last executing test programs: 6m36.245640947s ago: executing program 3 (id=2586): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r5, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) connect$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3d) socket(0x1d, 0x2, 0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000003500)='rpcgss_need_reencode\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) mkdir(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x300004a, &(0x7f0000001440)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2c7, &(0x7f00000007c0)="$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") 6m34.131233277s ago: executing program 3 (id=2591): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x8b, 0x0, 0x8000, 0x80}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x1010, r0, 0x0) futex(&(0x7f0000000000)=0x1, 0xa, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000021c0)='clear_refs\x00') write$yama_ptrace_scope(r1, &(0x7f0000000040)='1\x00', 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x32202, 0x0) listen(r4, 0x101) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r5, 0x40c, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)) 6m32.5585579s ago: executing program 3 (id=2596): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0xfffffffffffffd87) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) bind$alg(r1, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x81}, {}, {}, @raw32={[0x0, 0x0, 0x1]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0xd5}, 0x81}}], 0x38) 6m30.234982218s ago: executing program 3 (id=2605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./bus\x00', 0x2000084c, &(0x7f0000000b80)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESHEX=0xee00, @ANYRESOCT=r1], 0x81, 0x14f5, &(0x7f0000001580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x468, 0x1a8, 0xa8, 0xfeffffff, 0x1a8, 0x2b0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@icmp={{0x50}, {0x0, "f947"}}, @common=@addrtype={{0x30}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@ecn={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x108000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r5 = epoll_create(0x10000e9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x90000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r9 = fcntl$dupfd(r7, 0x0, r8) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/../file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r11 = getuid() setresuid(r10, r11, r10) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64, @ANYBLOB="2c77664d1b5ccef4646e6f3d", @ANYRESHEX=r12]) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r13, &(0x7f0000002140)={0x2020}, 0x2020) 6m28.050734552s ago: executing program 3 (id=2612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x168}, 0x1c) 6m25.817740022s ago: executing program 3 (id=2620): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001980)) 6m16.683542492s ago: executing program 0 (id=2649): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x32) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32) 6m16.322056219s ago: executing program 0 (id=2650): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4008014) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200), r1) 6m14.052142199s ago: executing program 0 (id=2658): syz_mount_image$reiserfs(&(0x7f0000000100), &(0x7f0000006000)='./file0\x00', 0xa04001, &(0x7f0000005ec0)={[{@usrquota}, {@balloc_hashed_reloc}, {@conv}, {@jdev={'jdev', 0x3d, './file0'}}, {@grpquota}, {@balloc_noborder}, {@commit={'commit', 0x3d, 0x7}}, {@barrier_none}, {@balloc_border}, {@usrjquota_file}, {}, {@tails_off}, {@resize_auto}, {@resize={'resize', 0x3d, 0x2}}, {@resize={'resize', 0x3d, 0x2}}, {@resize_auto}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0xfd, 0x1115, &(0x7f00000002c0)="$eJzs2D1rFEEABuB39s6v6mTSLwdaWEhIOHtJoXCNhbWNhFRa5SolP8IfYeVvkdR2Mb0pAvYne+6C5qIiOSXF88AwMy/zWc4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuNMv5Rkq0nqkDVJStK2x/PTJO2Q3/04alLy/GC+eHI4e7pIMloNL13pZnXTUnfv1Tqrs7pbH23t3a+LN29fvfzw+uCwX6akzcn50X6enW30KqU/z7rl5LL0zkZ3BwAAgOtreWVrT+tVMh56N3/xJL+xqf0BAACAP/mXfwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6sOjSZJSdr2eH6apL1s8O3/ejQAAADgCkqavJj8FC3z6cfutK8fpvSt/nsgX0vX3sn7id8AAAAA+J13F4PPj9fGlL507+4HGa/qIZ9mnO3t7/2+ytleMkqyc2Gdk/Oj/aGU5NbGLwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA39iBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAgJkCAAD//xma2iQ=") 6m12.845207236s ago: executing program 0 (id=2664): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) rt_sigsuspend(0x0, 0x0) 6m12.561009484s ago: executing program 0 (id=2666): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7", 0x6, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000840)="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", 0x147, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6m8.060439429s ago: executing program 0 (id=2671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505331, &(0x7f0000000380)={0x0, 0x0, 0xfff, 0x0, 0x0, 0x6}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2404c884}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e1600081400c800291f7207dd319c9c79d38b8d915cab7cc74181187681d2aa7579388ecf4e8b7e550826"], 0x3f) semget$private(0x0, 0x4, 0x428) r4 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x7e}, "5b2977bf4cee8bf7e8319894a03d4bf0af1acd04b9f5a4941885d54210f9a11705214ab204fcc76d9eecaf3805428c8a822cdabb01d20cbd5cb1d2bdf5d77c3a941c50fa308f11b6fe59c17a289905ba317a7fb7092025230947612d9aec3b94336e51a3b7b1a55e70a9901825894893b65990020f591dfbe74a4fbf4bd6"}, 0x82) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c1005b303000068461f078c244ff5434990a6a7e8b00b04", @ANYRES16=r2, @ANYRES16, @ANYRES32=r7, @ANYBLOB="0800aa6ec81600000a0018c70a000000000000000000472e0000000000000099ce997002335c2e76ffd3291cc2cda3d9e142b2d0ce4c296f0601d93cdd14854ab9d554510dd5bf9c5d6570c7fc49fdc706292bce1f69ca5ff56ec1c48366ed8878c301c01880801e99c7f16fc6cf6c489cf0ac69e990e1df59f724ad21c7776ee06cbd0192b601e94fd61c6aef42102191f5382148957b9e448320be1f390049ecf9c4a6f5ef3effdc"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e7f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x10) socket(0x10, 0x802, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r9, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000540)=""/74, 0x4a}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000780)={0x0, 0xfffffffffffffe55, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 5m30.295988515s ago: executing program 4 (id=2754): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0xfffffffe}) 5m29.52457628s ago: executing program 4 (id=2755): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x18, r0, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) syz_open_dev$dri(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}}, 0x20004000) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/224, 0xe0, 0x0, &(0x7f0000000200)=@ethernet={0x1}, 0x80) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x70bd2b, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r8 = creat(&(0x7f0000000140)='./file0\x00', 0xa1) read$FUSE(r8, &(0x7f0000003700)={0x2020}, 0x2020) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000005060101000000000000000000000000090085144d3b69c5ae42dc02"], 0x20}}, 0x0) syz_clone3(&(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) io_uring_setup(0x1fc3, &(0x7f00000002c0)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073697a32000000000900010073797a300000000014000000020a0104000000000000000000000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) 5m28.889988923s ago: executing program 4 (id=2759): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$yama_ptrace_scope(r0, &(0x7f0000000100)='3\x00', 0x2) read$alg(r0, 0x0, 0x28) 5m28.658595166s ago: executing program 4 (id=2761): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f) r4 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x40084504, &(0x7f0000ffcffc)) rt_sigqueueinfo(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000002180)='net/netstat\x00') 5m27.4439835s ago: executing program 4 (id=2765): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r1, &(0x7f0000001b00), 0xfffffd9d) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 5m27.285841859s ago: executing program 4 (id=2766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000100)={'wg2\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LABEL={0x14}, @IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x34}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000900000801000080000000000101090244000101000000090400001202060000052406000005240000000d240f01000000000000000000090581030002ee0009090582021000000000090503020002"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) 3m39.042667968s ago: executing program 1 (id=2993): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x8, 0xd, 0x0, "f89b9e14200144bbad31a3f443c6cc2dde8e3d6ee558700d1efd4f9f6009bda3"}) 3m38.943085294s ago: executing program 1 (id=2994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffda3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3m38.85667024s ago: executing program 1 (id=2995): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000140)=0x1, 0x4) 3m38.723967498s ago: executing program 1 (id=2996): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x11) 3m37.690676621s ago: executing program 1 (id=2997): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0x40045701, &(0x7f00000012c0)={0xffffffff, "a9780d4dc37a1d5c99c46fa9d1f5ffb92eafb2723b49e41c13a0172578e35bde"}) 3m37.362925636s ago: executing program 1 (id=3000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.897668061s ago: executing program 2 (id=3478): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001600000100"/20, @ANYRES32=0x0, @ANYBLOB="14000100fc0200000000000000000000000000001400020000000000000000000000ffffe0000001"], 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[], 0x4) sendfile(r0, r0, &(0x7f0000000080), 0xe0000000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3fffc, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x2, 0x0, 0xfffffbfd}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000007181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket(0x11, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000280)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[], 0xf}, 0x20040884) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) 2.886543143s ago: executing program 2 (id=3480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) 2.484909334s ago: executing program 5 (id=3482): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='check=strict,shortname=mixed,utf8=1,utf8=1,shortname=lower,shortname=winnt,rodir,iocharset=iso8859-13,uni_xlate=1,shortname=lower,nonumtail=0,shortname=mixed,allow_utime=00000000000000000072055,umask=000000\x00\x00\x00\x000000000000004,uni_xlate=0,\x00'], 0x3, 0x276, &(0x7f00000003c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) close(r0) inotify_init1(0x0) r1 = epoll_create(0x6) mount$9p_fd(0x0, &(0x7f0000000040)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa7000be0) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) 2.351447053s ago: executing program 2 (id=3483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_CLOSE) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioperm(0x0, 0x0, 0x3ff) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000003c0)={0x1, 0x0, [{0x0, 0xc5, &(0x7f0000000680)=""/197}]}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b041000e0ff0300020047", 0xb, 0x0, &(0x7f0000000140), 0x14) socket$inet_sctp(0x2, 0x5, 0x84) syz_usbip_server_init(0x5) socket$netlink(0x10, 0x3, 0x0) 1.452778297s ago: executing program 5 (id=3484): iopl(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) 887.921129ms ago: executing program 5 (id=3485): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="52de033803c01506a34ce4f5eee61b5baa74a9c0d0f2bea401307937abc57a6fdfbdf556a56bad9cdd6c60aaaffa94a834222394fb5e9dbea9e7ee49b3a355fb0315f2b5084f0f2f5ce16d95fb", 0x4d}, {&(0x7f00000002c0)="8c02c9f69743f46cd4e9de04473450791f75a6db8e084b8baf9021812f8b6a01b74c94d500a62bc1e0a2643e7edddff8d4579fd720be0410f3dbcc35a356919ab242388ec2695c0e5cbe421ee959a2e73abe5335da12dc05edf1d7dfbb171fd250a290b695e78e513f443d8d3443db9512afaeb9a0c90e0a", 0x78}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000440)="0eaa41a1ef11732eab506b8a566b3d783a2336d2d29dd1427f2ec9cac90f7235", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="0250304842510b15c9f80a24010dc3505b98ee0a2a81de90298914be5b1bd31b1a309e2c113da7d4a92a9dd95d8510d2ee4361e4150af6d948fe93bbe39006c380c57ccbd0bdd256496cb6f70052", 0x4e}], 0x1}}], 0x3, 0x0) 627.28697ms ago: executing program 2 (id=3486): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x6, "db95055b587f0e0500b7b9b019182af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)="a5", 0x1}], 0x1}, 0x0) 602.719746ms ago: executing program 5 (id=3487): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000020000000000000d"], 0x0, 0x40}, 0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x806, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) 464.885125ms ago: executing program 2 (id=3488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 313.703448ms ago: executing program 2 (id=3489): r0 = syz_usb_connect(0x4, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f000000bf80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x9, {{0xa, 0x4e24, 0xfffffff7, @loopback, 0x9}}}, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x80045519, &(0x7f00000002c0)=ANY=[]) r4 = socket$inet6(0xa, 0x1, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x80, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x5, 0xe1, 0xff}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x9, 0x6, 0x5, 0x20, 0x3f}, 0xa2, &(0x7f00000000c0)={0x5, 0xf, 0xa2, 0x2, [@generic={0x85, 0x10, 0x1, "6f36a0ad2e7e14f9aeedcfb41d4d13e888fdf188c7fe1a08040d76076dbdb1be1b391b3d67a09056edb8c671222224a69a0bef1203bf5febd9df47b35a0852f222def05c28e52ac83b67c5a2a66b3edbf84142631881560fdfe0a4c392659148120d50c4c0ee76d574ba5fa8aa8810f83b68bc2567e4b53c7b3aee2033443c64d7aa"}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x4, 0xf, 0xffff, [0xc03f, 0xc000, 0x3f00]}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3c2a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x860}}, {0xb7, &(0x7f00000002c0)=@string={0xb7, 0x3, "7dce55bc5be8933fd10f4254492ba975e97e7e7f2e212f906406bebcacff6de457ec5297aadc3a95cadc8d9cf6cc52c65cec0cf862cffc8a6e8c40d503a1958fd71f7255dde5986b532dcff851439dedc7566c7d50cf50ae04d3d5de672b2d488f5691b3438071a7e5cb88caa8f3529c8d5cee73ef588cba223c3a58028a5100586b15edaa72134555880f160ae86a30e6eba1df66daa80c2deadc749b8b5944adcf81cc75019d0715383aa73378393aeadcfe3df9"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x843}}, {0x9b, &(0x7f0000000400)=@string={0x9b, 0x3, "b1dd98e3c672649e3016ef590676e58fb186bb3f0657b0ec66b1c4bcf257b2cec1c614e4954e063243bb07073906a78b451566fa6cd156cdeee15c35cbdcc843fe9f73a94ebbea17e454ffc2a609596bc507a1341dd8d25d4092c1edd24ced48528e8d332aea4fbacd6eaa095cfc8c466d7858e0d6d56433ab5e5a74ad179c760d7784bff78989dc9927ccd8f10270b2e4189246b4a9a893b1"}}, {0xf2, &(0x7f00000004c0)=@string={0xf2, 0x3, "eb39da674c613fb1f60cdb393edd2fa62379201fd663df827996c206badb70d7fced4a15812057435d1001586d151cd309e38e50adf5186603c2afdb530810477a72c9ba0fec4ac84d7bd20d9eb52273ee53f1fa30fb6203e39a3edbe0561ada363a8e5fe706d1ceffbe59cef3e12e537369fe759e875a9be61ffed9c1776affb24e4cd7ed9ff542d3ebdb87e408f9562e5d31bdf0cc9194f53064862cc27437f5dbe06bcba42d373b20da795a5b0c7db1147becd348deb2584cc21152e81026540addbf01514203c1ccd97a87e45d31513687d33771ed944aefb4bda5195361bf65107e1ef0a6ff25863e4ff902204c"}}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x22020600) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)={0x1c, 0x12, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, &(0x7f0000000680)={0x40, 0x11, 0x9e, {0x9e, 0x23, "1e23ec48b7cffae45868673053dc7c981d8af15e2c084c8764ab4b6f8f1aa934d808972bb349257d0f50506d00ca70724b3c399da1309bdbefe90cca1c1628e4cdb5b6da7951cbbf18e94e9eaf1e7d3a53b9ac6c6a271d81c2d35ed7c6712aec17409b0ecb97b2828548512fefbef5da3ff87ee05a9b7dc07403bd5414ed79e2f415ef2f6958a3a60965f30e2779b32d9fdb74b0e6eea5e05d73528e"}}, &(0x7f0000000740)={0x0, 0x3, 0x27, @string={0x27, 0x3, "4042602a50a9b17d6f6d04efe6b8ee7928e4767a784361c6f2dd47510b107a98878ab4392e"}}, &(0x7f0000000780)={0x0, 0x22, 0x1a, {[@main=@item_012={0x2, 0x0, 0x9, "18ef"}, @main=@item_4={0x3, 0x0, 0xa, "5fce5178"}, @main=@item_4={0x3, 0x0, 0xc, "e3c80824"}, @main=@item_012={0x2, 0x0, 0xb, "b6af"}, @local=@item_4={0x3, 0x2, 0x0, "7bae53ad"}, @main=@item_4={0x3, 0x0, 0x8, "6dc52733"}]}}, &(0x7f00000007c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0xf67}}}}, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x40, 0x0, 