last executing test programs: 3m16.910673179s ago: executing program 3 (id=1044): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) 3m16.515084962s ago: executing program 3 (id=1045): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x11) 3m14.073204069s ago: executing program 3 (id=1055): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@dmask={'dmask', 0x3d, 0x1}}, {}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 3m9.313633021s ago: executing program 3 (id=1063): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_setup(0x624a, 0x0) io_setup(0x81, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000000000bb810000850000006d00000085000000d000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='hrtimer_start\x00', r0}, 0x10) syz_open_procfs(0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m5.617034603s ago: executing program 0 (id=1073): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x300) 3m5.397046677s ago: executing program 3 (id=1074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 3m3.843092445s ago: executing program 0 (id=1078): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1a10084, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d31352c636f6465706167653d63703737352c0063f5bfec90c0575e51077ad31670644610d07fe6556d48fa2ba399def849276b27786a6583c1ea1b2272aab9f6febcf615e51830daf2cac20faf453604c70bb935ad6698f9ec48ce09f0f4681d3e4e495a87221e5cc2fd6546d0159177e315d8c9bf6cf60c811b2f"], 0x4, 0x33d, &(0x7f0000001380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 3m3.498841231s ago: executing program 3 (id=1080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000b01000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x168, 0x2b8, 0xb0000010, 0x0, 0x5c8fca04, 0x230, 0x3a8, 0x3a8, 0x230, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x120, 0x168, 0x700, {}, [@common=@frag={{0x30}}, @common=@unspec=@limit={{0x48}, {0x0, 0x10000003}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev}}}, {{@ipv6={@private1, @empty, [], [], 'veth0_to_team\x00', 'veth0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 3m3.157401506s ago: executing program 0 (id=1086): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) 3m2.352876043s ago: executing program 0 (id=1089): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) getdents64(r2, 0x0, 0xffffff9e) syz_fuse_handle_req(r0, &(0x7f000000d840)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="b0000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00800000000000000000000000000000000000000000366a0000000001"], 0x0, 0x0}) 3m0.654711194s ago: executing program 0 (id=1094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', '', [{0x20, '\x00'}]}, 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000), 0x0) 2m59.269899532s ago: executing program 0 (id=1100): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205838, &(0x7f0000000100)=ANY=[]) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000002e00), &(0x7f0000002e40)={'L-', 0x4}, 0x16, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltaction={0x14, 0x30, 0xec1ba69ffcd4df1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) inotify_init1(0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/186}, {&(0x7f0000000340)=""/149}, {&(0x7f0000000100)=""/45}, {&(0x7f0000000900)=""/4096}, {&(0x7f0000000400)=""/20}, {&(0x7f0000000440)=""/178}], 0x0, &(0x7f0000000580)=""/239}, 0xdf2a}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/249}, {&(0x7f0000000800)=""/97}, {&(0x7f0000001900)=""/226}, {&(0x7f0000001a00)=""/129}], 0x0, &(0x7f0000001ac0)=""/75}, 0x1}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/198}], 0x0, &(0x7f0000001d00)=""/142}, 0x7}, {{&(0x7f0000001dc0)=@l2tp={0x2, 0x0, @empty}, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/165}]}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001fc0)=""/134}, {&(0x7f0000002080)=""/98}, {&(0x7f0000002100)=""/157}], 0x0, &(0x7f0000002200)=""/120}, 0x1}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/229}, {&(0x7f0000002380)=""/26}], 0x0, &(0x7f0000002400)=""/104}, 0x4}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002480)=""/42}, {&(0x7f00000024c0)=""/111}], 0x0, &(0x7f0000002580)=""/179}, 0xe4a}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002640)=""/87}]}, 0x3f}, {{&(0x7f0000002700)=@generic, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002780)=""/16}, {&(0x7f00000027c0)=""/152}, {&(0x7f0000002880)=""/10}]}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/145}, {&(0x7f00000029c0)=""/25}, {&(0x7f0000002a00)=""/59}, {&(0x7f0000002a40)=""/19}], 0x0, &(0x7f0000002ac0)=""/134}}], 0x80000000, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='wchan\x00') pread64(r3, &(0x7f0000000180)=""/252, 0xfc, 0x0) 2m35.727052641s ago: executing program 1 (id=1150): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='map_files\x00') getdents64(r2, &(0x7f00000035c0)=""/4084, 0xff4) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x0, 0x0, 0x0, 0x100}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x6c}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000023000b03d25a806f8c6394f93224fc60", 0x14}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2, 0x1, 0x0) syz_usb_connect(0x4, 0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014e2fc203c419b81c0a701020301090244000100000000090400000302060000052406000005240000000d240f0100000000000000000009050600000000000009050c000000000000091b67d4b6218362e1"], 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r4, r3}) close(r5) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet(0x2, 0x0, 0x84) setsockopt$sock_int(r9, 0x1, 0xf, 0x0, 0x0) 2m32.025219841s ago: executing program 1 (id=1155): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000020c0)=0xd) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5423, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "8a353fd4299541e29c60672111003b4abc0eac"}) 2m30.900182942s ago: executing program 1 (id=1162): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = io_uring_setup(0x73d3, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) 2m28.246821521s ago: executing program 1 (id=1173): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 2m27.984072298s ago: executing program 1 (id=1174): socket$netlink(0x10, 0x3, 0x12) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0), 0x8}) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2d00, r0, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snddsp(r8, &(0x7f0000000740)=""/56, 0x38) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x14}}, 0x0) 2m25.692854498s ago: executing program 1 (id=1180): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205838, &(0x7f0000000100)=ANY=[]) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000002e00), &(0x7f0000002e40)={'L-', 0x4}, 0x16, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltaction={0x14, 0x30, 0xec1ba69ffcd4df1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) inotify_init1(0x0) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/186}, {&(0x7f0000000340)=""/149}, {&(0x7f0000000100)=""/45}, {&(0x7f0000000900)=""/4096}, {&(0x7f0000000400)=""/20}, {&(0x7f0000000440)=""/178}], 0x0, &(0x7f0000000580)=""/239}, 0xdf2a}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/249}, {&(0x7f0000000800)=""/97}, {&(0x7f0000001900)=""/226}, {&(0x7f0000001a00)=""/129}], 0x0, &(0x7f0000001ac0)=""/75}, 0x1}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/198}], 0x0, &(0x7f0000001d00)=""/142}, 0x7}, {{&(0x7f0000001dc0)=@l2tp={0x2, 0x0, @empty}, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e40)=""/165}]}, 0x6}, {{&(0x7f0000001f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001fc0)=""/134}, {&(0x7f0000002080)=""/98}, {&(0x7f0000002100)=""/157}], 0x0, &(0x7f0000002200)=""/120}, 0x1}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/229}, {&(0x7f0000002380)=""/26}], 0x0, &(0x7f0000002400)=""/104}, 0x4}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002480)=""/42}, {&(0x7f00000024c0)=""/111}], 0x0, &(0x7f0000002580)=""/179}, 0xe4a}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002640)=""/87}]}, 0x3f}, {{&(0x7f0000002700)=@generic, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002780)=""/16}, {&(0x7f00000027c0)=""/152}, {&(0x7f0000002880)=""/10}]}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002900)=""/145}, {&(0x7f00000029c0)=""/25}, {&(0x7f0000002a00)=""/59}, {&(0x7f0000002a40)=""/19}], 0x0, &(0x7f0000002ac0)=""/134}}], 0x80000000, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='wchan\x00') pread64(r3, &(0x7f0000000180)=""/252, 0xfc, 0x0) 1m49.118278254s ago: executing program 2 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) mkdir(0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x8, r4) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ffb5"], 0x448}}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r6 = dup2(r5, r5) write$tun(r6, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r6, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000380)="1f20", 0x2, r4) keyctl$negate(0xd, r4, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@auto_da_alloc}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x485, &(0x7f0000000dc0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m45.698527354s ago: executing program 2 (id=1281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) read$FUSE(r1, &(0x7f0000002040)={0x2020}, 0x2020) 1m43.897309283s ago: executing program 2 (id=1284): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) init_module(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x2a, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 1m43.078373702s ago: executing program 2 (id=1290): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x80000003}, 0x18) 1m42.814355403s ago: executing program 2 (id=1292): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') pread64(r0, &(0x7f0000000100)=""/28, 0x1c, 0x100100001) 1m42.574762883s ago: executing program 2 (id=1296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x250a, &(0x7f00000000c0)={[{@nogrpid}, {@nolazytime}, {@nodelalloc}]}, 0x0, 0x4ff, &(0x7f00000007c0)="$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") r0 = getpid() setreuid(0xee00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x0, 0x0) io_setup(0x20, 0x0) unshare(0x6a040000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.675363736s ago: executing program 4 (id=1491): set_mempolicy(0x1, &(0x7f0000000000)=0x3ff, 0x4) 4.478558335s ago: executing program 4 (id=1492): r0 = socket(0x1d, 0x2, 0x6) io_setup(0x100, &(0x7f0000000280)=0x0) io_submit(r1, 0x2, &(0x7f0000000900)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 4.246502612s ago: executing program 4 (id=1493): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000100)) 3.978510304s ago: executing program 4 (id=1494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b703000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 3.814900436s ago: executing program 4 (id=1496): r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x216, &(0x7f0000001900)="$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") prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) io_setup(0x80, &(0x7f0000000080)=0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43451) io_submit(r1, 0x8, &(0x7f0000001880)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xfffa, r0, &(0x7f00000001c0)="baee456980cded84559408", 0xb, 0x7ff, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x7f, 0xffffffffffffffff, &(0x7f0000000240)="34cba6742d0f0a2e145d81957228d6d142295b1092fd12832e19c06a920b00f792f6674d6cb953ea5d109d16108e9470d83ed9af495db611f2e6379c7327783f761d59938dc0794050c8e905e5a8ea6aea00997b54ae8782df00c3225c3692d4b33b7615e85bc2f13ed8ecee10973d458dbf4e1f0b75", 0x76, 0x4, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x6, r2, &(0x7f0000000440)="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", 0xfe0, 0x9, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000001440)="ac885206c5c43d66a1ea401fa54bdabea578ea3e6ac0c8280c4f8ea05bcdd1b8948dd250063fc4050bb9198aac927d30c675f15f27e89d8f26f0a7ca2b96237e56426efb19847b3fa4b91182950844fbf82b488d74cec869427bbf67955d4251394588d23a292fd40b1fe225dacdab4459107d2dd53ffc642cc4a51fb00cea1f2912ff4ec1bf8caf882bd2a941366e037b677f8572c0dfe6ee", 0x99, 0xcd42}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000001500)="6cf0be12e14c44ddefb9740974404b1f48244aafe813a7016930da335db1b73bcd65b649ba58ea19c28c12236f3954633c1ffdc9844b333ea1b06ef334a5492674cadb41a26127e884d7349b2f750861fb", 0x51, 0x1000, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x9c, 0xffffffffffffffff, &(0x7f0000001580)="9cfdd0c2f2f9153e368e92ba5fc767331b7612e23c9026c7095b89023d98856267443f01f760b4512fdbe1811b4fb8226c78ba8c2898c640af63db323c05641755c17bf4ae088f7aa809818843abcc78d4820e307d38cf57ab7642dcdf41467b019d61fc938856022e88eefce8f788d135e69260130c3aa4cadc3ac945ab", 0x7e, 0x2, 0x0, 0x3}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, &(0x7f00000016c0)="238569f6fca9f3f5b7cb5f126037e5afbdda335458eb74d93d3f0f045862ba23a0e39e3289c6640326298b8677d2900772e3adac3561bfda507c013e8c23e7615c5aa26b99436d1c56becca0604885af840eb235df545343c701ccb55cd717230c375fcf7a776a4dd98db240a678794e18c717d4919c5e7f6cd92b241bcba66e7e8bbaf34428e91a8875d9fc44a79d125983280f88af150981457a603074556e368a71f2", 0xa4, 0x0, 0x0, 0x4}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x1, 0x4758, 0xffffffffffffffff, &(0x7f00000017c0)="6cc19be34f2b328f6c14c6484cc1c3c1c6966490a1d7df17fcbe8e4e784c389d2efa385253f1770d6a3f1df455b90753e5ebdf54f6f1aef32f4757bdec225563b4", 0x41, 0xcea6}]) syz_open_dev$loop(&(0x7f0000001640), 0x100, 0x2000) recvmsg(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f0000001b40)=@hci, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/108, 0x6c}, {&(0x7f0000001c40)=""/238, 0xee}, {&(0x7f00000018c0)=""/22, 0x16}, {&(0x7f0000001d40)=""/136, 0x88}, {&(0x7f0000001e00)=""/113, 0x71}, {&(0x7f0000001e80)=""/82, 0x52}, {&(0x7f0000003340)=""/185, 0xb9}], 0x7, &(0x7f0000002040)=""/4096, 0x1000}, 0x40010020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, &(0x7f0000000080), &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a060040000000fe9c02a09f195677f344b4f89d55f0fe088113ec506f35c3c13c45e406feb1ed1a43dfde27ebc66844442a6fcc806006c04c086d90badfade0216bc19c00d00832776d9c234d310837e2"], 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 3.438487422s ago: executing program 5 (id=1498): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 3.345499782s ago: executing program 5 (id=1499): r0 = syz_open_dev$vbi(&(0x7f0000000280), 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0xffffff80, 0x0, "6d4c3f921e4eea767c2c7829ef4030e3f2f0eecf3d0ecb3d"}) 3.2492318s ago: executing program 5 (id=1500): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(0x0, 0x0) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.70803071s ago: executing program 5 (id=1501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0x24, r1, 0x277f826df11ec41b, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0xfe}]}, 0x24}}, 0x0) 1.495161s ago: executing program 5 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x6286) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x1, @mcast2, 0x4}, 0x1c, &(0x7f0000000780)=[{0x0}, {&(0x7f00000005c0)="72e6681010f6f5b4128d7d905e9f868bd6e021df46e4a23eb6da7dba7fb0e0aa0c980ddd9b7cccd4fe9720c6a0d876e4e0e42820343cfcef64a7c3ef468e7882b49d469ae1215aca64b7e3a8afbf1d0f559b57b1a438b0274afbdf836b421bccc2ae97313054635dd211c72f9847b01ebd2ff232fda66a4c89f3d8e26c9b5d3d", 0x80}, {&(0x7f0000000640)="b11ec96736a1c3e53c867cbfd2d5f5ffe9a18d4381e634157536ee83566709c1ad8b561bbc836d3f064548ced5054fed796fa8d5be3a4f15ad95ac61c115455c249c1baacac1018348f8b2638e1265435ba25f9dab4a10472139569dd290", 0x5e}, {&(0x7f00000006c0)="f18767894112cd0f4bb90ff3d261a6d4a1a9e0ff89187bf98736fa13d25eeae5d220ea5c3bffde4febf6a52381562d9866e8ea58dd24dcbab73ecb594c673c2e4e38d66075e9568baf5d25bf93ecccfc4a3dcd72c995aaffb7c70944d3c7a5dc220a7e2b4658061eb74b6ca841c2e0ba38a9ee6d3c9c84958dcd138c5a71f77e55d3928bf0b2d072905248c858bf9f20a17fcaff9029f6101c613a125531ebff", 0xa0}], 0x4}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0x0, @mcast1, 0x10001}, 0x1c, &(0x7f0000000800), 0x0, &(0x7f0000000840)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xb}]}}}, @hoplimit_2292={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @dstopts={{0x20, 