last executing test programs: 10m36.718555552s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x4}], 0x2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0d0000000482a9abd60f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x4000, 0x0, 0xffffd7ff, 0x0, r1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) semctl$GETZCNT(r0, 0x0, 0xf, 0x0) 10m35.523247298s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xcff5, r2}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 10m34.681973037s ago: executing program 1 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 10m31.343584955s ago: executing program 1 (id=16): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffe8f) r0 = fanotify_init(0x0, 0x800) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000400000008000000"], 0x48) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x1021, r1, 0x0) fanotify_mark(r0, 0x90, 0x20, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0xc0000484) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010000000000e4ff0400000000000000100000000000000020"], 0x24, 0x0) write$sndseq(r3, &(0x7f0000000380)=[{0x4, 0xb3, 0xff, 0xc, @tick=0x5c0c, {0x35, 0x6b}, {0x4, 0x9}, @raw32={[0x8, 0x2, 0x8]}}, {0xb, 0x1d, 0xe, 0x8, @time={0x6, 0x6}, {0x2, 0x1}, {0x3, 0x7}, @raw8={"3790530ef2decdfdb1bde771"}}, {0x6, 0xe1, 0xae, 0x7, @time={0x0, 0xa3}, {0x1, 0x4}, {0x9, 0x6}, @control={0x6, 0x7, 0x3}}, {0xc3, 0x81, 0x0, 0x3, @tick=0x2, {0x2, 0x50}, {0x4, 0x3}, @quote={{0x7, 0x6}, 0x2}}], 0x70) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000100)=""/245) 10m30.847273256s ago: executing program 1 (id=18): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x100008, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}]}}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 10m23.703049707s ago: executing program 1 (id=26): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r1, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) open_by_handle_at(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fdatasync(r5) 10m20.267107526s ago: executing program 32 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xcff5, r2}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 10m20.072630261s ago: executing program 1 (id=33): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 10m4.918055248s ago: executing program 33 (id=33): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 8m24.809753452s ago: executing program 2 (id=231): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m24.447754035s ago: executing program 2 (id=234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x5c, 0x2) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r3, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) 8m22.515562301s ago: executing program 2 (id=239): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) 8m20.701550823s ago: executing program 2 (id=240): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x4000, &(0x7f0000000480)=ANY=[], 0x11, 0x221, &(0x7f0000000680)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x110) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) syz_open_procfs(0x0, 0x0) 8m20.179684082s ago: executing program 2 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x3) 8m16.389678985s ago: executing program 2 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) 8m15.776541324s ago: executing program 34 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) 5m26.013839744s ago: executing program 3 (id=491): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) 5m23.954900039s ago: executing program 3 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000f9a000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5m18.629034082s ago: executing program 3 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={r5, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f00000003c0)=0x84) 5m17.327825592s ago: executing program 3 (id=503): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) getpid() 5m16.360131509s ago: executing program 3 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, 0xffffffffffffffff, 0x0, 0x300}, 0x38) 5m15.482996409s ago: executing program 3 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) shutdown(0xffffffffffffffff, 0x1) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8993, 0x0) semop(r4, &(0x7f00000002c0)=[{0x3, 0x4, 0x1000}], 0x1) 5m14.892003587s ago: executing program 35 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) shutdown(0xffffffffffffffff, 0x1) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8993, 0x0) semop(r4, &(0x7f00000002c0)=[{0x3, 0x4, 0x1000}], 0x1) 20.305123892s ago: executing program 6 (id=961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r4, &(0x7f0000000040), &(0x7f00000000c0)=0x10, 0x800) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) syz_clone(0x1300, 0x0, 0x0, 0x0, 0x0, 0x0) 18.636531193s ago: executing program 6 (id=964): ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(&(0x7f0000000280)='gfs2\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x48}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x4048080) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r5 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x2, &(0x7f0000000040)) 13.040097949s ago: executing program 6 (id=973): socket(0x200000000000011, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x2d, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$admmidi(0x0, 0x6, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000002, 0x0) sendmsg$can_raw(r1, 0x0, 0x4004000) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 10.241518223s ago: executing program 5 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r4) setgroups(0x1, &(0x7f00000000c0)=[r4]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 7.602038709s ago: executing program 0 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, 0x0, 0x7f03) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x7fff, 0x6, 0x7}, 0x0, 0x9}}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 6.981817924s ago: executing program 6 (id=981): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tkill(0x0, 0x12) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000035000b3fd300000000000000108e5178", 0x14}], 0x1}, 0x0) 6.978953942s ago: executing program 5 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c1944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12) 6.97849986s ago: executing program 0 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) bind$802154_dgram(r1, 0x0, 0x0) connect$802154_dgram(r1, 0x0, 0x0) 5.005905746s ago: executing program 6 (id=984): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$9p_fd(0x0, 0x0, 0x0, 0x404, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) syz_clone(0x8002000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.004214421s ago: executing program 5 (id=985): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) sendmsg$inet(r0, 0x0, 0x0) 4.99603527s ago: executing program 0 (id=986): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) dup(0xffffffffffffffff) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r2}) io_submit(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000440)='\x107m\xadJ\xdc:F\xa0\x06\xe6\xbb\xb8\xb0\xe8\xc3\x87\x12+\x8fY\xee\xc7\xd0,\xc6\x01*\x88\x14U\xde\xfa:\xee\xe8\x1d\x91F\x86)', 0x0) finit_module(r3, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x3, r0, 0x5}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x1, 0x1, 0xc, 0x2, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r6, 0x852dd6c070cd7e4d, 0xffffffff}, 0x14}, 0x4, 0x700000000000000}, 0x0) 4.616232656s ago: executing program 5 (id=987): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000c000) sendto$inet6(r0, &(0x7f0000000140)="c44665b2a73ab5170d086034f20f6f5f30672b5353", 0x15, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_read_part_table(0x607, &(0x7f0000001d40)="$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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x8001, 0x8, 0x0, 0x6, 0x1, 0xeb37, 0x100000, 0xec09, r5}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r5, 0x2}, 0x8) r6 = socket$caif_seqpacket(0x25, 0x5, 0x1) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) 3.570296743s ago: executing program 0 (id=988): syz_emit_vhci(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={'dvmrp1\x00', {0x2, 0x4e21, @loopback}}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001740)=""/102400, 0x19000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x2eda) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xd212}], 0x1, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 3.565232385s ago: executing program 6 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 3.284005926s ago: executing program 5 (id=990): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f00000003c0)=0x100000001, 0x4) 3.24568782s ago: executing program 0 (id=991): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3DFoJFUcBvBvZnc9c7fIqY0gqCAiGghnJ9icjcKJHIeIoMKJiI1yEWKCXWJlY6G1SiqbIHZGS0kTbBTBKmqK2AgaLAwWiqzMTiJJXGNgkx3J/H4wuzM78+b/htnv7TbzArTWxSSXk3SSTCfpJSn2H3BPvVzc3VyeWr+eDAZP/VIMj6u3a3vtLiRZSvJwkrWyyCvdZGH1ua3fNh6//+353n0frj47NdGL3LW9tfnkzgdX3/rkykMLX33z09Uil9M/cF0nrxjxWbdIbjuNYv8TRbfpHnAc1974+Nsq97cnuXeY/17K1Dfvnbmb1np58P1/a/vuz1/fOcm+AidvMOhVv4FLA6B1yiT9FOVMknq9LGdm6v/w33XOl6/Ozr0+/fLs/I2Xmh6pgJPSTzYf++zcpxcO5f/HTp1/4Cx54sBWlf+nr618X63vdJrqE9CEKv/TLyw+EPmH1pF/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aC/5h7PtxSP2HSP/5Wn1C2jW/vwDAO0yONf0E8hAU5oefwAAAAAAAAAAAAAAAAAAgH9anlq/vrdMquYX7yXbjybpjqrf2Z2A7Obh6/lfi+qwvxV1s7E8f/eYJxjTRw0/fX3LD83W//KuZusv3kiW3kxyqds99P37c5Bi7Anwbv2P/b2jJuibgEeeabb+HyvN1r+ykXxejT+XRo0/Ze4Yvo8ef/rV/Ruz/mu/j3kCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJuavAAAA///41m/U") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1.90200649s ago: executing program 5 (id=992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r5, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa0ff2ad57bbab7989a22ab01ea75cc8636e49baf6ab84ac08ddefac0b32808677040b1ed554887463ae236035a41c7a38dfcbeb784106f9"], 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 0s ago: executing program 0 (id=993): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/4118, 0x1016, 