0xe5, "ec2dc3ec5fc8a583f2328fcdbb840777e429b0b302de41a29753f5a6a8d60f74eb524c9b5f7fb95ef7881dafea513d3b925a13217cfa891099408e6bc76a3b047d05c17a571659a783de45d7f8aa4b38b66464aa051ed87a1905d5e41083d98100a1de3a984be3706c96cfb2db1a1ff90e5ac06e9cf1201686a5a5c01bc5fb3494d8ad2582c022c9a139ac80d8e4223304e69192b193f7c0e3a6ffbb9d1672fd7ab32be7919552e880da6fa3fc5020aab2d26ff1b17e6b346e0495db27072fe420092b87d351fbe3efd03a316de24ae2c38c1f608dce725598bb830901ac1b6d34c4c8e73f"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000009c0)={0x20, 0x1, 0x5a, "cf933935b3fcc12ffd50dd9372f4bb6ebcfa91e9a32808d7af734b6f669ac5661985aa4803f196a88d1e41771cb9913b01131166dba9e423f4a16b827d930e3f94522f7a9eb65fef4d03c7ced5591d4b724d85461075458cfdfa"}, &(0x7f0000000a40)={0x20, 0x3, 0x1, 0x2}}) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x6, 0x0, 0x0) syz_open_pts(r3, 0x32000) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000e80)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000640)=@req={0x2b0, 0x8, 0x0, 0x5}, 0x10) 269.230042ms ago: executing program 5 (id=3490): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="d400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b400128009000100766c616e00000000a400028004000380100004800c0001000000000000000000580004800d00010000000000000000000c0001003c4a"], 0xd4}}, 0x0) 0s ago: executing program 5 (id=3491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r4, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/137, 0x89, 0x0, &(0x7f0000000580)=""/92, 0x5c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x7c, &(0x7f0000000400)=""/124, 0x40f00, 0x8, '\x00', r5, 0x5, r4, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xa, 0xffffffff, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000680)=[r4], &(0x7f00000006c0)=[{0x4, 0x0, 0x7, 0x3}, {0x5, 0x5, 0x10, 0x2}], 0x10, 0xffff}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x4, r5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r7, 0x1) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600), 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r8], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30cff28cd98764d6}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)={0x24, r10, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x40004) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r11, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r12}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x26, 0x0, 0x9f, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex=r5, r0, 0x29, 0x8, 0x0, @prog_id=r12, r13}, 0x20) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) kernel console output (not intermixed with test programs): etdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.515507][T12369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.550844][T13906] Bluetooth: hci3: command tx timeout [ 1000.287466][T13903] veth0_macvtap: entered promiscuous mode [ 1000.678438][T13903] veth1_macvtap: entered promiscuous mode [ 1001.077604][T13901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.191490][T14123] loop2: detected capacity change from 0 to 4096 [ 1001.221501][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.232909][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.245506][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.256648][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.266635][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.277352][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.287912][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.322020][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.362690][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.402970][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.432096][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.472044][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.501960][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.534011][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.562260][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.580971][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.602363][T13906] Bluetooth: hci3: command tx timeout [ 1002.184767][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.429417][ T5090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1002.441875][ T5090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1002.469069][ T5090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1002.484756][ T5090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1002.494928][ T5090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1002.504151][ T5090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1002.551600][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.587618][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.598386][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.608597][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.619292][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.637885][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.939543][T14132] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 1002.954087][T14132] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 1002.981831][T14132] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 1002.982565][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.029034][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.682566][ T5090] Bluetooth: hci3: command tx timeout [ 1003.742237][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.755741][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.766084][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.776897][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.789128][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.799885][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.815120][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.841991][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.853239][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.863893][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.882159][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.894899][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.912982][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.926838][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.937569][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.948181][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.958431][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.979345][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.992699][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.015081][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.026288][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.037172][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.054111][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.200000][T13903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.223954][T13903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.243021][T13903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.251784][T13903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.374542][ T9997] bridge_slave_1: left allmulticast mode [ 1004.380309][ T9997] bridge_slave_1: left promiscuous mode [ 1004.401135][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.454217][ T9997] bridge_slave_0: left allmulticast mode [ 1004.462400][ T9997] bridge_slave_0: left promiscuous mode [ 1004.468256][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.569017][ T5096] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1004.573397][ T5090] Bluetooth: hci5: command tx timeout [ 1004.740421][T14146] loop5: detected capacity change from 0 to 128 [ 1004.816647][T14146] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1004.878414][T14146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1005.767459][ T5090] Bluetooth: hci3: command tx timeout [ 1006.190084][T14159] loop5: detected capacity change from 0 to 512 [ 1006.235521][T14159] EXT4-fs (loop5): 1 truncate cleaned up [ 1006.257245][T14159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.479279][ T9997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.496103][ T9997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.528253][ T9997] bond0 (unregistering): Released all slaves [ 1006.531540][T12369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.651622][ T5090] Bluetooth: hci5: command tx timeout [ 1007.188831][ T9997] hsr_slave_0: left promiscuous mode [ 1007.226418][ T9997] hsr_slave_1: left promiscuous mode [ 1007.262501][ T9997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.282768][ T9997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.310879][ T9997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.329031][ T9997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.445651][ T9997] veth1_macvtap: left promiscuous mode [ 1007.451360][ T9997] veth0_macvtap: left promiscuous mode [ 1007.457754][ T9997] veth1_vlan: left promiscuous mode [ 1007.465647][ T9997] veth0_vlan: left promiscuous mode [ 1008.041059][T14181] loop5: detected capacity change from 0 to 512 [ 1008.094706][T14181] EXT4-fs (loop5): 1 truncate cleaned up [ 1008.126066][T14181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.465855][T12369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.733947][ T5090] Bluetooth: hci5: command tx timeout [ 1010.184081][ T9997] team0 (unregistering): Port device team_slave_1 removed [ 1010.306703][T14210] loop2: detected capacity change from 0 to 2048 [ 1010.325977][T14210] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1010.408173][T14211] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1010.435505][ T9997] team0 (unregistering): Port device team_slave_0 removed [ 1010.803108][ T5090] Bluetooth: hci5: command tx timeout [ 1011.338236][T14081] chnl_net:caif_netlink_parms(): no params data found [ 1011.380047][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2923'. [ 1011.829615][T13901] veth0_vlan: entered promiscuous mode [ 1013.269348][T14221] loop2: detected capacity change from 0 to 1024 [ 1013.860867][T14052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.885720][T14052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.949781][T13901] veth1_vlan: entered promiscuous mode [ 1014.118896][T14081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.126897][T14081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.134645][T14081] bridge_slave_0: entered allmulticast mode [ 1014.143563][T14081] bridge_slave_0: entered promiscuous mode [ 1014.159728][T14081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.657116][ T66] Bluetooth: hci7: Frame reassembly failed (-84) [ 1014.835373][T14081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.003309][T14081] bridge_slave_1: entered allmulticast mode [ 1015.146067][T14081] bridge_slave_1: entered promiscuous mode [ 1015.357231][ T9999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.379917][ T9999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.405718][T14081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.443063][T14240] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2931'. [ 1015.457626][T14081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.540698][T14128] chnl_net:caif_netlink_parms(): no params data found [ 1015.714567][T14244] loop2: detected capacity change from 0 to 4096 [ 1015.819378][T14081] team0: Port device team_slave_0 added [ 1015.829005][T14246] loop1: detected capacity change from 0 to 512 [ 1015.971753][T14081] team0: Port device team_slave_1 added [ 1015.972878][T14246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1016.116712][T14247] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00116019, b_size=4096, device sda1 blocksize: 4096 [ 1016.119555][T14246] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1016.137159][T14247] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 1016.143413][T14246] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1016.161480][T14247] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 1016.169247][T14246] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1016.323382][T14246] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.2694: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1016.609994][T13906] Bluetooth: hci7: command 0x1003 tx timeout [ 1016.625981][ T5090] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1016.902362][T14246] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2694: couldn't read orphan inode 13 (err -117) [ 1016.974843][T14246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1017.093415][T14251] EXT4-fs error (device loop1): ext4_lookup:1856: inode #2: comm syz.1.2694: deleted inode referenced: 12 [ 1017.140827][T13901] veth0_macvtap: entered promiscuous mode [ 1017.182891][T14246] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2694'. [ 1017.213059][T14251] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1017.271498][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.298307][T14251] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1017.318341][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.394453][T14251] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1017.462284][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.501764][T14259] sg_write: data in/out 93/14 bytes for SCSI command 0x0-- guessing data in; [ 1017.501764][T14259] program syz.2.2934 not setting count and/or reply_len properly [ 1017.685085][T13903] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.704954][T13901] veth1_macvtap: entered promiscuous mode [ 1017.735096][T14263] loop5: detected capacity change from 0 to 1024 [ 1017.747213][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.769632][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.795885][ C0] vkms_vblank_simulate: vblank timer overrun [ 1017.825570][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.879292][T14265] loop1: detected capacity change from 0 to 128 [ 1017.900828][T14265] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1017.999985][T14265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1018.205086][ T9997] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.487640][T14272] loop2: detected capacity change from 0 to 4096 [ 1018.535412][T14128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.562952][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.593211][T14128] bridge_slave_0: entered allmulticast mode [ 1018.605865][T14128] bridge_slave_0: entered promiscuous mode [ 1018.613066][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1018.642351][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1018.645196][T14275] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2940'. [ 1018.650372][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1018.685263][T14128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.713613][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.721053][T14128] bridge_slave_1: entered allmulticast mode [ 1018.728785][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1018.742144][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 1018.750098][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 1018.781657][T14128] bridge_slave_1: entered promiscuous mode [ 1018.814066][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 1018.850288][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 1018.894413][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 1018.918957][T14272] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 1019.089747][ T9997] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.482136][T11199] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1019.624665][T14081] hsr_slave_0: entered promiscuous mode [ 1019.637756][T14081] hsr_slave_1: entered promiscuous mode [ 1019.659690][T14081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1019.682950][T14081] Cannot create hsr debugfs directory [ 1019.696774][T11199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.747729][T11199] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1019.759242][T13906] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1019.774018][T13906] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1019.792132][T13906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1019.808153][T11199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.824591][T13906] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1019.833753][T13906] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1019.853347][T13906] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1019.867244][T11199] usb 2-1: config 0 descriptor?? [ 1019.873978][ T9997] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.959033][T14128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.077052][T14291] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1020.133697][T14291] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1020.164669][T14128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.428157][ T9997] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.439807][T11199] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 