last executing test programs: 6m29.278096511s ago: executing program 5 (id=6): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x70}}, 0x20008800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 6m21.097506976s ago: executing program 5 (id=22): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x18, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00') pread64(r4, &(0x7f0000000480)=""/177, 0xb1, 0xa6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x105, r5}, 0x38) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/123, 0x7b, 0x841) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000), 0x0) accept4(r7, 0x0, 0x0, 0x80800) 6m20.030768173s ago: executing program 5 (id=23): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") 6m9.789273044s ago: executing program 5 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 5m53.137714855s ago: executing program 32 (id=32): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) 5m13.579755214s ago: executing program 4 (id=103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) 5m12.204442473s ago: executing program 4 (id=104): bpf$MAP_CREATE(0x0, 0x0, 0x50) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 5m6.745675129s ago: executing program 4 (id=111): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") 5m3.921477865s ago: executing program 4 (id=113): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 4m58.50864202s ago: executing program 2 (id=119): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x2004}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x80085610, 0x10000000000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 4m54.48094563s ago: executing program 4 (id=124): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xffffffffffff57a7, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) 4m54.452875778s ago: executing program 2 (id=125): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x2004}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 4m51.594869741s ago: executing program 4 (id=127): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 4m50.654511119s ago: executing program 2 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r4}) 4m49.20529315s ago: executing program 2 (id=132): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2004}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 4m47.14163545s ago: executing program 2 (id=136): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xffffffffffff57a7, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) 4m45.373035326s ago: executing program 2 (id=137): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2004}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 4m35.233487984s ago: executing program 33 (id=127): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 4m28.802731483s ago: executing program 34 (id=137): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2004}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) 17.541522115s ago: executing program 3 (id=399): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) r2 = fsmount(r1, 0x0, 0x83) socket$inet6(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0xa2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 13.825886662s ago: executing program 0 (id=403): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @auto=[0x66, 0x54, 0x64, 0x37, 0x34, 0x36, 0x62, 0x34, 0x64, 0x64, 0x32, 0x6d, 0x63, 0x37, 0x64, 0x39]}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3122010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES16], 0x41, 0x2bd, &(0x7f0000000b40)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f0000000540)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_pidfd_open(0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r2) 10.811331781s ago: executing program 1 (id=406): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x8000, 0x101800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(r3, &(0x7f0000000240)="f7", 0x1, 0x4008005, 0x0, 0x0) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 10.705163306s ago: executing program 0 (id=407): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000003c0)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044) 8.614192376s ago: executing program 1 (id=408): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) r2 = fsmount(r1, 0x0, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0xa2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 8.554920355s ago: executing program 0 (id=409): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpgrp(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 7.134029448s ago: executing program 1 (id=410): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) r2 = fsmount(r1, 0x0, 0x83) socket$inet6(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0xa2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 6.390444893s ago: executing program 3 (id=411): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.102502057s ago: executing program 0 (id=412): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsmount(r1, 0x0, 0x83) socket$inet6(0x2d, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x54000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 5.983273381s ago: executing program 3 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 4.464208826s ago: executing program 1 (id=414): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) munlock(&(0x7f000087e000/0x1000)=nil, 0x1000) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4.389417481s ago: executing program 3 (id=415): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2a, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/38}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 3.265936154s ago: executing program 1 (id=416): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2a, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/38}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 1.745169113s ago: executing program 3 (id=417): pipe2(&(0x7f0000000680), 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x1, 0x0) socket$inet(0x2, 0x3, 0x8d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1.282827541s ago: executing program 0 (id=418): ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) socket$inet6(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0, 0xa2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) 313.869516ms ago: executing program 3 (id=419): gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x48, &(0x7f00000000c0)={0x4000, 0xffffff7d}, 0x8) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x4, 0xe, 0x1}}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x36, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) 100.115287ms ago: executing program 0 (id=420): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2a, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/38}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 0s ago: executing program 1 (id=421): gettid() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x48, &(0x7f00000000c0)={0x4000, 0xffffff7d}, 0x8) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x4, 0xe, 0x1}}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. [ 84.145462][ T5614] cgroup: Unknown subsys name 'net' [ 84.266410][ T5614] cgroup: Unknown subsys name 'cpuset' [ 84.276374][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.960603][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.065812][ T10] cfg80211: failed to load regulatory.db [ 88.703372][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.709843][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.711791][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.727884][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.730822][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.735722][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.750613][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.751875][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.761161][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.767271][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.773589][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.780978][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.795148][ T5641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.796385][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.804581][ T5641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.813098][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.817659][ T5641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.829305][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.833185][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.839231][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.848868][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.854546][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.862083][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.867906][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.877070][ T5641] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.889315][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.896811][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.907192][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.915568][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.926666][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.942269][ T5639] Bluetooth: hci1: command tx timeout [ 90.942309][ T5637] Bluetooth: hci2: command tx timeout [ 91.022230][ T5637] Bluetooth: hci0: command tx timeout [ 91.022803][ T5639] Bluetooth: hci4: command tx timeout [ 91.028265][ T5641] Bluetooth: hci5: command tx timeout [ 91.033846][ T5639] Bluetooth: hci3: command tx timeout [ 91.613104][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.621217][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.629231][ T5629] bridge_slave_0: entered allmulticast mode [ 91.637839][ T5629] bridge_slave_0: entered promiscuous mode [ 91.709717][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.717049][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.724518][ T5629] bridge_slave_1: entered allmulticast mode [ 91.732411][ T5629] bridge_slave_1: entered promiscuous mode [ 91.836305][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.843587][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.850805][ T5627] bridge_slave_0: entered allmulticast mode [ 91.859073][ T5627] bridge_slave_0: entered promiscuous mode [ 91.940131][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.948996][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.956494][ T5627] bridge_slave_1: entered allmulticast mode [ 91.964505][ T5627] bridge_slave_1: entered promiscuous mode [ 91.972448][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.979587][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.987054][ T5631] bridge_slave_0: entered allmulticast mode [ 91.994880][ T5631] bridge_slave_0: entered promiscuous mode [ 92.007120][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.065848][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.073159][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.080636][ T5631] bridge_slave_1: entered allmulticast mode [ 92.089174][ T5631] bridge_slave_1: entered promiscuous mode [ 92.098892][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.129044][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.136350][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.143932][ T5628] bridge_slave_0: entered allmulticast mode [ 92.152310][ T5628] bridge_slave_0: entered promiscuous mode [ 92.222801][ T5629] team0: Port device team_slave_0 added [ 92.228714][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.236032][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.243478][ T5628] bridge_slave_1: entered allmulticast mode [ 92.251116][ T5628] bridge_slave_1: entered promiscuous mode [ 92.258576][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.265986][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.273247][ T5630] bridge_slave_0: entered allmulticast mode [ 92.280848][ T5630] bridge_slave_0: entered promiscuous mode [ 92.291441][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.332389][ T5629] team0: Port device team_slave_1 added [ 92.351328][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.358634][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.365964][ T5630] bridge_slave_1: entered allmulticast mode [ 92.373686][ T5630] bridge_slave_1: entered promiscuous mode [ 92.383798][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.395980][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.488608][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.498338][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.505784][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.513258][ T5636] bridge_slave_0: entered allmulticast mode [ 92.521097][ T5636] bridge_slave_0: entered promiscuous mode [ 92.530414][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.537611][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.563787][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.577410][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.584463][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.610415][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.625618][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.676622][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.684117][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.691435][ T5636] bridge_slave_1: entered allmulticast mode [ 92.699053][ T5636] bridge_slave_1: entered promiscuous mode [ 92.723424][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.750412][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.764155][ T5627] team0: Port device team_slave_0 added [ 92.823825][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.835710][ T5627] team0: Port device team_slave_1 added [ 92.858076][ T5631] team0: Port device team_slave_0 added [ 92.880188][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.892034][ T5628] team0: Port device team_slave_0 added [ 92.926215][ T5631] team0: Port device team_slave_1 added [ 92.962527][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.974345][ T5628] team0: Port device team_slave_1 added [ 92.993277][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.000365][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.021743][ T5639] Bluetooth: hci1: command tx timeout [ 93.026561][ T5641] Bluetooth: hci2: command tx timeout [ 93.033185][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.078918][ T5629] hsr_slave_0: entered promiscuous mode [ 93.086121][ T5629] hsr_slave_1: entered promiscuous mode [ 93.102128][ T5641] Bluetooth: hci3: command tx timeout [ 93.111497][ T5639] Bluetooth: hci0: command tx timeout [ 93.111527][ T5637] Bluetooth: hci4: command tx timeout [ 93.116976][ T5641] Bluetooth: hci5: command tx timeout [ 93.134948][ T5630] team0: Port device team_slave_0 added [ 93.141697][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.148760][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.175514][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.187950][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.195445][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.221988][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.235142][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.242169][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.268360][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.309498][ T5630] team0: Port device team_slave_1 added [ 93.335214][ T5636] team0: Port device team_slave_0 added [ 93.342626][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.349636][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.376707][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.427087][ T5636] team0: Port device team_slave_1 added [ 93.433741][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.440809][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.468034][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.494526][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.502679][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.528947][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.602713][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.609795][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.636035][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.670607][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.677654][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.703804][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.769439][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.776439][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.802882][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.821162][ T5627] hsr_slave_0: entered promiscuous mode [ 93.827946][ T5627] hsr_slave_1: entered promiscuous mode [ 93.835075][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 93.840885][ T5627] Cannot create hsr debugfs directory [ 93.853676][ T5631] hsr_slave_0: entered promiscuous mode [ 93.861143][ T5631] hsr_slave_1: entered promiscuous mode [ 93.867882][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 93.873735][ T5631] Cannot create hsr debugfs directory [ 93.981146][ T5628] hsr_slave_0: entered promiscuous mode [ 93.987764][ T5628] hsr_slave_1: entered promiscuous mode [ 93.994508][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 94.000267][ T5628] Cannot create hsr debugfs directory [ 94.117674][ T5630] hsr_slave_0: entered promiscuous mode [ 94.124283][ T5630] hsr_slave_1: entered promiscuous mode [ 94.130494][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 94.136283][ T5630] Cannot create hsr debugfs directory [ 94.224831][ T5636] hsr_slave_0: entered promiscuous mode [ 94.231638][ T5636] hsr_slave_1: entered promiscuous mode [ 94.238040][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 94.244021][ T5636] Cannot create hsr debugfs directory [ 94.793486][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.808609][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.842201][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.853630][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.878406][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.889687][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.924442][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.935943][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.013739][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.032617][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.042259][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.053831][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.062410][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.074759][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.083137][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.093749][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.101995][ T5639] Bluetooth: hci2: command tx timeout [ 95.107622][ T5641] Bluetooth: hci1: command tx timeout [ 95.181938][ T5639] Bluetooth: hci5: command tx timeout [ 95.182013][ T5640] Bluetooth: hci3: command tx timeout [ 95.187455][ T5641] Bluetooth: hci4: command tx timeout [ 95.198775][ T5637] Bluetooth: hci0: command tx timeout [ 95.232241][ T5627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.247270][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.258587][ T5627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.269219][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.285246][ T5627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.296454][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.305034][ T5627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.315108][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.443616][ T5630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.455466][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.468310][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.486895][ T5630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.497694][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.506455][ T5630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.518747][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.540393][ T5630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.552120][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.608183][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.649200][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.657143][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.725792][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.732987][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.745202][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.755583][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.776734][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.787364][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.796549][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.809421][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.820338][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.831989][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.850941][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.989403][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.042870][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.058064][ T5631] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.068488][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.090490][ T5631] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.101989][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.114234][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.122372][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.147834][ T5631] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.160171][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.170268][ T5631] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.182489][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.196520][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.203772][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.280606][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.330609][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.337890][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.404358][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.411582][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.528040][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.637992][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.676186][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.683440][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.746295][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.770003][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.777445][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.890706][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.936073][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.997064][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.004292][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.103225][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.110450][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.139652][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.184277][ T5637] Bluetooth: hci1: command tx timeout [ 97.184516][ T5640] Bluetooth: hci2: command tx timeout [ 97.200489][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.207696][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.265613][ T5640] Bluetooth: hci0: command tx timeout [ 97.265648][ T5637] Bluetooth: hci3: command tx timeout [ 97.271111][ T5641] Bluetooth: hci4: command tx timeout [ 97.276994][ T5637] Bluetooth: hci5: command tx timeout [ 97.356240][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.363454][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.413605][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.847395][ T5629] veth0_vlan: entered promiscuous mode [ 97.915739][ T5629] veth1_vlan: entered promiscuous mode [ 98.167859][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.206980][ T5629] veth0_macvtap: entered promiscuous mode [ 98.268373][ T5629] veth1_macvtap: entered promiscuous mode [ 98.370584][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.438177][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.528750][ T1012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.540379][ T1012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.571185][ T1012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.581618][ T1012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.611131][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.687776][ T5628] veth0_vlan: entered promiscuous mode [ 98.722649][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.824397][ T5628] veth1_vlan: entered promiscuous mode [ 99.055255][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.086007][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.190018][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.219965][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.229766][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.302818][ T5628] veth0_macvtap: entered promiscuous mode [ 99.372951][ T5628] veth1_macvtap: entered promiscuous mode [ 99.408420][ T5630] veth0_vlan: entered promiscuous mode [ 99.472966][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.480746][ T5630] veth1_vlan: entered promiscuous mode [ 99.489744][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.555588][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.655668][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.741121][ T5630] veth0_macvtap: entered promiscuous mode [ 99.766065][ T1012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.884194][ T1012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.911527][ T1012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.009252][ T5861] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.173327][ T5630] veth1_macvtap: entered promiscuous mode [ 100.215234][ T1012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.768065][ T5631] veth0_vlan: entered promiscuous mode [ 100.808915][ T5627] veth0_vlan: entered promiscuous mode [ 101.358710][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.722442][ T5627] veth1_vlan: entered promiscuous mode [ 101.774469][ T5631] veth1_vlan: entered promiscuous mode [ 101.829878][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.883230][ T5631] veth0_macvtap: entered promiscuous mode [ 101.896320][ T5631] veth1_macvtap: entered promiscuous mode [ 101.930274][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.950604][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.553872][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.719600][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.735975][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.757048][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.777189][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.827854][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.853737][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.875201][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.927878][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.951185][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.095789][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.140925][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.483636][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.495177][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.541258][ T5636] veth0_vlan: entered promiscuous mode [ 103.552234][ T5627] veth0_macvtap: entered promiscuous mode [ 103.613555][ T5627] veth1_macvtap: entered promiscuous mode [ 104.013985][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.023030][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.198480][ T5636] veth1_vlan: entered promiscuous mode [ 104.375382][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.403235][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.771905][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.820361][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.831808][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.843561][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.559560][ T5888] loop3: detected capacity change from 0 to 512 [ 106.578310][ T5888] EXT4-fs: Ignoring removed oldalloc option [ 106.661808][ T5888] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.675225][ T5888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.310787][ T5888] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 107.379006][ T5888] EXT4-fs (loop3): 1 truncate cleaned up [ 107.399928][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.441329][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.560975][ T131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.752603][ T131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.882064][ T131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.077061][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.343252][ T5636] veth0_macvtap: entered promiscuous mode [ 108.357844][ T5636] veth1_macvtap: entered promiscuous mode [ 109.260094][ T5895] program syz.0.