0x0, 0x0}, &(0x7f0000000080)=0x40) kernel console output (not intermixed with test programs): 38791][ T7505] F2FS-fs (loop5): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x12ed/0x1bd0 [ 293.151050][ T7505] syz.5.344: attempt to access beyond end of device [ 293.151050][ T7505] loop5: rw=2049, sector=53248, nr_sectors = 88 limit=40427 [ 293.166620][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.173925][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.181044][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.188057][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.195098][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.202699][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.209672][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.217151][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.224223][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.231254][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.238247][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 293.248211][ T7505] F2FS-fs (loop5): Stopped filesystem due to reason: 1 [ 293.755399][ T56] Bluetooth: hci5: command tx timeout [ 295.648099][ T7506] loop0: detected capacity change from 0 to 40427 [ 295.899046][ T5832] Bluetooth: hci5: command tx timeout [ 295.899422][ T56] Bluetooth: hci7: command tx timeout [ 295.913857][ T7506] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 297.185936][ T7169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.202065][ T7506] F2FS-fs (loop0): invalid crc value [ 297.220976][ T7506] F2FS-fs (loop0): Found nat_bits in checkpoint [ 297.415255][ T7522] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 297.468422][ T7523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.060635][ T5832] Bluetooth: hci5: command tx timeout [ 298.060635][ T56] Bluetooth: hci7: command tx timeout [ 298.561904][ T7169] team0: Port device team_slave_0 added [ 299.583824][ T7169] team0: Port device team_slave_1 added [ 300.133842][ T5832] Bluetooth: hci7: command tx timeout [ 300.537065][ T26] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 300.869595][ T26] usb 4-1: no configurations [ 300.877497][ T26] usb 4-1: can't read configurations, error -22 [ 302.199993][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 302.214760][ T5832] Bluetooth: hci7: command tx timeout [ 302.361049][ T26] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 303.596606][ T26] usb 4-1: device descriptor read/all, error -71 [ 303.632744][ T26] usb usb4-port1: attempt power cycle [ 303.811656][ T7594] bridge1: port 1(ip6gretap1) entered blocking state [ 303.818462][ T7594] bridge1: port 1(ip6gretap1) entered disabled state [ 303.869957][ T7594] ip6gretap1: entered allmulticast mode [ 303.883751][ T7594] ip6gretap1: entered promiscuous mode [ 303.930167][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.942803][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.983958][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.994203][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.002206][ T56] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 304.009636][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.797857][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 305.809608][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 306.121021][ T56] Bluetooth: hci1: command tx timeout [ 306.149403][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 306.467596][ T7627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.428724][ T7625] netlink: 76 bytes leftover after parsing attributes in process `syz.3.364'. [ 307.760245][ T7467] chnl_net:caif_netlink_parms(): no params data found [ 308.231612][ T56] Bluetooth: hci1: command tx timeout [ 309.669684][ T7499] chnl_net:caif_netlink_parms(): no params data found [ 310.281751][ T56] Bluetooth: hci1: command tx timeout [ 311.544499][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.552724][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.678200][ T7708] loop3: detected capacity change from 0 to 64 [ 311.735496][ T7467] bridge_slave_0: entered allmulticast mode [ 311.744281][ T7467] bridge_slave_0: entered promiscuous mode [ 311.755118][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.762348][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.769608][ T7467] bridge_slave_1: entered allmulticast mode [ 311.778174][ T7467] bridge_slave_1: entered promiscuous mode [ 311.912639][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.931727][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.009998][ T7715] loop0: detected capacity change from 0 to 8 [ 312.197868][ T7499] bridge_slave_0: entered allmulticast mode [ 312.205222][ T7499] bridge_slave_0: entered promiscuous mode [ 312.213306][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.220490][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.227809][ T7499] bridge_slave_1: entered allmulticast mode [ 312.236624][ T7499] bridge_slave_1: entered promiscuous mode [ 313.195701][ T56] Bluetooth: hci1: command tx timeout [ 314.382709][ T5824] hfs: request for non-existent node 131072 in B*Tree [ 314.546368][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.613806][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.711223][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.717798][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.867778][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.855677][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.353104][ T7467] team0: Port device team_slave_0 added [ 318.561320][ T7761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.135121][ T7759] loop3: detected capacity change from 0 to 64 [ 319.537220][ T7759] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 319.892834][ T7766] loop3: detected capacity change from 0 to 8 [ 321.198939][ T7770] loop0: detected capacity change from 0 to 2048 [ 321.255733][ T7770] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 321.372147][ T7774] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.453653][ T7770] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 321.500997][ T7770] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 321.515080][ T7467] team0: Port device team_slave_1 added [ 321.523091][ T7770] Remounting filesystem read-only [ 321.528154][ T7770] NILFS (loop0): error -5 truncating bmap (ino=16) [ 321.598269][ T7499] team0: Port device team_slave_0 added [ 321.633995][ T7499] team0: Port device team_slave_1 added [ 321.796244][ T7604] chnl_net:caif_netlink_parms(): no params data found [ 321.836718][ T7770] Bluetooth: MGMT ver 1.23 [ 321.913258][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.998835][ T7780] loop3: detected capacity change from 0 to 256 [ 322.187493][ T5825] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 322.829822][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.858601][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.072140][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.079423][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.106351][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.649069][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.679501][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.812955][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.832879][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.839936][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.898546][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.214107][ T7499] hsr_slave_0: entered promiscuous mode [ 325.239481][ T7499] hsr_slave_1: entered promiscuous mode [ 325.387232][ T7499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.977908][ T7499] Cannot create hsr debugfs directory [ 326.831899][ T7467] hsr_slave_0: entered promiscuous mode [ 326.838376][ T7467] hsr_slave_1: entered promiscuous mode [ 326.838924][ T7814] loop0: detected capacity change from 0 to 512 [ 326.880934][ T7815] loop5: detected capacity change from 0 to 4096 [ 326.888660][ T7815] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 326.934278][ T7815] ntfs3(loop5): ino=19, mi_enum_attr [ 326.939785][ T7815] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 327.098053][ T7467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.104937][ T7814] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 327.377792][ T7467] Cannot create hsr debugfs directory [ 330.181937][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.189076][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.207503][ T7604] bridge_slave_0: entered allmulticast mode [ 330.225006][ T7604] bridge_slave_0: entered promiscuous mode [ 330.281015][ T5924] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 331.378946][ T5924] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.390778][ T5924] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 331.403761][ T5924] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 331.416444][ T5924] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 332.210822][ T5924] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 332.240957][ T5924] usb 1-1: Manufacturer: syz [ 332.245615][ T5924] usb 1-1: SerialNumber: syz [ 332.354800][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.381582][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.389001][ T7604] bridge_slave_1: entered allmulticast mode [ 332.462775][ T7604] bridge_slave_1: entered promiscuous mode [ 332.511335][ T5924] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 332.536220][ T5924] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input6 [ 332.592034][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 332.599944][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 332.607002][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 332.614078][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 332.621073][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 332.628768][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 332.635883][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 332.643151][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 332.649940][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 332.827362][ T5924] usb 1-1: USB disconnect, device number 