1020.534885][T11199] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input33 [ 1020.761834][T11199] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1021.094415][T14303] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1021.227684][ T5149] usb 2-1: USB disconnect, device number 8 [ 1021.476072][T14128] team0: Port device team_slave_0 added [ 1021.534226][T14128] team0: Port device team_slave_1 added [ 1022.892819][T13906] Bluetooth: hci7: command tx timeout [ 1023.172918][T14316] loop2: detected capacity change from 0 to 1024 [ 1023.188323][T14128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.224135][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.268360][T14128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.327167][T14128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.342530][T14128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.388900][T14128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.022741][T14325] Cannot find map_set index 0 as target [ 1024.962211][ T5090] Bluetooth: hci7: command tx timeout [ 1025.036015][T14330] loop5: detected capacity change from 0 to 512 [ 1025.146142][T14330] EXT4-fs (loop5): 1 truncate cleaned up [ 1025.154430][T14330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1025.317966][ T9997] bridge_slave_1: left allmulticast mode [ 1025.335568][ T9997] bridge_slave_1: left promiscuous mode [ 1025.341570][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.359284][T12369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.388139][ T9997] bridge_slave_0: left allmulticast mode [ 1025.417564][ T9997] bridge_slave_0: left promiscuous mode [ 1025.424409][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.098104][T14347] loop5: detected capacity change from 0 to 4096 [ 1026.121581][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 1026.143692][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 1026.185676][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 1026.209376][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 1026.228183][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 1027.194175][ T5090] Bluetooth: hci7: command tx timeout [ 1027.271846][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 1027.304715][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 1027.482137][T14351] loop2: detected capacity change from 0 to 1024 [ 1027.572272][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 1027.581590][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 1027.589790][T14347] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 1027.846441][T14353] netlink: 'syz.5.2971': attribute type 1 has an invalid length. [ 1028.315766][ T9997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.326936][T14360] loop2: detected capacity change from 0 to 2048 [ 1028.345169][T14360] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1028.356162][ T9997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.387954][ T9997] bond0 (unregistering): Released all slaves [ 1028.394354][T14361] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1028.601531][T14128] hsr_slave_0: entered promiscuous mode [ 1028.672991][T14128] hsr_slave_1: entered promiscuous mode [ 1028.694283][T14128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.702601][T14128] Cannot create hsr debugfs directory [ 1029.011823][T14371] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1029.134255][T14374] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1029.212447][ T5090] Bluetooth: hci7: command tx timeout [ 1032.707357][T14380] loop1: detected capacity change from 0 to 1024 [ 1033.059199][ T9997] hsr_slave_0: left promiscuous mode [ 1033.084155][ T9997] hsr_slave_1: left promiscuous mode [ 1033.151573][ T9997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.164934][ T9997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.223918][ T9997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.231416][ T9997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.338885][ T9997] veth1_macvtap: left promiscuous mode [ 1033.346899][ T9997] veth0_macvtap: left promiscuous mode [ 1033.355740][ T9997] veth1_vlan: left promiscuous mode [ 1033.366526][ T9997] veth0_vlan: left promiscuous mode [ 1033.834034][T14393] loop1: detected capacity change from 0 to 4096 [ 1034.171405][T14394] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x0011601b, b_size=4096, device sda1 blocksize: 4096 [ 1034.185815][T14394] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 1034.195537][T14394] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 1036.601264][ T9997] team0 (unregistering): Port device team_slave_1 removed [ 1036.677890][T14405] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1036.745110][ T9997] team0 (unregistering): Port device team_slave_0 removed [ 1039.634174][T14432] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1039.806376][T14286] chnl_net:caif_netlink_parms(): no params data found [ 1040.640610][T14081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1040.650054][T13906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1040.684725][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3006'. [ 1040.686318][T13906] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1040.735738][T13906] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1040.754498][T13906] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1040.782898][T13906] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1040.796524][T13906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.092376][T14081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1041.143121][T14081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1041.192363][T14081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1041.476088][T14452] loop5: detected capacity change from 0 to 64 [ 1041.715837][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.746360][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.788346][T14286] bridge_slave_0: entered allmulticast mode [ 1041.822829][T14286] bridge_slave_0: entered promiscuous mode [ 1042.070508][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.081801][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.095013][T14286] bridge_slave_1: entered allmulticast mode [ 1042.142840][T14286] bridge_slave_1: entered promiscuous mode [ 1042.884829][T13906] Bluetooth: hci0: command tx timeout [ 1043.514636][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.681684][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.875075][T14463] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1044.013061][T14286] team0: Port device team_slave_0 added [ 1044.168253][T14286] team0: Port device team_slave_1 added [ 1044.493074][T13906] Bluetooth: hci4: command 0x1003 tx timeout [ 1044.501694][ T5090] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1044.697030][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.722949][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.791942][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.833199][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.848733][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.886811][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.973952][ T5090] Bluetooth: hci0: command tx timeout [ 1045.052783][T14128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1045.093892][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3016'. [ 1045.110518][ T9997] bridge_slave_1: left allmulticast mode [ 1045.117340][ T9997] bridge_slave_1: left promiscuous mode [ 1045.126164][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.164120][ T9997] bridge_slave_0: left allmulticast mode [ 1045.170049][ T9997] bridge_slave_0: left promiscuous mode [ 1045.183893][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.939255][T14475] loop5: detected capacity change from 0 to 256 [ 1046.178814][T14477] loop5: detected capacity change from 0 to 2048 [ 1046.252501][T14478] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1046.343562][ T9997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.365588][ T9997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.395638][ T9997] bond0 (unregistering): Released all slaves [ 1046.465570][T14128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1046.531210][T14128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1046.590654][T14128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1046.846438][ T9997] hsr_slave_0: left promiscuous mode [ 1046.872151][ T9997] hsr_slave_1: left promiscuous mode [ 1046.879314][ T9997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.890528][ T9997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.966569][ T9997] veth1_macvtap: left promiscuous mode [ 1046.972399][ T9997] veth0_macvtap: left promiscuous mode [ 1046.978257][ T9997] veth1_vlan: left promiscuous mode [ 1046.984188][ T9997] veth0_vlan: left promiscuous mode [ 1047.113287][ T5090] Bluetooth: hci0: command tx timeout [ 1049.081065][ T9997] team0 (unregistering): Port device team_slave_1 removed [ 1049.189932][ T9997] team0 (unregistering): Port device team_slave_0 removed [ 1049.202991][ T5090] Bluetooth: hci0: command tx timeout [ 1050.149251][T14486] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.3022'. [ 1050.389195][T14286] hsr_slave_0: entered promiscuous mode [ 1050.403213][T14286] hsr_slave_1: entered promiscuous mode [ 1050.410315][T14286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1050.418690][T14286] Cannot create hsr debugfs directory [ 1050.424814][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3026'. [ 1050.442003][T14498] bridge_slave_1: left allmulticast mode [ 1050.447705][T14498] bridge_slave_1: left promiscuous mode [ 1050.454986][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.472308][T14498] bridge_slave_0: left allmulticast mode [ 1050.478143][T14498] bridge_slave_0: left promiscuous mode [ 1050.493358][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.645149][T14503] geneve0: invalid flags given to default FDB implementation [ 1051.108760][T14445] chnl_net:caif_netlink_parms(): no params data found [ 1051.366841][T14516] mmap: syz.2.3033 (14516) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1051.608138][T14523] loop5: detected capacity change from 0 to 256 [ 1052.205912][T14445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.257941][T14445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.300210][T14445] bridge_slave_0: entered allmulticast mode [ 1052.315342][T14445] bridge_slave_0: entered promiscuous mode [ 1052.335516][T14531] geneve0: invalid flags given to default FDB implementation [ 1052.537975][T14445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.592466][T14445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.612186][T14445] bridge_slave_1: entered allmulticast mode [ 1052.637353][T14445] bridge_slave_1: entered promiscuous mode [ 1052.869146][T13906] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1052.892662][T13906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1052.912781][T13906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1052.945851][T13906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1052.992370][T13906] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1053.002920][T13906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1053.124832][T14445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.394607][T14445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.429247][T14550] loop2: detected capacity change from 0 to 64 [ 1053.968334][T14445] team0: Port device team_slave_0 added [ 1054.936243][ T9998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.042580][ T5090] Bluetooth: hci4: command tx timeout [ 1055.333155][T14445] team0: Port device team_slave_1 added [ 1055.509941][T14556] syz.5.3047: attempt to access beyond end of device [ 1055.509941][T14556] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1055.528736][T14556] exFAT-fs (nbd5): unable to read boot sector [ 1055.535478][T14556] exFAT-fs (nbd5): failed to read boot sector [ 1055.541854][T14556] exFAT-fs (nbd5): failed to recognize exfat type [ 1055.562859][ T9998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.665937][T14445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.673880][T14445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.712275][T14445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.818381][ T9998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.888684][T14445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.905054][T14445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.943204][T14445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.083722][ T9998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.158418][T14128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.733628][T14286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1057.130830][T13906] Bluetooth: hci4: command tx timeout [ 1058.095124][T14445] hsr_slave_0: entered promiscuous mode [ 1058.111072][T14445] hsr_slave_1: entered promiscuous mode [ 1058.125245][T14445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.131720][T14571] loop5: detected capacity change from 0 to 64 [ 1058.140152][T14445] Cannot create hsr debugfs directory [ 1058.189003][T14128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.196751][T14286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1058.230469][T14286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1058.313605][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.320948][T11188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.334787][T14286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1058.459103][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.466453][T11188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.016524][ T9998] bridge_slave_1: left allmulticast mode [ 1059.022632][ T9998] bridge_slave_1: left promiscuous mode [ 1059.028661][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.062017][ T9998] bridge_slave_0: left allmulticast mode [ 1059.067739][ T9998] bridge_slave_0: left promiscuous mode [ 1059.075074][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.132803][ T5090] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1059.213927][ T5090] Bluetooth: hci4: command tx timeout [ 1060.717205][ T9998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.767230][ T9998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.794547][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1060.797766][ T9998] bond0 (unregistering): Released all slaves [ 1060.822661][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1060.843727][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1060.868189][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1060.880161][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1060.889586][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1061.496750][ T5096] Bluetooth: hci4: command tx timeout [ 1061.502097][T13906] Bluetooth: hci8: command 0x0406 tx timeout [ 1062.497497][T14535] chnl_net:caif_netlink_parms(): no params data found [ 1062.962825][ T5090] Bluetooth: hci3: command tx timeout [ 1063.376626][ T9998] hsr_slave_0: left promiscuous mode [ 1063.385443][ T9998] hsr_slave_1: left promiscuous mode [ 1063.394564][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.408868][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.428481][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.437572][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.510470][ T9998] veth1_macvtap: left promiscuous mode [ 1063.516388][ T9998] veth0_macvtap: left promiscuous mode [ 1063.522512][ T9998] veth1_vlan: left promiscuous mode [ 1063.528949][ T9998] veth0_vlan: left promiscuous mode [ 1064.045145][T14607] loop5: detected capacity change from 0 to 256 [ 1064.093280][T14607] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1064.413426][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.420057][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.063389][ T5090] Bluetooth: hci3: command tx timeout [ 1066.102450][ T9998] team0 (unregistering): Port device team_slave_1 removed [ 1066.377314][ T9998] team0 (unregistering): Port device team_slave_0 removed [ 1066.383423][T14614] loop5: detected capacity change from 0 to 40427 [ 1066.726731][T14614] F2FS-fs (loop5): invalid crc value [ 1066.800663][T14614] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1067.122209][ T5090] Bluetooth: hci3: command tx timeout [ 1069.212772][ T5090] Bluetooth: hci3: command tx timeout [ 1069.691050][T14535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.732326][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.743145][T14535] bridge_slave_0: entered allmulticast mode [ 1069.774965][T14535] bridge_slave_0: entered promiscuous mode [ 1069.799718][T14535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.823967][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.831482][T14535] bridge_slave_1: entered allmulticast mode [ 1069.857694][T14535] bridge_slave_1: entered promiscuous mode [ 1069.919034][T14639] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3074'. [ 1071.156333][T14535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.245677][T14535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.545508][T14535] team0: Port device team_slave_0 added [ 1071.626758][T14535] team0: Port device team_slave_1 added [ 1071.929105][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'. [ 1071.945691][T14535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.964415][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.993614][T14535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.089658][T14535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.112231][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.222183][T14535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.230515][T14655] loop2: detected capacity change from 0 to 4096 [ 1072.589367][T14657] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 1072.604061][T14657] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 1072.613639][T14657] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 1073.236105][T14646] loop5: detected capacity change from 0 to 40427 [ 1073.248896][T14646] F2FS-fs (loop5): invalid crc value [ 1073.270930][T14646] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1073.558361][T14445] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1073.591643][T14445] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1073.685730][T14535] hsr_slave_0: entered promiscuous mode [ 1073.706826][T14666] loop2: detected capacity change from 0 to 1024 [ 1073.713334][T14535] hsr_slave_1: entered promiscuous mode [ 1073.747832][T14535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.755828][T14535] Cannot create hsr debugfs directory [ 1073.768688][T14666] hfsplus: bad catalog entry type [ 1073.809091][T14445] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1073.849212][T14445] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1073.858251][ T66] hfsplus: b-tree write err: -5, ino 4 [ 1073.910713][T14583] chnl_net:caif_netlink_parms(): no params data found [ 1074.682836][T14286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.273762][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1075.589037][T14583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.612793][T14583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.642308][T14583] bridge_slave_0: entered allmulticast mode [ 1075.651294][T14583] bridge_slave_0: entered promiscuous mode [ 1075.691738][T14583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.706740][T14690] loop2: detected capacity change from 0 to 1024 [ 1075.712482][T14583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.720580][T14583] bridge_slave_1: entered allmulticast mode [ 1075.745144][T14583] bridge_slave_1: entered promiscuous mode [ 1075.747011][T14690] hfsplus: bad catalog entry type [ 1075.870602][ T5287] hfsplus: b-tree write err: -5, ino 4 [ 1076.175761][T14286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.240602][T14583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.425308][T14583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.998699][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.006109][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.339998][T14583] team0: Port device team_slave_0 added [ 1077.554890][T14583] team0: Port device team_slave_1 added [ 1077.596373][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.603880][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.914624][T14583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.935709][T14583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.997706][T14583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.041608][T14583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.059902][T14583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.159535][T14583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.582625][ T9998] bridge_slave_1: left allmulticast mode [ 1078.588333][ T9998] bridge_slave_1: left promiscuous mode [ 1078.605515][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.629285][ T9998] bridge_slave_0: left allmulticast mode [ 1078.648428][ T9998] bridge_slave_0: left promiscuous mode [ 1078.676850][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.724990][ T9998] bridge_slave_1: left allmulticast mode [ 1078.740571][ T9998] bridge_slave_1: left promiscuous mode [ 1078.758268][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.796542][ T9998] bridge_slave_0: left allmulticast mode [ 1078.810483][ T9998] bridge_slave_0: left promiscuous mode [ 1078.822487][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.558789][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1080.582706][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1080.632887][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1080.675269][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1080.709469][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1080.722970][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1081.580305][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 1081.806606][ T9998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.856565][ T9998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.878597][ T9998] bond0 (unregistering): Released all slaves [ 1081.948601][ T9998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.972922][ T9998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.032652][ T9998] bond0 (unregistering): Released all slaves [ 1082.113167][T14583] hsr_slave_0: entered promiscuous mode [ 1082.146998][T14583] hsr_slave_1: entered promiscuous mode [ 1082.192495][T14583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1082.212271][T14583] Cannot create hsr debugfs directory [ 1082.513444][T14445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.824170][ T5090] Bluetooth: hci5: command tx timeout [ 1082.955059][ T9998] hsr_slave_0: left promiscuous mode [ 1082.992325][ T9998] hsr_slave_1: left promiscuous mode [ 1083.014170][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.468297][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.618138][ T9998] hsr_slave_0: left promiscuous mode [ 1083.644169][ T9998] hsr_slave_1: left promiscuous mode [ 1083.708852][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.766913][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.898419][ T5090] Bluetooth: hci5: command tx timeout [ 1085.427503][ T9998] team0 (unregistering): Port device team_slave_1 removed [ 1085.461814][T14749] loop2: detected capacity change from 0 to 16 [ 1085.483487][T14749] erofs: (device loop2): mounted with root inode @ nid 36. [ 1085.527724][T14749] syz.2.3112: attempt to access beyond end of device [ 1085.527724][T14749] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1085.550510][ T9998] team0 (unregistering): Port device team_slave_0 removed [ 1085.609270][T14749] syz.2.3112: attempt to access beyond end of device [ 1085.609270][T14749] loop2: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1086.963023][ T5090] Bluetooth: hci5: command tx timeout [ 1088.444679][ T9998] team0 (unregistering): Port device team_slave_1 removed [ 1088.544662][ T9998] team0 (unregistering): Port device team_slave_0 removed [ 1089.047898][ T5090] Bluetooth: hci5: command tx timeout [ 1089.851991][T14445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.214582][T14768] loop5: detected capacity change from 0 to 16 [ 1090.217137][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.228166][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.255345][T14768] erofs: (device loop5): mounted with root inode @ nid 36. [ 1090.311850][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.319212][T11199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.622659][T14535] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1090.678101][T14535] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1090.872888][T14535] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1091.035708][T14535] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1092.503092][T14789] loop5: detected capacity change from 0 to 64 [ 1094.298275][T14708] chnl_net:caif_netlink_parms(): no params data found [ 1094.563387][T14805] loop2: detected capacity change from 0 to 256 [ 1094.745854][T14445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.077880][ T29] audit: type=1326 audit(1721059453.259:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.2.3131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72f7175bd9 code=0x0 [ 1096.045214][T14583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1096.152784][T14583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1096.202237][T14708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.213648][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.221075][T14708] bridge_slave_0: entered allmulticast mode [ 1096.245942][T14708] bridge_slave_0: entered promiscuous mode [ 1096.266270][T14583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1096.365242][T14708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.383834][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.392042][T14708] bridge_slave_1: entered allmulticast mode [ 1096.408599][T14708] bridge_slave_1: entered promiscuous mode [ 1096.486298][T14583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1096.610895][T14708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.735014][T14708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.867555][T14052] bridge_slave_1: left allmulticast mode [ 1096.873439][T14052] bridge_slave_1: left promiscuous mode [ 1096.879351][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.930573][T14052] bridge_slave_0: left allmulticast mode [ 1096.946512][T14052] bridge_slave_0: left promiscuous mode [ 1096.956398][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.446722][T14844] loop2: detected capacity change from 0 to 512 [ 1097.513419][T14844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.530366][T14844] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.641500][T13748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.830729][T14849] loop2: detected capacity change from 0 to 1024 [ 1098.338112][T14052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.354018][T14052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.388790][T14052] bond0 (unregistering): Released all slaves [ 1098.989170][T14708] team0: Port device team_slave_0 added [ 1099.102561][T14535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.208724][T14535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.335084][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.342549][ T4698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.357550][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.364992][ T4698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.433084][T14052] hsr_slave_0: left promiscuous mode [ 1099.472647][T14052] hsr_slave_1: left promiscuous mode [ 1099.489709][T14052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.504049][T14052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.608627][T14858] loop2: detected capacity change from 0 to 64 [ 1100.190789][T14052] team0 (unregistering): Port device team_slave_1 removed [ 1100.437686][T14052] team0 (unregistering): Port device team_slave_0 removed [ 1100.577759][ T5096] Bluetooth: hci5: command 0x0405 tx timeout [ 1100.848789][ T5096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1100.860387][ T5096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1100.870189][ T5096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1100.902805][ T5096] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1100.914249][ T5096] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1100.937626][ T5096] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1101.355982][T14873] loop2: detected capacity change from 0 to 512 [ 1101.424253][T14873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.451608][T14873] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.547174][T13748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.807113][T14880] loop2: detected capacity change from 0 to 1024 [ 1101.887188][T14708] team0: Port device team_slave_1 added [ 1102.114633][T14535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1102.139714][T14535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1103.135213][ T5096] Bluetooth: hci7: command tx timeout [ 1103.274097][T14708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.281097][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.392157][T14708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.415928][T14708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.454013][T14708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.531974][T14708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.212836][T14897] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1104.381614][T14708] hsr_slave_0: entered promiscuous mode [ 1104.414162][T14708] hsr_slave_1: entered promiscuous mode [ 1104.421633][T14708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1104.448494][T14708] Cannot create hsr debugfs directory [ 1104.911309][T14535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.552148][ T5096] Bluetooth: hci7: command 0x041b tx timeout [ 1106.387415][T14909] loop2: detected capacity change from 0 to 512 [ 1106.476101][T14909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.525152][T14909] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.559072][T14583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.618239][T13748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.947626][T14921] loop5: detected capacity change from 0 to 64 [ 1107.348447][T14583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.793861][ T5090] Bluetooth: hci7: command 0x041b tx timeout [ 1107.838365][T14930] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 1108.506395][T14865] chnl_net:caif_netlink_parms(): no params data found [ 1108.836345][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.844241][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.928349][T14937] loop5: detected capacity change from 0 to 256 [ 1109.314594][T14535] veth0_vlan: entered promiscuous mode [ 1109.385590][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.393360][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.694548][T14942] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3173'. [ 1109.805110][T14535] veth1_vlan: entered promiscuous mode [ 1109.843992][ T5096] Bluetooth: hci7: command 0x041b tx timeout [ 1110.042303][T14865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.051546][T14865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.077038][T14865] bridge_slave_0: entered allmulticast mode [ 1110.100558][T14865] bridge_slave_0: entered promiscuous mode [ 1110.349400][T14865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.372469][T14865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.379917][T14865] bridge_slave_1: entered allmulticast mode [ 1110.415255][T14865] bridge_slave_1: entered promiscuous mode [ 1110.649300][T14052] bridge_slave_1: left allmulticast mode [ 1110.661955][T14052] bridge_slave_1: left promiscuous mode [ 1110.667889][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.706105][T14052] bridge_slave_0: left allmulticast mode [ 1110.717958][T14052] bridge_slave_0: left promiscuous mode [ 1110.724752][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.445931][T14956] loop5: detected capacity change from 0 to 256 [ 1111.617917][T14958] loop5: detected capacity change from 0 to 64 [ 1111.889405][T14052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.922194][ T5096] Bluetooth: hci7: command 0x041b tx timeout [ 1111.936656][T14052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.953245][T14052] bond0 (unregistering): Released all slaves [ 1111.975738][T14708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1111.999003][T14708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1112.060642][T14865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.136203][T14865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.236002][T14708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1112.632513][T14052] hsr_slave_0: left promiscuous mode [ 1112.764225][T14052] hsr_slave_1: left promiscuous mode [ 1112.807321][T14052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.843493][T14052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.888457][T14967] loop2: detected capacity change from 0 to 16 [ 1112.897808][T14967] erofs: (device loop2): mounted with root inode @ nid 36. [ 1112.921027][T14967] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1112.933092][T14967] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1112.943631][T14967] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 8200 of nid 36 [ 1113.747765][T14970] loop2: detected capacity change from 0 to 256 [ 