940436ec6aa8db0f9718b7715e929bd37edb0af277397e1bd8487f75038a5"}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffe}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x108}, 0x1, 0x0, 0x0, 0x4000850}, 0x240080c0) r9 = socket(0x840000000002, 0x3, 0xff) r10 = socket$kcm(0x2, 0x3, 0x2) fsetxattr$smack_xattr_label(r10, &(0x7f0000000500)='security.SMACK64IPOUT\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="666c6f7765720000e3ba06619bb45a5815b11ae0adb7074d72f357c992f879c25bcafe04808017b4e84c827b1bf4a67143eac79ca40793f66606d922b94afa8b4192fe9e9c9c06c0e0e01d06f230fe1aca56acee6469ba65b229b170bcc8e02845188484ef1497b2f75636aa17746ae67d734ac7c7e25f678ecb24abe0a06f17ed6b51453c4e08ac9df55a5b4a778d186ff8a2847dc27365c61c0ec610668cdf76a22391d4c672ba8d9bcff73a7ad8cc25b3fcbaa04ce56ac6a1c569a4f0f320dc9b3caa032791896f7a761c0d22751bbc911a603fa60649401283036a69451dadd8455fe097bafea77d3f8c6bf9f4"], 0x8, 0x1) getsockopt$inet_int(r9, 0x0, 0x17, 0x0, &(0x7f0000000540)=0xfffffffffffffdb8) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000004c0)) preadv(r0, &(0x7f0000000c80)=[{&(0x7f0000000780)=""/251, 0xfb}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000b00)=""/239, 0xef}, {&(0x7f0000000c00)=""/7, 0x7}, {&(0x7f0000000c40)=""/56, 0x38}], 0x5, 0x8000, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 0s ago: executing program 3 (id=11): r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000000)="3ba7136f90594e68", 0x8, 0xfffffffffffffffe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x48c}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000010000000000000000000000711833000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dd7}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x801, 0x84) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2842, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x7c1f, 0x8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) ioctl$TIOCSRS485(r7, 0x542f, &(0x7f00000008c0)={0x12, 0x22d4, 0xd}) setns(0xc9, 0x0) ioctl$KDSKBLED(r7, 0x4b65, 0x16400000000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000940)={'wlan0\x00'}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 303.957678][ T4736] cgroup: Unknown subsys name 'net' [ 304.077360][ T4736] cgroup: Unknown subsys name 'cpuset' [ 304.079726][ T4736] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 304.211460][ T4736] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 305.558198][ T4751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.563085][ T4754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.563539][ T4754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.563865][ T4754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.564160][ T4750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.564610][ T4750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.564829][ T4750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.577579][ T4751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.581954][ T4763] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.582394][ T4763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.583106][ T4763] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.583372][ T4763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.583464][ T4763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.583643][ T4763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.583739][ T4754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.584161][ T4754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.584399][ T4754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.584820][ T4763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.584944][ T4763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.586029][ T4750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.586581][ T4750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.586928][ T4750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.587213][ T4750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.588161][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.588388][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.777826][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.778101][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.778466][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.791330][ T4755] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 305.806842][ T4748] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 305.831490][ T4747] infiniband rxe0: set active [ 305.833627][ T4760] rxe0: rxe_newlink: already configured on rxe_eth0 [ 305.837914][ T4747] infiniband rxe0: added rxe_eth0 [ 305.847613][ T4752] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.848652][ T4756] rxe0: rxe_newlink: already configured on rxe_eth0 [ 305.858747][ T4747] RDS/IB: rxe0: added [ 305.858820][ T4747] smc: adding ib device rxe0 with port count 1 [ 305.858843][ T4747] smc: ib device rxe0 port 1 has no pnetid [ 305.868057][ T4755] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.868322][ T4752] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.872572][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.906070][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.956429][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 305.988571][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.988884][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.988954][ T4748] bridge_slave_0: entered allmulticast mode [ 305.989428][ T4748] bridge_slave_0: entered promiscuous mode [ 306.009768][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.009851][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.009942][ T4748] bridge_slave_1: entered allmulticast mode [ 306.010345][ T4748] bridge_slave_1: entered promiscuous mode [ 306.015582][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.030988][ T4748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.032839][ T4748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.040447][ T4748] team0: Port device team_slave_0 added [ 306.041150][ T4748] team0: Port device team_slave_1 added [ 306.053965][ T4748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.053979][ T4748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.053992][ T4748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.054963][ T4748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.054971][ T4748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.054986][ T4748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.096669][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.096711][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.096807][ T4755] bridge_slave_0: entered allmulticast mode [ 306.097173][ T4755] bridge_slave_0: entered promiscuous mode [ 306.098815][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.098882][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.098940][ T4755] bridge_slave_1: entered allmulticast mode [ 306.099333][ T4755] bridge_slave_1: entered promiscuous mode [ 306.115278][ T4748] hsr_slave_0: entered promiscuous mode [ 306.115707][ T4748] hsr_slave_1: entered promiscuous mode [ 306.126067][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.144934][ T4755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.147436][ T4755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.167801][ T4755] team0: Port device team_slave_0 added [ 306.183284][ T4755] team0: Port device team_slave_1 added [ 306.200588][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.200602][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.200617][ T4755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.202469][ T4755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.202478][ T4755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.202492][ T4755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.230827][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.230898][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.230990][ T4760] bridge_slave_0: entered allmulticast mode [ 306.231372][ T4760] bridge_slave_0: entered promiscuous mode [ 306.237679][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.237717][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.237773][ T4760] bridge_slave_1: entered allmulticast mode [ 306.238177][ T4760] bridge_slave_1: entered promiscuous mode [ 306.245089][ T4760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.256989][ T4760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.272741][ T4755] hsr_slave_0: entered promiscuous mode [ 306.273073][ T4755] hsr_slave_1: entered promiscuous mode [ 306.273281][ T4755] debugfs: 'hsr0' already exists in 'hsr' [ 306.273289][ T4755] Cannot create hsr debugfs directory [ 306.280500][ T4760] team0: Port device team_slave_0 added [ 306.281220][ T4760] team0: Port device team_slave_1 added [ 306.293906][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.293918][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.293932][ T4760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.294889][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.294897][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.294910][ T4760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.335632][ T4760] hsr_slave_0: entered promiscuous mode [ 306.336373][ T4760] hsr_slave_1: entered promiscuous mode [ 306.336565][ T4760] debugfs: 'hsr0' already exists in 'hsr' [ 306.336574][ T4760] Cannot create hsr debugfs directory [ 306.337072][ T4748] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.339109][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.359584][ T4748] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.360904][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.362870][ T4748] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.363879][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.379864][ T4748] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.381073][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.401917][ T4756] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.401985][ T4756] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.402405][ T4756] bridge_slave_0: entered allmulticast mode [ 306.402811][ T4756] bridge_slave_0: entered promiscuous mode [ 306.407169][ T4756] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.407191][ T4756] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.407284][ T4756] bridge_slave_1: entered allmulticast mode [ 306.407671][ T4756] bridge_slave_1: entered promiscuous mode [ 306.435685][ T4756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.451400][ T4756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.459717][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.459750][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.459909][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.459939][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.464712][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.464746][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.464810][ T4747] bridge_slave_0: entered allmulticast mode [ 306.465243][ T4747] bridge_slave_0: entered promiscuous mode [ 306.467325][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.467386][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.467445][ T4747] bridge_slave_1: entered allmulticast mode [ 306.467856][ T4747] bridge_slave_1: entered promiscuous mode [ 306.475237][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.476805][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.487448][ T4756] team0: Port device team_slave_0 added [ 306.488309][ T4756] team0: Port device team_slave_1 added [ 