2 [ 333.412531][ T7604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.614854][ T5924] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 333.635729][ T12] bridge_slave_1: left allmulticast mode [ 333.642006][ T12] bridge_slave_1: left promiscuous mode [ 333.657948][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.812847][ T5924] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.824880][ T5924] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 333.850901][ T5924] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 333.947477][ T12] bridge_slave_0: left allmulticast mode [ 333.969015][ T12] bridge_slave_0: left promiscuous mode [ 334.860770][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.871630][ T5924] usb 1-1: string descriptor 0 read error: -71 [ 334.878479][ T5924] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 334.934127][ T5924] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 334.974681][ T5924] usb 1-1: can't set config #36, error -71 [ 335.042050][ T12] bridge_slave_1: left allmulticast mode [ 335.047792][ T12] bridge_slave_1: left promiscuous mode [ 335.059982][ T5924] usb 1-1: USB disconnect, device number 3 [ 335.078176][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.209647][ T12] bridge_slave_0: left allmulticast mode [ 335.234468][ T12] bridge_slave_0: left promiscuous mode [ 335.291911][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.818235][ T7865] loop5: detected capacity change from 0 to 4096 [ 336.075471][ T12] bridge_slave_1: left allmulticast mode [ 336.172889][ T12] bridge_slave_1: left promiscuous mode [ 336.261378][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.506078][ T12] bridge_slave_0: left allmulticast mode [ 336.601044][ T12] bridge_slave_0: left promiscuous mode [ 336.645839][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.182872][ T7888] loop3: detected capacity change from 0 to 64 [ 342.953571][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.981806][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.132395][ T12] bond0 (unregistering): Released all slaves [ 343.887426][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.203859][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.236647][ T12] bond0 (unregistering): Released all slaves [ 345.283357][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.539401][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.638778][ T7904] loop3: detected capacity change from 0 to 40427 [ 346.646681][ T7904] F2FS-fs (loop3): build fault injection attr: rate: 692, type: 0x1fffff [ 346.656060][ T7904] F2FS-fs (loop3): extra_attr or flexible_inline_xattr feature is off [ 346.796740][ T12] bond0 (unregistering): Released all slaves [ 346.865030][ T7604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.341944][ T7604] team0: Port device team_slave_0 added [ 348.450344][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.464471][ T7604] team0: Port device team_slave_1 added [ 348.473773][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.499616][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.511522][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.520131][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.529096][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.899553][ T12] hsr_slave_0: left promiscuous mode [ 350.859646][ T56] Bluetooth: hci3: command tx timeout [ 351.103710][ T12] hsr_slave_1: left promiscuous mode [ 351.421526][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.193934][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.231361][ T56] Bluetooth: hci3: command tx timeout [ 354.871376][ T12] hsr_slave_0: left promiscuous mode [ 355.141927][ T12] hsr_slave_1: left promiscuous mode [ 355.181622][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.236623][ T7945] loop3: detected capacity change from 0 to 512 [ 355.250926][ T56] Bluetooth: hci3: command tx timeout [ 355.293994][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.381087][ T7945] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 355.396745][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 355.699203][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.715626][ T7945] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.428: casefold flag without casefold feature [ 355.730831][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.745482][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.754814][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 355.763529][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 355.772152][ T7945] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.428: couldn't read orphan inode 15 (err -117) [ 355.808532][ T7945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.268515][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.330799][ T5832] Bluetooth: hci3: command tx timeout [ 357.377675][ T12] team0 (unregistering): Port device team_slave_1 removed [ 357.439192][ T12] team0 (unregistering): Port device team_slave_0 removed [ 357.698279][ T906] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 357.831384][ T5832] Bluetooth: hci5: command tx timeout [ 357.881823][ T906] usb 6-1: Using ep0 maxpacket: 8 [ 357.912746][ T906] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 357.987565][ T906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.080239][ T906] usb 6-1: Product: syz [ 358.138721][ T906] usb 6-1: Manufacturer: syz [ 358.185261][ T906] usb 6-1: SerialNumber: syz [ 358.332746][ T7972] loop0: detected capacity change from 0 to 1024 [ 358.377806][ T906] usb 6-1: config 0 descriptor?? [ 358.409553][ T906] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 358.622002][ T906] gspca_sn9c2028: read1 error -32 [ 358.623612][ T5962] hfsplus: b-tree write err: -5, ino 4 [ 358.636908][ T906] gspca_sn9c2028: read1 error -32 [ 359.881573][ T5832] Bluetooth: hci5: command tx timeout [ 360.590809][ T906] gspca_sn9c2028: read1 error -71 [ 360.595948][ T906] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 360.596393][ T7976] dccp_close: ABORT with 36 bytes unread [ 360.659346][ T906] usb 6-1: USB disconnect, device number 3 [ 360.775942][ T12] team0 (unregistering): Port device team_slave_1 removed [ 360.806443][ T12] team0 (unregistering): Port device team_slave_0 removed [ 361.961478][ T5832] Bluetooth: hci5: command tx timeout [ 362.483946][ T12] team0 (unregistering): Port device team_slave_1 removed [ 362.707288][ T12] team0 (unregistering): Port device team_slave_0 removed [ 362.840165][ T7995] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 364.041128][ T5832] Bluetooth: hci5: command tx timeout [ 364.501905][ T56] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 364.532276][ T56] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 364.547519][ T56] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 364.596305][ T56] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 364.604499][ T56] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 364.611846][ T56] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 367.043838][ T5832] Bluetooth: hci6: command tx timeout [ 367.441718][ T5965] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 367.790831][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 367.812496][ T5965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.841094][ T5965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.879666][ T5965] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.894785][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.446'. [ 367.910848][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.929274][ T8024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.446'. [ 367.941087][ T5965] usb 1-1: Product: syz [ 367.950886][ T5965] usb 1-1: Manufacturer: syz [ 367.957249][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.446'. [ 367.976902][ T5965] usb 1-1: SerialNumber: syz [ 367.983703][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.446'. [ 368.217994][ T5965] usb 1-1: 0:2 : does not exist [ 368.331508][ T5965] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 368.390342][ T8030] loop3: detected capacity change from 0 to 64 [ 368.940608][ T5965] usb 1-1: USB disconnect, device number 4 [ 369.081574][ T5832] Bluetooth: hci6: command tx timeout [ 369.264029][ T7591] udevd[7591]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.392212][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 369.619535][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 369.633651][ T5890] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 369.660937][ T5890] usb 4-1: config 0 has no interface number 0 [ 369.672069][ T5890] usb 4-1: New USB device found, idVendor=05ac, idProduct=3d58, bcdDevice=88.ce [ 369.681547][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.697170][ T5890] usb 4-1: config 0 descriptor?? [ 369.804345][ T7919] chnl_net:caif_netlink_parms(): no params data found [ 369.910144][ T5890] usb 4-1: USB disconnect, device number 6 [ 369.973285][ T7954] chnl_net:caif_netlink_parms(): no params data found [ 370.140393][ T8000] chnl_net:caif_netlink_parms(): no params data found [ 370.731571][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.740689][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.759649][ T7919] bridge_slave_0: entered allmulticast mode [ 370.970224][ T7919] bridge_slave_0: entered promiscuous mode [ 370.981513][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.988616][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.062421][ T7919] bridge_slave_1: entered allmulticast mode [ 371.144285][ T7919] bridge_slave_1: entered promiscuous mode [ 371.201380][ T5832] Bluetooth: hci6: command tx timeout [ 372.634344][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.655342][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.691065][ T7954] bridge_slave_0: entered allmulticast mode [ 372.699336][ T7954] bridge_slave_0: entered promiscuous mode [ 373.608150][ T5832] Bluetooth: hci6: command tx timeout [ 373.764078][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.791965][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.799226][ T7954] bridge_slave_1: entered allmulticast mode [ 373.882790][ T7954] bridge_slave_1: entered promiscuous