1114.133543][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1114.148078][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1114.157953][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1114.185087][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1114.212497][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1114.220445][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1114.756131][T14982] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 1114.961781][T14984] UBIFS error (pid: 14984): cannot open "", error -22 [ 1116.105952][T14052] team0 (unregistering): Port device team_slave_1 removed [ 1116.318304][T14052] team0 (unregistering): Port device team_slave_0 removed [ 1116.332340][ T5090] Bluetooth: hci0: command tx timeout [ 1116.596345][T14997] loop5: detected capacity change from 0 to 1024 [ 1118.402093][ T5096] Bluetooth: hci0: command tx timeout [ 1118.633292][T14708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1119.237073][T14865] team0: Port device team_slave_0 added [ 1119.289996][T14865] team0: Port device team_slave_1 added [ 1119.745964][T14583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1119.962192][T14865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.969186][T14865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.021240][T14865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.062488][T14865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.069482][T14865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.107956][T14865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.482137][ T5096] Bluetooth: hci0: command 0x040f tx timeout [ 1122.141331][T14865] hsr_slave_0: entered promiscuous mode [ 1122.205467][T15026] loop2: detected capacity change from 0 to 8 [ 1122.212767][T14865] hsr_slave_1: entered promiscuous mode [ 1122.254464][T14865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.380637][T14865] Cannot create hsr debugfs directory [ 1122.572998][ T5090] Bluetooth: hci0: command 0x040f tx timeout [ 1123.084676][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1123.131521][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1123.143580][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1123.157651][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1123.170869][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1123.184007][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1123.626042][T15036] loop5: detected capacity change from 0 to 16 [ 1123.651507][T15036] erofs: (device loop5): mounted with root inode @ nid 36. [ 1124.653608][ T5090] Bluetooth: hci0: command 0x040f tx timeout [ 1124.684921][T15042] tipc: Enabling of bearer rejected, failed to enable media [ 1125.300284][ T5090] Bluetooth: hci4: command tx timeout [ 1125.874568][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.881927][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.551204][T14973] chnl_net:caif_netlink_parms(): no params data found [ 1126.570662][T15061] loop2: detected capacity change from 0 to 8 [ 1126.843116][T14708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.978797][T14708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.362666][ T5090] Bluetooth: hci4: command tx timeout [ 1127.715308][ T5159] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1127.926397][ T5159] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1127.946441][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.953862][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.975859][ T5159] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.990317][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.997653][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.013967][ T5159] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.027453][ T5159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.055007][T15067] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1128.695179][ T8] usb 6-1: USB disconnect, device number 7 [ 1128.895921][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.913050][T14973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.930797][T14973] bridge_slave_0: entered allmulticast mode [ 1128.955000][T14973] bridge_slave_0: entered promiscuous mode [ 1128.983033][T14973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.990527][T14973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.013083][T14973] bridge_slave_1: entered allmulticast mode [ 1129.026120][T14973] bridge_slave_1: entered promiscuous mode [ 1129.338856][T14973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.432392][T15030] chnl_net:caif_netlink_parms(): no params data found [ 1129.452249][ T5090] Bluetooth: hci4: command tx timeout [ 1129.525224][T14973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.788715][T14973] team0: Port device team_slave_0 added [ 1129.958587][T14973] team0: Port device team_slave_1 added [ 1130.025942][T14865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1130.671372][T14865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1130.785165][T14973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.812095][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.839014][T14973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.849705][T15106] loop5: detected capacity change from 0 to 2048 [ 1130.864053][T15106] udf: Bad value for 'lastblock' [ 1130.870754][T14865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1130.929397][T14865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1131.275908][T14973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.296013][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.348415][T14973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.715452][ T5090] Bluetooth: hci4: command tx timeout [ 1131.942456][T15030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.970220][T15030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.013987][T15030] bridge_slave_0: entered allmulticast mode [ 1132.043523][T15030] bridge_slave_0: entered promiscuous mode [ 1132.440199][T15030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.466107][T15030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.488085][T15030] bridge_slave_1: entered allmulticast mode [ 1132.497637][T15030] bridge_slave_1: entered promiscuous mode [ 1132.566295][T15104] loop2: detected capacity change from 0 to 32768 [ 1132.718708][T15030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.917046][T14973] hsr_slave_0: entered promiscuous mode [ 1132.964578][T14973] hsr_slave_1: entered promiscuous mode [ 1132.980462][T14973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1133.001974][T14973] Cannot create hsr debugfs directory [ 1133.067856][T15030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.597053][T15030] team0: Port device team_slave_0 added [ 1133.628619][T15030] team0: Port device team_slave_1 added [ 1133.837581][T15132] loop2: detected capacity change from 0 to 64 [ 1134.074807][T14052] bridge_slave_1: left allmulticast mode [ 1134.092738][T14052] bridge_slave_1: left promiscuous mode [ 1134.107806][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.126299][T14052] bridge_slave_0: left allmulticast mode [ 1134.139474][T14052] bridge_slave_0: left promiscuous mode [ 1134.152921][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.199986][T14052] bridge_slave_1: left allmulticast mode [ 1134.211708][T14052] bridge_slave_1: left promiscuous mode [ 1134.225043][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.257315][T14052] bridge_slave_0: left allmulticast mode [ 1134.281998][T14052] bridge_slave_0: left promiscuous mode [ 1134.298138][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.717230][T15149] loop2: detected capacity change from 0 to 8 [ 1136.394277][T14052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.573430][T14052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.587227][T14052] bond0 (unregistering): Released all slaves [ 1137.069824][T14052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.100166][T14052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.142644][T14052] bond0 (unregistering): Released all slaves [ 1137.239630][T15030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.252037][T15030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.279188][T15030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.313674][T15030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.321611][T15030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1137.393213][T15030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.457478][T14708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.559963][T15156] netlink: 'syz.2.3245': attribute type 10 has an invalid length. [ 1137.638611][T15156] team0: Port device netdevsim0 added [ 1137.748415][T14052] hsr_slave_0: left promiscuous mode [ 1137.767670][T14052] hsr_slave_1: left promiscuous mode [ 1137.796271][T14052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.817824][T14052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.876319][T14052] hsr_slave_0: left promiscuous mode [ 1137.905067][T14052] hsr_slave_1: left promiscuous mode [ 1137.930906][T14052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.974843][T14052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.125409][T14052] veth1_vlan: left promiscuous mode [ 1138.130910][T14052] veth0_vlan: left promiscuous mode [ 1138.412248][T15173] loop2: detected capacity change from 0 to 8 [ 1141.751718][T15188] loop5: detected capacity change from 0 to 1024 [ 1141.774473][T14052] team0 (unregistering): Port device team_slave_1 removed [ 1141.799144][T15188] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1141.890120][T15188] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.3257: Invalid block bitmap block 0 in block_group 0 [ 1141.927578][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1141.947385][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1141.954934][T15188] Quota error (device loop5): write_blk: dquota write failed [ 1141.963594][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1141.983068][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1141.988396][T15188] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1142.002114][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1142.011656][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1142.019553][T15188] EXT4-fs error (device loop5): ext4_acquire_dquot:6858: comm syz.5.3257: Failed to acquire dquot type 0 [ 1142.059331][T14052] team0 (unregistering): Port device team_slave_0 removed [ 1142.115141][T15188] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.3257: Freeing blocks not in datazone - block = 0, count = 4096 [ 1142.209661][T15188] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3257: Invalid inode bitmap blk 0 in block_group 0 [ 1142.256122][T10000] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 1142.274951][T15188] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1142.280759][T10000] EXT4-fs error (device loop5): ext4_release_dquot:6881: comm kworker/u8:15: Failed to release dquot type 0 [ 1142.296577][T15188] EXT4-fs (loop5): 1 orphan inode deleted [ 1142.308086][T15188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.354043][T15188] EXT4-fs error (device loop5): __ext4_get_inode_loc:4356: comm syz.5.3257: Invalid inode table block 12884901889 in block_group 0 [ 1142.382609][T15188] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 1142.449960][ T66] EXT4-fs error (device loop5): __ext4_get_inode_loc:4356: comm kworker/u8:5: Invalid inode table block 12884901889 in block_group 0 [ 1142.473321][T12369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.339530][T15203] overlayfs: missing 'lowerdir' [ 1144.082288][ T5096] Bluetooth: hci3: command tx timeout [ 1144.154863][T14052] team0 (unregistering): Port device team_slave_1 removed [ 1144.253940][T14052] team0 (unregistering): Port device team_slave_0 removed [ 1145.126491][T15186] netlink: 'syz.2.3256': attribute type 10 has an invalid length. [ 1145.199029][T15208] netlink: 'syz.5.3264': attribute type 4 has an invalid length. [ 1145.632739][T15212] loop5: detected capacity change from 0 to 1024 [ 1145.665368][T15212] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1145.917064][T15212] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.3266: Invalid block bitmap block 0 in block_group 0 [ 1146.042217][T15212] Quota error (device loop5): write_blk: dquota write failed [ 1146.076773][T15212] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1146.087210][T15212] EXT4-fs error (device loop5): ext4_acquire_dquot:6858: comm syz.5.3266: Failed to acquire dquot type 0 [ 1146.277629][ T5096] Bluetooth: hci3: command tx timeout [ 1146.477907][T15212] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.3266: Freeing blocks not in datazone - block = 0, count = 4096 [ 1146.522889][T15030] hsr_slave_0: entered promiscuous mode [ 1146.559240][T15212] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3266: Invalid inode bitmap blk 0 in block_group 0 [ 1146.584631][T15030] hsr_slave_1: entered promiscuous mode [ 1146.604576][T15030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1146.614037][T15212] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1146.642717][T15030] Cannot create hsr debugfs directory [ 1146.648903][T15212] EXT4-fs (loop5): 1 orphan inode deleted [ 1146.681391][T15212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.880918][T15212] EXT4-fs error (device loop5): __ext4_get_inode_loc:4356: comm syz.5.3266: Invalid inode table block 12884901889 in block_group 0 [ 1146.941987][T15212] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5731: Corrupt filesystem [ 1147.002072][ T66] EXT4-fs error (device loop5): __ext4_get_inode_loc:4356: comm kworker/u8:5: Invalid inode table block 12884901889 in block_group 0 [ 1147.085390][T12369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.476409][T14865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.575672][ T5159] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1147.796863][ T5159] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1147.809129][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.832432][ T5159] usb 3-1: Product: syz [ 1147.848045][T14865] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.867034][ T5159] usb 3-1: Manufacturer: syz [ 1147.891819][ T5159] usb 3-1: SerialNumber: syz [ 1147.914696][ T5159] usb 3-1: config 0 descriptor?? [ 1148.164585][ T5159] usb 3-1: USB disconnect, device number 5 [ 1148.322863][ T5096] Bluetooth: hci3: command tx timeout [ 1148.435592][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.442985][T11188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.820425][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.827805][T11199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.850556][T14973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1148.942323][T14973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1148.958533][T15232] overlayfs: missing 'lowerdir' [ 1148.976222][T14973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1149.137414][T14973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1149.457106][T15190] chnl_net:caif_netlink_parms(): no params data found [ 1150.225634][T15241] netlink: 'syz.5.3274': attribute type 10 has an invalid length. [ 1150.322533][T15241] team0: Port device netdevsim0 added [ 1150.432738][ T5096] Bluetooth: hci3: command tx timeout [ 1153.266223][T15258] loop5: detected capacity change from 0 to 40427 [ 1153.277731][T15258] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1153.285729][T15258] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1153.312789][T15258] F2FS-fs (loop5): invalid crc value [ 1153.334447][T15258] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1153.358471][T15267] loop2: detected capacity change from 0 to 128 [ 1153.408138][T15267] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1153.457658][T15267] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1153.499476][T15258] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1153.507265][T15258] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1153.675222][T15190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.702442][T15190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.709960][T15190] bridge_slave_0: entered allmulticast mode [ 1153.763135][T13748] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1153.782679][T15190] bridge_slave_0: entered promiscuous mode [ 1154.087108][T15190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.102182][T15190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.116043][T15190] bridge_slave_1: entered allmulticast mode [ 1154.146314][T15190] bridge_slave_1: entered promiscuous mode [ 1154.317741][T15275] netlink: 'syz.2.3281': attribute type 4 has an invalid length. [ 1154.513502][T15190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.619188][T15190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.985543][T15190] team0: Port device team_slave_0 