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.429090][ T5895] loop0: detected capacity change from 0 to 512 [ 109.485576][ T5895] EXT4-fs: Ignoring removed oldalloc option [ 109.573476][ T5895] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.723665][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.740876][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.856632][ T5895] EXT4-fs (loop0): 1 truncate cleaned up [ 109.867720][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.945063][ T5895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.209228][ T5909] loop2: detected capacity change from 0 to 512 [ 111.365671][ T5909] EXT4-fs: Ignoring removed oldalloc option [ 111.380816][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.505511][ T5903] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12'. [ 111.523829][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.531062][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.543048][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.552402][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.562683][ T5909] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.595966][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.614339][ T5915] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2'. [ 111.682372][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.695971][ T5909] EXT4-fs (loop2): 1 truncate cleaned up [ 111.705512][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.757891][ T5909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.162627][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.014802][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.194552][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.493055][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.737236][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.755702][ T5949] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6'. [ 116.126591][ T5951] 9p: Bad value for 'wfdno' [ 116.734095][ T5964] netlink: 260 bytes leftover after parsing attributes in process `syz.0.21'. [ 116.969352][ T5968] loop3: detected capacity change from 0 to 512 [ 116.983153][ T5968] EXT4-fs: Ignoring removed oldalloc option [ 120.050954][ T5968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.534991][ T5968] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 120.535640][ T5968] EXT4-fs: failed to create workqueue [ 121.347892][ T5968] EXT4-fs (loop3): mount failed [ 121.890649][ T5990] netlink: 260 bytes leftover after parsing attributes in process `syz.2.24'. [ 122.000977][ T5989] loop5: detected capacity change from 0 to 512 [ 122.014801][ T5989] EXT4-fs: Ignoring removed oldalloc option [ 125.130797][ T5989] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.734212][ T5989] EXT4-fs (loop5): 1 truncate cleaned up [ 125.761680][ T5989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.340760][ T6009] netlink: 260 bytes leftover after parsing attributes in process `syz.3.26'. [ 130.556646][ T6026] netlink: 260 bytes leftover after parsing attributes in process `syz.1.28'. [ 130.711686][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.711516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 131.881436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.148390][ T6031] loop0: detected capacity change from 0 to 512 [ 132.170648][ T6031] EXT4-fs: Ignoring removed oldalloc option [ 132.209161][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.217253][ T6031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.254063][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.639943][ T6031] EXT4-fs (loop0): 1 truncate cleaned up [ 134.865216][ T6031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.254872][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.376031][ T6055] netlink: 260 bytes leftover after parsing attributes in process `syz.3.34'. [ 138.332107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 140.892183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.151733][ T6071] loop2: detected capacity change from 0 to 512 [ 141.165683][ T6071] EXT4-fs: Ignoring removed oldalloc option [ 141.268503][ T6071] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.755183][ T6071] EXT4-fs (loop2): 1 truncate cleaned up [ 141.979001][ T6071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.831010][ T6082] loop1: detected capacity change from 0 to 512 [ 143.846564][ T6082] EXT4-fs: Ignoring removed oldalloc option [ 143.960460][ T6082] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.228722][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.385104][ T6082] EXT4-fs (loop1): 1 truncate cleaned up [ 144.404914][ T6082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.950339][ T6093] program syz.4.42 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.061306][ T6093] loop4: detected capacity change from 0 to 512 [ 146.074384][ T6093] EXT4-fs: Ignoring removed oldalloc option [ 146.308389][ T6093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.739143][ T6093] EXT4-fs (loop4): 1 truncate cleaned up [ 146.847532][ T6093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.053971][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.226205][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.541610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.960077][ T6131] netlink: 260 bytes leftover after parsing attributes in process `syz.3.51'. [ 153.251058][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.267672][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.811165][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.825882][ T5641] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.855064][ T5641] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.973965][ T6147] netlink: 260 bytes leftover after parsing attributes in process `syz.1.54'. [ 156.210195][ T5641] Bluetooth: hci6: command tx timeout [ 156.426700][ T6160] netlink: 260 bytes leftover after parsing attributes in process `syz.4.58'. [ 157.481492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 158.454912][ T5641] Bluetooth: hci6: command tx timeout [ 159.221856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 159.264335][ T6172] program syz.3.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.289773][ T6172] loop3: detected capacity change from 0 to 512 [ 159.296918][ T6172] EXT4-fs: Ignoring removed oldalloc option [ 159.319346][ T6172] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.350193][ T6172] EXT4-fs (loop3): 1 truncate cleaned up [ 159.357732][ T6172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.798958][ T6182] loop1: detected capacity change from 0 to 512 [ 159.813979][ T6182] EXT4-fs: Ignoring removed oldalloc option [ 159.825752][ T6182] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.996779][ T6182] EXT4-fs (loop1): 1 truncate cleaned up [ 160.023059][ T6182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.381013][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.541678][ T5641] Bluetooth: hci6: command tx timeout [ 160.823931][ T6192] netlink: 260 bytes leftover after parsing attributes in process `syz.2.63'. [ 160.835090][ T6193] netlink: 260 bytes leftover after parsing attributes in process `syz.4.64'. [ 161.179079][ T6198] netlink: 260 bytes leftover after parsing attributes in process `syz.0.65'. [ 162.631643][ T5641] Bluetooth: hci6: command tx timeout [ 164.954173][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.245699][ T6204] loop3: detected capacity change from 0 to 512 [ 165.265526][ T6204] EXT4-fs: Ignoring removed oldalloc option [ 165.348823][ T6204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.491991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 168.326844][ T6204] EXT4-fs (loop3): 1 truncate cleaned up [ 168.346482][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.614277][ T131] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.508593][ T6229] netlink: 260 bytes leftover after parsing attributes in process `syz.4.70'. [ 169.964212][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.344120][ T6231] loop0: detected capacity change from 0 to 512 [ 170.381847][ T6231] EXT4-fs: Ignoring removed oldalloc option [ 170.507946][ T6236] loop2: detected capacity change from 0 to 512 [ 170.519388][ T6236] EXT4-fs: Ignoring removed oldalloc option [ 170.528708][ T6236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.033819][ T6231] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.225830][ T6236] EXT4-fs (loop2): 1 truncate cleaned up [ 171.250884][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.471156][ T6231] EXT4-fs (loop0): 1 truncate cleaned up [ 171.609723][ T6231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.786847][ T131] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.836641][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.946692][ T6244] tc_dump_action: action bad kind [ 173.062775][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.359367][ T131] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.968406][ T6255] Zero length message leads to an empty skb [ 174.602359][ T6268] loop3: detected capacity change from 0 to 512 [ 174.614522][ T6268] EXT4-fs: Ignoring removed oldalloc option [ 175.510264][ T6268] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.690496][ T6268] EXT4-fs (loop3): 1 truncate cleaned up [ 175.714935][ T6268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.772121][ T6274] loop4: detected capacity change from 0 to 512 [ 175.784950][ T6274] EXT4-fs: Ignoring removed oldalloc option [ 176.218553][ T6274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 177.564445][ T6274] EXT4-fs (loop4): 1 truncate cleaned up [ 177.980054][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.989415][ T6274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.995483][ T131] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.288932][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.231186][ T6322] netlink: 260 bytes leftover after parsing attributes in process `syz.0.91'. [ 186.305440][ T131] bridge_slave_1: left allmulticast mode [ 186.320874][ T131] bridge_slave_1: left promiscuous mode [ 186.327957][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.362789][ T131] bridge_slave_0: left allmulticast mode [ 186.376534][ T131] bridge_slave_0: left promiscuous mode [ 186.391682][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.535819][ T6348] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 188.070586][ T6369] netlink: 260 bytes leftover after parsing attributes in process `syz.0.101'. [ 190.706788][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.758563][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.820460][ T131] bond0 (unregistering): Released all slaves [ 191.020560][ T6385] netlink: 260 bytes leftover after parsing attributes in process `syz.0.105'. [ 193.585095][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.598481][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.122152][ T6406] program syz.4.111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.213898][ T6406] loop4: detected capacity change from 0 to 512 [ 197.220972][ T6406] EXT4-fs: Ignoring removed oldalloc option [ 197.238126][ T6406] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.267204][ T6406] EXT4-fs (loop4): 1 truncate cleaned up [ 197.274782][ T6406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.555291][ T6419] netlink: 260 bytes leftover after parsing attributes in process `syz.1.112'. [ 198.862676][ T5636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.668645][ T6432] netlink: 260 bytes leftover after parsing attributes in process `syz.3.115'. [ 206.542597][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.751563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 207.861410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 209.749720][ T131] hsr_slave_0: left promiscuous mode [ 209.800108][ T131] hsr_slave_1: left promiscuous mode [ 209.836837][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.893109][ T6486] program syz.0.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.969407][ T6486] loop0: detected capacity change from 0 to 512 [ 209.978016][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.991139][ T6486] EXT4-fs: Ignoring removed oldalloc option [ 210.006858][ T6486] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.526252][ T6486] EXT4-fs (loop0): 1 truncate cleaned up [ 210.547522][ T6486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.954029][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.054380][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.106791][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 211.193901][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.681128][ T131] veth1_macvtap: left promiscuous mode [ 212.324324][ T131] veth0_macvtap: left promiscuous mode [ 212.435874][ T131] veth1_vlan: left promiscuous mode [ 212.530006][ T131] veth0_vlan: left promiscuous mode [ 212.781134][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.968519][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.977383][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.987306][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.996470][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.884634][ T4942] Bluetooth: hci0: command tx timeout [ 216.150506][ T4942] Bluetooth: hci5: command 0x0406 tx timeout [ 216.151460][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 216.157486][ T4942] Bluetooth: hci4: command 0x0406 tx timeout [ 216.164223][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 217.209155][ T6529] netlink: 260 bytes leftover after parsing attributes in process `syz.0.139'. [ 218.187196][ T5639] Bluetooth: hci0: command tx timeout [ 218.673300][ T131] team0 (unregistering): Port device team_slave_1 removed [ 219.313042][ T131] team0 (unregistering): Port device team_slave_0 removed [ 220.231917][ T5640] Bluetooth: hci0: command tx timeout [ 220.835367][ T6545] netlink: 260 bytes leftover after parsing attributes in process `syz.1.141'. [ 222.311853][ T5640] Bluetooth: hci0: command tx timeout [ 224.549468][ T6567] netlink: 260 bytes leftover after parsing attributes in process `syz.1.145'. [ 226.186122][ T6573] program syz.4.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.392761][ T6583] loop1: detected capacity change from 0 to 512 [ 227.400231][ T6584] program syz.3.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.427356][ T6583] EXT4-fs: Ignoring removed oldalloc option [ 227.743993][ T6584] loop3: detected capacity change from 0 to 512 [ 227.756211][ T6584] EXT4-fs: Ignoring removed oldalloc option [ 228.097461][ T6583] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.117487][ T6584] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.765243][ T6584] EXT4-fs (loop3): 1 truncate cleaned up [ 231.851942][ T6584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.973322][ T6583] EXT4-fs (loop1): 1 truncate cleaned up [ 232.314927][ T6583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.699857][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.880415][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.031519][ T6595] program syz.0.152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.157209][ T6595] loop0: detected capacity change from 0 to 512 [ 233.174939][ T6595] EXT4-fs: Ignoring removed oldalloc option [ 233.194105][ T6595] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 233.445314][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.567117][ T6595] EXT4-fs (loop0): 1 truncate cleaned up [ 233.588102][ T6595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.644095][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.698753][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.855517][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.028269][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.259604][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.446677][ T6603] loop3: detected capacity change from 0 to 512 [ 234.453821][ T6603] EXT4-fs: Ignoring removed oldalloc option [ 234.628650][ T6609] netlink: 260 bytes leftover after parsing attributes in process `syz.1.154'. [ 234.637998][ T6603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.369485][ T6603] EXT4-fs (loop3): 1 truncate cleaned up [ 235.377286][ T6603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.678061][ T5639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.726486][ T5639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.766930][ T5639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.793980][ T5639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.805745][ T5639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.307493][ T5639] Bluetooth: hci6: command tx timeout [ 236.475592][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.660735][ T5995] bond0 (unregistering): Released all slaves [ 236.911393][ T6627] program syz.1.157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.973769][ T6627] loop1: detected capacity change from 0 to 512 [ 236.986362][ T6627] EXT4-fs: Ignoring removed oldalloc option [ 237.057038][ T6627] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 237.446195][ T6627] EXT4-fs (loop1): 1 truncate cleaned up [ 237.553927][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.854956][ T6632] netlink: 260 bytes leftover after parsing attributes in process `syz.3.156'. [ 237.901536][ T5639] Bluetooth: hci7: command tx timeout [ 237.961481][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 238.399952][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.525941][ T5639] Bluetooth: hci6: command tx timeout [ 239.361895][ T6640] netlink: 260 bytes leftover after parsing attributes in process `syz.0.158'. [ 240.126973][ T5639] Bluetooth: hci7: command tx timeout [ 240.541418][ T5639] Bluetooth: hci6: command tx timeout [ 241.909832][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 242.133141][ T6663] netlink: 260 bytes leftover after parsing attributes in process `syz.1.162'. [ 242.156910][ T5639] Bluetooth: hci7: command tx timeout [ 242.800528][ T5639] Bluetooth: hci6: command tx timeout [ 244.286675][ T5639] Bluetooth: hci7: command tx timeout [ 244.565554][ T6679] netlink: 260 bytes leftover after parsing attributes in process `syz.3.164'. [ 247.120291][ T6688] netlink: 260 bytes leftover after parsing attributes in process `syz.1.165'. [ 248.088093][ T5995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.641036][ T5995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.891164][ T6712] netlink: 260 bytes leftover after parsing attributes in process `syz.0.171'. [ 249.089336][ T6714] netlink: 260 bytes leftover after parsing attributes in process `syz.3.170'. [ 251.264990][ T5995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.573747][ T5995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.841180][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.879631][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.911872][ T6503] bridge_slave_0: entered allmulticast mode [ 252.973024][ T6503] bridge_slave_0: entered promiscuous mode [ 256.041974][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.072468][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.993604][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 257.053608][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.264702][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.295275][ T6503] bridge_slave_1: entered allmulticast mode [ 257.349716][ T6503] bridge_slave_1: entered promiscuous mode [ 257.438545][ T6753] loop0: detected capacity change from 0 to 512 [ 257.451965][ T6753] EXT4-fs: Ignoring removed oldalloc option [ 257.466043][ T6753] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 257.739533][ T6758] netlink: 260 bytes leftover after parsing attributes in process `syz.1.178'. [ 259.735198][ T6753] EXT4-fs (loop0): 1 truncate cleaned up [ 259.756754][ T6753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.638154][ T6503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.657660][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.811056][ T6503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.422337][ T6766] loop0: detected capacity change from 0 to 512 [ 262.438659][ T6766] EXT4-fs: Ignoring removed oldalloc option [ 262.487941][ T6766] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 262.681713][ T6766] EXT4-fs (loop0): 1 truncate cleaned up [ 262.736748][ T6766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.460290][ T6773] netlink: 260 bytes leftover after parsing attributes in process `syz.3.181'. [ 263.631090][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.114938][ T5995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.267325][ T6503] team0: Port device team_slave_0 added [ 267.446089][ T6792] netlink: 260 bytes leftover after parsing attributes in process `syz.3.185'. [ 269.234468][ T6503] team0: Port device team_slave_1 added [ 269.687928][ T6809] program syz.3.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.784777][ T6809] loop3: detected capacity change from 0 to 512 [ 269.800974][ T6809] EXT4-fs: Ignoring removed oldalloc option [ 269.821704][ T6809] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 269.993400][ T5995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.176361][ T6809] EXT4-fs (loop3): 1 truncate cleaned up [ 270.294054][ T6809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.122589][ T6503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.158551][ T6503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.273118][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.285778][ T6503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.293672][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.307232][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.328204][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.339816][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.351813][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.639065][ T5995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.208659][ T5995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.422665][ T5639] Bluetooth: hci1: command tx timeout [ 273.995923][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.019623][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.047667][ T6594] bridge_slave_0: entered allmulticast mode [ 274.081685][ T6594] bridge_slave_0: entered promiscuous mode [ 274.127963][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.164832][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.197206][ T6594] bridge_slave_1: entered allmulticast mode [ 274.225096][ T6594] bridge_slave_1: entered promiscuous mode [ 274.797717][ T6859] program syz.0.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.807879][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.828069][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.886641][ T6607] bridge_slave_0: entered allmulticast mode [ 274.921000][ T6859] loop0: detected capacity change from 0 to 512 [ 274.939613][ T6859] EXT4-fs: Ignoring removed oldalloc option [ 274.957009][ T6859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 275.012894][ T6607] bridge_slave_0: entered promiscuous mode [ 275.166455][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.201141][ T6859] EXT4-fs (loop0): 1 truncate cleaned up [ 275.224253][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.268373][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.292214][ T6607] bridge_slave_1: entered allmulticast mode [ 275.397898][ T6607] bridge_slave_1: entered promiscuous mode [ 275.502568][ T5639] Bluetooth: hci1: command tx timeout [ 275.514618][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 276.025172][ T6594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.132607][ T6594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.293943][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.343609][ T6607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.418578][ T5995] bridge_slave_1: left allmulticast mode [ 276.440100][ T5995] bridge_slave_1: left promiscuous mode [ 276.465706][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.501770][ T5995] bridge_slave_0: left allmulticast mode [ 276.513005][ T5995] bridge_slave_0: left promiscuous mode [ 276.704519][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.144872][ T5995] bridge_slave_1: left allmulticast mode [ 277.163333][ T5995] bridge_slave_1: left promiscuous mode [ 277.180221][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.229621][ T5995] bridge_slave_0: left allmulticast mode [ 277.241368][ T5995] bridge_slave_0: left promiscuous mode [ 277.264844][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.581682][ T5639] Bluetooth: hci1: command tx timeout [ 277.767247][ T6877] loop3: detected capacity change from 0 to 512 [ 277.796657][ T6877] EXT4-fs (loop3): Test dummy encryption mode enabled [ 277.840364][ T6877] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.197: inode has both inline data and extents flags [ 277.888327][ T6877] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.891363][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 277.907849][ C0] EXT4-fs (loop3): initial error at time 1780256847: ext4_orphan_get:1397: inode 15 [ 277.917310][ C0] EXT4-fs (loop3): last error at time 1780256847: ext4_orphan_get:1397: inode 15 [ 277.967596][ T6877] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.197: couldn't read orphan inode 15 (err -117) [ 279.154762][ T6877] loop3: lost filesystem error report for type 5 error -117 [ 279.183732][ T6877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.999724][ T5639] Bluetooth: hci1: command tx timeout [ 280.484563][ T6889] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 281.473457][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.753068][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.804809][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.854355][ T5995] bond0 (unregistering): Released all slaves [ 283.558675][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.588371][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.624389][ T5995] bond0 (unregistering): Released all slaves [ 283.713008][ T6607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.934274][ T6594] team0: Port device team_slave_0 added [ 284.238551][ T6594] team0: Port device team_slave_1 added [ 285.476308][ T6607] team0: Port device team_slave_0 added [ 286.411970][ T6607] team0: Port device team_slave_1 added [ 286.508317][ T6594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.552932][ T6594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.646010][ T6594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.112750][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.126351][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.130162][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.153093][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.165652][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.166114][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.200643][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.359035][ T6607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.442560][ T6607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.470242][ T6607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.578919][ T6607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.315044][ T6607] hsr_slave_0: entered promiscuous mode [ 288.334862][ T6607] hsr_slave_1: entered promiscuous mode [ 288.350754][ T6607] debugfs: 'hsr0' already exists in 'hsr' [ 288.368681][ T6607] Cannot create hsr debugfs directory [ 288.585518][ T6926] loop0: detected capacity change from 0 to 512 [ 288.634183][ T6926] EXT4-fs (loop0): Test dummy encryption mode enabled [ 288.734974][ T6926] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.205: inode has both inline data and extents flags [ 288.774547][ T6926] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 288.775011][ T6926] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.205: couldn't read orphan inode 15 (err -117) [ 288.784428][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 288.784475][ C0] EXT4-fs (loop0): initial error at time 1780256858: ext4_orphan_get:1397: inode 15 [ 288.784530][ C0] EXT4-fs (loop0): last error at time 1780256858: ext4_orphan_get:1397: inode 15 [ 288.892932][ T6926] loop0: lost filesystem error report for type 5 error -117 [ 288.898526][ T6926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.936992][ T5995] hsr_slave_0: left promiscuous mode [ 288.976003][ T5995] hsr_slave_1: left promiscuous mode [ 288.998882][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.040862][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.072600][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.091659][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.167929][ T5995] hsr_slave_0: left promiscuous mode [ 289.185024][ T5995] hsr_slave_1: left promiscuous mode [ 289.281483][ T5640] Bluetooth: hci0: command tx timeout [ 289.349228][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.380228][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.203879][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.264390][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.276529][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.471181][ T5995] veth1_macvtap: left promiscuous mode [ 290.491184][ T5995] veth0_macvtap: left promiscuous mode [ 290.499224][ T5995] veth1_vlan: left promiscuous mode [ 290.518744][ T5995] veth0_vlan: left promiscuous mode [ 291.252592][ T5995] veth1_macvtap: left promiscuous mode [ 291.258218][ T5995] veth0_macvtap: left promiscuous mode [ 291.267753][ T5995] veth1_vlan: left promiscuous mode [ 291.273206][ T5995] veth0_vlan: left promiscuous mode [ 291.341452][ T5640] Bluetooth: hci0: command tx timeout [ 293.134572][ T6949] loop0: detected capacity change from 0 to 512 [ 293.173788][ T6949] EXT4-fs (loop0): Test dummy encryption mode enabled [ 293.201111][ T6949] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.209: inode has both inline data and extents flags [ 293.241336][ T6949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 293.241747][ T6949] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.209: couldn't read orphan inode 15 (err -117) [ 293.262717][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 293.262751][ C1] EXT4-fs (loop0): initial error at time 1780256863: ext4_orphan_get:1397: inode 15 [ 293.262804][ C1] EXT4-fs (loop0): last error at time 1780256863: ext4_orphan_get:1397: inode 15 [ 293.293984][ T6949] loop0: lost filesystem error report for type 5 error -117 [ 293.298997][ T6949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.421875][ T5640] Bluetooth: hci0: command tx timeout [ 294.679238][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.515746][ T5640] Bluetooth: hci0: command tx timeout [ 296.162839][ T6969] netlink: 260 bytes leftover after parsing attributes in process `syz.3.213'. [ 297.251178][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.313876][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.372823][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.382365][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.390154][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.442176][ T6982] binder: 6979:6982 ioctl c0285840 200000000000 returned -22 [ 299.447138][ T6985] Bluetooth: MGMT ver 1.23 [ 299.661378][ T5640] Bluetooth: hci5: command tx timeout [ 300.378321][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 302.161553][ T5640] Bluetooth: hci5: command tx timeout [ 302.473582][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 302.665445][ T7000] binder: 6995:7000 ioctl c0285840 200000000000 returned -22 [ 304.251419][ T5640] Bluetooth: hci5: command tx timeout [ 305.954255][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 306.010351][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 306.301471][ T5640] Bluetooth: hci5: command tx timeout [ 306.366860][ T7020] program syz.0.226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.691540][ T7020] loop0: detected capacity change from 0 to 512 [ 306.704975][ T7020] EXT4-fs: Ignoring removed oldalloc option [ 306.718445][ T7020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 306.841385][ T7020] EXT4-fs (loop0): 1 truncate cleaned up [ 306.869002][ T7020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.632561][ T7026] netlink: 260 bytes leftover after parsing attributes in process `syz.1.227'. [ 307.875700][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.967546][ T7032] netlink: 260 bytes leftover after parsing attributes in process `syz.0.228'. [ 309.264641][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 309.747289][ T7044] netlink: 260 bytes leftover after parsing attributes in process `syz.1.229'. [ 310.701341][ T7049] netlink: 260 bytes leftover after parsing attributes in process `syz.3.230'. [ 311.514170][ T7053] binder: 7050:7053 ioctl c0285840 200000000000 returned -22 [ 314.678017][ T7073] program syz.0.235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.768166][ T7073] loop0: detected capacity change from 0 to 512 [ 314.783471][ T7073] EXT4-fs: Ignoring removed oldalloc option [ 314.800000][ T7073] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 314.937776][ T7073] EXT4-fs (loop0): 1 truncate cleaned up [ 314.978101][ T7073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.814165][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.855411][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.875265][ T6818] bridge_slave_0: entered allmulticast mode [ 315.896641][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.919982][ T6818] bridge_slave_0: entered promiscuous mode [ 316.077264][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.099814][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.120129][ T6818] bridge_slave_1: entered allmulticast mode [ 316.143092][ T6818] bridge_slave_1: entered promiscuous mode [ 316.466739][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.473555][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.779532][ T6818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.845782][ T6818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.037368][ T5995] bridge_slave_1: left allmulticast mode [ 317.054672][ T5995] bridge_slave_1: left promiscuous mode [ 317.083251][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.120884][ T5995] bridge_slave_0: left allmulticast mode [ 317.141966][ T5995] bridge_slave_0: left promiscuous mode [ 317.156885][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.216639][ T5995] bridge_slave_1: left allmulticast mode [ 317.230929][ T5995] bridge_slave_1: left promiscuous mode [ 317.255618][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.294200][ T5995] bridge_slave_0: left allmulticast mode [ 317.309792][ T5995] bridge_slave_0: left promiscuous mode [ 317.329684][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.362794][ T5995] bridge_slave_1: left allmulticast mode [ 317.368540][ T5995] bridge_slave_1: left promiscuous mode [ 317.380425][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.406065][ T5995] bridge_slave_0: left allmulticast mode [ 317.418899][ T5995] bridge_slave_0: left promiscuous mode [ 317.436513][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.636807][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.656052][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.674568][ T5995] bond0 (unregistering): Released all slaves [ 317.955808][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.984483][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.000025][ T5995] bond0 (unregistering): Released all slaves [ 318.280746][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.581770][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.597763][ T5995] bond0 (unregistering): Released all slaves [ 319.745625][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 319.765439][ T6818] team0: Port device team_slave_0 added [ 319.798246][ T6818] team0: Port device team_slave_1 added [ 320.063383][ T7111] netlink: 260 bytes leftover after parsing attributes in process `syz.3.239'. [ 322.075668][ T5995] hsr_slave_0: left promiscuous mode [ 322.140698][ T5995] hsr_slave_1: left promiscuous mode [ 322.158519][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.187572][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.214664][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.230123][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.220931][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 324.600282][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 324.787658][ T7141] netlink: 260 bytes leftover after parsing attributes in process `syz.3.246'. [ 325.021205][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 325.106630][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 326.063153][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 326.199712][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 327.449975][ T7160] netlink: 260 bytes leftover after parsing attributes in process `syz.3.251'. [ 328.852454][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.860113][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.892384][ T6818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.080361][ T6818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.089511][ T6818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.481307][ T6818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.608571][ T6818] hsr_slave_0: entered promiscuous mode [ 331.627350][ T6818] hsr_slave_1: entered promiscuous mode [ 331.644519][ T6818] debugfs: 'hsr0' already exists in 'hsr' [ 331.650605][ T6818] Cannot create hsr debugfs directory [ 331.998937][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.038402][ T7187] netlink: 260 bytes leftover after parsing attributes in process `syz.3.255'. [ 332.055943][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.107322][ T6907] bridge_slave_0: entered allmulticast mode [ 332.185862][ T6907] bridge_slave_0: entered promiscuous mode [ 332.283590][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.323797][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.365116][ T6907] bridge_slave_1: entered allmulticast mode [ 332.420499][ T6907] bridge_slave_1: entered promiscuous mode [ 335.757674][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.959115][ T7200] netlink: 260 bytes leftover after parsing attributes in process `syz.1.257'. [ 336.331586][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.143997][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 338.157117][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 338.165469][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 338.181908][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 338.194521][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 338.364703][ T7216] netlink: 260 bytes leftover after parsing attributes in process `syz.0.259'. [ 340.481450][ T5639] Bluetooth: hci6: command tx timeout [ 340.509632][ T6907] team0: Port device team_slave_0 added [ 340.526983][ T6907] team0: Port device team_slave_1 added [ 340.609294][ T7231] netlink: 260 bytes leftover after parsing attributes in process `syz.1.261'. [ 342.949459][ T5640] Bluetooth: hci6: command tx timeout [ 343.280870][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.315245][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.397744][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.363078][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.613804][ T7256] netlink: 260 bytes leftover after parsing attributes in process `syz.1.264'. [ 344.880463][ T7260] netlink: 260 bytes leftover after parsing attributes in process `syz.3.265'. [ 345.072837][ T5640] Bluetooth: hci6: command tx timeout [ 346.234935][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.846882][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.101340][ T5640] Bluetooth: hci6: command tx timeout [ 349.778044][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 349.981593][ T7282] netlink: 260 bytes leftover after parsing attributes in process `syz.0.268'. [ 350.536786][ T6965] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.654736][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.797606][ T6965] bridge_slave_0: entered allmulticast mode [ 351.221072][ T6965] bridge_slave_0: entered promiscuous mode [ 351.672014][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.762509][ T7300] netlink: 260 bytes leftover after parsing attributes in process `syz.3.270'. [ 351.900369][ T6965] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.272263][ T6965] bridge_slave_1: entered allmulticast mode [ 354.477504][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.499428][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.514597][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.528019][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.575612][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.724625][ T6965] bridge_slave_1: entered promiscuous mode [ 355.235268][ T7315] 9p: Bad value for 'wfdno' [ 355.634046][ T7323] netlink: 260 bytes leftover after parsing attributes in process `syz.0.272'. [ 356.751602][ T5639] Bluetooth: hci1: command tx timeout [ 358.766837][ T5995] bridge_slave_1: left allmulticast mode [ 358.791364][ T5639] Bluetooth: hci1: command tx timeout [ 358.822710][ T5995] bridge_slave_1: left promiscuous mode [ 358.840285][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.908267][ T5995] bridge_slave_0: left allmulticast mode [ 358.917807][ T5995] bridge_slave_0: left promiscuous mode [ 358.940896][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.094448][ T5640] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.106827][ T5640] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.117254][ T5640] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.125532][ T5640] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.137777][ T5640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 359.799434][ T7344] loop0: detected capacity change from 0 to 512 [ 359.810330][ T7344] EXT4-fs: Ignoring removed oldalloc option [ 360.245125][ T7342] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 360.465421][ T7344] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 360.694282][ T7344] EXT4-fs (loop0): 1 truncate cleaned up [ 360.780065][ T7344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.863841][ T5640] Bluetooth: hci1: command tx timeout [ 361.191379][ T5640] Bluetooth: hci7: command tx timeout [ 362.560510][ T7357] netlink: 260 bytes leftover after parsing attributes in process `syz.3.278'. [ 363.005849][ T5640] Bluetooth: hci1: command tx timeout [ 363.358881][ T5640] Bluetooth: hci7: command tx timeout [ 363.420117][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.456328][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.487709][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.545562][ T5995] bond0 (unregistering): Released all slaves [ 364.414454][ T7382] netlink: 260 bytes leftover after parsing attributes in process `syz.3.281'. [ 365.431436][ T5640] Bluetooth: hci7: command tx timeout [ 367.666914][ T5640] Bluetooth: hci7: command tx timeout [ 368.405755][ T5995] hsr_slave_0: left promiscuous mode [ 368.412056][ T5995] hsr_slave_1: left promiscuous mode [ 368.428916][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.569254][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.565912][ T7404] netlink: 260 bytes leftover after parsing attributes in process `syz.3.284'. [ 372.241541][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 372.426134][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 372.654238][ T7417] loop3: detected capacity change from 0 to 512 [ 372.672065][ T7417] EXT4-fs: Ignoring removed oldalloc option [ 372.704781][ T7417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 372.844185][ T7417] EXT4-fs (loop3): 1 truncate cleaned up [ 372.887410][ T7417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.538913][ T7423] netlink: 260 bytes leftover after parsing attributes in process `syz.0.288'. [ 373.620145][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.091975][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 377.246023][ T5995] bridge_slave_1: left allmulticast mode [ 377.277326][ T5995] bridge_slave_1: left promiscuous mode [ 377.313422][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.548620][ T5995] bridge_slave_0: left allmulticast mode [ 377.556804][ T5995] bridge_slave_0: left promiscuous mode [ 378.324355][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.337939][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.704378][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.258584][ T7464] netlink: 260 bytes leftover after parsing attributes in process `syz.1.295'. [ 382.123183][ T7467] program syz.0.296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.163753][ T5995] bridge_slave_1: left allmulticast mode [ 382.225802][ T5995] bridge_slave_1: left promiscuous mode [ 382.260725][ T7467] loop0: detected capacity change from 0 to 512 [ 382.274073][ T7467] EXT4-fs: Ignoring removed oldalloc option [ 382.310850][ T7467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 382.340515][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.684337][ T7467] EXT4-fs (loop0): 1 truncate cleaned up [ 382.788709][ T5995] bridge_slave_0: left allmulticast mode [ 382.810583][ T7467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.907595][ T5995] bridge_slave_0: left promiscuous mode [ 382.999131][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.765185][ T7483] netlink: 260 bytes leftover after parsing attributes in process `syz.3.297'. [ 384.354129][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.509781][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.537621][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.554161][ T5995] bond0 (unregistering): Released all slaves [ 387.609721][ T7496] loop1: detected capacity change from 0 to 512 [ 387.618486][ T7496] EXT4-fs: Ignoring removed oldalloc option [ 387.625632][ T7496] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 387.644572][ T7496] EXT4-fs (loop1): 1 truncate cleaned up [ 387.656664][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.817983][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.896506][ T7505] loop3: detected capacity change from 0 to 512 [ 388.957867][ T7505] EXT4-fs: Ignoring removed oldalloc option [ 389.015046][ T7505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 389.033573][ T5995] bond0 (unregistering): Released all slaves [ 389.188774][ T7517] program syz.1.