mode [ 375.092247][ T7919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.403305][ T7919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.005339][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.035301][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.299437][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.306779][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.842365][ T8115] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.466'. [ 378.852838][ T8115] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 379.611651][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.649288][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.660211][ T8000] bridge_slave_0: entered allmulticast mode [ 379.670662][ T8000] bridge_slave_0: entered promiscuous mode [ 379.702236][ T7919] team0: Port device team_slave_0 added [ 379.747975][ T7919] team0: Port device team_slave_1 added [ 379.777442][ T7954] team0: Port device team_slave_0 added [ 379.798934][ T7954] team0: Port device team_slave_1 added [ 380.110197][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.136114][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.107006][ T8000] bridge_slave_1: entered allmulticast mode [ 381.119647][ T8000] bridge_slave_1: entered promiscuous mode [ 381.827451][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.060835][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.091924][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.059266][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.124035][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.261026][ T7919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.352339][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.359432][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.540772][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.722678][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.017549][ T8147] loop5: detected capacity change from 0 to 32768 [ 385.047352][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.079403][ T12] bridge_slave_1: left allmulticast mode [ 385.121585][ T8147] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 385.138247][ T8147] bcachefs (loop5): initializing new filesystem [ 385.151292][ T8147] bcachefs (loop5): going read-write [ 385.184708][ T8147] bcachefs (loop5): marking superblocks [ 385.205402][ T8147] bcachefs (loop5): initializing freespace [ 385.212959][ T8147] bcachefs (loop5): done initializing freespace [ 385.223261][ T8147] bcachefs (loop5): reading snapshots table [ 385.229234][ T8147] bcachefs (loop5): reading snapshots done [ 385.246610][ T12] bridge_slave_1: left promiscuous mode [ 385.270055][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.286213][ T8147] bcachefs (loop5): done starting filesystem [ 385.336166][ T12] bridge_slave_0: left allmulticast mode [ 385.347374][ T12] bridge_slave_0: left promiscuous mode [ 385.353349][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.391228][ T12] bridge_slave_1: left allmulticast mode [ 385.592806][ T12] bridge_slave_1: left promiscuous mode [ 385.598573][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.647150][ T12] bridge_slave_0: left allmulticast mode [ 385.671503][ T12] bridge_slave_0: left promiscuous mode [ 385.690996][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.668774][ T12] bridge_slave_1: left allmulticast mode [ 386.705213][ T12] bridge_slave_1: left promiscuous mode [ 387.180894][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.202189][ T12] bridge_slave_0: left allmulticast mode [ 387.208664][ T12] bridge_slave_0: left promiscuous mode [ 387.268338][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.690555][ T8147] syz.5.475 (8147) used greatest stack depth: 13648 bytes left [ 388.718296][ T5829] bcachefs (loop5): shutting down [ 388.761873][ T5829] bcachefs (loop5): going read-only [ 388.767675][ T5829] bcachefs (loop5): finished waiting for writes to stop [ 388.834514][ T5829] bcachefs (loop5): flushing journal and stopping allocators, journal seq 6 [ 388.868406][ T5829] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 6 [ 388.930990][ T5829] bcachefs (loop5): clean shutdown complete, journal seq 7 [ 388.952549][ T5829] bcachefs (loop5): marking filesystem clean [ 389.066767][ T5829] bcachefs (loop5): shutdown complete [ 389.077569][ T8178] loop3: detected capacity change from 0 to 64 [ 389.119799][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.199266][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.243763][ T12] bond0 (unregistering): Released all slaves [ 389.343753][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.384510][ T5918] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 389.395966][ T8181] loop0: detected capacity change from 0 to 1024 [ 389.421518][ T5918] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.441527][ T8181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.461090][ T8181] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 389.501037][ T8181] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 389.587532][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.617053][ T12] bond0 (unregistering): Released all slaves [ 390.481248][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.590477][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.610541][ T12] bond0 (unregistering): Released all slaves [ 390.640156][ T8189] capability: warning: `syz.0.485' uses deprecated v2 capabilities in a way that may be insecure [ 390.924885][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.940839][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.975771][ T7919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.628843][ T7954] hsr_slave_0: entered promiscuous mode [ 392.667818][ T7954] hsr_slave_1: entered promiscuous mode [ 392.755483][ T7954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.763888][ T7954] Cannot create hsr debugfs directory [ 392.829854][ T12] hsr_slave_0: left promiscuous mode [ 392.891004][ T12] hsr_slave_1: left promiscuous mode [ 392.931516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.942233][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.981049][ T12] hsr_slave_0: left promiscuous mode [ 392.987211][ T12] hsr_slave_1: left promiscuous mode [ 393.011577][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.028528][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.332893][ T8203] loop3: detected capacity change from 0 to 1764 [ 394.666698][ T12] team0 (unregistering): Port device team_slave_1 removed [ 394.676004][ T8209] loop0: detected capacity change from 0 to 128 [ 394.779759][ T12] team0 (unregistering): Port device team_slave_0 removed [ 396.020060][ T8215] loop3: detected capacity change from 0 to 64 [ 396.198533][ T8215] overlayfs: upper fs needs to support d_type. [ 396.215015][ T8215] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 396.222520][ T8215] overlayfs: failed to set xattr on upper [ 396.228298][ T8215] overlayfs: ...falling back to redirect_dir=nofollow. [ 396.235619][ T8215] overlayfs: ...falling back to index=off. [ 396.241536][ T8215] overlayfs: ...falling back to uuid=null. [ 396.313837][ T6679] kworker/u8:15: attempt to access beyond end of device [ 396.313837][ T6679] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 396.857457][ T5824] Trying to free block not in datazone [ 396.880866][ T5824] Trying to free block not in datazone [ 396.903131][ T5824] Trying to free block not in datazone [ 397.087142][ T8219] loop5: detected capacity change from 0 to 4096 [ 398.858402][ T8228] sctp: [Deprecated]: syz.5.480 (pid 8228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.858402][ T8228] Use struct sctp_sack_info instead [ 398.895784][ T12] team0 (unregistering): Port device team_slave_1 removed [ 398.984835][ T12] team0 (unregistering): Port device team_slave_0 removed [ 405.095930][ T12] team0 (unregistering): Port device team_slave_1 removed [ 405.496783][ T8267] loop0: detected capacity change from 0 to 512 [ 405.540268][ T8267] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.502: casefold flag without casefold feature [ 405.563916][ T12] team0 (unregistering): Port device team_slave_0 removed [ 405.697460][ T8267] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.502: couldn't read orphan inode 15 (err -117) [ 405.933560][ T8267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.058461][ T8000] team0: Port device team_slave_0 added [ 407.157632][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.293041][ T8000] team0: Port device team_slave_1 added [ 407.622870][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.670795][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.846708][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.934048][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.010841][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.080653][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.204600][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.228630][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.249664][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.263267][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.274482][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.282628][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.319959][ T8287] loop5: detected capacity change from 0 to 1024 [ 408.568002][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.577802][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.586236][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.594400][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.602546][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 408.611162][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.783792][ T8300] loop0: detected capacity change from 0 to 64 [ 408.844450][ T8300] hfs: invalid btree extent records [ 408.853347][ T8300] hfs: unable to open extent tree [ 408.859076][ T8300] hfs: can't find a HFS filesystem on dev loop0 [ 409.586361][ T6360] hfsplus: b-tree write err: -5, ino 4 [ 410.050494][ T8000] hsr_slave_0: entered promiscuous mode [ 410.091935][ T8000] hsr_slave_1: entered promiscuous mode [ 410.874231][ T8000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.048722][ T5844] Bluetooth: hci0: command tx timeout [ 411.055450][ T5844] Bluetooth: hci1: command tx timeout [ 411.181209][ T8000] Cannot create hsr debugfs directory [ 411.329719][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 411.340100][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 411.348679][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 411.358893][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 411.366703][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 411.385833][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 412.274859][ T8320] loop5: detected capacity change from 0 to 4096 [ 413.080787][ T5844] Bluetooth: hci1: command tx timeout [ 413.087555][ T56] Bluetooth: hci0: command tx timeout [ 413.277932][ T8290] chnl_net:caif_netlink_parms(): no params data found [ 413.481055][ T5844] Bluetooth: hci3: command tx timeout [ 413.614968][ T8334] loop5: detected capacity change from 0 to 256 [ 413.666853][ T8334] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 413.699143][ T8334] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 413.915111][ T8334] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 414.431012][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 414.512646][ T8341] loop0: detected capacity change from 0 to 256 [ 414.547335][ T8341] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 414.654577][ T8290] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.672565][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.679825][ T8290] bridge_slave_0: entered allmulticast mode [ 414.702529][ T8290] bridge_slave_0: entered promiscuous mode [ 414.722528][ T8290] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.729632][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.771091][ T8290] bridge_slave_1: entered allmulticast mode [ 414.778220][ T8290] bridge_slave_1: entered promiscuous mode [ 414.923383][ T8347] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 414.931275][ T8347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.162482][ T56] Bluetooth: hci0: command tx timeout [ 415.168147][ T5844] Bluetooth: hci1: command tx timeout [ 415.561043][ T5844] Bluetooth: hci3: command tx timeout [ 415.704798][ T8353] loop0: detected capacity change from 0 to 1024 [ 415.774196][ T8353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.817829][ T8355] 9pnet_fd: Insufficient options for proto=fd [ 415.838788][ T8290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.073694][ T8290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.592159][ T8312] chnl_net:caif_netlink_parms(): no params data found [ 416.614622][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.628506][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.648888][ T8297] bridge_slave_0: entered allmulticast mode [ 416.996025][ T8297] bridge_slave_0: entered promiscuous mode [ 417.222122][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.229263][ T8297] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.237575][ T8297] bridge_slave_1: entered allmulticast mode [ 417.244723][ T5844] Bluetooth: hci1: command tx timeout [ 417.250420][ T5844] Bluetooth: hci0: command tx timeout [ 417.270285][ T8297] bridge_slave_1: entered promiscuous mode [ 417.307863][ T8290] team0: Port device team_slave_0 added [ 417.319474][ T8290] team0: Port device team_slave_1 added [ 417.641304][ T5844] Bluetooth: hci3: command tx timeout [ 418.693103][ T8297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.726319][ T8297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.674930][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.682003][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.709188][ T8290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.722426][ T8290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.729371][ T8290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.755641][ T5844] Bluetooth: hci3: command tx timeout [ 419.779814][ T8290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.264119][ T8297] team0: Port device team_slave_0 added [ 421.340411][ T8290] hsr_slave_0: entered promiscuous mode [ 421.347350][ T8290] hsr_slave_1: entered promiscuous mode [ 421.361402][ T8290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.368947][ T8290] Cannot create hsr debugfs directory [ 421.388951][ T8000] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 421.400219][ T8297] team0: Port device team_slave_1 added [ 421.483783][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.648135][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.669877][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.677112][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.684505][ T8312] bridge_slave_0: entered allmulticast mode [ 421.692578][ T8312] bridge_slave_0: entered promiscuous mode [ 421.700426][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.721397][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.728606][ T8312] bridge_slave_1: entered allmulticast mode [ 421.751870][ T8312] bridge_slave_1: entered promiscuous mode [ 421.771249][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.778206][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.809425][ T8297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.105353][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.788819][ T8312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.822114][ T8297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.849490][ T8297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.970095][ T8297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.995845][ T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.004682][ T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.013053][ T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.021614][ T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.037595][ T56] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 423.046253][ T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.119282][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.238385][ T8312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.263530][ T8312] team0: Port device team_slave_0 added [ 424.282896][ T8312] team0: Port device team_slave_1 added [ 424.388292][ T8391] lo speed is unknown, defaulting to 1000 [ 424.429015][ T8297] hsr_slave_0: entered promiscuous mode [ 424.435759][ T8297] hsr_slave_1: entered promiscuous mode [ 424.450526][ T8297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.469304][ T8297] Cannot create hsr debugfs directory [ 424.507087][ T8312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.514215][ T8391] lo speed is unknown, defaulting to 1000 [ 424.521221][ T8312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.580764][ T8312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.618688][ T8312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.636021][ T8312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.675431][ T8312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.739905][ T8391] lo speed is unknown, defaulting to 1000 [ 424.755607][ T8391] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 424.802099][ T8391] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 424.926944][ T8312] hsr_slave_0: entered promiscuous mode [ 424.933719][ T8312] hsr_slave_1: entered promiscuous mode [ 424.939762][ T8312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.947871][ T8312] Cannot create hsr debugfs directory [ 424.962936][ T8391] lo speed is unknown, defaulting to 1000 [ 425.016378][ T8391] lo speed is unknown, defaulting to 1000 [ 425.090791][ T5844] Bluetooth: hci5: command tx timeout [ 425.115056][ T12] bridge_slave_1: left allmulticast mode [ 425.130800][ T12] bridge_slave_1: left promiscuous mode [ 425.136523][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.157132][ T12] bridge_slave_0: left allmulticast mode [ 425.169200][ T12] bridge_slave_0: left promiscuous mode [ 425.181159][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.201780][ T12] bridge_slave_1: left allmulticast mode [ 425.207437][ T12] bridge_slave_1: left promiscuous mode [ 425.229033][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.248134][ T12] bridge_slave_0: left allmulticast mode [ 425.260252][ T12] bridge_slave_0: left promiscuous mode [ 425.271068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.291364][ T12] bridge_slave_1: left allmulticast mode [ 425.297017][ T12] bridge_slave_1: left promiscuous mode [ 425.317530][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.342190][ T12] bridge_slave_0: left allmulticast mode [ 425.379045][ T12] bridge_slave_0: left promiscuous mode [ 425.389301][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.191009][ T5844] Bluetooth: hci5: command tx timeout [ 427.296551][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.308644][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.333864][ T12] bond0 (unregistering): Released all slaves [ 427.413953][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.456504][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.484099][ T12] bond0 (unregistering): Released all slaves [ 427.669911][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.698614][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.722503][ T12] bond0 (unregistering): Released all slaves [ 428.176339][ T8391] lo speed is unknown, defaulting to 1000 [ 428.236134][ T8391] lo speed is unknown, defaulting to 1000 [ 428.326876][ T8391] lo speed is unknown, defaulting to 1000 [ 428.402850][ T8391] lo speed is unknown, defaulting to 1000 [ 428.452738][ T8391] lo speed is unknown, defaulting to 1000 [ 428.525311][ T8391] lo speed is unknown, defaulting to 1000 [ 428.591308][ T8391] lo speed is unknown, defaulting to 1000 [ 428.627592][ T8391] lo speed is unknown, defaulting to 1000 [ 428.641506][ T8394] chnl_net:caif_netlink_parms(): no params data found [ 428.674533][ T8290] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 428.688301][ T8391] lo speed is unknown, defaulting to 1000 [ 428.696985][ T8290] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 428.716640][ T8290] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 428.748322][ T12] hsr_slave_0: left promiscuous mode [ 428.762109][ T12] hsr_slave_1: left promiscuous mode [ 428.767828][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.791518][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.811382][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.820216][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.846763][ T12] hsr_slave_0: left promiscuous mode [ 428.861997][ T12] hsr_slave_1: left promiscuous mode [ 428.867893][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.880806][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.901942][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.909343][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.220614][ T12] veth1_macvtap: left promiscuous mode [ 429.226371][ T12] veth0_macvtap: left promiscuous mode [ 429.233690][ T12] veth1_vlan: left promiscuous mode [ 429.239125][ T12] veth0_vlan: left promiscuous mode [ 429.241315][ T5844] Bluetooth: hci5: command tx timeout [ 431.350837][ T5844] Bluetooth: hci5: command tx timeout [ 434.341017][ T12] team0 (unregistering): Port device team_slave_1 removed [ 434.529814][ T8453] loop0: detected capacity change from 0 to 128 [ 434.536637][ T12] team0 (unregistering): Port device team_slave_0 removed [ 435.041669][ T12] team0 (unregistering): Port device team_slave_1 removed [ 435.103484][ T12] team0 (unregistering): Port device team_slave_0 removed [ 437.848476][ T12] team0 (unregistering): Port device team_slave_1 removed [ 438.912439][ T12] team0 (unregistering): Port device team_slave_0 removed [ 439.564823][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.887608][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.212557][ T8290] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 443.038875][ T8297] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 443.364037][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.390852][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.398063][ T8394] bridge_slave_0: entered allmulticast mode [ 443.453557][ T8394] bridge_slave_0: entered promiscuous mode [ 443.471077][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.480184][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.530290][ T8394] bridge_slave_1: entered allmulticast mode [ 443.549964][ T8394] bridge_slave_1: entered promiscuous mode [ 443.554637][ T8517] loop0: detected capacity change from 0 to 16 [ 443.577679][ T8517] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 443.589762][ T8297] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 443.904947][ T8297] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 444.926779][ T8297] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 446.286900][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.308122][ T8526] loop0: detected capacity change from 0 to 8 [ 446.349009][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.740268][ T8530] SQUASHFS error: Failed to read block 0x4de: -5 [ 446.748470][ T8530] SQUASHFS error: Failed to read block 0x4de: -5 [ 446.770485][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 446.770528][ T30] audit: type=1800 audit(1742693058.405:326): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.562" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 447.500289][ T8290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.678259][ T8394] team0: Port device team_slave_0 added [ 447.701266][ T8394] team0: Port device team_slave_1 added [ 449.089535][ T8538] loop0: detected capacity change from 0 to 32768 [ 450.727333][ T8290] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.734975][ T8538] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop0": -EINTR [ 450.825214][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.970833][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.040497][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.063192][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.070206][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.380044][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.441219][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.476703][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.483885][ T6700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.534052][ T6700] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.541226][ T6700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.587821][ T8312] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 452.296984][ T8312] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 452.319955][ T8312] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 452.509306][ T8394] hsr_slave_0: entered promiscuous mode [ 452.529254][ T8394] hsr_slave_1: entered promiscuous mode [ 452.539239][ T8394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.550825][ T8394] Cannot create hsr debugfs directory [ 452.588615][ T8561] loop0: detected capacity change from 0 to 1024 [ 452.596845][ T8297] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.691934][ T8561] EXT4-fs: Ignoring removed i_version option [ 452.698006][ T8561] EXT4-fs: inline encryption not supported [ 452.731364][ T8312] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 452.824520][ T8561] EXT4-fs (loop0): Test dummy encryption mode enabled [ 452.842271][ T8561] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 453.557491][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.564645][ T2881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.800054][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.807343][ T2881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.125437][ T8290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.801172][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 456.011268][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 456.034912][ T26] usb 1-1: config 1 interface 0 altsetting 121 bulk endpoint 0x82 has invalid maxpacket 32 [ 456.059035][ T26] usb 1-1: config 1 interface 0 altsetting 121 bulk endpoint 0x3 has invalid maxpacket 1023 [ 456.081839][ T26] usb 1-1: config 1 interface 0 has no altsetting 0 [ 456.105150][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.114895][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.131312][ T26] usb 1-1: Product: syz [ 456.135491][ T26] usb 1-1: Manufacturer: syz [ 456.140106][ T26] usb 1-1: SerialNumber: syz [ 456.172722][ T8580] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.192834][ T8580] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.370330][ T8312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.419903][ T8297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.484602][ T26] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 456.547423][ T26] usb 1-1: USB disconnect, device number 5 [ 456.561394][ T8312] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.862333][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.869489][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.889080][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.896247][ T6693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.191684][ T12] bridge_slave_1: left allmulticast mode [ 457.197375][ T12] bridge_slave_1: left promiscuous mode [ 457.231309][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.264015][ T12] bridge_slave_0: left allmulticast mode [ 457.286650][ T12] bridge_slave_0: left promiscuous mode [ 457.301553][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.468793][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.494354][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.514940][ T12] bond0 (unregistering): Released all slaves [ 457.707762][ T8290] veth0_vlan: entered promiscuous mode [ 457.725607][ T12] hsr_slave_0: left promiscuous mode [ 457.744921][ T12] hsr_slave_1: left promiscuous mode [ 457.761399][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.781836][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.243836][ T12] team0 (unregistering): Port device team_slave_1 removed [ 458.282168][ T12] team0 (unregistering): Port device team_slave_0 removed [ 458.540073][ T8394] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 458.564695][ T8394] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 458.588672][ T8290] veth1_vlan: entered promiscuous mode [ 458.628206][ T8394] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 458.661247][ T8394] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 458.978494][ T8290] veth0_macvtap: entered promiscuous mode [ 459.160057][ T8642] loop0: detected capacity change from 0 to 256 [ 459.171974][ T8642] exfat: Deprecated parameter 'namecase' [ 459.235227][ T8642] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0x7683d6d3, utbl_chksum : 0xe619d30d) [ 459.917987][ T8290] veth1_macvtap: entered promiscuous mode [ 460.007397][ T8297] veth0_vlan: entered promiscuous mode [ 460.203768][ T8290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.290567][ T8290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.301166][ T8290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.312146][ T8290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.325303][ T8290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.412460][ T8290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.451536][ T8290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.478063][ T8290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.491650][ T8290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.512041][ T8290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.545112][ T8290] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.554103][ T8290] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.563138][ T8290] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.574442][ T8290] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.650530][ T8652] overlayfs: failed to clone lowerpath [ 461.228031][ T8297] veth1_vlan: entered promiscuous mode [ 461.289025][ T8312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.543096][ T8297] veth0_macvtap: entered promiscuous mode [ 461.679425][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.739812][ T8297] veth1_macvtap: entered promiscuous mode [ 462.723757][ T8667] xt_CT: No such helper "syz0" [ 