added [ 1155.010001][T15282] netlink: 'syz.2.3284': attribute type 10 has an invalid length. [ 1155.022709][T15030] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1155.094097][T15190] team0: Port device team_slave_1 added [ 1155.104996][T15030] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1155.224466][T15030] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1155.262439][ T5159] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1155.318273][T15030] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1155.335882][ T9671] bridge_slave_1: left allmulticast mode [ 1155.341607][ T9671] bridge_slave_1: left promiscuous mode [ 1155.348080][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.366803][ T9671] bridge_slave_0: left allmulticast mode [ 1155.374422][ T9671] bridge_slave_0: left promiscuous mode [ 1155.380433][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.478121][ T5159] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1155.489209][ T5159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.500279][ T5159] usb 6-1: Product: syz [ 1155.505023][ T5159] usb 6-1: Manufacturer: syz [ 1155.509952][ T5159] usb 6-1: SerialNumber: syz [ 1155.523322][ T5159] usb 6-1: config 0 descriptor?? [ 1156.103284][ T5159] usb 6-1: USB disconnect, device number 8 [ 1158.464097][T15295] syz.2.3287 (15295): drop_caches: 2 [ 1158.520010][ T9671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.567967][ T9671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.604883][ T9671] bond0 (unregistering): Released all slaves [ 1158.731785][T15190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.745832][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.818621][T15190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.882226][T15190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.924550][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.018326][T15190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.215010][T14865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.272502][ T9671] hsr_slave_0: left promiscuous mode [ 1159.279833][ T9671] hsr_slave_1: left promiscuous mode [ 1159.288941][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.304880][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.528501][T15303] loop5: detected capacity change from 0 to 128 [ 1159.550016][T15303] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1159.574993][T15303] ext4 filesystem being mounted at /385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.716237][T12369] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1160.193916][ T9671] team0 (unregistering): Port device team_slave_1 removed [ 1160.307810][ T9671] team0 (unregistering): Port device team_slave_0 removed [ 1160.741439][ T5090] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1160.766063][ T5090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1160.781011][ T5090] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1160.795744][ T5090] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1160.804016][ T5090] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1160.811649][ T5090] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1161.945079][T15190] hsr_slave_0: entered promiscuous mode [ 1162.017126][T15190] hsr_slave_1: entered promiscuous mode [ 1162.052014][T15190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1162.066507][T15190] Cannot create hsr debugfs directory [ 1162.068162][T15317] loop5: detected capacity change from 0 to 1024 [ 1162.107403][T15317] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1162.152169][T15315] netlink: 'syz.2.3292': attribute type 4 has an invalid length. [ 1162.189776][T15317] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:482: comm syz.5.3294: Invalid block bitmap block 0 in block_group 0 [ 1162.301498][T15317] Quota error (device loop5): write_blk: dquota write failed [ 1162.339375][T15317] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1162.372208][T15317] EXT4-fs error (device loop5): ext4_acquire_dquot:6858: comm syz.5.3294: Failed to acquire dquot type 0 [ 1162.413505][T15317] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.3294: Freeing blocks not in datazone - block = 0, count = 4096 [ 1162.448917][T15317] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3294: Invalid inode bitmap blk 0 in block_group 0 [ 1162.465805][T10000] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 1162.482187][T10000] EXT4-fs error (device loop5): ext4_release_dquot:6881: comm kworker/u8:15: Failed to release dquot type 0 [ 1162.493376][T15317] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 1162.812926][T15317] EXT4-fs (loop5): 1 orphan inode deleted [ 1162.823985][T15317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1162.889083][ T5090] Bluetooth: hci5: command tx timeout [ 1163.491075][T12369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1164.038418][T15327] loop5: detected capacity change from 0 to 4096 [ 1164.051954][T15327] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1164.120098][T14973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.126566][T15329] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1164.158573][T15327] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1164.344183][T15327] ntfs3: loop5: ino=1b, "file0" attr_set_size [ 1164.365129][T15327] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1164.885705][T14973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.229449][T15336] dvmrp5: entered allmulticast mode [ 1165.295297][ T5090] Bluetooth: hci5: command tx timeout [ 1165.439227][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.446607][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.061203][T15348] Bluetooth: MGMT ver 1.22 [ 1167.381556][ T5090] Bluetooth: hci5: command tx timeout [ 1167.454154][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.461698][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.006726][T15354] overlayfs: missing 'lowerdir' [ 1168.089571][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3304'. [ 1169.375906][T15030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.442213][ T5090] Bluetooth: hci5: command tx timeout [ 1169.742653][T15309] chnl_net:caif_netlink_parms(): no params data found [ 1169.861609][T15030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.201180][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.208537][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.733242][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.740560][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.768183][ T9671] bridge_slave_1: left allmulticast mode [ 1170.781536][ T9671] bridge_slave_1: left promiscuous mode [ 1170.942767][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.208937][ T9671] bridge_slave_0: left allmulticast mode [ 1171.244731][ T9671] bridge_slave_0: left promiscuous mode [ 1171.271600][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.381675][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880245b5c00: rx timeout, send abort [ 1171.903104][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880245b5c00: abort rx timeout. Force session deactivation [ 1172.852865][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1173.091650][ T8] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1173.113447][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.121506][ T8] usb 6-1: Product: syz [ 1173.126187][ T8] usb 6-1: Manufacturer: syz [ 1173.142051][ T8] usb 6-1: SerialNumber: syz [ 1173.150488][ T8] usb 6-1: config 0 descriptor?? [ 1173.261471][ T9671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.292838][ T9671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.312875][ T9671] bond0 (unregistering): Released all slaves [ 1173.514830][ T8] usb 6-1: USB disconnect, device number 9 [ 1173.775539][T15388] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1173.854614][ T9671] hsr_slave_0: left promiscuous mode [ 1173.886810][ T9671] hsr_slave_1: left promiscuous mode [ 1173.902455][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.924698][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.258983][ T5096] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1174.274324][ T5096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1174.283747][ T5096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1174.349984][ T5096] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1174.358669][ T5096] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1174.367334][ T5096] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1175.258328][ T9671] team0 (unregistering): Port device team_slave_1 removed [ 1175.582767][ T9671] team0 (unregistering): Port device team_slave_0 removed [ 1176.484787][ T5090] Bluetooth: hci7: command tx timeout [ 1178.300939][T15309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.308915][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.316740][T15309] bridge_slave_0: entered allmulticast mode [ 1178.344483][T15309] bridge_slave_0: entered promiscuous mode [ 1178.358966][T15309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.371645][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.392525][T15309] bridge_slave_1: entered allmulticast mode [ 1178.432618][T15309] bridge_slave_1: entered promiscuous mode [ 1178.578449][ T5090] Bluetooth: hci7: command tx timeout [ 1178.912817][T15190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1179.997787][T15423] loop2: detected capacity change from 0 to 40427 [ 1180.020624][T15423] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1180.028481][T15423] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1180.051977][T15423] F2FS-fs (loop2): invalid crc value [ 1180.642114][ T5090] Bluetooth: hci7: command tx timeout [ 1181.894990][T15423] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1182.046738][T15423] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1182.054029][T15423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1182.095075][T15190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1182.575287][T15418] syz.5.3322 (15418): drop_caches: 2 [ 1182.682389][T15190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1182.722254][ T5090] Bluetooth: hci7: command tx timeout [ 1182.774168][T15309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.887722][T15309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1183.008268][T15190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1183.589576][T15309] team0: Port device team_slave_0 added [ 1183.634432][T15309] team0: Port device team_slave_1 added [ 1183.716291][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1183.752556][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1183.786294][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1183.796455][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1183.812786][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1183.832964][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1184.079590][ T5090] Bluetooth: hci8: unexpected event for opcode 0x1407 [ 1184.394290][T15309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.401297][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.511929][T15309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.571225][T15309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.592063][T15309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.677333][T15309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.743281][T15309] hsr_slave_0: entered promiscuous mode [ 1185.780598][T15309] hsr_slave_1: entered promiscuous mode [ 1185.831725][T15309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1185.860074][T15309] Cannot create hsr debugfs directory [ 1185.922681][ T5090] Bluetooth: hci0: command tx timeout [ 1187.303559][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.316813][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.202961][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e9ff000: rx timeout, send abort [ 1188.711243][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e9ff000: abort rx timeout. Force session deactivation [ 1189.107834][T15473] loop2: detected capacity change from 0 to 2048 [ 1189.435824][ T5090] Bluetooth: hci0: command tx timeout [ 1189.441481][ T5090] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 1189.451748][ T5090] Bluetooth: hci8: Injecting HCI hardware error event [ 1189.474772][ T5090] Bluetooth: hci8: hardware error 0x00 [ 1189.485880][ T29] audit: type=1326 audit(1721059546.619:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15460 comm="syz.2.3334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72f7175bd9 code=0x0 [ 1189.634375][T15473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1190.149837][T13748] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1190.153551][T15391] chnl_net:caif_netlink_parms(): no params data found [ 1190.224940][T13748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.515357][T15190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.603520][ T5096] Bluetooth: hci0: command tx timeout [ 1191.684416][ T5090] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1192.155153][T15434] chnl_net:caif_netlink_parms(): no params data found [ 1192.399265][T15503] loop5: detected capacity change from 0 to 32768 [ 1192.582313][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1192.600522][T15510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1192.683430][T15391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.690823][T15391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.712475][T15391] bridge_slave_0: entered allmulticast mode [ 1192.721660][T15391] bridge_slave_0: entered promiscuous mode [ 1192.803787][T15512] batadv_slave_0: entered promiscuous mode [ 1192.841569][T15391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.860518][T15391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.877319][T15391] bridge_slave_1: entered allmulticast mode [ 1192.899292][T15391] bridge_slave_1: entered promiscuous mode [ 1193.051126][T15190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.201712][T15391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.219291][T15391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.275464][T15511] batadv_slave_0: left promiscuous mode [ 1193.687291][ T5090] Bluetooth: hci0: command tx timeout [ 1193.723234][ T8839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.730617][ T8839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.788175][ T8839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.795720][ T8839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.999839][T15391] team0: Port device team_slave_0 added [ 1195.148119][T15391] team0: Port device team_slave_1 added [ 1195.583186][T15391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.590206][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.651979][T15391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.673406][T15434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.680831][T15434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.712642][T15434] bridge_slave_0: entered allmulticast mode [ 1195.729321][T15434] bridge_slave_0: entered promiscuous mode [ 1195.741765][T15434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.784806][T15434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.812823][T15434] bridge_slave_1: entered allmulticast mode [ 1195.844193][T15434] bridge_slave_1: entered promiscuous mode [ 1195.948967][T15309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1196.027421][T15391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.052494][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.135582][T15391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.284355][T15309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1196.649023][T15434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.706296][T15309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1196.764068][T15309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1196.795860][T15542] loop5: detected capacity change from 0 to 32768 [ 1196.914395][T15391] hsr_slave_0: entered promiscuous mode [ 1196.939344][T15391] hsr_slave_1: entered promiscuous mode [ 1196.947938][T15391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1196.955918][T15391] Cannot create hsr debugfs directory [ 1196.979703][T15434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.500480][T15434] team0: Port device team_slave_0 added [ 1197.696733][T15434] team0: Port device team_slave_1 added [ 1198.005507][T15434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.015486][T15551] loop2: detected capacity change from 0 to 1764 [ 1198.022118][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.073787][T15434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.208506][T15434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.233104][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.272067][T15434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.504002][ T9671] bridge_slave_1: left allmulticast mode [ 1198.547655][ T9671] bridge_slave_1: left promiscuous mode [ 1198.567618][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.609789][ T9671] bridge_slave_0: left allmulticast mode [ 1198.618985][ T9671] bridge_slave_0: left promiscuous mode [ 1198.632583][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.664791][ T9671] bridge_slave_1: left allmulticast mode [ 1198.676238][ T9671] bridge_slave_1: left promiscuous mode [ 1198.682610][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.699413][ T9671] bridge_slave_0: left allmulticast mode [ 1198.705464][ T9671] bridge_slave_0: left promiscuous mode [ 1198.718114][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.895968][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1200.909715][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1200.919282][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1200.975871][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1200.995739][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1201.024092][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1201.173862][ T9671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.207351][ T9671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.226727][ T9671] bond0 (unregistering): Released all slaves [ 1201.488323][ T9671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.502664][ T9671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.516712][ T9671] bond0 (unregistering): Released all slaves [ 1202.236477][ T9671] hsr_slave_0: left promiscuous mode [ 1202.250600][ T9671] hsr_slave_1: left promiscuous mode [ 1202.298157][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.348585][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.417305][ T9671] hsr_slave_0: left promiscuous mode [ 1202.434149][ T9671] hsr_slave_1: left promiscuous mode [ 1202.441726][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.485367][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1202.692574][ T29] audit: type=1326 audit(1721059560.819:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15573 comm="syz.2.3366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72f7175bd9 code=0x0 [ 1202.777969][T15581] loop2: detected capacity change from 0 to 2048 [ 1202.897103][T15581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1203.265880][ T5090] Bluetooth: hci4: command tx timeout [ 1203.613006][T15584] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1203.891517][T13748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.998801][ T9671] team0 (unregistering): Port device team_slave_1 removed [ 1205.178122][ T9671] team0 (unregistering): Port device team_slave_0 removed [ 1205.282223][ T5090] Bluetooth: hci4: command tx timeout [ 1206.837162][T15595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3371'. [ 1207.362404][ T5090] Bluetooth: hci4: command tx timeout [ 1207.414412][ T9671] team0 (unregistering): Port device team_slave_1 removed [ 1207.558960][ T9671] team0 (unregistering): Port device team_slave_0 removed [ 1208.896120][T15434] hsr_slave_0: entered promiscuous mode [ 1208.924912][T15434] hsr_slave_1: entered promiscuous mode [ 1208.944792][T15434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1208.952627][T15434] Cannot create hsr debugfs directory [ 1209.063327][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1209.072518][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1209.442454][ T5090] Bluetooth: hci4: command tx timeout [ 1210.590984][T15607] dvmrp5: entered allmulticast mode [ 1210.875883][T15612] loop2: detected capacity change from 0 to 512 [ 1210.907135][T15612] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1211.022201][T15612] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.3377: bg 0: block 64: padding at end of block bitmap is not set [ 1211.097716][T15612] Quota error (device loop2): write_blk: dquota write failed [ 1211.124096][T15612] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1211.155441][T15612] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz.2.3377: Failed to acquire dquot type 0 [ 1211.252767][T15612] EXT4-fs (loop2): 1 truncate cleaned up [ 1211.273568][T15612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.518855][T15612] EXT4-fs: Cannot change quota options when quota turned on [ 1211.796973][T13748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.014096][T15309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1212.280697][T15309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1212.636473][ T8839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.643824][ T8839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.819928][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.827277][T11204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1213.882295][T15391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1213.978816][T15636] batadv_slave_1: entered promiscuous mode [ 1213.994891][T15636] batadv_slave_1: left promiscuous mode [ 1214.289292][T15571] chnl_net:caif_netlink_parms(): no params data found [ 1214.309620][T15648] loop2: detected capacity change from 0 to 512 [ 1214.316852][T15391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1214.337164][T15391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1214.345467][T15648] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1214.414810][T15648] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.3387: bg 0: block 64: padding at end of block bitmap is not set [ 1214.431102][T15648] Quota error (device loop2): write_blk: dquota write failed [ 1214.452865][T15648] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1214.464339][T15391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1214.472665][T15648] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz.2.3387: Failed to acquire dquot type 0 [ 1214.490265][T15648] EXT4-fs (loop2): 1 truncate cleaned up [ 1214.515717][T15648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.609192][T15648] EXT4-fs: Cannot change quota options when quota turned on [ 1214.687633][T13748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.257290][T15571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.295629][T15571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.327801][T15571] bridge_slave_0: entered allmulticast mode [ 1215.358650][T15571] bridge_slave_0: entered promiscuous mode [ 1215.447174][T15571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.480183][T15571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.506024][T15571] bridge_slave_1: entered allmulticast mode [ 1215.540206][T15571] bridge_slave_1: entered promiscuous mode [ 1216.016803][T15571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.039478][T15571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.293460][T15571] team0: Port device team_slave_0 added [ 1216.453388][T15571] team0: Port device team_slave_1 added [ 1216.786254][T15571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.806440][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.206884][T15571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.231293][T15571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.273406][T15571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1217.299756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1217.347900][T15571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.425105][ T9671] bridge_slave_1: left allmulticast mode [ 1217.430848][ T9671] bridge_slave_1: left promiscuous mode [ 1217.476229][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.524648][ T9671] bridge_slave_0: left allmulticast mode [ 1217.537796][ T9671] bridge_slave_0: left promiscuous mode [ 1217.552299][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.776165][ T9671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.791820][ T9671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.817359][ T9671] bond0 (unregistering): Released all slaves [ 1220.052070][T15685] batadv_slave_1: entered promiscuous mode [ 1220.115715][T15684] batadv_slave_1: left promiscuous mode [ 1220.143073][T15434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1220.285030][ T9671] hsr_slave_0: left promiscuous mode [ 1220.306424][ T9671] hsr_slave_1: left promiscuous mode [ 1220.370767][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.386435][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.244413][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1221.262424][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1221.273295][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1221.292839][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1221.313649][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1221.334404][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1221.768828][ T9671] team0 (unregistering): Port device team_slave_1 removed [ 1222.004188][ T9671] team0 (unregistering): Port device team_slave_0 removed [ 1223.444042][ T5090] Bluetooth: hci3: command tx timeout [ 1223.500070][T15434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1223.523706][T15434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1223.540593][T15434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1223.768414][T15571] hsr_slave_0: entered promiscuous mode [ 1223.809687][T15571] hsr_slave_1: entered promiscuous mode [ 1223.837110][T15571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1223.866081][T15571] Cannot create hsr debugfs directory [ 1224.762603][T15391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.190565][T15711] loop5: detected capacity change from 0 to 32768 [ 1225.220019][T15711] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3404 (15711) [ 1225.293121][T15711] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1225.325433][T15711] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1225.336030][T15711] BTRFS info (device loop5): using free-space-tree [ 1225.522927][ T5090] Bluetooth: hci3: command tx timeout [ 1225.594246][T15391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.857646][T12369] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1225.876967][ T2749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.884316][ T2749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.584388][T11199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.591713][T11199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.088995][T15732] batadv_slave_1: entered promiscuous mode [ 1227.121853][T15731] batadv_slave_1: left promiscuous mode [ 1227.209229][T15434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.603436][ T5090] Bluetooth: hci3: command tx timeout [ 1227.790066][T15434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.844029][T15699] chnl_net:caif_netlink_parms(): no params data found [ 1227.974475][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3410'. [ 1227.986017][T11199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.986249][T11199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.126471][ T9671] bridge_slave_1: left allmulticast mode [ 1228.133999][ T9671] bridge_slave_1: left promiscuous mode [ 1228.141267][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.173960][ T9671] bridge_slave_0: left allmulticast mode [ 1228.179688][ T9671] bridge_slave_0: left promiscuous mode [ 1228.199026][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.428890][ T9671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.470847][ T9671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.505900][ T9671] bond0 (unregistering): Released all slaves [ 1229.686899][ T5096] Bluetooth: hci3: command tx timeout [ 1229.870437][ T2749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.877946][ T2749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.948263][ T9671] hsr_slave_0: left promiscuous mode [ 1229.985916][ T9671] hsr_slave_1: left promiscuous mode [ 1230.014088][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.033202][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.997859][T15776] overlayfs: upper fs does not support tmpfile. [ 1231.450665][ T9671] team0 (unregistering): Port device team_slave_1 removed [ 1231.940815][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 1231.960475][ T9671] team0 (unregistering): Port device team_slave_0 removed [ 1234.012190][T15571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1234.323068][T15802] loop2: detected capacity change from 0 to 16 [ 1234.347586][T15802] erofs: (device loop2): mounted with root inode @ nid 36. [ 1234.385145][T15571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1234.472925][T15802] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 1234.500127][T15699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.550161][T15699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.582620][T15699] bridge_slave_0: entered allmulticast mode [ 1234.662953][T15699] bridge_slave_0: entered promiscuous mode [ 1234.700155][T15699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.781983][T15699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.789485][T15699] bridge_slave_1: entered allmulticast mode [ 1234.850028][T15699] bridge_slave_1: entered promiscuous mode [ 1234.998761][T15571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1235.105114][T15571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1235.468664][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1235.515888][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1235.542485][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1235.565362][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1235.580685][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1235.592606][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1235.650429][T15699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.778647][T15699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.199579][T15699] team0: Port device team_slave_0 added [ 1236.378516][T15699] team0: Port device team_slave_1 added [ 1236.799336][T15699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1236.823440][T15699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.870485][T15699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1236.891246][T15699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1236.899010][T15699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1236.927115][T15699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.103625][T15434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1237.154992][T15827] loop5: detected capacity change from 0 to 128 [ 1237.456776][T15699] hsr_slave_0: entered promiscuous mode [ 1237.502852][T15699] hsr_slave_1: entered promiscuous mode [ 1237.532878][T15699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1237.553369][T15699] Cannot create hsr debugfs directory [ 1237.683012][ T5096] Bluetooth: hci5: command tx timeout [ 1238.878599][T15849] loop5: detected capacity change from 0 to 2048 [ 1238.895997][T15849] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1239.269881][T15833] syz.2.3443 (15833): drop_caches: 2 [ 1239.665508][T15434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.762762][ T5096] Bluetooth: hci5: command tx timeout [ 1239.821307][T15859] loop5: detected capacity change from 0 to 128 [ 1239.984435][ T9671] bridge_slave_1: left allmulticast mode [ 1239.990161][ T9671] bridge_slave_1: left promiscuous mode [ 1240.018774][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.074390][ T9671] bridge_slave_0: left allmulticast mode [ 1240.080111][ T9671] bridge_slave_0: left promiscuous mode [ 1240.105014][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.122808][T15875] loop5: detected capacity change from 0 to 512 [ 1241.249722][T15875] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1241.511112][T15875] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz.5.3459: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1241.698280][T15875] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3459: couldn't read orphan inode 15 (err -117) [ 1241.779405][T15875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1241.842149][ T5096] Bluetooth: hci5: command tx timeout [ 1241.982173][ T9671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.028154][ T9671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.059254][ T9671] bond0 (unregistering): Released all slaves [ 1242.513121][T15571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.544132][T15809] chnl_net:caif_netlink_parms(): no params data found [ 1242.613720][ T9671] hsr_slave_0: left promiscuous mode [ 1242.620190][ T9671] hsr_slave_1: left promiscuous mode [ 1242.643223][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.663695][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.181845][T12369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.956579][ T5096] Bluetooth: hci5: command tx timeout [ 1245.484214][T15896] loop5: detected capacity change from 0 to 128 [ 1245.544243][ T9671] team0 (unregistering): Port device team_slave_1 removed [ 