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.260972][ T7505] EXT4-fs (loop3): 1 truncate cleaned up [ 389.272796][ T7517] loop1: detected capacity change from 0 to 512 [ 389.288197][ T7517] EXT4-fs: Ignoring removed oldalloc option [ 389.307110][ T7517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 389.577444][ T7505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.331374][ T7517] EXT4-fs (loop1): 1 truncate cleaned up [ 390.389758][ T7517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.987807][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.083100][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 391.246441][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.684973][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.699582][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.864621][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.885376][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.894655][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.903862][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.907121][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 393.923506][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.057343][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 394.285309][ T7552] netlink: 260 bytes leftover after parsing attributes in process `syz.3.309'. [ 396.061355][ T5639] Bluetooth: hci0: command tx timeout [ 398.243905][ T5639] Bluetooth: hci0: command tx timeout [ 398.856938][ T7576] loop1: detected capacity change from 0 to 512 [ 398.948349][ T7576] EXT4-fs: Ignoring removed oldalloc option [ 399.006901][ T7576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 399.243376][ T7576] EXT4-fs (loop1): 1 truncate cleaned up [ 399.318199][ T7576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.491001][ T7593] netlink: 260 bytes leftover after parsing attributes in process `syz.3.313'. [ 400.196605][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.495447][ T5639] Bluetooth: hci0: command tx timeout [ 402.198155][ T7607] program syz.0.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.541464][ T5639] Bluetooth: hci0: command tx timeout [ 402.860870][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.937159][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.031722][ T7329] bridge_slave_0: entered allmulticast mode [ 403.082796][ T7609] loop1: detected capacity change from 0 to 512 [ 403.090270][ T7609] EXT4-fs: Ignoring removed oldalloc option [ 403.097758][ T7329] bridge_slave_0: entered promiscuous mode [ 403.118248][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.125649][ T7609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 403.136633][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.147264][ T7329] bridge_slave_1: entered allmulticast mode [ 403.410303][ T7329] bridge_slave_1: entered promiscuous mode [ 403.425707][ T7609] EXT4-fs (loop1): 1 truncate cleaned up [ 403.433182][ T7609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.737825][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.594399][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.805420][ T7639] netlink: 260 bytes leftover after parsing attributes in process `syz.0.322'. [ 405.872249][ T7640] program syz.1.321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 406.104198][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.187296][ T7640] loop1: detected capacity change from 0 to 512 [ 406.443588][ T7627] tc_dump_action: action bad kind [ 406.507824][ T7640] EXT4-fs: Ignoring removed oldalloc option [ 406.908324][ T7640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 407.464651][ T7640] EXT4-fs (loop1): 1 truncate cleaned up [ 407.482569][ T7640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.769576][ T7650] netlink: 260 bytes leftover after parsing attributes in process `syz.3.323'. [ 408.453480][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.523194][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.571755][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.608108][ T7294] bridge_slave_0: entered allmulticast mode [ 408.664620][ T7294] bridge_slave_0: entered promiscuous mode [ 408.753863][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.504989][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.570549][ T7294] bridge_slave_1: entered allmulticast mode [ 410.652891][ T7294] bridge_slave_1: entered promiscuous mode [ 410.665979][ T7329] team0: Port device team_slave_0 added [ 410.696539][ T7329] team0: Port device team_slave_1 added [ 410.998771][ T7668] netlink: 260 bytes leftover after parsing attributes in process `syz.1.325'. [ 413.126174][ T7671] program syz.3.327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.218621][ T7677] netlink: 260 bytes leftover after parsing attributes in process `syz.0.326'. [ 415.724651][ T7666] loop3: detected capacity change from 0 to 512 [ 415.732280][ T7666] EXT4-fs: Ignoring removed oldalloc option [ 415.749265][ T7666] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 415.778625][ T7666] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 415.778713][ T7666] EXT4-fs: failed to create workqueue [ 415.793888][ T7666] EXT4-fs (loop3): mount failed [ 417.575417][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.589558][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.597852][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.606261][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.615278][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 417.813510][ T7692] netlink: 260 bytes leftover after parsing attributes in process `syz.3.329'. [ 419.099731][ T7685] loop1: detected capacity change from 0 to 512 [ 419.112274][ T7685] EXT4-fs: Ignoring removed oldalloc option [ 419.671425][ T5640] Bluetooth: hci5: command tx timeout [ 419.812218][ T7685] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 420.440061][ T7685] EXT4-fs (loop1): 1 truncate cleaned up [ 420.479780][ T7685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.751543][ T5640] Bluetooth: hci5: command tx timeout [ 422.024103][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.041169][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.057848][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.069572][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.077858][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.146710][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.398259][ T5995] bond0 (unregistering): Released all slaves [ 423.664431][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.673359][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.079250][ T5640] Bluetooth: hci5: command tx timeout [ 424.143694][ T5640] Bluetooth: hci1: command tx timeout [ 424.453278][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.588938][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 424.657506][ T7720] loop0: detected capacity change from 0 to 512 [ 424.664736][ T7720] EXT4-fs: Ignoring removed oldalloc option [ 424.691800][ T7720] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 424.795400][ T7720] EXT4-fs (loop0): 1 truncate cleaned up [ 424.803237][ T7720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.146911][ T7730] loop1: detected capacity change from 0 to 512 [ 425.158504][ T7730] EXT4-fs: Ignoring removed oldalloc option [ 425.213466][ T7730] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 425.641322][ T7730] EXT4-fs (loop1): 1 truncate cleaned up [ 425.747504][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.878421][ T7730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.292130][ T5640] Bluetooth: hci5: command tx timeout [ 426.297592][ T5640] Bluetooth: hci1: command tx timeout [ 426.408779][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.561531][ T5639] Bluetooth: hci1: command tx timeout [ 429.551552][ T7751] Bluetooth: MGMT ver 1.23 [ 429.563447][ T7751] Bluetooth: hci0: unsupported parameter 255 [ 429.611338][ T7751] Bluetooth: hci0: unsupported parameter 255 [ 430.427313][ T1012] bridge_slave_1: left allmulticast mode [ 430.448904][ T1012] bridge_slave_1: left promiscuous mode [ 430.475764][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.612086][ T7776] loop0: detected capacity change from 0 to 512 [ 430.621309][ T5639] Bluetooth: hci1: command tx timeout [ 430.630839][ T7776] EXT4-fs: Ignoring removed oldalloc option [ 430.670422][ T7776] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 430.816642][ T7776] EXT4-fs (loop0): 1 truncate cleaned up [ 430.857716][ T7776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.760881][ T1012] bridge_slave_0: left allmulticast mode [ 431.775290][ T1012] bridge_slave_0: left promiscuous mode [ 431.781807][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.802527][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.697904][ T1012] bridge_slave_1: left allmulticast mode [ 432.715305][ T1012] bridge_slave_1: left promiscuous mode [ 432.986766][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.543265][ T1012] bridge_slave_0: left allmulticast mode [ 433.573819][ T1012] bridge_slave_0: left promiscuous mode [ 433.693187][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.191533][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.206100][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.217149][ T1012] bond0 (unregistering): Released all slaves [ 434.436460][ T1012] bond0 (unregistering): Released all slaves [ 434.558902][ T7818] 9p: Bad value for 'wfdno' [ 434.718052][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.098448][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 438.375037][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 439.153271][ T7841] netlink: 260 bytes leftover after parsing attributes in process `syz.0.355'. [ 439.355539][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.365324][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.861953][ T7864] netlink: 260 bytes leftover after parsing attributes in process `syz.0.359'. [ 441.904873][ T7864] netlink: 52 bytes leftover after parsing attributes in process `syz.0.359'. [ 443.193625][ T7870] netlink: 260 bytes leftover after parsing attributes in process `syz.1.360'. [ 444.308400][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.315815][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.617165][ T7544] bridge_slave_0: entered allmulticast mode [ 444.643359][ T7544] bridge_slave_0: entered promiscuous mode [ 444.654596][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.661878][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.669133][ T7544] bridge_slave_1: entered allmulticast mode [ 444.678182][ T7544] bridge_slave_1: entered promiscuous mode [ 444.872593][ T7878] netlink: 260 bytes leftover after parsing attributes in process `syz.0.361'. [ 446.516816][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.411113][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.058379][ T7544] team0: Port device team_slave_0 added [ 449.127245][ T7544] team0: Port device team_slave_1 added [ 449.536251][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.295365][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.297277][ T7915] loop3: detected capacity change from 0 to 512 [ 450.431552][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.471860][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.500629][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.539394][ T7915] EXT4-fs (loop3): Test dummy encryption mode enabled [ 450.565267][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.613577][ T7915] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.367: inode has both inline data and extents flags [ 450.695056][ T7915] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 450.699967][ T7915] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.367: couldn't read orphan inode 15 (err -117) [ 450.709188][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 450.709211][ C1] EXT4-fs (loop3): initial error at time 1780257020: ext4_orphan_get:1397: inode 15 [ 450.709251][ C1] EXT4-fs (loop3): last error at time 1780257020: ext4_orphan_get:1397: inode 15 [ 450.773159][ T7915] loop3: lost filesystem error report for type 5 error -117 [ 450.813303][ T7915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.939316][ T7544] hsr_slave_0: entered promiscuous mode [ 450.957527][ T7544] hsr_slave_1: entered promiscuous mode [ 450.985076][ T7544] debugfs: 'hsr0' already exists in 'hsr' [ 451.015355][ T7544] Cannot create hsr debugfs directory [ 451.279184][ T5288] 8021q: adding VLAN 0 to HW filter on device eth11 [ 452.479530][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.499554][ T7943] loop3: detected capacity change from 0 to 512 [ 453.527034][ T7943] EXT4-fs (loop3): Test dummy encryption mode enabled [ 453.673535][ T7946] netlink: 260 bytes leftover after parsing attributes in process `syz.1.371'. [ 453.838452][ T7943] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.370: inode has both inline data and extents flags [ 453.939874][ T7943] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 453.941318][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 453.958148][ C0] EXT4-fs (loop3): initial error at time 1780257023: ext4_orphan_get:1397: inode 15 [ 453.967608][ C0] EXT4-fs (loop3): last error at time 1780257023: ext4_orphan_get:1397: inode 15 [ 453.992838][ T7943] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.370: couldn't read orphan inode 15 (err -117) [ 454.045728][ T7943] loop3: lost filesystem error report for type 5 error -117 [ 454.058083][ T7943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.638165][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.692656][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.727503][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.774400][ T7688] bridge_slave_0: entered allmulticast mode [ 455.827628][ T7688] bridge_slave_0: entered promiscuous mode [ 455.871335][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.919386][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.939470][ T7688] bridge_slave_1: entered allmulticast mode [ 455.980111][ T7688] bridge_slave_1: entered promiscuous mode [ 456.301112][ T5640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 456.316180][ T5640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 456.336425][ T5640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 456.360239][ T5640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 456.377181][ T5640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 456.419129][ T7688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.587781][ T7688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.940636][ T7688] team0: Port device team_slave_0 added [ 457.000492][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.210024][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.221924][ T7702] bridge_slave_0: entered allmulticast mode [ 457.230206][ T7702] bridge_slave_0: entered promiscuous mode [ 457.245589][ T7688] team0: Port device team_slave_1 added [ 457.251561][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.259195][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.267516][ T7702] bridge_slave_1: entered allmulticast mode [ 457.277805][ T7702] bridge_slave_1: entered promiscuous mode [ 457.393957][ T12] bridge_slave_1: left allmulticast mode [ 457.418272][ T12] bridge_slave_1: left promiscuous mode [ 457.438532][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.482073][ T12] bridge_slave_0: left allmulticast mode [ 457.495643][ T7976] loop3: detected capacity change from 0 to 128 [ 457.514390][ T12] bridge_slave_0: left promiscuous mode [ 457.833582][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.981571][ T7980] trusted_key: encrypted_key: insufficient parameters specified [ 458.461511][ T5640] Bluetooth: hci6: command tx timeout [ 