306.504557][ T4756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.504570][ T4756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.504584][ T4756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.505572][ T4756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.505580][ T4756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.505594][ T4756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.511692][ T4747] team0: Port device team_slave_0 added [ 306.512483][ T4747] team0: Port device team_slave_1 added [ 306.529715][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.529725][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.529737][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.541371][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.541383][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.541394][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.541611][ T4755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 306.544343][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.563481][ T4747] hsr_slave_0: entered promiscuous mode [ 306.563797][ T4747] hsr_slave_1: entered promiscuous mode [ 306.563987][ T4747] debugfs: 'hsr0' already exists in 'hsr' [ 306.563995][ T4747] Cannot create hsr debugfs directory [ 306.571260][ T4755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 306.572926][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.581239][ T4755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.582259][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.583161][ T4755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.584778][ T4755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.601689][ T4756] hsr_slave_0: entered promiscuous mode [ 306.602801][ T4756] hsr_slave_1: entered promiscuous mode [ 306.602992][ T4756] debugfs: 'hsr0' already exists in 'hsr' [ 306.603001][ T4756] Cannot create hsr debugfs directory [ 306.610307][ T4748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.617653][ T4760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 306.618606][ T4760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.621862][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.622330][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.638690][ T4760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 306.639765][ T4760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.640105][ T4760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 306.641356][ T4760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.654491][ T4760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 306.655512][ T4760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.659122][ T4748] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.683627][ T3050] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.683664][ T3050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.693729][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.693757][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.733904][ T4747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 306.737303][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.746575][ T4747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 306.747903][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.760443][ T4747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 306.761764][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.762086][ T4747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.762954][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.790333][ T4760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.795209][ T4760] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.808147][ T4755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.813430][ T4755] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.821764][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.821795][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.822220][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.822245][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.822583][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.822604][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.823796][ T4756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 306.829018][ T4756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 306.847728][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.847760][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.848358][ T4756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 306.849736][ T4756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 306.850113][ T4756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 306.851107][ T4756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.852622][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.853791][ T4756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 306.855059][ T4756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.860010][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.890766][ T4775] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.890800][ T4775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.891226][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.891247][ T4775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.894818][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.001191][ T4748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.027548][ T4756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.033896][ T4756] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.042441][ T4880] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.042472][ T4880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.043669][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.043691][ T4880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.070538][ T4748] veth0_vlan: entered promiscuous mode [ 307.073196][ T4748] veth1_vlan: entered promiscuous mode [ 307.090682][ T4748] veth0_macvtap: entered promiscuous mode [ 307.091748][ T4748] veth1_macvtap: entered promiscuous mode [ 307.118178][ T4748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.119250][ T4748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.165485][ T4775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.166094][ T4775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.166105][ T4775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.182032][ T4775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.182047][ T4775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.193159][ T4880] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.193550][ T4880] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.198965][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.225469][ T4760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.241457][ T4747] veth0_vlan: entered promiscuous mode [ 307.244279][ T4747] veth1_vlan: entered promiscuous mode [ 307.246102][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.254634][ T4760] veth0_vlan: entered promiscuous mode [ 307.260688][ T4760] veth1_vlan: entered promiscuous mode [ 307.271514][ T4755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.280505][ T4747] veth0_macvtap: entered promiscuous mode [ 307.281706][ T4747] veth1_macvtap: entered promiscuous mode [ 307.285129][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.293554][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.295550][ T3050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.295624][ T3050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.295647][ T3050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.312575][ T4748] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 307.338390][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.339547][ T4760] veth0_macvtap: entered promiscuous mode [ 307.340653][ T4760] veth1_macvtap: entered promiscuous mode [ 307.344509][ T4760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.345471][ T4760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.388724][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.390876][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.390886][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.390995][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.393145][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.393154][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.419200][ T4778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.419413][ T4778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.421215][ T4756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.497459][ T4756] veth0_vlan: entered promiscuous mode [ 307.499191][ T4756] veth1_vlan: entered promiscuous mode [ 307.504912][ T4756] veth0_macvtap: entered promiscuous mode [ 307.540458][ T4756] veth1_macvtap: entered promiscuous mode [ 307.544581][ T4756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.552070][ T3050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.552084][ T3050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.618261][ T4765] Bluetooth: hci1: command tx timeout [ 307.618468][ T4759] Bluetooth: hci3: command tx timeout [ 307.629722][ T4756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.633752][ T4781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.633837][ T4781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.633901][ T4781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.647562][ T3050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.648195][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.648203][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.695051][ T4755] veth0_vlan: entered promiscuous mode [ 307.726444][ T4951] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁЍãÂÉ<' to dns_resolver key: bad/missing value [ 307.740382][ T4951] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 307.740756][ T4951] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 307.746828][ T4759] Bluetooth: hci2: command tx timeout [ 307.747063][ T4759] Bluetooth: hci4: command tx timeout [ 307.747214][ T4759] Bluetooth: hci0: command tx timeout [ 307.913555][ T4755] veth1_vlan: entered promiscuous mode [ 307.938520][ T4778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.938536][ T4778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.943536][ T4755] veth0_macvtap: entered promiscuous mode [ 307.944620][ T4755] veth1_macvtap: entered promiscuous mode [ 307.954029][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.955048][ T4755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.958750][ T4880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.958763][ T4880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.043659][ T4954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.043675][ T4954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.062655][ T4954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.062968][ T4954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.062996][ T4954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.063015][ T4954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.075346][ T4775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.075360][ T4775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.124122][ T4968] loop3: detected capacity change from 0 to 512 [ 308.125053][ T4968] EXT4-fs: Ignoring removed bh option [ 308.131141][ T4968] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 309.116359][ T4968] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 309.116636][ T4968] EXT4-fs (loop3): orphan cleanup on readonly fs [ 309.117341][ T4968] EXT4-fs warning (device