1245.644104][ T5090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1245.656534][ T5090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1245.674451][ T5090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1245.696170][ T5090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1245.732880][ T5090] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1245.740877][ T5090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1245.846845][ T9671] team0 (unregistering): Port device team_slave_0 removed [ 1247.831228][T15908] loop5: detected capacity change from 0 to 256 [ 1247.854183][ T5090] Bluetooth: hci7: command tx timeout [ 1247.868287][T15908] exfat: Deprecated parameter 'namecase' [ 1247.958135][T15908] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 1248.295436][T15890] syz.2.3460 (15890): drop_caches: 2 [ 1248.728374][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.734941][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.931978][ T5090] Bluetooth: hci7: command tx timeout [ 1250.197960][T15571] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.243629][T15924] loop5: detected capacity change from 0 to 256 [ 1250.381791][T15809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.396142][T15809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.404828][T15809] bridge_slave_0: entered allmulticast mode [ 1250.420337][T15926] loop2: detected capacity change from 0 to 128 [ 1250.440690][T15809] bridge_slave_0: entered promiscuous mode [ 1250.442350][ T8839] kernel read not supported for file inotify (pid: 8839 comm: kworker/1:0) [ 1250.468969][T15809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.476930][T15809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.490076][T15809] bridge_slave_1: entered allmulticast mode [ 1250.507730][T15809] bridge_slave_1: entered promiscuous mode [ 1250.736267][T15809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.066281][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.073675][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.364782][T15809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.970480][ T5159] kernel read not supported for file /input/mice (pid: 5159 comm: kworker/1:7) [ 1252.003109][ T5090] Bluetooth: hci7: command tx timeout [ 1252.015199][T15809] team0: Port device team_slave_0 added [ 1252.113208][ T8839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.120627][ T8839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.194909][T15809] team0: Port device team_slave_1 added [ 1252.600173][T15809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.612192][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.714582][T15809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.848849][T15809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.871126][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.932460][T15809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.398030][T15699] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1253.504456][T15956] loop5: detected capacity change from 0 to 256 [ 1253.626089][T15699] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1253.695883][ T5159] kernel read not supported for file inotify (pid: 5159 comm: kworker/1:7) [ 1254.049062][T15809] hsr_slave_0: entered promiscuous mode [ 1254.076737][T15809] hsr_slave_1: entered promiscuous mode [ 1254.092253][ T5090] Bluetooth: hci7: command tx timeout [ 1254.101804][T15809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1254.112484][T15809] Cannot create hsr debugfs directory [ 1254.150643][T15699] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1254.976542][T15963] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1254.983407][T15963] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1254.993072][T15963] vhci_hcd vhci_hcd.0: Device attached [ 1254.999754][T15966] vhci_hcd: connection closed [ 1255.008696][ T61] vhci_hcd: stop threads [ 1255.027740][ T61] vhci_hcd: release socket [ 1255.050366][ T61] vhci_hcd: disconnect device [ 1255.276959][T15699] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1255.318935][T15897] chnl_net:caif_netlink_parms(): no params data found [ 1255.578417][T11199] kernel read not supported for file /input/mice (pid: 11199 comm: kworker/0:13) [ 1255.813747][T15981] loop2: detected capacity change from 0 to 512 [ 1255.863418][T15983] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3490'. [ 1255.875082][T15983] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3490'. [ 1256.112596][T15897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.130247][T15897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.137854][T15897] bridge_slave_0: entered allmulticast mode [ 1256.150557][T15897] bridge_slave_0: entered promiscuous mode [ 1256.204282][T15897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.216417][T15897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.230949][T15897] bridge_slave_1: entered allmulticast mode [ 1256.241755][T15897] bridge_slave_1: entered promiscuous mode [ 1256.283375][T11199] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1256.440612][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1256.453448][ C1] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 1256.461904][ C1] CPU: 1 PID: 15996 Comm: syz.5.3491 Not tainted 6.10.0-syzkaller #0 [ 1256.470015][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1256.480101][ C1] RIP: 0010:skb_segment+0x19da/0x42b0 [ 1256.485683][ C1] Code: 00 00 fe e9 bc ea ff ff e8 93 0d cf f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 85 9a 2b f9 48 8b 84 24 d0 [ 1256.505351][ C1] RSP: 0018:ffffc90000a178f8 EFLAGS: 00010212 [ 1256.511467][ C1] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88c01512 [ 1256.519483][ C1] RDX: 000000000000000e RSI: ffffffff88c025ed RDI: 0000000000000070 [ 1256.527470][ C1] RBP: ffffc90000a17aa8 R08: 0000000000000005 R09: 000000000000ffff [ 1256.535463][ C1] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88807ecdae40 [ 1256.543452][ C1] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 1256.551478][ C1] FS: 00007ff6fbadf6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1256.560440][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1256.567047][ C1] CR2: 000000002003f000 CR3: 000000005a43a000 CR4: 0000000000350ef0 [ 1256.575040][ C1] Call Trace: [ 1256.578336][ C1] [ 1256.581191][ C1] ? show_regs+0x8c/0xa0 [ 1256.585486][ C1] ? die_addr+0x4f/0xd0 [ 1256.589686][ C1] ? exc_general_protection+0x155/0x230 [ 1256.595296][ C1] ? asm_exc_general_protection+0x26/0x30 [ 1256.601075][ C1] ? skb_segment+0x8e2/0x42b0 [ 1256.605809][ C1] ? skb_segment+0x19bd/0x42b0 [ 1256.610627][ C1] ? skb_segment+0x19da/0x42b0 [ 1256.615435][ C1] ? skb_segment+0x19bd/0x42b0 [ 1256.620256][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1256.625062][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1256.630308][ C1] ? __pfx_skb_segment+0x10/0x10 [ 1256.635305][ C1] ? __pfx_nf_ct_l4proto_log_invalid+0x10/0x10 [ 1256.641522][ C1] tcp_gso_segment+0x35b/0x1850 [ 1256.646429][ C1] ? __pfx_tcp_wfree+0x10/0x10 [ 1256.651223][ C1] tcp6_gso_segment+0x1f9/0x12e0 [ 1256.656290][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.661954][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1256.667193][ C1] ipv6_gso_segment+0x7b5/0x1c70 [ 1256.672189][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 1256.677609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.683270][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1256.689203][ C1] skb_mac_gso_segment+0x2a9/0x650 [ 1256.694342][ C1] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 1256.699758][ C1] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 1256.705416][ C1] ? lock_acquire+0x1b1/0x560 [ 1256.710123][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.715792][ C1] __skb_gso_segment+0x333/0x710 [ 1256.720761][ C1] ? netif_skb_features+0x3ac/0xcc0 [ 1256.726008][ C1] validate_xmit_skb+0x33a/0xee0 [ 1256.730990][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.736668][ C1] __dev_queue_xmit+0x6eb/0x4130 [ 1256.741688][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1256.746483][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1256.751903][ C1] ? lock_acquire+0x1b1/0x560 [ 1256.756609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.762270][ C1] ? find_held_lock+0x2d/0x110 [ 1256.767084][ C1] ? ip6_finish_output+0x3f9/0x1300 [ 1256.772311][ C1] ? __pfx_lock_release+0x10/0x10 [ 1256.777364][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.783041][ C1] ? mark_held_locks+0x9f/0xe0 [ 1256.787848][ C1] ip6_finish_output2+0x1100/0x18b0 [ 1256.793089][ C1] ip6_finish_output+0x3f9/0x1300 [ 1256.798152][ C1] ip6_output+0x1f8/0x540 [ 1256.802517][ C1] ? __pfx_ip6_output+0x10/0x10 [ 1256.807397][ C1] ip6_xmit+0x125f/0x2030 [ 1256.811758][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1256.816994][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 1256.821704][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.827366][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1256.832420][ C1] ? __pfx_inet6_csk_route_socket+0x10/0x10 [ 1256.838357][ C1] ? ip6_protocol_deliver_rcu+0x188/0x1530 [ 1256.844201][ C1] ? ipv6_rcv+0x265/0x680 [ 1256.848557][ C1] ? __netif_receive_skb_one_core+0x12e/0x1e0 [ 1256.854672][ C1] ? __netif_receive_skb+0x1d/0x160 [ 1256.859914][ C1] ? process_backlog+0x133/0x760 [ 1256.864882][ C1] inet6_csk_xmit+0x3ce/0x740 [ 1256.869605][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1256.874853][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.880510][ C1] ? csum_ipv6_magic+0x296/0x310 [ 1256.885493][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 1256.890735][ C1] __tcp_transmit_skb+0x1adb/0x3dc0 [ 1256.896070][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1256.901653][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.907313][ C1] ? __build_skb_around+0x278/0x3b0 [ 1256.912576][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.918240][ C1] ? skb_zerocopy_clone+0x2c9/0x670 [ 1256.923516][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.929187][ C1] tcp_write_xmit+0x12a6/0x8480 [ 1256.934095][ C1] __tcp_push_pending_frames+0xaf/0x390 [ 1256.939681][ C1] tcp_rcv_state_process+0xf38/0x4f30 [ 1256.945105][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.950768][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1256.956004][ C1] ? reacquire_held_locks+0x450/0x4c0 [ 1256.961409][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 1256.967261][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.972924][ C1] ? lock_acquire+0x1b1/0x560 [ 1256.977633][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1256.983299][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1256.988358][ C1] ? __pfx_tcp_inbound_hash.constprop.0+0x10/0x10 [ 1256.994809][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.000484][ C1] ? tcp_v6_do_rcv+0x42f/0x16e0 [ 1257.005361][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.011027][ C1] tcp_v6_do_rcv+0x42f/0x16e0 [ 1257.015740][ C1] tcp_v6_rcv+0x2e24/0x3ad0 [ 1257.020291][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1257.025272][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.030944][ C1] ? __pfx_raw6_local_deliver+0x10/0x10 [ 1257.036517][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.042181][ C1] ? lock_acquire+0x1b1/0x560 [ 1257.046896][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.052566][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 1257.057444][ C1] ip6_protocol_deliver_rcu+0x188/0x1530 [ 1257.063129][ C1] ip6_input_finish+0x14f/0x2f0 [ 1257.068019][ C1] ip6_input+0xa1/0xd0 [ 1257.072120][ C1] ? __pfx_ip6_input+0x10/0x10 [ 1257.076914][ C1] ipv6_rcv+0x265/0x680 [ 1257.081105][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 1257.085811][ C1] __netif_receive_skb_one_core+0x12e/0x1e0 [ 1257.091758][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1257.098234][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.103898][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1257.108960][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1257.114372][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.120072][ C1] __netif_receive_skb+0x1d/0x160 [ 1257.125148][ C1] process_backlog+0x133/0x760 [ 1257.129938][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.135607][ C1] __napi_poll.constprop.0+0xba/0x550 [ 1257.141382][ C1] net_rx_action+0x9b6/0xf10 [ 1257.146016][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1257.151156][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1257.156482][ C1] handle_softirqs+0x219/0x8f0 [ 1257.161319][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1257.166641][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.172306][ C1] ? sk_wait_data+0x1ab/0x510 [ 1257.177015][ C1] do_softirq+0xb2/0xf0 [ 1257.181212][ C1] [ 1257.184154][ C1] [ 1257.187092][ C1] __local_bh_enable_ip+0x100/0x120 [ 1257.192332][ C1] sk_wait_data+0x1ab/0x510 [ 1257.196873][ C1] ? kasan_save_free_info+0x3b/0x60 [ 1257.202109][ C1] ? __pfx_sk_wait_data+0x10/0x10 [ 1257.207166][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 1257.213013][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.218674][ C1] ? tcp_send_ack+0x82/0xa0 [ 1257.223209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.228957][ C1] tcp_recvmsg_locked+0x80e/0x2700 [ 1257.234109][ C1] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 1257.239681][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.245343][ C1] ? tcp_recvmsg+0x113/0x680 [ 1257.249961][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 1257.255293][ C1] tcp_recvmsg+0x12e/0x680 [ 1257.259740][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1257.264715][ C1] ? mark_lock+0xb5/0xc60 [ 1257.269075][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.274737][ C1] ? aa_sk_perm+0x2f5/0xb40 [ 1257.279372][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 1257.284364][ C1] inet6_recvmsg+0x12b/0x6a0 [ 1257.289008][ C1] ? find_held_lock+0x2d/0x110 [ 1257.293926][ C1] ? __pfx_inet6_recvmsg+0x10/0x10 [ 1257.299092][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.304756][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.310438][ C1] ? security_socket_recvmsg+0x98/0xd0 [ 1257.315932][ C1] ? __pfx_inet6_recvmsg+0x10/0x10 [ 1257.321070][ C1] sock_recvmsg+0xfe/0x250 [ 1257.325538][ C1] ____sys_recvmsg+0x21f/0x6b0 [ 1257.330357][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1257.335727][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.341424][ C1] ? find_held_lock+0x2d/0x110 [ 1257.346245][ C1] ___sys_recvmsg+0x115/0x1a0 [ 1257.350995][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1257.356252][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.361920][ C1] ? __fget_light+0x173/0x210 [ 1257.366649][ C1] __sys_recvmsg+0x114/0x1e0 [ 1257.371308][ C1] ? __pfx___sys_recvmsg+0x10/0x10 [ 1257.376496][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1257.382167][ C1] ? __pfx_lock_release+0x10/0x10 [ 1257.387242][ C1] do_syscall_64+0xcd/0x250 [ 1257.391800][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.397752][ C1] RIP: 0033:0x7ff6fad75bd9 [ 1257.402359][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.422102][ C1] RSP: 002b:00007ff6fbadf048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1257.430589][ C1] RAX: ffffffffffffffda RBX: 00007ff6faf041e8 RCX: 00007ff6fad75bd9 [ 1257.438604][ C1] RDX: 0000000040000110 RSI: 00000000200008c0 RDI: 000000000000000a [ 1257.446600][ C1] RBP: 00007ff6fade4e60 R08: 0000000000000000 R09: 0000000000000000 [ 1257.454594][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1257.462673][ C1] R13: 000000000000006e R14: 00007ff6faf041e8 R15: 00007ffe7d6eb1b8 [ 1257.470714][ C1] [ 1257.473831][ C1] Modules linked in: [ 1257.477943][ C1] ---[ end trace 0000000000000000 ]--- [ 1257.483464][ C1] RIP: 0010:skb_segment+0x19da/0x42b0 [ 1257.488903][ C1] Code: 00 00 fe e9 bc ea ff ff e8 93 0d cf f8 48 8b 84 24 d0 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 09 3c 03 7f 05 e8 85 9a 2b f9 48 8b 84 24 d0 [ 1257.508605][ C1] RSP: 0018:ffffc90000a178f8 EFLAGS: 00010212 [ 1257.511761][T11199] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1257.514720][ C1] RAX: dffffc0000000000 RBX: 0000000000020048 RCX: ffffffff88c01512 [ 1257.514752][ C1] RDX: 000000000000000e RSI: ffffffff88c025ed RDI: 0000000000000070 [ 1257.514779][ C1] RBP: ffffc90000a17aa8 R08: 0000000000000005 R09: 000000000000ffff [ 1257.514807][ C1] R10: 000000000000ffff R11: aaaa0aaaaaaaaaaa R12: ffff88807ecdae40 [ 1257.514840][ C1] R13: 000000000001fffe R14: 000000000001fffe R15: 000000000000ffff [ 1257.514871][ C1] FS: 00007ff6fbadf6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1257.514911][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1257.514942][ C1] CR2: 000000002003f000 CR3: 000000005a43a000 CR4: 0000000000350ef0 [ 1257.514974][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1257.515534][ C1] Kernel Offset: disabled