0x29, 0x37, {0x8, 0x0, '\x00', [@pad1, @enc_lim]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2b}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0xd8}}], 0x2, 0x4040845) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x0, 0x140, 0x280, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@private1, @local, [0xff000000, 0xff, 0x0, 0xffffffff], [0xffffff00, 0x0, 0xff, 0xff000000], 'gre0\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x68, 0x56, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@inet=@length={{0x28}, {0x4, 0x94}}, @common=@hbh={{0x48}, {0x6, 0x4, 0x1, [0x3, 0x8, 0x3f, 0x0, 0x400, 0x28, 0x7, 0x4, 0x200, 0x4a46, 0x0, 0x3, 0x0, 0x3, 0x5, 0x3], 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xf9ce, 0x1, 0x3}, {0x0, 0x6}}}}, {{@ipv6={@empty, @empty, [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xff000000], 'syz_tun\x00', 'ipvlan1\x00', {}, {}, 0x2, 0x2, 0x9, 0x25}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@frag={{0x30}, {[0x7], 0x4, 0x5, 0x1}}, @common=@icmp6={{0x28}, {0x11, "33ee"}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x0, "c704de2fbf0e43749dc7cd137238ccb2e41d536e4b1b5b26a42e5adbc968"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) preadv(r9, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0xffff}}]}, 0x24}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) readv(0xffffffffffffffff, 0x0, 0x0) 226.055967ms ago: executing program 4 (id=1503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r4, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/137, 0x89, 0x0, &(0x7f0000000580)=""/92, 0x5c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x7c, &(0x7f0000000400)=""/124, 0x40f00, 0x8, '\x00', r5, 0x5, r4, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xa, 0xffffffff, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[r4], &(0x7f00000006c0)=[{0x4, 0x0, 0x7, 0x3}, {0x5, 0x5, 0x10, 0x2}], 0x10, 0xffff}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r7, 0x1) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r8], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)={0x24, r10, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x40004) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r11, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r12}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x26, 0x0, 0x9f, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex=r5, r0, 0x29, 0x8, 0x0, @prog_id=r12, r13}, 0x20) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) 0s ago: executing program 5 (id=1504): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x90) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x10b}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000004580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x200000, 0x2, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="f7", 0x1}], 0x1, 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) open(&(0x7f0000000140)='./bus\x00', 0x2001, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fallocate(r2, 0x20, 0x0, 0x10000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) fallocate(r4, 0x0, 0x0, 0xceec) r5 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000000)={0x7, 0x400000000000305, 0x0, 0x0, &(0x7f0000000480)}) kernel console output (not intermixed with test programs): The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.636955][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.658091][ T8395] hsr_slave_0: entered promiscuous mode [ 468.666129][ T8395] hsr_slave_1: entered promiscuous mode [ 468.675934][ T8395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.683618][ T8395] Cannot create hsr debugfs directory [ 468.746565][ T8386] hsr_slave_0: entered promiscuous mode [ 468.755068][ T8386] hsr_slave_1: entered promiscuous mode [ 468.761686][ T8386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.770350][ T8386] Cannot create hsr debugfs directory [ 468.799208][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.209930][ T8389] hsr_slave_0: entered promiscuous mode [ 469.220380][ T8389] hsr_slave_1: entered promiscuous mode [ 469.230756][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.239651][ T8389] Cannot create hsr debugfs directory [ 469.365817][ T8384] hsr_slave_0: entered promiscuous mode [ 469.377899][ T8384] hsr_slave_1: entered promiscuous mode [ 469.385424][ T8384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.393351][ T8384] Cannot create hsr debugfs directory [ 469.992326][ T8390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.226318][ T8390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.408501][ T8390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.470292][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.568077][ T8390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.688568][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.840229][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.923730][ T8395] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.972373][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.045506][ T8395] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.118190][ T8395] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.212938][ T8395] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.380911][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.391966][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.506860][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.517446][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.552531][ T8395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 471.606363][ T8395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.622866][ T8395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 471.714404][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.725442][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.755423][ T8395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 471.819618][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.830147][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.043386][ T12] bridge_slave_1: left allmulticast mode [ 472.049071][ T12] bridge_slave_1: left promiscuous mode [ 472.056435][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.068551][ T12] bridge_slave_0: left allmulticast mode [ 472.075739][ T12] bridge_slave_0: left promiscuous mode [ 472.082076][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.101237][ T12] bridge_slave_1: left allmulticast mode [ 472.107297][ T12] bridge_slave_1: left promiscuous mode [ 472.116003][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.134197][ T12] bridge_slave_0: left allmulticast mode [ 472.139865][ T12] bridge_slave_0: left promiscuous mode [ 472.145931][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.167649][ T12] bridge_slave_1: left allmulticast mode [ 472.174959][ T12] bridge_slave_1: left promiscuous mode [ 472.180888][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.208144][ T12] bridge_slave_0: left allmulticast mode [ 472.213980][ T12] bridge_slave_0: left promiscuous mode [ 472.219847][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.236630][ T12] bridge_slave_1: left allmulticast mode [ 472.242379][ T12] bridge_slave_1: left promiscuous mode [ 472.248928][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.261559][ T12] bridge_slave_0: left allmulticast mode [ 472.267930][ T12] bridge_slave_0: left promiscuous mode [ 472.278120][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.298739][ T12] bridge_slave_1: left allmulticast mode [ 472.304821][ T12] bridge_slave_1: left promiscuous mode [ 472.310691][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.321024][ T12] bridge_slave_0: left allmulticast mode [ 472.326799][ T12] bridge_slave_0: left promiscuous mode [ 472.338168][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.561028][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.583426][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.606913][ T12] bond0 (unregistering): Released all slaves [ 474.628096][ T12] bond1 (unregistering): Released all slaves [ 474.663893][ T12] bond2 (unregistering): Released all slaves [ 474.801731][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.816268][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.828944][ T12] bond0 (unregistering): Released all slaves [ 474.971586][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.988784][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.001823][ T12] bond0 (unregistering): Released all slaves [ 475.153644][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.177700][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.194501][ T12] bond0 (unregistering): Released all slaves [ 475.332031][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.346576][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.359345][ T12] bond0 (unregistering): Released all slaves [ 475.388398][ T12] bond1 (unregistering): Released all slaves [ 475.425496][ T12] bond2 (unregistering): Released all slaves [ 475.850887][ T8386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 475.973306][ T8386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 475.991872][ T8386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.020358][ T8386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.075127][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.289564][ T8395] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.372427][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.379741][ T5443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.400281][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.407566][ T5443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.901814][ T8388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.084075][ T8388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.115540][ T8388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.212998][ T8388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.386648][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.474853][ T8390] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.589474][ T8390] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.660272][ T8390] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.678668][ T8390] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.890404][ T8386] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.951511][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.958763][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.059704][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.081283][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.088638][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.734898][ T12] hsr_slave_0: left promiscuous mode [ 478.741501][ T12] hsr_slave_1: left promiscuous mode [ 478.749431][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.763316][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.772016][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.780928][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.797386][ T12] hsr_slave_0: left promiscuous mode [ 478.805157][ T12] hsr_slave_1: left promiscuous mode [ 478.811541][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.821857][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.836721][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.846575][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.861713][ T12] hsr_slave_0: left promiscuous mode [ 478.870697][ T12] hsr_slave_1: left promiscuous mode [ 478.877446][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.885316][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.901989][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.911070][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.939531][ T12] hsr_slave_0: left promiscuous mode [ 478.946138][ T12] hsr_slave_1: left promiscuous mode [ 478.954601][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.962143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.971634][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.979178][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.998079][ T12] hsr_slave_0: left promiscuous mode [ 479.005084][ T12] hsr_slave_1: left promiscuous mode [ 479.011523][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.020174][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.031358][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.040469][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.175985][ T12] veth1_macvtap: left promiscuous mode [ 479.181619][ T12] veth0_macvtap: left promiscuous mode [ 479.188935][ T12] veth1_vlan: left promiscuous mode [ 479.194563][ T12] veth0_vlan: left promiscuous mode [ 479.202267][ T12] veth1_macvtap: left promiscuous mode [ 479.208638][ T12] veth0_macvtap: left promiscuous mode [ 479.214602][ T12] veth1_vlan: left promiscuous mode [ 479.220121][ T12] veth0_vlan: left promiscuous mode [ 479.231973][ T12] veth1_macvtap: left promiscuous mode [ 479.238041][ T12] veth0_macvtap: left promiscuous mode [ 479.244462][ T12] veth1_vlan: left promiscuous mode [ 479.249922][ T12] veth0_vlan: left promiscuous mode [ 479.261129][ T12] veth1_macvtap: left promiscuous mode [ 479.267118][ T12] veth0_macvtap: left promiscuous mode [ 479.273799][ T12] veth1_vlan: left promiscuous mode [ 479.279258][ T12] veth0_vlan: left promiscuous mode [ 479.292739][ T12] veth1_macvtap: left promiscuous mode [ 479.298404][ T12] veth0_macvtap: left promiscuous mode [ 479.305277][ T12] veth1_vlan: left promiscuous mode [ 479.311466][ T12] veth0_vlan: left promiscuous mode [ 481.016806][ T12] team0 (unregistering): Port device team_slave_1 removed [ 481.085836][ T12] team0 (unregistering): Port device team_slave_0 removed [ 482.247524][ T12] team0 (unregistering): Port device team_slave_1 removed [ 482.309732][ T12] team0 (unregistering): Port device team_slave_0 removed [ 483.401363][ T12] team0 (unregistering): Port device team_slave_1 removed [ 483.464630][ T12] team0 (unregistering): Port device team_slave_0 removed [ 484.577534][ T12] team0 (unregistering): Port device team_slave_1 removed [ 484.630092][ T12] team0 (unregistering): Port device team_slave_0 removed [ 485.753198][ T12] team0 (unregistering): Port device team_slave_1 removed [ 485.824478][ T12] team0 (unregistering): Port device team_slave_0 removed [ 486.449491][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.562575][ T8389] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 486.592351][ T8389] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 486.659637][ T8389] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.732742][ T8389] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 486.780435][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.921927][ T8395] veth0_vlan: entered promiscuous mode [ 487.036040][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.043370][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.076341][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.083714][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.253796][ T8395] veth1_vlan: entered promiscuous mode [ 487.405223][ T8390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.659231][ T8390] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.684498][ T8384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 487.701117][ T8384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 487.725026][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.732225][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.813731][ T8386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.821114][ T8384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 487.903575][ T8384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.934842][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.942072][ T8449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.095023][ T8395] veth0_macvtap: entered promiscuous mode [ 488.122029][ T8395] veth1_macvtap: entered promiscuous mode [ 488.219867][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.354997][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.424879][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.461907][ T8390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.581878][ T8395] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.597271][ T8395] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.607511][ T8395] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.627226][ T8395] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.656423][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.701575][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.708883][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.818709][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.826241][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.058188][ T8386] veth0_vlan: entered promiscuous mode [ 489.100069][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.250592][ T8386] veth1_vlan: entered promiscuous mode [ 489.449633][ T8390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.459682][ T2383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.473193][ T2383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.660296][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.765929][ T8386] veth0_macvtap: entered promiscuous mode [ 489.776968][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.794596][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.885230][ T8388] veth0_vlan: entered promiscuous mode [ 489.919793][ T8386] veth1_macvtap: entered promiscuous mode [ 490.020772][ T8388] veth1_vlan: entered promiscuous mode [ 490.101965][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.172418][ T8386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.207416][ T8386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.245475][ T8386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.319674][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.326958][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.420080][ T8386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.440298][ T8386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.475610][ T8386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.499878][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.507124][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.546046][ T8472] loop5: detected capacity change from 0 to 1024 [ 490.585901][ T8386] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.616098][ T8386] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.630492][ T8386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.637213][ T8472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.651798][ T8386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.782921][ T8388] veth0_macvtap: entered promiscuous mode [ 490.857058][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.924337][ T8388] veth1_macvtap: entered promiscuous mode [ 491.177997][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.190324][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.210499][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.221903][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.236739][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.401102][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.429419][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.445384][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.455387][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.465863][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.480699][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.646963][ T8390] veth0_vlan: entered promiscuous mode [ 491.675340][ T8388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.685410][ T8388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.696826][ T8388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.717508][ T8388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.754522][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.762415][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.856472][ T8390] veth1_vlan: entered promiscuous mode [ 491.962368][ T8389] veth0_vlan: entered promiscuous mode [ 492.001706][ T5371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.019389][ T5371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.080111][ T8389] veth1_vlan: entered promiscuous mode [ 492.167731][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.383815][ T8485] loop1: detected capacity change from 0 to 64 [ 492.461079][ T8390] veth0_macvtap: entered promiscuous mode [ 493.429496][ T8390] veth1_macvtap: entered promiscuous mode [ 493.933303][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.960531][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.211394][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.284773][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.313094][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.340678][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.369669][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.380378][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.416314][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.485994][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.509879][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.527052][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.539283][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.552371][ T8390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.563831][ T8390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.590408][ T8390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.605225][ T8384] veth0_vlan: entered promiscuous mode [ 494.626174][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.635745][ T8390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.651777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.659193][ T8390] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.659258][ T8390] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.696790][ T8390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.729391][ T8389] veth0_macvtap: entered promiscuous mode [ 494.809128][ T8389] veth1_macvtap: entered promiscuous mode [ 494.939965][ T8384] veth1_vlan: entered promiscuous mode [ 495.149733][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.162016][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.187205][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.210994][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.226259][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.238909][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.250055][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.260861][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.278487][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.341049][ T8501] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 495.431530][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.454467][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.494067][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.526622][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.564628][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.596765][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.633219][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.659793][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.697376][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.828299][ T8389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.882558][ T8389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.899315][ T8389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.908719][ T8389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.988908][ T8384] veth0_macvtap: entered promiscuous mode [ 496.008798][ T8509] loop5: detected capacity change from 0 to 64 [ 496.076456][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.119845][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.133090][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 496.274373][ T8384] veth1_macvtap: entered promiscuous mode [ 497.083492][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.142697][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.177260][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.230333][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.281800][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.330085][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.369365][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.402336][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.435021][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.472483][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.524955][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.790431][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.813821][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.859086][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.870069][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.881147][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.900434][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.910441][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.921069][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.950735][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.975954][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.986001][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.000118][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.051288][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.108855][ T8384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.139063][ T8384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.188704][ T8527] loop2: detected capacity change from 0 to 512 [ 498.189138][ T8384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.238405][ T8527] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 498.247058][ T8384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.259930][ T8527] EXT4-fs (loop2): orphan cleanup on readonly fs [ 498.273626][ T8527] EXT4-fs warning (device loop2): ext4_enable_quotas:7074: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 498.309333][ T8527] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 498.366359][ T8527] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.1026: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 498.431695][ T8527] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1026: couldn't read orphan inode 13 (err -117) [ 498.444891][ T2383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.488127][ T8527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 498.492178][ T2383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.640245][ T8533] EXT4-fs error (device loop2): ext4_lookup:1856: inode #2: comm syz.2.1026: deleted inode referenced: 12 [ 498.670623][ T8532] loop4: detected capacity change from 0 to 256 [ 498.672931][ T8527] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1026'. [ 498.700589][ T8535] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 498.723501][ T8536] netlink: 'syz.5.1028': attribute type 2 has an invalid length. [ 498.728602][ T8532] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 498.742889][ T8536] netlink: 'syz.5.1028': attribute type 1 has an invalid length. [ 498.822625][ T8535] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 498.932363][ T2383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.942138][ T8535] EXT4-fs warning (device loop2): ext4_enable_quotas:7074: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 498.982429][ T2383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.143536][ T5371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.192539][ T5371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.304954][ T8544] Cannot find map_set index 0 as target [ 499.322404][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.541851][ T2383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.605589][ T2383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.664378][ T8548] loop5: detected capacity change from 0 to 64 [ 499.890703][ T8550] loop3: detected capacity change from 0 to 2048 [ 501.421591][ T8557] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 502.133439][ T5443] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 503.054987][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1039'. [ 503.126810][ T8574] bridge_slave_1: left allmulticast mode [ 503.175976][ T5443] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.191310][ T5443] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.203201][ T5443] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.213581][ T5443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.229454][ T8574] bridge_slave_1: left promiscuous mode [ 503.270607][ T8559] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 503.330867][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.394315][ T8580] loop0: detected capacity change from 0 to 256 [ 503.491008][ T8580] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 503.494775][ T8574] bridge_slave_0: left allmulticast mode [ 503.542691][ T8574] bridge_slave_0: left promiscuous mode [ 503.573602][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.725388][ T8582] mmap: syz.3.1041 (8582) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 504.214582][ T8589] netlink: 'syz.0.1042': attribute type 2 has an invalid length. [ 504.266724][ T8589] netlink: 'syz.0.1042': attribute type 1 has an invalid length. [ 504.289225][ T8585] loop4: detected capacity change from 0 to 512 [ 504.306940][ T2749] usb 3-1: USB disconnect, device number 7 [ 504.405206][ T8585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 504.475939][ T8585] EXT4-fs (loop4): orphan cleanup on readonly fs [ 504.527244][ T8585] EXT4-fs warning (device loop4): ext4_enable_quotas:7074: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 504.562884][ T8585] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 504.609811][ T8585] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.1043: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 504.718444][ T8585] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1043: couldn't read orphan inode 13 (err -117) [ 504.785020][ T8585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.094614][ T8585] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1043'. [ 505.172779][ T8600] EXT4-fs error (device loop4): ext4_lookup:1856: inode #2: comm syz.4.1043: deleted inode referenced: 12 [ 505.313798][ T8585] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 505.357876][ T8585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 505.427382][ T8585] EXT4-fs warning (device loop4): ext4_enable_quotas:7074: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 506.602400][ T8612] loop2: detected capacity change from 0 to 64 [ 506.935071][ T8390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.011199][ T8619] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 507.026188][ T8620] loop3: detected capacity change from 0 to 256 [ 507.116158][ T8620] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 508.409373][ T5117] Bluetooth: hci6: command 0x1003 tx timeout [ 510.008649][ T8627] loop1: detected capacity change from 0 to 1024 [ 510.024045][ T4484] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 511.331589][ T8627] hfsplus: failed to load extents file [ 511.503547][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.512012][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.148801][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 512.336863][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 512.355477][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 512.368717][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 512.386137][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.424240][ T8640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 513.183452][ T8661] loop2: detected capacity change from 0 to 2048 [ 513.286615][ T8661] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 513.319557][ T8661] UDF-fs: Scanning with blocksize 512 failed [ 513.544352][ T8661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.180848][ T8692] loop1: detected capacity change from 0 to 256 [ 517.186972][ T8672] usb 4-1: USB disconnect, device number 11 [ 517.281374][ T8692] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 517.317883][ T8694] loop0: detected capacity change from 0 to 64 [ 517.987730][ T8706] loop5: detected capacity change from 0 to 4096 [ 518.478545][ T8706] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 518.493168][ T8706] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 518.502480][ T8706] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 520.446354][ T8739] loop4: detected capacity change from 0 to 64 [ 521.500712][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.516681][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.529500][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.540949][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.581653][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 521.589738][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 523.792941][ T8773] loop4: detected capacity change from 0 to 1024 [ 523.827448][ T4484] Bluetooth: hci0: command tx timeout [ 523.938894][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.964191][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.088617][ T8781] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1106'. [ 525.155645][ T8781] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1106'. [ 526.002912][ T4484] Bluetooth: hci0: command tx timeout [ 526.325279][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.493130][ T8449] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 526.695787][ T8449] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 526.723286][ T8449] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 526.747545][ T8798] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1107'. [ 526.753139][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.765047][ T8449] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 526.816322][ T8449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.876147][ T8789] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 528.032855][ T4484] Bluetooth: hci0: command tx timeout [ 528.419361][ T9] usb 3-1: USB disconnect, device number 8 [ 528.578769][ T8816] loop1: detected capacity change from 0 to 64 [ 528.661902][ T61] bridge_slave_1: left allmulticast mode [ 528.700315][ T61] bridge_slave_1: left promiscuous mode [ 528.745968][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.854215][ T61] bridge_slave_0: left allmulticast mode [ 528.860734][ T61] bridge_slave_0: left promiscuous mode [ 528.912845][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.080850][ T8839] loop1: detected capacity change from 0 to 1024 [ 532.226163][ T4484] Bluetooth: hci0: command tx timeout [ 532.662628][ T8672] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 532.914650][ T8672] usb 6-1: Using ep0 maxpacket: 32 [ 533.144757][ T8672] usb 6-1: device descriptor read/all, error -71 [ 534.361761][ T5117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.401080][ T5117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 534.420354][ T5117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 534.455164][ T5117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.484946][ T5117] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 534.496285][ T5117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.726470][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.773823][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.810760][ T61] bond0 (unregistering): Released all slaves [ 534.932995][ T8850] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1125'. [ 535.073315][ T8863] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744071562067968) [ 535.161501][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 535.702641][ T5165] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 535.711571][ T8883] loop1: detected capacity change from 0 to 64 [ 535.949662][ T5165] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 535.993321][ T5165] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 536.033237][ T5165] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 536.081089][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.129187][ T8874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 536.131939][ T8892] loop2: detected capacity change from 0 to 2048 [ 536.194554][ T8886] nbd: device at index 5 is going down [ 536.240338][ T8892] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 536.273207][ T8892] UDF-fs: Scanning with blocksize 512 failed [ 536.306707][ T8892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.594734][ T4484] Bluetooth: hci6: command tx timeout [ 538.182831][ T5165] usb 5-1: USB disconnect, device number 6 [ 538.471152][ T8907] loop5: detected capacity change from 0 to 1024 [ 538.484851][ T8908] loop2: detected capacity change from 0 to 256 [ 538.501920][ T61] hsr_slave_0: left promiscuous mode [ 538.520003][ T61] hsr_slave_1: left promiscuous mode [ 538.548848][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.570711][ T8908] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 538.571137][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.612897][ T8907] hfsplus: bad catalog entry type [ 538.632899][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.640322][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.673133][ T4484] Bluetooth: hci6: command tx timeout [ 539.074629][ T61] veth1_macvtap: left promiscuous mode [ 539.283101][ T61] veth0_macvtap: left promiscuous mode [ 539.300169][ T61] veth1_vlan: left promiscuous mode [ 539.315599][ T61] veth0_vlan: left promiscuous mode [ 540.941231][ T4484] Bluetooth: hci6: command tx timeout [ 541.175157][ T2383] hfsplus: b-tree write err: -5, ino 4 [ 541.680014][ T8927] loop5: detected capacity change from 0 to 256 [ 542.411188][ T29] audit: type=1326 audit(1721059442.162:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.5.1140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x0 [ 543.019398][ T4484] Bluetooth: hci6: command tx timeout [ 543.031260][ T8934] loop1: detected capacity change from 0 to 64 [ 543.295788][ T8938] loop5: detected capacity change from 0 to 16 [ 543.343173][ T8938] erofs: (device loop5): mounted with root inode @ nid 36. [ 543.710106][ T8942] loop1: detected capacity change from 0 to 64 [ 544.710694][ T61] team0 (unregistering): Port device team_slave_1 removed [ 544.733484][ T8948] nbd: device at index 5 is going down [ 544.907103][ T61] team0 (unregistering): Port device team_slave_0 removed [ 544.956770][ T8954] loop1: detected capacity change from 0 to 256 [ 545.038944][ T8954] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 547.059309][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.071662][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.092971][ T8754] bridge_slave_0: entered allmulticast mode [ 547.104356][ T8754] bridge_slave_0: entered promiscuous mode [ 547.303653][ T8921] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744071562067968) [ 547.614983][ T8964] loop2: detected capacity change from 0 to 512 [ 547.660983][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.679648][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.696320][ T8754] bridge_slave_1: entered allmulticast mode [ 547.713101][ T8964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.720082][ T8754] bridge_slave_1: entered promiscuous mode [ 547.744105][ T8964] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.073238][ T5176] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 548.099796][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.130078][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.155983][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.317248][ T5176] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.358237][ T5176] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 548.397828][ T5176] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.435409][ T5176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.469215][ T8966] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 548.596767][ T8754] team0: Port device team_slave_0 added [ 548.660616][ T8754] team0: Port device team_slave_1 added [ 549.221581][ T5429] usb 5-1: USB disconnect, device number 7 [ 549.228734][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.253695][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.308772][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.350057][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.364998][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.468181][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.566721][ T8990] loop2: detected capacity change from 0 to 1024 [ 549.695553][ T8990] hfsplus: bad catalog entry type [ 549.764490][ T8995] loop4: detected capacity change from 0 to 256 [ 549.798665][ T8995] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 549.804068][ T3867] hfsplus: b-tree write err: -5, ino 4 [ 549.864342][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.908518][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 549.978492][ T8754] hsr_slave_0: entered promiscuous mode [ 550.022348][ T8754] hsr_slave_1: entered promiscuous mode [ 550.176076][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.297496][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.363448][ T9011] loop5: detected capacity change from 0 to 16 [ 551.480171][ T9011] erofs: (device loop5): mounted with root inode @ nid 36. [ 552.015374][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.697249][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.727238][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.760868][ T8859] bridge_slave_0: entered allmulticast mode [ 552.775020][ T8859] bridge_slave_0: entered promiscuous mode [ 552.815356][ T9028] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1171'. [ 552.847608][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.868059][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.905482][ T8859] bridge_slave_1: entered allmulticast mode [ 552.920809][ T8859] bridge_slave_1: entered promiscuous mode [ 553.273218][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.382149][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.164534][ T8859] team0: Port device team_slave_0 added [ 555.224764][ T8859] team0: Port device team_slave_1 added [ 555.458583][ T9056] loop4: detected capacity change from 0 to 64 [ 555.498031][ T61] bridge_slave_1: left allmulticast mode [ 555.512392][ T61] bridge_slave_1: left promiscuous mode [ 555.535008][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.594908][ T61] bridge_slave_0: left allmulticast mode [ 555.612866][ T61] bridge_slave_0: left promiscuous mode [ 555.618976][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.787359][ T61] bridge_slave_1: left allmulticast mode [ 555.845877][ T61] bridge_slave_1: left promiscuous mode [ 555.901813][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.967676][ T61] bridge_slave_0: left allmulticast mode [ 555.998545][ T61] bridge_slave_0: left promiscuous mode [ 556.004682][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.475422][ T9069] loop4: detected capacity change from 0 to 256 [ 557.546094][ T9069] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 559.880292][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.915931][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.940927][ T61] bond0 (unregistering): Released all slaves [ 560.439784][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.483648][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.514013][ T61] bond0 (unregistering): Released all slaves [ 560.636271][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.653876][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.702499][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.791994][ T9083] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 560.946636][ T9089] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744071562067968) [ 560.974120][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.002487][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.148507][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.618177][ T9100] nbd: device at index 4 is going down [ 563.028161][ T8859] hsr_slave_0: entered promiscuous mode [ 563.069323][ T8859] hsr_slave_1: entered promiscuous mode [ 563.092557][ T8859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.100211][ T8859] Cannot create hsr debugfs directory [ 564.022761][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 564.255753][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 564.310148][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 564.533551][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 564.743941][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.825988][ T9122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 564.904923][ T61] hsr_slave_0: left promiscuous mode [ 565.014681][ T61] hsr_slave_1: left promiscuous mode [ 565.055254][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.113218][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.200214][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.242547][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.352610][ T61] hsr_slave_0: left promiscuous mode [ 565.471798][ T61] hsr_slave_1: left promiscuous mode [ 565.498791][ T8672] usb 3-1: USB disconnect, device number 9 [ 565.514543][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.548039][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.661425][ T61] veth1_macvtap: left promiscuous mode [ 565.676809][ T61] veth0_macvtap: left promiscuous mode [ 565.688792][ T61] veth1_vlan: left promiscuous mode [ 565.700373][ T61] veth0_vlan: left promiscuous mode [ 566.211770][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 566.248183][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 566.259122][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 566.280606][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 566.298964][ T5117] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 566.313457][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 567.132401][ T61] team0 (unregistering): Port device team_slave_1 removed [ 567.200570][ T61] team0 (unregistering): Port device team_slave_0 removed [ 568.327314][ T61] team0 (unregistering): Port device team_slave_1 removed [ 568.390594][ T61] team0 (unregistering): Port device team_slave_0 removed [ 568.436682][ T5117] Bluetooth: hci1: command tx timeout [ 569.021118][ T8754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 569.049925][ T8754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 569.064903][ T9132] tipc: Enabling of bearer rejected, failed to enable media [ 569.085553][ T8754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 569.135408][ T8754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 569.409124][ T9151] loop5: detected capacity change from 0 to 64 [ 570.849726][ T5117] Bluetooth: hci1: command tx timeout [ 572.556353][ T9166] warning: `syz.2.1220' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 572.913615][ T5117] Bluetooth: hci1: command tx timeout [ 573.064485][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.078725][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.358844][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.566425][ T9190] loop5: detected capacity change from 0 to 1024 [ 574.716759][ T9139] chnl_net:caif_netlink_parms(): no params data found [ 574.809313][ T8859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 575.003184][ T5117] Bluetooth: hci1: command tx timeout [ 575.050061][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.089389][ T8859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 575.286161][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.299609][ T8859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 575.312979][ T8449] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 575.364955][ T9197] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 575.397257][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.499080][ T8859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 575.521630][ T8449] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 575.537431][ T8449] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 575.552093][ T8449] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 575.562219][ T8449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.588002][ T9195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 575.699409][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.759343][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.766606][ T8555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.805890][ T9209] loop2: detected capacity change from 0 to 64 [ 575.990125][ T8555] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.997445][ T8555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.089888][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.278601][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.294561][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.314930][ T9139] bridge_slave_0: entered allmulticast mode [ 576.361554][ T9139] bridge_slave_0: entered promiscuous mode [ 576.421494][ T8449] usb 5-1: USB disconnect, device number 8 [ 576.464570][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.492349][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.503287][ T9139] bridge_slave_1: entered allmulticast mode [ 576.536809][ T9139] bridge_slave_1: entered promiscuous mode [ 576.786872][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.929804][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.187728][ T9221] loop5: detected capacity change from 0 to 64 [ 577.545399][ T9139] team0: Port device team_slave_0 added [ 578.046410][ T9139] team0: Port device team_slave_1 added [ 579.104094][ T9232] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 579.455498][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.470329][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.542717][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.644240][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.671724][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.714222][ T5414] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 579.782578][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.867125][ T9243] loop5: detected capacity change from 0 to 1024 [ 579.886695][ T35] bridge_slave_1: left allmulticast mode [ 579.892393][ T35] bridge_slave_1: left promiscuous mode [ 579.923009][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.934380][ T5414] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 579.935254][ T9243] hfsplus: umask requires a value [ 579.945262][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 579.967888][ T9243] hfsplus: unable to parse mount options [ 579.969680][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 579.994073][ T35] bridge_slave_0: left allmulticast mode [ 580.008130][ T35] bridge_slave_0: left promiscuous mode [ 580.008446][ T4484] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 580.024841][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.035065][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.035483][ T4484] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 580.052837][ T4484] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 580.076201][ T4484] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 580.077268][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.103491][ T4484] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 580.111416][ T4484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.121155][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.182599][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.209906][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.236967][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.282494][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.298655][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.308233][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.334887][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.357423][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.379085][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.396978][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.764393][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.773615][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.786091][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.798475][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 580.808988][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 580.822587][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.830946][ T5414] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 581.617847][ T5414] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 581.629337][ T5414] usb 3-1: config 0 interface 0 has no altsetting 0 [ 581.640464][ T5414] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 581.649633][ T5414] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 581.664036][ T5414] usb 3-1: Product: syz [ 581.668238][ T5414] usb 3-1: Manufacturer: syz [ 581.672899][ T5414] usb 3-1: SerialNumber: syz [ 581.681537][ T5414] usb 3-1: config 0 descriptor?? [ 581.830536][ T5414] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 581.923433][ T5165] usb 3-1: USB disconnect, device number 10 [ 581.970870][ T5165] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 582.146404][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.180307][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.196798][ T4484] Bluetooth: hci0: command tx timeout [ 582.271121][ T35] bond0 (unregistering): Released all slaves [ 582.815899][ T9139] hsr_slave_0: entered promiscuous mode [ 582.876278][ T9139] hsr_slave_1: entered promiscuous mode [ 582.912381][ T9139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.938777][ T9139] Cannot create hsr debugfs directory [ 583.106275][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 584.062971][ T35] hsr_slave_0: left promiscuous mode [ 584.092818][ T35] hsr_slave_1: left promiscuous mode [ 584.103080][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.133631][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.166338][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.184535][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.272758][ T5111] Bluetooth: hci0: command tx timeout [ 584.409469][ T35] veth1_macvtap: left promiscuous mode [ 584.472651][ T35] veth0_macvtap: left promiscuous mode [ 584.490245][ T35] veth1_vlan: left promiscuous mode [ 584.505877][ T35] veth0_vlan: left promiscuous mode [ 585.064348][ T9286] loop5: detected capacity change from 0 to 64 [ 585.232760][ T5111] Bluetooth: hci3: command 0x0406 tx timeout [ 585.249296][ T5111] Bluetooth: hci4: command 0x0406 tx timeout [ 585.255585][ T5106] Bluetooth: hci5: command 0x0406 tx timeout [ 586.039078][ T9298] loop2: detected capacity change from 0 to 512 [ 586.354463][ T8397] Bluetooth: hci0: command tx timeout [ 588.432670][ T8397] Bluetooth: hci0: command tx timeout [ 588.606243][ T9298] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 588.606827][ T9298] EXT4-fs: failed to create workqueue [ 588.622539][ T9298] EXT4-fs (loop2): mount failed [ 589.196597][ T9305] loop4: detected capacity change from 0 to 64 [ 590.085895][ T9308] loop4: detected capacity change from 0 to 256 [ 590.464703][ T29] audit: type=1326 audit(1721059490.292:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.534363][ T29] audit: type=1326 audit(1721059490.292:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.584093][ T35] team0 (unregistering): Port device team_slave_1 removed [ 590.612932][ T29] audit: type=1326 audit(1721059490.292:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.682604][ T29] audit: type=1326 audit(1721059490.292:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.731560][ T29] audit: type=1326 audit(1721059490.292:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.758077][ T35] team0 (unregistering): Port device team_slave_0 removed [ 590.781380][ T29] audit: type=1326 audit(1721059490.302:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.820806][ T29] audit: type=1326 audit(1721059490.302:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.864637][ T29] audit: type=1326 audit(1721059490.302:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=175 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.932576][ T29] audit: type=1326 audit(1721059490.302:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 590.970764][ T29] audit: type=1326 audit(1721059490.302:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7ffc0000 [ 591.705008][ T9302] tipc: Enabling of bearer rejected, failed to enable media [ 591.719179][ T9326] netlink: 'syz.5.1277': attribute type 10 has an invalid length. [ 591.805728][ T9326] team0: Port device netdevsim0 added [ 592.292924][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.353266][ T9336] loop2: detected capacity change from 0 to 512 [ 594.014630][ T9337] loop5: detected capacity change from 0 to 128 [ 594.884723][ T9336] EXT4-fs: error -4 creating inode table initialization thread [ 594.892991][ T9336] EXT4-fs (loop2): mount failed [ 595.302672][ T9337] EXT4-fs: error -4 creating inode table initialization thread [ 595.333263][ T9337] EXT4-fs (loop5): mount failed [ 597.264400][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 597.264427][ T29] audit: type=1326 audit(1721059497.072:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.292833][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.389316][ T29] audit: type=1326 audit(1721059497.092:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.411682][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.492733][ T29] audit: type=1326 audit(1721059497.092:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.532039][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.564113][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.579897][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.594856][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.613161][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 597.624095][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.636034][ T29] audit: type=1326 audit(1721059497.092:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.659106][ T29] audit: type=1326 audit(1721059497.092:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.711954][ T29] audit: type=1326 audit(1721059497.092:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.772281][ T29] audit: type=1326 audit(1721059497.092:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.794698][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.835039][ T9369] overlayfs: missing 'lowerdir' [ 597.855911][ T29] audit: type=1326 audit(1721059497.102:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=175 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.878226][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.941472][ T29] audit: type=1326 audit(1721059497.102:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 597.963781][ C1] vkms_vblank_simulate: vblank timer overrun [ 598.002929][ T29] audit: type=1326 audit(1721059497.102:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd6175bd9 code=0x7ffc0000 [ 598.036809][ T9245] chnl_net:caif_netlink_parms(): no params data found [ 599.697830][ T9386] loop2: detected capacity change from 0 to 512 [ 599.733326][ T8397] Bluetooth: hci2: command tx timeout [ 601.793089][ T8397] Bluetooth: hci2: command tx timeout [ 602.024314][ T9392] dvmrp5: entered allmulticast mode [ 603.411479][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 603.411506][ T29] audit: type=1326 audit(1721059503.242:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.486469][ T29] audit: type=1326 audit(1721059503.282:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.510891][ T29] audit: type=1326 audit(1721059503.282:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.536937][ T29] audit: type=1326 audit(1721059503.282:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.560214][ T29] audit: type=1326 audit(1721059503.282:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.609807][ T29] audit: type=1326 audit(1721059503.282:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.685168][ T29] audit: type=1326 audit(1721059503.282:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.731108][ T29] audit: type=1326 audit(1721059503.282:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.755120][ T29] audit: type=1326 audit(1721059503.282:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=175 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.755222][ T29] audit: type=1326 audit(1721059503.282:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9406 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7ffc0000 [ 603.876335][ T8397] Bluetooth: hci2: command tx timeout [ 604.007417][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.011972][ T9419] Driver unsupported XDP return value 0 on prog (id 225) dev N/A, expect packet loss! [ 604.015461][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.031689][ T9245] bridge_slave_0: entered allmulticast mode [ 604.041044][ T9245] bridge_slave_0: entered promiscuous mode [ 604.156459][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.174438][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.189427][ T9245] bridge_slave_1: entered allmulticast mode [ 604.200677][ T9245] bridge_slave_1: entered promiscuous mode [ 604.220201][ T9139] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 604.266266][ T9139] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 604.500584][ T9139] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 604.528016][ T9139] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 605.738668][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.761005][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.856483][ T9442] netlink: 'syz.5.1311': attribute type 4 has an invalid length. [ 606.033076][ T8397] Bluetooth: hci2: command tx timeout [ 606.615430][ T9245] team0: Port device team_slave_0 added [ 607.240576][ T9245] team0: Port device team_slave_1 added [ 607.531935][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.572543][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.598500][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.618924][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.825907][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.845685][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.896385][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.001136][ T9463] loop4: detected capacity change from 0 to 1024 [ 608.010979][ T9463] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 608.078534][ T9463] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:482: comm syz.4.1319: Invalid block bitmap block 0 in block_group 0 [ 608.142548][ T9463] EXT4-fs error (device loop4): ext4_acquire_dquot:6858: comm syz.4.1319: Failed to acquire dquot type 0 [ 608.206986][ T9463] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.1319: Freeing blocks not in datazone - block = 0, count = 4096 [ 608.281408][ T9463] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1319: Invalid inode bitmap blk 0 in block_group 0 [ 608.297030][ T61] EXT4-fs error (device loop4): ext4_release_dquot:6881: comm kworker/u8:4: Failed to release dquot type 0 [ 608.343272][ T9463] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 608.393817][ T9463] EXT4-fs (loop4): 1 orphan inode deleted [ 608.438947][ T9463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.604925][ T9463] EXT4-fs error (device loop4): __ext4_get_inode_loc:4356: comm syz.4.1319: Invalid inode table block 12884901889 in block_group 0 [ 608.676098][ T9463] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 608.738386][ T9245] hsr_slave_0: entered promiscuous mode [ 608.780281][ T9245] hsr_slave_1: entered promiscuous mode [ 608.800831][ T12] EXT4-fs error (device loop4): __ext4_get_inode_loc:4356: comm kworker/u8:1: Invalid inode table block 12884901889 in block_group 0 [ 608.814858][ T9245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.835214][ T9245] Cannot create hsr debugfs directory [ 608.849153][ T9364] chnl_net:caif_netlink_parms(): no params data found [ 608.868384][ T8390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.623609][ T5117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 609.642758][ T5117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 609.651100][ T5117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 609.661634][ T5117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 609.670051][ T5117] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 609.677900][ T5117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 609.959378][ T9484] loop4: detected capacity change from 0 to 4096 [ 609.990336][ T9484] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 610.440342][ T9484] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 610.699542][ T9492] loop5: detected capacity change from 0 to 2048 [ 611.792881][ T8397] Bluetooth: hci6: command tx timeout [ 612.002213][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 612.002241][ T29] audit: type=1326 audit(1721059510.392:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.5.1327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x0 [ 612.771403][ T9364] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.801724][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.829897][ T9492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.843248][ T9364] bridge_slave_0: entered allmulticast mode [ 612.900113][ T9364] bridge_slave_0: entered promiscuous mode [ 612.913900][ T9364] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.921150][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.936840][ T9364] bridge_slave_1: entered allmulticast mode [ 612.961885][ T9364] bridge_slave_1: entered promiscuous mode [ 613.020153][ T35] bridge_slave_1: left allmulticast mode [ 613.033244][ T35] bridge_slave_1: left promiscuous mode [ 613.039218][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.087918][ T35] bridge_slave_0: left allmulticast mode [ 613.102543][ T35] bridge_slave_0: left promiscuous mode [ 613.112928][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.137731][ T35] bridge_slave_1: left allmulticast mode [ 613.158329][ T35] bridge_slave_1: left promiscuous mode [ 613.174821][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.282095][ T35] bridge_slave_0: left allmulticast mode [ 613.303428][ T35] bridge_slave_0: left promiscuous mode [ 613.310969][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.348488][ T8395] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 613.525917][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.877710][ T8397] Bluetooth: hci6: command tx timeout [ 616.043020][ T8397] Bluetooth: hci6: command tx timeout [ 616.371265][ T9521] loop4: detected capacity change from 0 to 4096 [ 616.393571][ T9521] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 616.499408][ T9525] overlayfs: missing 'lowerdir' [ 616.500917][ T9521] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 616.610550][ T9521] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 616.629438][ T9521] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 616.980237][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.010053][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.039068][ T35] bond0 (unregistering): Released all slaves [ 617.344581][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.366248][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.378448][ T35] bond0 (unregistering): Released all slaves [ 617.746966][ T9364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.795958][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.112917][ T8397] Bluetooth: hci6: command tx timeout [ 618.128011][ T35] hsr_slave_0: left promiscuous mode [ 618.137589][ T35] hsr_slave_1: left promiscuous mode [ 618.148583][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.329173][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.611126][ T35] hsr_slave_0: left promiscuous mode [ 618.640331][ T35] hsr_slave_1: left promiscuous mode [ 618.703912][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.730714][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.382769][ T5176] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 619.398705][ T35] team0 (unregistering): Port device team_slave_1 removed [ 619.443323][ T35] team0 (unregistering): Port device team_slave_0 removed [ 619.595667][ T5176] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 619.605034][ T5176] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.638717][ T5176] usb 6-1: Product: syz [ 619.654914][ T5176] usb 6-1: Manufacturer: syz [ 619.659661][ T5176] usb 6-1: SerialNumber: syz [ 619.680614][ T5176] usb 6-1: config 0 descriptor?? [ 619.971239][ T5176] usb 6-1: USB disconnect, device number 5 [ 620.255577][ T35] team0 (unregistering): Port device team_slave_1 removed [ 620.340661][ T35] team0 (unregistering): Port device team_slave_0 removed [ 620.903547][ T9364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.189187][ T9364] team0: Port device team_slave_0 added [ 621.322025][ T9364] team0: Port device team_slave_1 added [ 621.364476][ T9139] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.488131][ T29] audit: type=1326 audit(1721059521.322:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7fc00000 [ 621.527744][ T29] audit: type=1326 audit(1721059521.352:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f165ff75bd9 code=0x7fc00000 [ 621.610047][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.628450][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.675478][ T9364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.701677][ T8555] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.709116][ T8555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.879123][ T9364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.908724][ T9364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.971082][ T9364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.998120][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.005492][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.401329][ T29] audit: type=1326 audit(1721059522.212:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9560 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x7fc00000 [ 623.604645][ T9364] hsr_slave_0: entered promiscuous mode [ 623.716965][ T9364] hsr_slave_1: entered promiscuous mode [ 624.491781][ T9481] chnl_net:caif_netlink_parms(): no params data found [ 625.137139][ T9139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.148156][ T9139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.375827][ T9245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 626.047099][ T29] audit: type=1326 audit(1721059525.862:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9589 comm="syz.5.1362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f165ff75bd9 code=0x0 [ 626.401546][ T9597] loop5: detected capacity change from 0 to 2048 [ 626.707802][ T9597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.879574][ T9245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 626.927420][ T9601] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 626.969444][ T9245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 627.065306][ T9245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 627.188355][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 627.203442][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 627.215311][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 627.234804][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 627.254230][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 627.261837][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 627.371621][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.491557][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.523953][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.531979][ T9481] bridge_slave_0: entered allmulticast mode [ 627.562717][ T9481] bridge_slave_0: entered promiscuous mode [ 627.618952][ T9608] loop5: detected capacity change from 0 to 512 [ 627.626469][ T3867] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.991303][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.415791][ T8397] Bluetooth: hci3: command tx timeout [ 629.742483][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.212917][ T9481] bridge_slave_1: entered allmulticast mode [ 630.221606][ T9481] bridge_slave_1: entered promiscuous mode [ 630.256604][ T29] audit: type=1326 audit(1721059530.092:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7fc00000 [ 630.282669][ T29] audit: type=1326 audit(1721059530.092:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe6b1575bd9 code=0x7fc00000 [ 630.646129][ T3867] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.675810][ T29] audit: type=1326 audit(1721059530.282:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9609 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x7fc00000 [ 630.768136][ T3867] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.694041][ T9619] loop4: detected capacity change from 0 to 40427 [ 631.724660][ T8397] Bluetooth: hci3: command tx timeout [ 631.732328][ T9619] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 631.741937][ T9619] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 631.762580][ T9619] F2FS-fs (loop4): invalid crc value [ 631.812748][ T9619] F2FS-fs (loop4): Found nat_bits in checkpoint [ 631.927685][ T9619] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 631.935903][ T9619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 631.990087][ T3867] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.614823][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.634573][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.818064][ T9481] team0: Port device team_slave_0 added [ 632.988384][ T9481] team0: Port device team_slave_1 added [ 633.283913][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.290926][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.321107][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.344364][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.351336][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.384589][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.792690][ T8397] Bluetooth: hci3: command tx timeout [ 634.778925][ T29] audit: type=1326 audit(1721059534.612:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9636 comm="syz.4.1372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x0 [ 634.804399][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.810801][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.050503][ T9644] loop4: detected capacity change from 0 to 2048 [ 635.599560][ T9644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.709355][ T9481] hsr_slave_0: entered promiscuous mode [ 635.739512][ T9481] hsr_slave_1: entered promiscuous mode [ 635.763119][ T9481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.779221][ T9481] Cannot create hsr debugfs directory [ 635.854714][ T3867] bridge_slave_1: left allmulticast mode [ 635.870735][ T3867] bridge_slave_1: left promiscuous mode [ 635.880211][ T3867] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.905542][ T3867] bridge_slave_0: left allmulticast mode [ 635.911366][ T3867] bridge_slave_0: left promiscuous mode [ 635.926334][ T3867] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.944859][ T8397] Bluetooth: hci3: command tx timeout [ 636.056384][ T8390] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 636.170060][ T8390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.391132][ T9651] Bluetooth: MGMT ver 1.22 [ 636.625202][ T9654] overlayfs: missing 'lowerdir' [ 636.674146][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 637.000661][ T3867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.028492][ T3867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.060086][ T3867] bond0 (unregistering): Released all slaves [ 637.316495][ T9364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 637.383616][ T9663] loop5: detected capacity change from 0 to 512 [ 637.478649][ T9666] loop4: detected capacity change from 0 to 8 [ 637.520746][ T9666] SQUASHFS error: lzo decompression failed, data probably corrupt [ 637.531548][ T9666] SQUASHFS error: Failed to read block 0x91: -5 [ 637.542204][ T9666] SQUASHFS error: Unable to read metadata cache entry [8f] [ 637.752337][ T9666] SQUASHFS error: Unable to read inode 0x11f [ 637.822654][ T9364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 639.110246][ T9364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 639.147061][ T9364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 640.114214][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 640.133093][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 640.141016][ T9602] chnl_net:caif_netlink_parms(): no params data found [ 640.149547][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 640.164491][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 640.184213][ T5117] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 640.194604][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 640.271660][ T9680] loop4: detected capacity change from 0 to 1764 [ 640.571459][ T3867] hsr_slave_0: left promiscuous mode [ 640.584619][ T3867] hsr_slave_1: left promiscuous mode [ 640.605764][ T3867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.622910][ T3867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.636525][ T3867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.652100][ T3867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.715736][ T3867] veth1_macvtap: left promiscuous mode [ 640.721427][ T3867] veth0_macvtap: left promiscuous mode [ 640.737197][ T3867] veth1_vlan: left promiscuous mode [ 640.744892][ T3867] veth0_vlan: left promiscuous mode [ 642.261147][ T9693] overlayfs: missing 'lowerdir' [ 642.279179][ T8397] Bluetooth: hci1: command tx timeout [ 642.294955][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 642.511520][ T3867] team0 (unregistering): Port device team_slave_1 removed [ 642.565903][ T3867] team0 (unregistering): Port device team_slave_0 removed [ 643.882046][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.910672][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.920473][ T9602] bridge_slave_0: entered allmulticast mode [ 643.934587][ T9602] bridge_slave_0: entered promiscuous mode [ 643.946670][ T9602] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.963098][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.980633][ T9602] bridge_slave_1: entered allmulticast mode [ 644.000431][ T9602] bridge_slave_1: entered promiscuous mode [ 644.150001][ T9702] netlink: 'syz.4.1390': attribute type 4 has an invalid length. [ 644.326372][ T9602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.353492][ T8397] Bluetooth: hci1: command tx timeout [ 644.414061][ T9602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.867362][ T9602] team0: Port device team_slave_0 added [ 644.996614][ T9717] loop5: detected capacity change from 0 to 1764 [ 644.999675][ T9602] team0: Port device team_slave_1 added [ 645.341762][ T9481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 645.519996][ T9726] loop5: detected capacity change from 0 to 512 [ 645.544085][ T9602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.562535][ T9602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.612507][ T9602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.750898][ T9721] batadv_slave_0: entered promiscuous mode [ 645.782861][ T9481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 645.807381][ T9481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 645.897769][ T9481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 646.943182][ T8397] Bluetooth: hci1: command tx timeout [ 648.384875][ T9602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.391873][ T9602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.421299][ T9602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.441613][ T9364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.451762][ T9719] batadv_slave_0: left promiscuous mode [ 648.866780][ T9602] hsr_slave_0: entered promiscuous mode [ 648.879320][ T9602] hsr_slave_1: entered promiscuous mode [ 648.886734][ T9602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.899542][ T9602] Cannot create hsr debugfs directory [ 648.940352][ T9364] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.006542][ T8397] Bluetooth: hci1: command tx timeout [ 649.022812][ T9677] chnl_net:caif_netlink_parms(): no params data found [ 649.064615][ T8672] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.071945][ T8672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.378223][ T8672] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.385590][ T8672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.660376][ T9747] loop5: detected capacity change from 0 to 1764 [ 652.913998][ T29] audit: type=1326 audit(1721059552.732:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.4.