loop3): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 309.117360][ T4968] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 309.117562][ T4968] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #16: comm syz.3.7: casefold flag without casefold feature [ 309.117598][ T4968] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 309.118433][ T4968] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.7: couldn't read orphan inode 16 (err -117) [ 309.118470][ T4968] loop3: lost filesystem error report for type 5 error -117 [ 309.119208][ T4968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.371231][ T4978] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁЍãÂÉ<' to dns_resolver key: bad/missing value [ 309.381937][ T4978] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 309.382079][ T4978] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 309.523089][ T4984] loop0: detected capacity change from 0 to 256 [ 309.553991][ T4984] nfs: Unknown parameter './file0' [ 309.563149][ T4984] ------------[ cut here ]------------ [ 309.563160][ T4984] WARNING: drivers/media/mc/mc-entity.c:790 at __media_pipeline_start+0x13c4/0x17fc, CPU#0: syz.0.9/4984 [ 309.566947][ T4984] Modules linked in: [ 309.567827][ T4984] CPU: 0 UID: 0 PID: 4984 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT [ 309.569365][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 309.569377][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 309.569385][ T4986] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 309.575260][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 309.577410][ T4984] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 309.579210][ T4984] pc : __media_pipeline_start+0x13c4/0x17fc [ 309.580464][ T4984] lr : __media_pipeline_start+0x13c4/0x17fc [ 309.581815][ T4984] sp : ffff800095a57710 [ 309.582762][ T4984] x29: ffff800095a57790 x28: ffff0000cbd44a20 x27: 1fffe000197a88e6 [ 309.584547][ T4984] x26: ffff0000cbd44760 x25: 1fffe000197a895b x24: ffff0000cbd44ad8 [ 309.586359][ T4984] x23: dfff800000000000 x22: ffff0000cba78010 x21: 0000000000000001 [ 309.588180][ T4984] x20: ffff0000cbd44b10 x19: dfff800000000000 x18: 0000000000000000 [ 309.589984][ T4984] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000200 [ 309.591709][ T4984] x14: 00000000005654cf x13: 0000000000000001 x12: 0000000000000003 [ 309.593544][ T4984] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000008f1 [ 309.594655][ T4748] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.597132][ T4984] x8 : ffff80009bbbb000 x7 : ffff800083a79eb8 x6 : 0000000000000000 [ 309.598990][ T4984] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800083a784f4 [ 309.600849][ T4984] x2 : 0000000000000001 x1 : ffff0000cdedbb00 x0 : 0000000000000001 [ 309.602773][ T4984] Call trace: [ 309.603525][ T4984] __media_pipeline_start+0x13c4/0x17fc (P) [ 309.604852][ T4984] media_pipeline_start+0x58/0x7c [ 309.605961][ T4984] video_device_pipeline_start+0x88/0xb4 [ 309.607237][ T4984] vimc_capture_start_streaming+0x6c/0xec [ 309.608477][ T4984] vb2_start_streaming+0x114/0x4ac [ 309.609654][ T4984] vb2_core_streamon+0x288/0x44c [ 309.610798][ T4984] vb2_streamon+0x80/0xb4 [ 309.611671][ T4984] vb2_ioctl_streamon+0xb8/0xd0 [ 309.612806][ T4984] v4l_streamon+0x64/0x94 [ 309.613838][ T4984] __video_do_ioctl+0x768/0xaa8 [ 309.614936][ T4984] video_usercopy+0x74c/0xe88 [ 309.616012][ T4984] video_ioctl2+0x3c/0x50 [ 309.616984][ T4984] v4l2_ioctl+0x148/0x18c [ 309.617958][ T4984] __arm64_sys_ioctl+0x154/0x1cc [ 309.619064][ T4984] invoke_syscall+0x98/0x244 [ 309.620068][ T4984] el0_svc_common+0xec/0x23c [ 309.621054][ T4984] do_el0_svc+0x4c/0x5c [ 309.621941][ T4984] el0_svc+0x60/0x1d8 [ 309.622807][ T4984] el0t_64_sync_handler+0x44/0x104 [ 309.623909][ T4984] el0t_64_sync+0x198/0x19c [ 309.624896][ T4984] irq event stamp: 1940 [ 309.625868][ T4984] hardirqs last enabled at (1939): [] kasan_quarantine_put+0xb4/0x1c4 [ 309.628130][ T4984] hardirqs last disabled at (1940): [] el1_brk64+0x20/0x54 [ 309.630133][ T4984] softirqs last enabled at (1922): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 309.632681][ T4984] softirqs last disabled at (1920): [] fpsimd_restore_current_state+0x44/0x9c8 [ 309.635160][ T4984] ---[ end trace 0000000000000000 ]--- [ 309.712055][ T4990] loop4: detected capacity change from 0 to 512 [ 309.833185][ T4765] Bluetooth: hci1: command tx timeout [ 309.833336][ T4765] Bluetooth: hci3: command tx timeout [ 309.833450][ T4765] Bluetooth: hci0: command tx timeout [ 309.833511][ T4765] Bluetooth: hci4: command tx timeout [ 309.833571][ T4765] Bluetooth: hci2: command tx timeout [ 309.838169][ T4990] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 309.838262][ T4990] FAT-fs (loop4): Filesystem has been set read-only [ 309.839142][ T4990] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 309.839184][ T4990] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 310.276268][ T1613] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.276352][ T1613] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.577251][ T4989] syzkaller0: entered promiscuous mode [ 310.577272][ T4989] syzkaller0: entered allmulticast mode [ 311.846360][ T4759] Bluetooth: hci2: command tx timeout [ 311.846391][ T4759] Bluetooth: hci4: command tx timeout [ 311.846410][ T4759] Bluetooth: hci0: command tx timeout [ 311.846425][ T4759] Bluetooth: hci3: command tx timeout [ 311.846440][ T4759] Bluetooth: hci1: command tx timeout [ 313.925895][ T4751] Bluetooth: hci1: command tx timeout [ 313.925923][ T4751] Bluetooth: hci0: command tx timeout [ 313.925941][ T4751] Bluetooth: hci4: command tx timeout [ 313.925959][ T4765] Bluetooth: hci2: command tx timeout [ 313.925996][ T4759] Bluetooth: hci3: command tx timeout [ 317.411365][ T4758] rxe_eth0 speed is unknown, defaulting to 1000