458.838268][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.893063][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.932930][ T12] bond0 (unregistering): Released all slaves [ 459.128408][ T5288] 8021q: adding VLAN 0 to HW filter on device eth12 [ 459.182333][ T7702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.228190][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.257244][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.285639][ T7688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.316518][ T12] hsr_slave_0: left promiscuous mode [ 459.334611][ T12] hsr_slave_1: left promiscuous mode [ 459.356961][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.378784][ T7987] loop3: detected capacity change from 0 to 512 [ 459.389039][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.430377][ T7987] EXT4-fs: Ignoring removed oldalloc option [ 459.477108][ T7987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 459.543276][ T7987] EXT4-fs (loop3): 1 truncate cleaned up [ 459.576796][ T7987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.780812][ T5631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.847827][ T12] team0 (unregistering): Port device team_slave_1 removed [ 459.870507][ T12] team0 (unregistering): Port device team_slave_0 removed [ 460.575257][ T5640] Bluetooth: hci6: command tx timeout [ 461.948300][ T7702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.118502][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.143518][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.804059][ T5640] Bluetooth: hci6: command tx timeout [ 463.077111][ T7688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.308558][ T7702] team0: Port device team_slave_0 added [ 463.362461][ T7702] team0: Port device team_slave_1 added [ 464.653993][ T8026] netlink: 260 bytes leftover after parsing attributes in process `syz.1.381'. [ 464.861820][ T5640] Bluetooth: hci6: command tx timeout [ 465.946967][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.966282][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.999765][ T7702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.027820][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.036139][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.129906][ T7702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.019258][ T7688] hsr_slave_0: entered promiscuous mode [ 468.038540][ T7688] hsr_slave_1: entered promiscuous mode [ 468.050971][ T7688] debugfs: 'hsr0' already exists in 'hsr' [ 468.056981][ T7688] Cannot create hsr debugfs directory [ 468.249536][ T8048] loop1: detected capacity change from 0 to 512 [ 468.267446][ T8048] EXT4-fs (loop1): Test dummy encryption mode enabled [ 468.286408][ T8048] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.385: inode has both inline data and extents flags [ 468.303625][ T8048] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 468.304958][ T8048] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.385: couldn't read orphan inode 15 (err -117) [ 468.314203][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 468.314227][ C0] EXT4-fs (loop1): initial error at time 1780257038: ext4_orphan_get:1397: inode 15 [ 468.314266][ C0] EXT4-fs (loop1): last error at time 1780257038: ext4_orphan_get:1397: inode 15 [ 468.352386][ T8048] loop1: lost filesystem error report for type 5 error -117 [ 468.356993][ T8048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.387471][ T7702] hsr_slave_0: entered promiscuous mode [ 468.400764][ T7702] hsr_slave_1: entered promiscuous mode [ 468.407306][ T7702] debugfs: 'hsr0' already exists in 'hsr' [ 468.413134][ T7702] Cannot create hsr debugfs directory [ 469.969764][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.667330][ T8065] loop0: detected capacity change from 0 to 512 [ 470.689404][ T8065] EXT4-fs (loop0): Test dummy encryption mode enabled [ 470.729138][ T8065] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.388: inode has both inline data and extents flags [ 470.808541][ T8065] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 470.811233][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 470.826989][ C0] EXT4-fs (loop0): initial error at time 1780257040: ext4_orphan_get:1397: inode 15 [ 470.836467][ C0] EXT4-fs (loop0): last error at time 1780257040: ext4_orphan_get:1397: inode 15 [ 470.854420][ T8065] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.388: couldn't read orphan inode 15 (err -117) [ 470.895571][ T8065] loop0: lost filesystem error report for type 5 error -117 [ 470.902579][ T8065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.242127][ T7688] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 471.356241][ T7688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.211918][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.253077][ T7688] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 472.477726][ T8081] netlink: 260 bytes leftover after parsing attributes in process `syz.1.389'. [ 473.365308][ T7688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.462560][ T8089] program syz.0.392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.755784][ T8089] loop0: detected capacity change from 0 to 512 [ 473.769016][ T8089] EXT4-fs: Ignoring removed oldalloc option [ 473.884902][ T8089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 475.585403][ T7688] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 477.292583][ T8089] EXT4-fs (loop0): 1 truncate cleaned up [ 477.316767][ T8089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.689056][ T7688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.021696][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.038056][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.049192][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.103473][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.112988][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.270930][ T5629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.473745][ T8108] loop1: detected capacity change from 0 to 512 [ 479.533755][ T8108] EXT4-fs (loop1): Test dummy encryption mode enabled [ 479.564887][ T8108] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.393: inode has both inline data and extents flags [ 479.608828][ T8108] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 479.609602][ T8108] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.393: couldn't read orphan inode 15 (err -117) [ 479.619157][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 479.619192][ C1] EXT4-fs (loop1): initial error at time 1780257049: ext4_orphan_get:1397: inode 15 [ 479.619245][ C1] EXT4-fs (loop1): last error at time 1780257049: ext4_orphan_get:1397: inode 15 [ 479.792840][ T8108] loop1: lost filesystem error report for type 5 error -117 [ 479.890445][ T8119] netlink: 260 bytes leftover after parsing attributes in process `syz.0.395'. [ 480.076631][ T8108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.165109][ T5639] Bluetooth: hci0: command tx timeout [ 482.113695][ T8127] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 482.178493][ T5971] bridge_slave_1: left allmulticast mode [ 482.185319][ T5971] bridge_slave_1: left promiscuous mode [ 482.223455][ T5639] Bluetooth: hci0: command tx timeout [ 482.248698][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.349603][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.363100][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.370890][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.381158][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 482.390169][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.621801][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.796115][ T5971] bridge_slave_0: left allmulticast mode [ 483.823375][ T5971] bridge_slave_0: left promiscuous mode [ 483.835546][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.872217][ T5640] Bluetooth: hci0: command tx timeout [ 484.872284][ T5639] Bluetooth: hci1: command tx timeout [ 485.369575][ T8147] netlink: 260 bytes leftover after parsing attributes in process `syz.1.397'. [ 485.563160][ T8148] binder: 8141:8148 ioctl c0285840 200000000000 returned -22 [ 487.087867][ T5639] Bluetooth: hci0: command tx timeout [ 487.093780][ T5639] Bluetooth: hci1: command tx timeout [ 487.276939][ T8150] Bluetooth: MGMT ver 1.23 [ 487.638012][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.773123][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.808303][ T5971] bond0 (unregistering): Released all slaves [ 487.838109][ T8155] loop0: detected capacity change from 0 to 128 [ 488.923643][ T8160] trusted_key: encrypted_key: insufficient parameters specified [ 489.181841][ T5640] Bluetooth: hci1: command tx timeout [ 489.515492][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.549032][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.583386][ T7958] bridge_slave_0: entered allmulticast mode [ 489.781445][ T7958] bridge_slave_0: entered promiscuous mode [ 490.592767][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.670819][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.707671][ T7958] bridge_slave_1: entered allmulticast mode [ 490.749567][ T7958] bridge_slave_1: entered promiscuous mode [ 490.805053][ T8173] loop1: detected capacity change from 0 to 512 [ 490.843523][ T8173] EXT4-fs (loop1): Test dummy encryption mode enabled [ 490.863252][ T5971] hsr_slave_0: left promiscuous mode [ 490.888976][ T8173] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.406: inode has both inline data and extents flags [ 490.915510][ T5971] hsr_slave_1: left promiscuous mode [ 490.954759][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.977962][ T8179] program syz.0.407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 491.032038][ T8173] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 491.041218][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 491.056873][ C0] EXT4-fs (loop1): initial error at time 1780257060: ext4_orphan_get:1397: inode 15 [ 491.066329][ C0] EXT4-fs (loop1): last error at time 1780257060: ext4_orphan_get:1397: inode 15 [ 491.092160][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.127134][ T8173] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.406: couldn't read orphan inode 15 (err -117) [ 491.252422][ T8173] loop1: lost filesystem error report for type 5 error -117 [ 491.272676][ T5640] Bluetooth: hci1: command tx timeout [ 491.418234][ T8173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.796916][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.012846][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 493.035018][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 495.025284][ T7958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.090694][ T7958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.358968][ T7958] team0: Port device team_slave_0 added [ 495.426697][ T7958] team0: Port device team_slave_1 added [ 495.617331][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.635362][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.623417][ T7958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.057532][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.096611][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.130472][ T7958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.197972][ T8227] binder: 8215:8227 ioctl c0285840 200000000000 returned -22 [ 499.089431][ T8233] binder: 8229:8233 ioctl c0285840 200000000000 returned -22 [ 501.266312][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.273398][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.274339][ T7958] hsr_slave_0: entered promiscuous mode [ 501.354794][ T7958] hsr_slave_1: entered promiscuous mode [ 501.404991][ T7958] debugfs: 'hsr0' already exists in 'hsr' [ 501.429867][ T7958] Cannot create hsr debugfs directory [ 501.605456][ T8247] binder: 8243:8247 ioctl c0285840 200000000000 returned -22 [ 501.970778][ T8250] ================================================================== [ 501.978876][ T8250] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 501.986632][ T8250] Read of size 8 at addr ffff88802b5b3c18 by task syz.3.419/8250 [ 501.994436][ T8250] [ 501.996781][ T8250] CPU: 1 UID: 0 PID: 8250 Comm: syz.3.419 Not tainted syzkaller #0 PREEMPT(full) [ 501.996815][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.996833][ T8250] Call Trace: [ 501.996843][ T8250] [ 501.996854][ T8250] dump_stack_lvl+0x100/0x190 [ 501.996885][ T8250] print_report+0x13d/0x4b0 [ 501.996928][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.996962][ T8250] ? __virt_addr_valid+0x239/0x430 [ 501.996993][ T8250] ? dvb_device_open+0x33f/0x3b0 [ 501.997061][ T8250] kasan_report+0xdf/0x1d0 [ 501.997106][ T8250] ? dvb_device_open+0x33f/0x3b0 [ 501.997153][ T8250] ? __pfx_dvb_device_open+0x10/0x10 [ 501.997198][ T8250] dvb_device_open+0x33f/0x3b0 [ 501.997243][ T8250] ? __pfx_dvb_device_open+0x10/0x10 [ 501.997287][ T8250] chrdev_open+0x234/0x6a0 [ 501.997314][ T8250] ? __pfx_apparmor_file_open+0x10/0x10 [ 501.997345][ T8250] ? __pfx_chrdev_open+0x10/0x10 [ 501.997373][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.997408][ T8250] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 501.997459][ T8250] do_dentry_open+0x6ab/0x14d0 [ 501.997503][ T8250] ? __pfx_chrdev_open+0x10/0x10 [ 501.997539][ T8250] vfs_open+0x82/0x3f0 [ 501.997569][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 501.997606][ T8250] path_openat+0x208c/0x31a0 [ 501.997641][ T8250] ? __pfx_path_openat+0x10/0x10 [ 501.997677][ T8250] do_file_open+0x20e/0x430 [ 501.997706][ T8250] ? __pfx_do_file_open+0x10/0x10 [ 501.997748][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.997782][ T8250] ? alloc_fd+0x476/0x790 [ 501.997812][ T8250] ? do_getname+0x191/0x390 [ 501.997848][ T8250] do_sys_openat2+0x10d/0x1e0 [ 501.997882][ T8250] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.997922][ T8250] __x64_sys_openat+0x12d/0x210 [ 501.997957][ T8250] ? __pfx___x64_sys_openat+0x10/0x10 [ 501.997998][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 501.998048][ T8250] ? rcu_is_watching+0x12/0xc0 [ 501.998091][ T8250] do_syscall_64+0x115/0x870 [ 501.998136][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.998166][ T8250] RIP: 0033:0x7fbccf75d68e [ 501.998189][ T8250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 501.998216][ T8250] RSP: 002b:00007fbcd05f2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 501.998244][ T8250] RAX: ffffffffffffffda RBX: 00007fbcd05f36c0 RCX: 00007fbccf75d68e [ 501.998263][ T8250] RDX: 0000000000040002 RSI: 00007fbcd05f2c00 RDI: ffffffffffffff9c [ 501.998281][ T8250] RBP: 00007fbcd05f2c00 R08: 0000000000000000 R09: 0000000000000000 [ 501.998299][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 501.998316][ T8250] R13: 00007fbccfa16128 R14: 00007fbccfa16090 R15: 00007ffe4ff9fea8 [ 501.998345][ T8250] [ 501.998355][ T8250] [ 502.273296][ T8250] Allocated by task 1: [ 502.277462][ T8250] kasan_save_stack+0x30/0x50 [ 502.282189][ T8250] kasan_save_track+0x14/0x30 [ 502.286905][ T8250] __kasan_kmalloc+0xaa/0xb0 [ 502.291542][ T8250] dvb_register_device+0x1d6/0x1e20 [ 502.296827][ T8250] dvb_register_frontend+0x552/0x820 [ 502.302190][ T8250] vidtv_bridge_probe+0x44b/0xa30 [ 502.307243][ T8250] platform_probe+0x106/0x1d0 [ 502.312132][ T8250] really_probe+0x241/0xa60 [ 502.316942][ T8250] __driver_probe_device+0x22e/0x480 [ 502.322549][ T8250] driver_probe_device+0x4c/0x1b0 [ 502.327626][ T8250] __driver_attach+0x21f/0x5d0 [ 502.332446][ T8250] bus_for_each_dev+0x13e/0x1d0 [ 502.337350][ T8250] bus_add_driver+0x305/0x5b0 [ 502.342080][ T8250] driver_register+0x1e2/0x360 [ 502.346866][ T8250] vidtv_bridge_init+0x38/0x70 [ 502.351665][ T8250] do_one_initcall+0x121/0x750 [ 502.356470][ T8250] kernel_init_freeable+0x6ea/0x7b0 [ 502.361703][ T8250] kernel_init+0x1f/0x1e0 [ 502.366059][ T8250] ret_from_fork+0x72b/0xd50 [ 502.370680][ T8250] ret_from_fork_asm+0x1a/0x30 [ 502.375487][ T8250] [ 502.377824][ T8250] Freed by task 8127: [ 502.381811][ T8250] kasan_save_stack+0x30/0x50 [ 502.386613][ T8250] kasan_save_track+0x14/0x30 [ 502.391507][ T8250] kasan_save_free_info+0x3b/0x70 [ 502.396556][ T8250] __kasan_slab_free+0x5f/0x80 [ 502.401357][ T8250] kfree+0x223/0x6c0 [ 502.405277][ T8250] dvb_device_put.part.0+0x57/0x90 [ 502.410525][ T8250] dvb_device_open+0x2ba/0x3b0 [ 502.415334][ T8250] chrdev_open+0x234/0x6a0 [ 502.419772][ T8250] do_dentry_open+0x6ab/0x14d0 [ 502.424579][ T8250] vfs_open+0x82/0x3f0 [ 502.428672][ T8250] path_openat+0x208c/0x31a0 [ 502.433282][ T8250] do_file_open+0x20e/0x430 [ 502.437806][ T8250] do_sys_openat2+0x10d/0x1e0 [ 502.442523][ T8250] __x64_sys_openat+0x12d/0x210 [ 502.447408][ T8250] do_syscall_64+0x115/0x870 [ 502.452125][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.458040][ T8250] [ 502.460356][ T8250] The buggy address belongs to the object at ffff88802b5b3c00 [ 502.460356][ T8250] which belongs to the cache kmalloc-256 of size 256 [ 502.474595][ T8250] The buggy address is located 24 bytes inside of [ 502.474595][ T8250] freed 256-byte region [ffff88802b5b3c00, ffff88802b5b3d00) [ 502.488328][ T8250] [ 502.490742][ T8250] The buggy address belongs to the physical page: [ 502.497149][ T8250] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b5b2 [ 502.505922][ T8250] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 502.514611][ T8250] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 502.522171][ T8250] page_type: f5(slab) [ 502.526175][ T8250] raw: 00fff00000000040 ffff88813fe30b40 dead000000000100 dead000000000122 [ 502.534772][ T8250] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 502.543369][ T8250] head: 00fff00000000040 ffff88813fe30b40 dead000000000100 dead000000000122 [ 502.552224][ T8250] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 502.560906][ T8250] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 502.569628][ T8250] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 502.578384][ T8250] page dumped because: kasan: bad access detected [ 502.584794][ T8250] page_owner tracks the page as allocated [ 502.590506][ T8250] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11590629108, free_ts 0 [ 502.610245][ T8250] post_alloc_hook+0xfd/0x120 [ 502.614948][ T8250] get_page_from_freelist+0x11a6/0x3410 [ 502.620522][ T8250] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 502.626441][ T8250] new_slab+0xa6/0x6c0 [ 502.630532][ T8250] refill_objects+0x277/0x420 [ 502.635226][ T8250] __pcs_replace_empty_main+0x375/0x650 [ 502.640801][ T8250] __kmalloc_cache_noprof+0x493/0x6f0 [ 502.646192][ T8250] bus_add_driver+0x92/0x5b0 [ 502.650898][ T8250] driver_register+0x1e2/0x360 [ 502.655706][ T8250] usb_register_driver+0x21c/0x3e0 [ 502.660838][ T8250] do_one_initcall+0x121/0x750 [ 502.665622][ T8250] kernel_init_freeable+0x6ea/0x7b0 [ 502.670870][ T8250] kernel_init+0x1f/0x1e0 [ 502.675213][ T8250] ret_from_fork+0x72b/0xd50 [ 502.679818][ T8250] ret_from_fork_asm+0x1a/0x30 [ 502.684612][ T8250] page_owner free stack trace missing [ 502.689969][ T8250] [ 502.692288][ T8250] Memory state around the buggy address: [ 502.697969][ T8250] ffff88802b5b3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.706035][ T8250] ffff88802b5b3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.714100][ T8250] >ffff88802b5b3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.722162][ T8250] ^ [ 502.727009][ T8250] ffff88802b5b3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 502.735075][ T8250] ffff88802b5b3d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 502.743133][ T8250] ================================================================== [ 502.778369][ T8250] Disabling lock debugging due to kernel taint [ 502.785218][ T8250] ================================================================== [ 502.793308][ T8250] BUG: KASAN: slab-use-after-free in dvb_device_open+0x152/0x3b0 [ 502.801176][ T8250] Write of size 4 at addr ffff88802b5b3c10 by task syz.3.419/8250 [ 502.809010][ T8250] [ 502.811357][ T8250] CPU: 0 UID: 0 PID: 8250 Comm: syz.3.419 Tainted: G B syzkaller #0 PREEMPT(full) [ 502.811411][ T8250] Tainted: [B]=BAD_PAGE [ 502.811424][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.811447][ T8250] Call Trace: [ 502.811461][ T8250] [ 502.811475][ T8250] dump_stack_lvl+0x100/0x190 [ 502.811517][ T8250] print_report+0x13d/0x4b0 [ 502.811573][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.811623][ T8250] ? __virt_addr_valid+0x239/0x430 [ 502.811661][ T8250] ? dvb_device_open+0x152/0x3b0 [ 502.811718][ T8250] kasan_report+0xdf/0x1d0 [ 502.811775][ T8250] ? dvb_device_open+0x152/0x3b0 [ 502.811838][ T8250] kasan_check_range+0x10f/0x1e0 [ 502.811875][ T8250] dvb_device_open+0x152/0x3b0 [ 502.811933][ T8250] ? __pfx_dvb_device_open+0x10/0x10 [ 502.811990][ T8250] chrdev_open+0x234/0x6a0 [ 502.812031][ T8250] ? __pfx_apparmor_file_open+0x10/0x10 [ 502.812071][ T8250] ? __pfx_chrdev_open+0x10/0x10 [ 502.812107][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.812152][ T8250] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 502.812203][ T8250] do_dentry_open+0x6ab/0x14d0 [ 502.812260][ T8250] ? __pfx_chrdev_open+0x10/0x10 [ 502.812301][ T8250] vfs_open+0x82/0x3f0 [ 502.812341][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.812390][ T8250] path_openat+0x208c/0x31a0 [ 502.812436][ T8250] ? __pfx_path_openat+0x10/0x10 [ 502.812482][ T8250] do_file_open+0x20e/0x430 [ 502.812521][ T8250] ? __pfx_do_file_open+0x10/0x10 [ 502.812575][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.812620][ T8250] ? alloc_fd+0x476/0x790 [ 502.812659][ T8250] ? do_getname+0x191/0x390 [ 502.812707][ T8250] do_sys_openat2+0x10d/0x1e0 [ 502.812751][ T8250] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.812805][ T8250] __x64_sys_openat+0x12d/0x210 [ 502.812850][ T8250] ? __pfx___x64_sys_openat+0x10/0x10 [ 502.812900][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.812945][ T8250] ? rcu_is_watching+0x12/0xc0 [ 502.813007][ T8250] do_syscall_64+0x115/0x870 [ 502.813068][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.813107][ T8250] RIP: 0033:0x7fbccf75d68e [ 502.813136][ T8250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 502.813173][ T8250] RSP: 002b:00007fbcd05f2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.813208][ T8250] RAX: ffffffffffffffda RBX: 00007fbcd05f36c0 RCX: 00007fbccf75d68e [ 502.813234][ T8250] RDX: 0000000000040002 RSI: 00007fbcd05f2c00 RDI: ffffffffffffff9c [ 502.813259][ T8250] RBP: 00007fbcd05f2c00 R08: 0000000000000000 R09: 0000000000000000 [ 502.813282][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 502.813307][ T8250] R13: 00007fbccfa16128 R14: 00007fbccfa16090 R15: 00007ffe4ff9fea8 [ 502.813343][ T8250] [ 502.813356][ T8250] [ 503.091872][ T8250] Allocated by task 1: [ 503.095925][ T8250] kasan_save_stack+0x30/0x50 [ 503.100632][ T8250] kasan_save_track+0x14/0x30 [ 503.105314][ T8250] __kasan_kmalloc+0xaa/0xb0 [ 503.109995][ T8250] dvb_register_device+0x1d6/0x1e20 [ 503.115236][ T8250] dvb_register_frontend+0x552/0x820 [ 503.120535][ T8250] vidtv_bridge_probe+0x44b/0xa30 [ 503.125556][ T8250] platform_probe+0x106/0x1d0 [ 503.130242][ T8250] really_probe+0x241/0xa60 [ 503.134755][ T8250] __driver_probe_device+0x22e/0x480 [ 503.140105][ T8250] driver_probe_device+0x4c/0x1b0 [ 503.145149][ T8250] __driver_attach+0x21f/0x5d0 [ 503.149925][ T8250] bus_for_each_dev+0x13e/0x1d0 [ 503.154777][ T8250] bus_add_driver+0x305/0x5b0 [ 503.159464][ T8250] driver_register+0x1e2/0x360 [ 503.164228][ T8250] vidtv_bridge_init+0x38/0x70 [ 503.169001][ T8250] do_one_initcall+0x121/0x750 [ 503.173766][ T8250] kernel_init_freeable+0x6ea/0x7b0 [ 503.178980][ T8250] kernel_init+0x1f/0x1e0 [ 503.183337][ T8250] ret_from_fork+0x72b/0xd50 [ 503.187927][ T8250] ret_from_fork_asm+0x1a/0x30 [ 503.192970][ T8250] [ 503.195282][ T8250] Freed by task 8127: [ 503.199240][ T8250] kasan_save_stack+0x30/0x50 [ 503.203924][ T8250] kasan_save_track+0x14/0x30 [ 503.208604][ T8250] kasan_save_free_info+0x3b/0x70 [ 503.213625][ T8250] __kasan_slab_free+0x5f/0x80 [ 503.218501][ T8250] kfree+0x223/0x6c0 [ 503.222394][ T8250] dvb_device_put.part.0+0x57/0x90 [ 503.227515][ T8250] dvb_device_open+0x2ba/0x3b0 [ 503.232356][ T8250] chrdev_open+0x234/0x6a0 [ 503.236795][ T8250] do_dentry_open+0x6ab/0x14d0 [ 503.241579][ T8250] vfs_open+0x82/0x3f0 [ 503.245661][ T8250] path_openat+0x208c/0x31a0 [ 503.250242][ T8250] do_file_open+0x20e/0x430 [ 503.254751][ T8250] do_sys_openat2+0x10d/0x1e0 [ 503.259441][ T8250] __x64_sys_openat+0x12d/0x210 [ 503.264296][ T8250] do_syscall_64+0x115/0x870 [ 503.268892][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.274781][ T8250] [ 503.277085][ T8250] The buggy address belongs to the object at ffff88802b5b3c00 [ 503.277085][ T8250] which belongs to the cache kmalloc-256 of size 256 [ 503.291126][ T8250] The buggy address is located 16 bytes inside of [ 503.291126][ T8250] freed 256-byte region [ffff88802b5b3c00, ffff88802b5b3d00) [ 503.304842][ T8250] [ 503.307163][ T8250] The buggy address belongs to the physical page: [ 503.313559][ T8250] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b5b2 [ 503.322323][ T8250] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 503.330813][ T8250] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 503.338361][ T8250] page_type: f5(slab) [ 503.342384][ T8250] raw: 00fff00000000040 ffff88813fe30b40 dead000000000100 dead000000000122 [ 503.350960][ T8250] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 503.359538][ T8250] head: 00fff00000000040 ffff88813fe30b40 dead000000000100 dead000000000122 [ 503.368205][ T8250] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 503.376874][ T8250] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 503.385545][ T8250] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 503.394295][ T8250] page dumped because: kasan: bad access detected [ 503.400696][ T8250] page_owner tracks the page as allocated [ 503.406398][ T8250] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11590629108, free_ts 0 [ 503.426125][ T8250] post_alloc_hook+0xfd/0x120 [ 503.430814][ T8250] get_page_from_freelist+0x11a6/0x3410 [ 503.436365][ T8250] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 503.442291][ T8250] new_slab+0xa6/0x6c0 [ 503.446363][ T8250] refill_objects+0x277/0x420 [ 503.451047][ T8250] __pcs_replace_empty_main+0x375/0x650 [ 503.456600][ T8250] __kmalloc_cache_noprof+0x493/0x6f0 [ 503.461977][ T8250] bus_add_driver+0x92/0x5b0 [ 503.466584][ T8250] driver_register+0x1e2/0x360 [ 503.471348][ T8250] usb_register_driver+0x21c/0x3e0 [ 503.476463][ T8250] do_one_initcall+0x121/0x750 [ 503.481240][ T8250] kernel_init_freeable+0x6ea/0x7b0 [ 503.486532][ T8250] kernel_init+0x1f/0x1e0 [ 503.490860][ T8250] ret_from_fork+0x72b/0xd50 [ 503.495455][ T8250] ret_from_fork_asm+0x1a/0x30 [ 503.500230][ T8250] page_owner free stack trace missing [ 503.505580][ T8250] [ 503.507885][ T8250] Memory state around the buggy address: [ 503.513502][ T8250] ffff88802b5b3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 503.521558][ T8250] ffff88802b5b3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 503.529612][ T8250] >ffff88802b5b3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.537660][ T8250] ^ [ 503.542238][ T8250] ffff88802b5b3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 503.550297][ T8250] ffff88802b5b3d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 503.558438][ T8250] ================================================================== [ 503.750978][ T8250] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 503.758762][ T8250] CPU: 0 UID: 0 PID: 8250 Comm: syz.3.419 Tainted: G B syzkaller #0 PREEMPT(full) [ 503.769553][ T8250] Tainted: [B]=BAD_PAGE [ 503.773695][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 503.783756][ T8250] Call Trace: [ 503.787034][ T8250] [ 503.789965][ T8250] dump_stack_lvl+0x100/0x190 [ 503.794668][ T8250] vpanic+0x552/0x970 [ 503.798677][ T8250] ? __pfx_vpanic+0x10/0x10 [ 503.803204][ T8250] ? __pfx___schedule+0x10/0x10 [ 503.808077][ T8250] ? dvb_device_open+0x152/0x3b0 [ 503.813046][ T8250] panic+0xd1/0xe0 [ 503.816777][ T8250] ? __pfx_panic+0x10/0x10 [ 503.821204][ T8250] ? preempt_schedule_common+0x42/0xc0 [ 503.826705][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.832365][ T8250] ? preempt_schedule_thunk+0x16/0x30 [ 503.837780][ T8250] end_report.part.0+0x68/0x90 [ 503.842579][ T8250] kasan_report.cold+0xe/0x18 [ 503.847287][ T8250] ? dvb_device_open+0x152/0x3b0 [ 503.852263][ T8250] kasan_check_range+0x10f/0x1e0 [ 503.857211][ T8250] dvb_device_open+0x152/0x3b0 [ 503.862010][ T8250] ? __pfx_dvb_device_open+0x10/0x10 [ 503.867330][ T8250] chrdev_open+0x234/0x6a0 [ 503.871757][ T8250] ? __pfx_apparmor_file_open+0x10/0x10 [ 503.877328][ T8250] ? __pfx_chrdev_open+0x10/0x10 [ 503.882278][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.887934][ T8250] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 503.894287][ T8250] do_dentry_open+0x6ab/0x14d0 [ 503.899083][ T8250] ? __pfx_chrdev_open+0x10/0x10 [ 503.904042][ T8250] vfs_open+0x82/0x3f0 [ 503.908127][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.913869][ T8250] path_openat+0x208c/0x31a0 [ 503.918478][ T8250] ? __pfx_path_openat+0x10/0x10 [ 503.923441][ T8250] do_file_open+0x20e/0x430 [ 503.927964][ T8250] ? __pfx_do_file_open+0x10/0x10 [ 503.933010][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.938694][ T8250] ? alloc_fd+0x476/0x790 [ 503.943041][ T8250] ? do_getname+0x191/0x390 [ 503.947566][ T8250] do_sys_openat2+0x10d/0x1e0 [ 503.952260][ T8250] ? __pfx_do_sys_openat2+0x10/0x10 [ 503.957575][ T8250] __x64_sys_openat+0x12d/0x210 [ 503.962538][ T8250] ? __pfx___x64_sys_openat+0x10/0x10 [ 503.967936][ T8250] ? srso_alias_return_thunk+0x5/0xfbef5 [ 503.973591][ T8250] ? rcu_is_watching+0x12/0xc0 [ 503.978415][ T8250] do_syscall_64+0x115/0x870 [ 503.983070][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.988979][ T8250] RIP: 0033:0x7fbccf75d68e [ 503.993432][ T8250] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 504.013096][ T8250] RSP: 002b:00007fbcd05f2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.021621][ T8250] RAX: ffffffffffffffda RBX: 00007fbcd05f36c0 RCX: 00007fbccf75d68e [ 504.029621][ T8250] RDX: 0000000000040002 RSI: 00007fbcd05f2c00 RDI: ffffffffffffff9c [ 504.037915][ T8250] RBP: 00007fbcd05f2c00 R08: 0000000000000000 R09: 0000000000000000 [ 504.045915][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 504.053895][ T8250] R13: 00007fbccfa16128 R14: 00007fbccfa16090 R15: 00007ffe4ff9fea8 [ 504.061891][ T8250] [ 504.065136][ T8250] Kernel Offset: disabled [ 504.069451][ T8250] Rebooting in 86400 seconds..