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6b1575bd9 code=0x0 [ 653.044798][ T9758] loop4: detected capacity change from 0 to 2048 [ 653.119547][ T9758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.326007][ T8390] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 655.447007][ T8390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.858058][ T9677] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.886886][ T9677] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.917570][ T9677] bridge_slave_0: entered allmulticast mode [ 655.941264][ T9677] bridge_slave_0: entered promiscuous mode [ 655.998394][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 656.011202][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 656.019639][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 656.030851][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 656.044597][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 656.062180][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 656.118323][ T8397] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 656.243216][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ce10000: rx timeout, send abort [ 656.294263][ T9677] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.318366][ T9677] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.331898][ T9677] bridge_slave_1: entered allmulticast mode [ 656.355347][ T9677] bridge_slave_1: entered promiscuous mode [ 656.745756][ T9677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.755984][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ce10000: abort rx timeout. Force session deactivation [ 658.762777][ T8397] Bluetooth: hci0: command tx timeout [ 658.778639][ T9677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.444657][ T9677] team0: Port device team_slave_0 added [ 659.458259][ T9801] overlayfs: missing 'lowerdir' [ 659.509693][ T9677] team0: Port device team_slave_1 added [ 659.549244][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 659.714680][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.728693][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.778228][ T9677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.805648][ T9677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.812843][ T9677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.840747][ T9677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.198047][ T8397] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 660.209203][ T9677] hsr_slave_0: entered promiscuous mode [ 660.212252][ T8397] Bluetooth: hci4: Injecting HCI hardware error event [ 660.224850][ T5117] Bluetooth: hci4: hardware error 0x00 [ 660.263387][ T9677] hsr_slave_1: entered promiscuous mode [ 660.285162][ T9677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.302642][ T9677] Cannot create hsr debugfs directory [ 660.660962][ T2383] bridge_slave_1: left allmulticast mode [ 660.674756][ T2383] bridge_slave_1: left promiscuous mode [ 660.681783][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.724426][ T2383] bridge_slave_0: left allmulticast mode [ 660.730152][ T2383] bridge_slave_0: left promiscuous mode [ 660.752892][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.792340][ T2383] bridge_slave_1: left allmulticast mode [ 660.821579][ T2383] bridge_slave_1: left promiscuous mode [ 660.827924][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.836253][ T8397] Bluetooth: hci0: command tx timeout [ 660.868971][ T2383] bridge_slave_0: left allmulticast mode [ 660.890118][ T2383] bridge_slave_0: left promiscuous mode [ 660.899520][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.272662][ T5117] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 662.785230][ T2383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.810388][ T2383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.826666][ T2383] bond0 (unregistering): Released all slaves [ 662.913915][ T5117] Bluetooth: hci0: command tx timeout [ 662.992004][ T2383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.013236][ T2383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.032833][ T2383] bond0 (unregistering): Released all slaves [ 663.276579][ T9481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.521762][ T9771] chnl_net:caif_netlink_parms(): no params data found [ 663.678710][ T2383] hsr_slave_0: left promiscuous mode [ 663.688543][ T2383] hsr_slave_1: left promiscuous mode [ 663.704163][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.724950][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.803848][ T2383] hsr_slave_0: left promiscuous mode [ 663.815896][ T2383] hsr_slave_1: left promiscuous mode [ 663.830332][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.859646][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.669123][ T2383] team0 (unregistering): Port device team_slave_1 removed [ 664.720856][ T2383] team0 (unregistering): Port device team_slave_0 removed [ 664.993378][ T5117] Bluetooth: hci0: command tx timeout [ 665.448184][ T2383] team0 (unregistering): Port device team_slave_1 removed [ 665.523193][ T2383] team0 (unregistering): Port device team_slave_0 removed [ 666.190688][ T9481] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.201177][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1435'. [ 666.411933][ T9858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.649241][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.663664][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.682327][ T9771] bridge_slave_0: entered allmulticast mode [ 666.701901][ T9771] bridge_slave_0: entered promiscuous mode [ 666.742287][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.749640][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.736525][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.745304][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.753409][ T9771] bridge_slave_1: entered allmulticast mode [ 667.762178][ T9771] bridge_slave_1: entered promiscuous mode [ 668.081845][ T9771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.126633][ T9771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.171880][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.179257][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.441023][ T9771] team0: Port device team_slave_0 added [ 668.512141][ T9602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 668.556343][ T9602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 668.711873][ T9771] team0: Port device team_slave_1 added [ 668.777544][ T9602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 669.046074][ T9602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 669.247002][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.283042][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.348940][ T9771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.511902][ T9771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.549513][ T9771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.578436][ T9771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.823897][ T8397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.836428][ T8397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.856080][ T8397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.873595][ T8397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.883124][ T8397] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 669.890751][ T8397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.029152][ T9881] loop5: detected capacity change from 0 to 32768 [ 670.052883][ T9881] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1444 (9881) [ 670.131642][ T9881] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 670.154684][ T9881] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 670.173973][ T9881] BTRFS info (device loop5): using free-space-tree [ 670.192372][ T9771] hsr_slave_0: entered promiscuous mode [ 670.213252][ T9771] hsr_slave_1: entered promiscuous mode [ 670.225353][ T9771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.240341][ T9771] Cannot create hsr debugfs directory [ 670.566258][ T8395] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 671.427537][ T9677] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 671.455934][ T9677] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 671.618736][ T9677] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 671.681368][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1445'. [ 671.879889][ T9677] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 671.961708][ T5117] Bluetooth: hci2: command tx timeout [ 672.326165][ T9915] loop4: detected capacity change from 0 to 512 [ 672.420736][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1449'. [ 674.033462][ T5117] Bluetooth: hci2: command tx timeout [ 675.267197][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.937300][ T9602] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.966481][ T2383] bridge_slave_1: left allmulticast mode [ 675.972405][ T2383] bridge_slave_1: left promiscuous mode [ 675.999795][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.094638][ T2383] bridge_slave_0: left allmulticast mode [ 676.114357][ T5117] Bluetooth: hci2: command tx timeout [ 676.172511][ T2383] bridge_slave_0: left promiscuous mode [ 676.178986][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.211289][ T2383] bridge_slave_1: left allmulticast mode [ 676.227308][ T2383] bridge_slave_1: left promiscuous mode [ 676.254147][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.266683][ T2383] bridge_slave_0: left allmulticast mode [ 676.278025][ T2383] bridge_slave_0: left promiscuous mode [ 676.293076][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.159538][ T9934] loop4: detected capacity change from 0 to 32768 [ 677.183571][ T9934] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1453 (9934) [ 677.260380][ T9934] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 677.287126][ T9934] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 677.321434][ T9934] BTRFS info (device loop4): using free-space-tree [ 677.615416][ T8390] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 678.194039][ T5117] Bluetooth: hci2: command tx timeout [ 678.349718][ T2383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.381598][ T2383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.408678][ T2383] bond0 (unregistering): Released all slaves [ 678.660204][ T2383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.675953][ T2383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.700821][ T2383] bond0 (unregistering): Released all slaves [ 678.980546][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.987935][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.105059][ T9883] chnl_net:caif_netlink_parms(): no params data found [ 679.187842][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.195195][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.361526][ T9771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 679.390443][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1456'. [ 679.465750][ T2383] hsr_slave_0: left promiscuous mode [ 679.494945][ T2383] hsr_slave_1: left promiscuous mode [ 679.523259][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.543975][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.600703][ T2383] hsr_slave_0: left promiscuous mode [ 679.614178][ T2383] hsr_slave_1: left promiscuous mode [ 679.628063][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.642374][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.313986][ T9971] loop4: detected capacity change from 0 to 512 [ 684.261421][ T2383] team0 (unregistering): Port device team_slave_1 removed [ 684.313828][ T2383] team0 (unregistering): Port device team_slave_0 removed [ 685.205972][ T2383] team0 (unregistering): Port device team_slave_1 removed [ 685.252371][ T2383] team0 (unregistering): Port device team_slave_0 removed [ 686.065883][ T8397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 686.077342][ T8397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 686.089852][ T8397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 686.100615][ T8397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 686.110238][ T8397] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 686.131930][ T8397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 686.161792][ T9771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 686.418961][ T9771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 686.616365][ T9771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 686.672961][ T9987] overlayfs: upper fs does not support tmpfile. [ 686.933837][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.941229][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.950076][ T9883] bridge_slave_0: entered allmulticast mode [ 686.974045][ T9883] bridge_slave_0: entered promiscuous mode [ 687.114973][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.122269][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.154859][ T9883] bridge_slave_1: entered allmulticast mode [ 687.173918][ T9883] bridge_slave_1: entered promiscuous mode [ 687.236174][ T9677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.309389][ T9883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.407604][ T9883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.625198][ T9883] team0: Port device team_slave_0 added [ 687.659336][ T9883] team0: Port device team_slave_1 added [ 688.497141][ T8397] Bluetooth: hci6: command tx timeout [ 689.242666][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.249673][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.283713][ T9883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.300261][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.308659][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.341502][ T9883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.517748][ T9677] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.648386][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.655845][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.709796][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.717027][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.094020][ T9883] hsr_slave_0: entered promiscuous mode [ 690.144163][ T9883] hsr_slave_1: entered promiscuous mode [ 690.384969][ T9977] chnl_net:caif_netlink_parms(): no params data found [ 690.476234][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 690.512646][ T8397] Bluetooth: hci6: command tx timeout [ 692.594257][ T8397] Bluetooth: hci6: command tx timeout [ 692.992334][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.102229][ T9977] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.122772][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.139609][ T9977] bridge_slave_0: entered allmulticast mode [ 693.170707][ T9977] bridge_slave_0: entered promiscuous mode [ 693.277576][ T9977] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.289283][ T8449] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 693.307660][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.326420][ T9977] bridge_slave_1: entered allmulticast mode [ 693.364824][ T9977] bridge_slave_1: entered promiscuous mode [ 693.514902][ T8449] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 693.552977][ T8449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.574939][ T8449] usb 5-1: Product: syz [ 693.580365][ T8449] usb 5-1: Manufacturer: syz [ 693.610888][ T9977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.633014][ T8449] usb 5-1: SerialNumber: syz [ 693.653154][ T8449] usb 5-1: config 0 descriptor?? [ 693.767474][T10029] syz.5.1473 (10029): drop_caches: 2 [ 693.847305][ T9977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.954732][ T8449] usb 5-1: USB disconnect, device number 9 [ 694.052005][T10043] loop5: detected capacity change from 0 to 256 [ 694.060362][T10043] exfat: Deprecated parameter 'namecase' [ 694.074224][ T9771] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.096781][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.104020][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.145284][T10043] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 694.266987][ T9977] team0: Port device team_slave_0 added [ 694.370567][ T9977] team0: Port device team_slave_1 added [ 694.419179][ T2383] bridge_slave_1: left allmulticast mode [ 694.433695][ T2383] bridge_slave_1: left promiscuous mode [ 694.469791][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.502808][ T2383] bridge_slave_0: left allmulticast mode [ 694.508628][ T2383] bridge_slave_0: left promiscuous mode [ 694.515540][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.680535][ T8397] Bluetooth: hci6: command tx timeout [ 695.005232][T10057] loop4: detected capacity change from 0 to 16 [ 695.035128][T10057] erofs: (device loop4): mounted with root inode @ nid 36. [ 695.105824][T10057] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 695.310606][ T2383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.347474][ T2383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.372231][ T2383] bond0 (unregistering): Released all slaves [ 695.530244][ T8673] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.537519][ T8673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.755030][ T2383] hsr_slave_0: left promiscuous mode [ 695.773828][ T2383] hsr_slave_1: left promiscuous mode [ 695.786407][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.815648][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.830107][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.858581][ T2383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.769638][ T2383] team0 (unregistering): Port device team_slave_1 removed [ 696.854699][ T2383] team0 (unregistering): Port device team_slave_0 removed [ 697.065018][T10078] loop5: detected capacity change from 0 to 16 [ 697.088520][T10078] erofs: (device loop5): mounted with root inode @ nid 36. [ 697.145696][T10080] loop4: detected capacity change from 0 to 16 [ 697.159739][T10078] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 697.184149][T10080] erofs: (device loop4): mounted with root inode @ nid 36. [ 697.252567][T10080] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 697.270526][T10080] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 697.292957][T10080] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 697.553035][ T8673] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 697.711795][T10089] loop5: detected capacity change from 0 to 128 [ 697.868543][ T9677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.943979][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.960766][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.017048][ T9977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.098796][ T8673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 698.113148][ T8673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 698.123085][ T8673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16384, setting to 1024 [ 698.134243][ T8673] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 698.136479][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.148457][ T8673] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 698.204106][ T8673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.212323][ T8673] usb 5-1: Product: syz [ 698.502520][ T8673] usb 5-1: Manufacturer: syz [ 698.507261][ T8673] usb 5-1: SerialNumber: syz [ 698.568936][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.820159][ T8673] usb 5-1: config 0 descriptor?? [ 698.862290][ T8673] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 698.890915][ T9977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.190299][ T8673] scsi host1: usb-storage 5-1:0.0 [ 699.241582][ T8673] usb 5-1: USB disconnect, device number 10 [ 699.499732][ T9977] hsr_slave_0: entered promiscuous mode [ 699.542322][ T9977] hsr_slave_1: entered promiscuous mode [ 699.576586][ T9977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.596731][ T9977] Cannot create hsr debugfs directory [ 700.967513][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 700.978918][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 700.992950][ T9883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 701.000823][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.011801][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.034948][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 701.042801][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 701.061074][ T9883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 701.186174][ T9883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 701.274343][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 701.287167][ C0] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 701.295603][ C0] CPU: 0 PID: 10107 Comm: syz.4.1503 Not tainted 6.10.0-syzkaller #0 [ 701.303702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 701.313784][ C0] RIP: 0010:skb_segment+0x19da/0x42b0 [ 701.319216][ C0] Code: 00 00 fe e9 bc ea ff ff e8 93 0d cf f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 85 9a 2b f9 48 8b 84 24 d0 [ 701.338861][ C0] RSP: 0018:ffffc900000068f8 EFLAGS: 00010212 [ 701.344967][ C0] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88c01512 [ 701.352973][ C0] RDX: 000000000000000e RSI: ffffffff88c025ed RDI: 0000000000000070 [ 701.360972][ C0] RBP: ffffc90000006aa8 R08: 0000000000000005 R09: 000000000000ffff [ 701.368971][ C0] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff888063455040 [ 701.374988][T10114] loop5: detected capacity change from 0 to 16 [ 701.376951][ C0] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 701.391089][ C0] FS: 00007fe6b23b26c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 701.400055][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.406671][ C0] CR2: 000000002003f000 CR3: 00000000638a8000 CR4: 0000000000350ef0 [ 701.410184][T10114] erofs: (device loop5): mounted with root inode @ nid 36. [ 701.414658][ C0] Call Trace: [ 701.414674][ C0] [ 701.414689][ C0] ? show_regs+0x8c/0xa0 [ 701.432325][ C0] ? die_addr+0x4f/0xd0 [ 701.436567][ C0] ? exc_general_protection+0x155/0x230 [ 701.442194][ C0] ? asm_exc_general_protection+0x26/0x30 [ 701.447993][ C0] ? skb_segment+0x8e2/0x42b0 [ 701.452727][ C0] ? skb_segment+0x19bd/0x42b0 [ 701.455079][T10114] erofs: (device loop5): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 701.457524][ C0] ? skb_segment+0x19da/0x42b0 [ 701.472574][ C0] ? skb_segment+0x19bd/0x42b0 [ 701.477400][ C0] ? __lock_acquire+0x14f4/0x3b30 [ 701.482475][ C0] ? __pfx_mark_lock+0x10/0x10 [ 701.487291][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.492967][ C0] ? hlock_class+0x4e/0x130 [ 701.497626][ C0] ? __pfx_skb_segment+0x10/0x10 [ 701.502622][ C0] ? __pfx_nf_ct_l4proto_log_invalid+0x10/0x10 [ 701.508799][ C0] tcp_gso_segment+0x35b/0x1850 [ 701.513719][ C0] ? __pfx_tcp_wfree+0x10/0x10 [ 701.518497][ C0] tcp6_gso_segment+0x1f9/0x12e0 [ 701.523466][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.529115][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 701.534345][ C0] ipv6_gso_segment+0x7b5/0x1c70 [ 701.539349][ C0] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 701.544772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.550418][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 701.556337][ C0] skb_mac_gso_segment+0x2a9/0x650 [ 701.561468][ C0] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 701.566868][ C0] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 701.572515][ C0] ? lock_acquire+0x1b1/0x560 [ 701.577208][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.582870][ C0] __skb_gso_segment+0x333/0x710 [ 701.587838][ C0] ? netif_skb_features+0x3ac/0xcc0 [ 701.593068][ C0] validate_xmit_skb+0x33a/0xee0 [ 701.598029][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.603682][ C0] __dev_queue_xmit+0x6eb/0x4130 [ 701.608655][ C0] ? __pfx_mark_lock+0x10/0x10 [ 701.613438][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 701.618842][ C0] ? lock_acquire+0x1b1/0x560 [ 701.623531][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.629176][ C0] ? find_held_lock+0x2d/0x110 [ 701.633974][ C0] ? ip6_finish_output+0x3f9/0x1300 [ 701.639222][ C0] ? __pfx_lock_release+0x10/0x10 [ 701.644296][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.649949][ C0] ? mark_held_locks+0x9f/0xe0 [ 701.654735][ C0] ip6_finish_output2+0x1100/0x18b0 [ 701.659967][ C0] ip6_finish_output+0x3f9/0x1300 [ 701.665014][ C0] ip6_output+0x1f8/0x540 [ 701.669365][ C0] ? __pfx_ip6_output+0x10/0x10 [ 701.674245][ C0] ip6_xmit+0x125f/0x2030 [ 701.678589][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 701.683823][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 701.688541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.694212][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 701.699250][ C0] ? __pfx_inet6_csk_route_socket+0x10/0x10 [ 701.705168][ C0] ? ip6_protocol_deliver_rcu+0x188/0x1530 [ 701.710992][ C0] ? ipv6_rcv+0x265/0x680 [ 701.715341][ C0] ? __netif_receive_skb_one_core+0x12e/0x1e0 [ 701.721439][ C0] ? __netif_receive_skb+0x1d/0x160 [ 701.726667][ C0] ? process_backlog+0x133/0x760 [ 701.731617][ C0] inet6_csk_xmit+0x3ce/0x740 [ 701.736328][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 701.741568][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.747219][ C0] ? csum_ipv6_magic+0x296/0x310 [ 701.752184][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 701.757409][ C0] __tcp_transmit_skb+0x1adb/0x3dc0 [ 701.762633][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 701.768188][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.773833][ C0] ? __build_skb_around+0x278/0x3b0 [ 701.779038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.784690][ C0] ? skb_zerocopy_clone+0x2c9/0x670 [ 701.789935][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.795585][ C0] tcp_write_xmit+0x12a6/0x8480 [ 701.800468][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 701.806032][ C0] tcp_rcv_state_process+0xf38/0x4f30 [ 701.811469][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.817120][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 701.822343][ C0] ? reacquire_held_locks+0x450/0x4c0 [ 701.827756][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 701.833630][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.839318][ C0] ? lock_acquire+0x1b1/0x560 [ 701.844037][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.849698][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 701.854739][ C0] ? __pfx_tcp_inbound_hash.constprop.0+0x10/0x10 [ 701.861173][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.866830][ C0] ? tcp_v6_do_rcv+0x42f/0x16e0 [ 701.871703][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.877381][ C0] tcp_v6_do_rcv+0x42f/0x16e0 [ 701.882079][ C0] tcp_v6_rcv+0x2e24/0x3ad0 [ 701.886647][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 701.891509][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.897162][ C0] ? __pfx_raw6_local_deliver+0x10/0x10 [ 701.902723][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.908371][ C0] ? lock_acquire+0x1b1/0x560 [ 701.913067][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.918757][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 701.923624][ C0] ip6_protocol_deliver_rcu+0x188/0x1530 [ 701.929294][ C0] ip6_input_finish+0x14f/0x2f0 [ 701.934176][ C0] ip6_input+0xa1/0xd0 [ 701.938286][ C0] ? __pfx_ip6_input+0x10/0x10 [ 701.943103][ C0] ipv6_rcv+0x265/0x680 [ 701.947279][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 701.951976][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 701.957903][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 701.964356][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 701.970003][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 701.975058][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 701.980477][ C0] __netif_receive_skb+0x1d/0x160 [ 701.985540][ C0] process_backlog+0x133/0x760 [ 701.990357][ C0] __napi_poll.constprop.0+0xba/0x550 [ 701.995751][ C0] net_rx_action+0x9b6/0xf10 [ 702.000527][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.006184][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 702.011309][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 702.017132][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.022782][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 702.028109][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 702.033360][ C0] handle_softirqs+0x219/0x8f0 [ 702.038189][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 702.043502][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.049151][ C0] ? sk_wait_data+0x1ab/0x510 [ 702.053853][ C0] do_softirq+0xb2/0xf0 [ 702.058036][ C0] [ 702.060994][ C0] [ 702.063923][ C0] __local_bh_enable_ip+0x100/0x120 [ 702.069147][ C0] sk_wait_data+0x1ab/0x510 [ 702.073684][ C0] ? kasan_save_free_info+0x3b/0x60 [ 702.078910][ C0] ? __pfx_sk_wait_data+0x10/0x10 [ 702.083967][ C0] ? __pfx_woken_wake_function+0x10/0x10 [ 702.089648][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.095296][ C0] ? tcp_send_ack+0x82/0xa0 [ 702.099812][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.105464][ C0] tcp_recvmsg_locked+0x80e/0x2700 [ 702.110600][ C0] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 702.116163][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.121843][ C0] ? tcp_recvmsg+0x113/0x680 [ 702.126448][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 702.131938][ C0] tcp_recvmsg+0x12e/0x680 [ 702.136380][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 702.141349][ C0] ? mark_lock+0xb5/0xc60 [ 702.145712][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.151358][ C0] ? aa_sk_perm+0x2f5/0xb40 [ 702.155884][ C0] ? __pfx_tcp_recvmsg+0x10/0x10 [ 702.160831][ C0] inet6_recvmsg+0x12b/0x6a0 [ 702.165433][ C0] ? find_held_lock+0x2d/0x110 [ 702.170222][ C0] ? __pfx_inet6_recvmsg+0x10/0x10 [ 702.175350][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.180998][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.186648][ C0] ? security_socket_recvmsg+0x98/0xd0 [ 702.192161][ C0] ? __pfx_inet6_recvmsg+0x10/0x10 [ 702.197304][ C0] sock_recvmsg+0xfe/0x250 [ 702.201754][ C0] ____sys_recvmsg+0x21f/0x6b0 [ 702.206548][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 702.211868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.217515][ C0] ? find_held_lock+0x2d/0x110 [ 702.222310][ C0] ___sys_recvmsg+0x115/0x1a0 [ 702.227007][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 702.232233][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.237888][ C0] ? __fget_light+0x173/0x210 [ 702.242603][ C0] __sys_recvmsg+0x114/0x1e0 [ 702.247250][ C0] ? __pfx___sys_recvmsg+0x10/0x10 [ 702.252383][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.258055][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 702.263733][ C0] do_syscall_64+0xcd/0x250 [ 702.268279][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.274202][ C0] RIP: 0033:0x7fe6b1575bd9 [ 702.278620][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.298251][ C0] RSP: 002b:00007fe6b23b2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 702.306678][ C0] RAX: ffffffffffffffda RBX: 00007fe6b1703f60 RCX: 00007fe6b1575bd9 [ 702.314659][ C0] RDX: 0000000040000110 RSI: 00000000200008c0 RDI: 000000000000000a [ 702.322760][ C0] RBP: 00007fe6b15e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 702.330735][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.338803][ C0] R13: 000000000000000b R14: 00007fe6b1703f60 R15: 00007fffea073778 [ 702.346792][ C0] [ 702.349807][ C0] Modules linked in: [ 702.353902][ C0] ---[ end trace 0000000000000000 ]--- [ 702.359379][ C0] RIP: 0010:skb_segment+0x19da/0x42b0 [ 702.364854][ C0] Code: 00 00 fe e9 bc ea ff ff e8 93 0d cf f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 85 9a 2b f9 48 8b 84 24 d0 [ 702.384534][ C0] RSP: 0018:ffffc900000068f8 EFLAGS: 00010212 [ 702.390649][ C0] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88c01512 [ 702.398688][ C0] RDX: 000000000000000e RSI: ffffffff88c025ed RDI: 0000000000000070 [ 702.406726][ C0] RBP: ffffc90000006aa8 R08: 0000000000000005 R09: 000000000000ffff [ 702.414760][ C0] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff888063455040 [ 702.422794][ C0] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 702.430805][ C0] FS: 00007fe6b23b26c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 702.439794][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.446436][ C0] CR2: 000000002003f000 CR3: 00000000638a8000 CR4: 0000000000350ef0 [ 702.454480][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 702.461965][ C0] Kernel Offset: disabled [ 702.466290][ C0] Rebooting in 86400 seconds..