462.769493][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.792141][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.802611][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.813484][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.823872][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.835414][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.846923][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.857744][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.871217][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.881863][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.898177][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.902233][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.585'. [ 462.908580][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.928170][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.940134][ T8297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.956777][ T8297] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.965789][ T8297] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.975215][ T8297] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.986240][ T8297] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.005966][ T8394] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.033098][ T8673] bridge0: entered promiscuous mode [ 463.038998][ T8673] macvtap1: entered promiscuous mode [ 463.046465][ T8673] macvtap1: entered allmulticast mode [ 463.053537][ T8673] bridge0: entered allmulticast mode [ 463.067735][ T8674] bridge0: left allmulticast mode [ 463.073166][ T8674] bridge0: left promiscuous mode [ 463.382738][ T6681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.397290][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.404433][ T6091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.416195][ T6681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.533758][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.540935][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.848569][ T8312] veth0_vlan: entered promiscuous mode [ 464.822596][ T6689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.874041][ T8312] veth1_vlan: entered promiscuous mode [ 464.890781][ T6689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.206811][ T8312] veth0_macvtap: entered promiscuous mode [ 465.250049][ T6689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.263978][ T8312] veth1_macvtap: entered promiscuous mode [ 465.428973][ T6689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.736400][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.755321][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.765711][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.779596][ T8700] loop0: detected capacity change from 0 to 2048 [ 465.786151][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.796202][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.809471][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.821067][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.831867][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.851749][ T8312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.902917][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.940978][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.176958][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.132988][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.145724][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.251728][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.271688][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.340949][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.567223][ T8312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.082441][ T6681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.090300][ T6681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.611941][ T8312] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.627111][ T8312] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.636259][ T8312] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.649437][ T8312] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.584337][ T5844] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 471.040553][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.315181][ T8759] overlayfs: failed to clone upperpath [ 473.442106][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.451649][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.460924][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.473249][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.484940][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.499399][ T56] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 473.508390][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.546914][ T8764] loop6: detected capacity change from 0 to 128 [ 473.613923][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 473.633392][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 473.647784][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.657658][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.665721][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 473.673172][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.561869][ T56] Bluetooth: hci1: command tx timeout [ 475.706194][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.721443][ T56] Bluetooth: hci3: command tx timeout [ 476.007406][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.118190][ T8755] lo speed is unknown, defaulting to 1000 [ 477.815007][ T8765] lo speed is unknown, defaulting to 1000 [ 477.829864][ T56] Bluetooth: hci1: command tx timeout [ 477.835627][ T56] Bluetooth: hci3: command tx timeout [ 478.349736][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.455548][ T8394] veth0_vlan: entered promiscuous mode [ 478.520534][ T8394] veth1_vlan: entered promiscuous mode [ 479.727334][ T12] bridge_slave_1: left allmulticast mode [ 479.744056][ T12] bridge_slave_1: left promiscuous mode [ 479.759216][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.008143][ T56] Bluetooth: hci1: command tx timeout [ 480.014147][ T5844] Bluetooth: hci3: command tx timeout [ 480.042441][ T12] bridge_slave_0: left allmulticast mode [ 480.050920][ T12] bridge_slave_0: left promiscuous mode [ 480.056672][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.045561][ T5844] Bluetooth: hci3: command tx timeout [ 482.045580][ T56] Bluetooth: hci1: command tx timeout [ 482.156017][ T8822] openvswitch: netlink: ERSPAN option length err (len 9152, max 255). [ 482.221369][ T8822] loop6: detected capacity change from 0 to 2048 [ 482.592992][ T8825] loop0: detected capacity change from 0 to 256 [ 482.626576][ T8826] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 482.638948][ T8825] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 482.714114][ T8825] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 483.066768][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.077440][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.093779][ T12] bond0 (unregistering): Released all slaves [ 483.111758][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 483.250722][ T12] hsr_slave_0: left promiscuous mode [ 483.273806][ T12] hsr_slave_1: left promiscuous mode [ 483.279615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.291114][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.357750][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.380804][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.495697][ T8837] loop6: detected capacity change from 0 to 128 [ 483.577386][ T8837] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 483.625612][ T8837] sysv_free_block: trying to free block not in datazone [ 483.670093][ T8837] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 483.927054][ T12] veth1_macvtap: left promiscuous mode [ 484.036605][ T12] veth0_macvtap: left promiscuous mode [ 484.367299][ T12] veth1_vlan: left promiscuous mode [ 485.343821][ T12] veth0_vlan: left promiscuous mode [ 486.595765][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 486.606107][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 486.614644][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 486.640364][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 486.649277][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 486.656638][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 486.692658][ T8850] syz.0.620 uses obsolete (PF_INET,SOCK_PACKET) [ 486.849636][ T8855] xt_hashlimit: overflow, try lower: 5/0 [ 488.681332][ T5844] Bluetooth: hci5: command tx timeout [ 489.894539][ T5924] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 490.055254][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 490.131523][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 490.193919][ T5924] usb 1-1: config 1 interface 0 altsetting 121 bulk endpoint 0x82 has invalid maxpacket 32 [ 490.301748][ T5924] usb 1-1: config 1 interface 0 altsetting 121 bulk endpoint 0x3 has invalid maxpacket 1023 [ 490.400579][ T5924] usb 1-1: config 1 interface 0 has no altsetting 0 [ 490.736578][ T5924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 490.818950][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.877746][ T5924] usb 1-1: Product: syz [ 490.903423][ T5844] Bluetooth: hci5: command tx timeout [ 490.908980][ T5924] usb 1-1: Manufacturer: syz [ 490.920697][ T5924] usb 1-1: SerialNumber: syz [ 490.928802][ T8865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.939800][ T8865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.226042][ T12] team0 (unregistering): Port device team_slave_1 removed [ 491.294613][ T5924] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 491.307077][ T5924] usb 1-1: USB disconnect, device number 6 [ 491.365772][ T12] team0 (unregistering): Port device team_slave_0 removed [ 491.432161][ T8886] netlink: 32 bytes leftover after parsing attributes in process `syz.5.630'. [ 493.022480][ T5844] Bluetooth: hci5: command tx timeout [ 495.025118][ T8849] lo speed is unknown, defaulting to 1000 [ 495.081359][ T5844] Bluetooth: hci5: command tx timeout [ 496.140131][ T8765] chnl_net:caif_netlink_parms(): no params data found [ 497.826458][ T8929] loop6: detected capacity change from 0 to 16 [ 498.041821][ T8929] erofs (device loop6): mounted with root inode @ nid 36. [ 498.344729][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.383534][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.425187][ T8755] bridge_slave_0: entered allmulticast mode [ 498.493095][ T8755] bridge_slave_0: entered promiscuous mode [ 498.530830][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.545882][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.681067][ T8755] bridge_slave_1: entered allmulticast mode [ 498.688183][ T8755] bridge_slave_1: entered promiscuous mode [ 499.038083][ T8934] loop6: detected capacity change from 0 to 32768 [ 499.804966][ T8934] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 499.821514][ T8934] bcachefs (loop6): initializing new filesystem [ 499.829526][ T8934] bcachefs (loop6): going read-write [ 499.835449][ T8934] bcachefs (loop6): marking superblocks [ 499.851943][ T8934] bcachefs (loop6): initializing freespace [ 499.859348][ T8934] bcachefs (loop6): done initializing freespace [ 499.867860][ T8934] bcachefs (loop6): reading snapshots table [ 499.873896][ T8934] bcachefs (loop6): reading snapshots done [ 499.907497][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.954568][ T8934] bcachefs (loop6): done starting filesystem [ 500.051698][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.014539][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.053899][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.069149][ T8962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.644'. [ 501.119062][ T8755] team0: Port device team_slave_0 added [ 501.266960][ T8290] bcachefs (loop6): shutting down [ 501.370926][ T8290] bcachefs (loop6): going read-only [ 501.376160][ T8290] bcachefs (loop6): finished waiting for writes to stop [ 501.514923][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.541682][ T8765] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.548754][ T8290] bcachefs (loop6): flushing journal and stopping allocators, journal seq 6 [ 501.558171][ T8765] bridge_slave_0: entered allmulticast mode [ 501.581956][ T8765] bridge_slave_0: entered promiscuous mode [ 501.630384][ T8755] team0: Port device team_slave_1 added [ 501.644623][ T8290] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 6 [ 501.665157][ T8290] bcachefs (loop6): clean shutdown complete, journal seq 7 [ 501.692869][ T8290] bcachefs (loop6): marking filesystem clean [ 501.710861][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.717956][ T8765] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.744964][ T8765] bridge_slave_1: entered allmulticast mode [ 501.757861][ T8765] bridge_slave_1: entered promiscuous mode [ 501.778904][ T8290] bcachefs (loop6): shutdown complete [ 502.172346][ T8765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.310921][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.318233][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.569310][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.632128][ T8765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.650440][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.839111][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.245056][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.660845][ T8765] team0: Port device team_slave_0 added [ 507.644276][ T8765] team0: Port device team_slave_1 added [ 507.985855][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 508.008199][ T8755] hsr_slave_0: entered promiscuous mode [ 508.021736][ T8755] hsr_slave_1: entered promiscuous mode [ 508.027896][ T8755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.896877][ T8755] Cannot create hsr debugfs directory [ 509.504776][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.530578][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.590230][ T8765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.671631][ T9045] overlayfs: failed to clone upperpath [ 509.818545][ T8765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.842247][ T8765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.888774][ T8765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.630263][ T8765] hsr_slave_0: entered promiscuous mode [ 510.963788][ T8765] hsr_slave_1: entered promiscuous mode [ 510.969905][ T8765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.021210][ T8765] Cannot create hsr debugfs directory [ 512.218193][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.265174][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.303269][ T8849] bridge_slave_0: entered allmulticast mode [ 512.331391][ T8849] bridge_slave_0: entered promiscuous mode [ 512.373020][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.380141][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.412610][ T8849] bridge_slave_1: entered allmulticast mode [ 512.435769][ T8849] bridge_slave_1: entered promiscuous mode [ 513.684369][ T9081] loop6: detected capacity change from 0 to 128 [ 513.819791][ T9081] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 513.873591][ T9081] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 513.913915][ T6689] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.971138][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.152181][ T8290] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 516.287857][ T6689] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.590190][ T5891] IPVS: starting estimator thread 0... [ 517.040847][ T9108] IPVS: using max 18 ests per chain, 43200 per kthread [ 517.162912][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.176629][ T9110] sctp: [Deprecated]: syz.5.667 (pid 9110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.176629][ T9110] Use struct sctp_sack_info instead [ 518.522583][ T6689] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.379681][ T8849] team0: Port device team_slave_0 added [ 523.088994][ T6689] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.106931][ T8849] team0: Port device team_slave_1 added [ 524.452316][ T9169] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 525.739765][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.783727][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.877323][ T8849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.910870][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.917834][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.982374][ T8849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.497817][ T8849] hsr_slave_0: entered promiscuous mode [ 527.521855][ T8849] hsr_slave_1: entered promiscuous mode [ 527.527979][ T8849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.544908][ T8849] Cannot create hsr debugfs directory [ 527.559465][ T9194] loop6: detected capacity change from 0 to 2048 [ 527.623418][ T9194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.461911][ T6689] bridge_slave_1: left allmulticast mode [ 529.498472][ T6689] bridge_slave_1: left promiscuous mode [ 529.524010][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.588842][ T6689] bridge_slave_0: left allmulticast mode [ 529.598251][ T6689] bridge_slave_0: left promiscuous mode [ 529.606134][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.620876][ T6689] bridge_slave_1: left allmulticast mode [ 529.626604][ T6689] bridge_slave_1: left promiscuous mode [ 529.633768][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.645498][ T6689] bridge_slave_0: left allmulticast mode [ 529.655807][ T6689] bridge_slave_0: left promiscuous mode [ 529.663757][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.041316][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.053084][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.063285][ T6689] bond0 (unregistering): Released all slaves [ 533.511360][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.573211][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.584083][ T6689] bond0 (unregistering): Released all slaves [ 534.543458][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 534.782192][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 534.793764][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.812239][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 534.820146][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 534.820486][ T9248] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 534.828161][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 534.835644][ T9248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 534.849810][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.858694][ T9248] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 534.867538][ T9248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 534.876682][ T9248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 534.884230][ T9248] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 537.100867][ T56] Bluetooth: hci7: command tx timeout [ 537.107386][ T56] Bluetooth: hci6: command tx timeout [ 539.161976][ T56] Bluetooth: hci6: command tx timeout [ 539.162772][ T9248] Bluetooth: hci7: command tx timeout [ 539.170180][ T9241] lo speed is unknown, defaulting to 1000 [ 539.501979][ T9243] lo speed is unknown, defaulting to 1000 [ 539.652320][ T6689] hsr_slave_0: left promiscuous mode [ 539.812444][ T6689] hsr_slave_1: left promiscuous mode [ 539.829469][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.865002][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.937596][ T6689] hsr_slave_0: left promiscuous mode [ 539.943649][ T6689] hsr_slave_1: left promiscuous mode [ 539.959726][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.973277][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.002722][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.070100][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.001784][ T6689] veth1_vlan: left promiscuous mode [ 541.050787][ T6689] veth0_vlan: left promiscuous mode [ 541.089450][ T6689] veth1_macvtap: left promiscuous mode [ 541.107943][ T6689] veth0_macvtap: left promiscuous mode [ 541.145383][ T6689] veth1_vlan: left promiscuous mode [ 541.186678][ T6689] veth0_vlan: left promiscuous mode [ 541.246975][ T9248] Bluetooth: hci7: command tx timeout [ 541.247843][ T56] Bluetooth: hci6: command tx timeout [ 543.660901][ T56] Bluetooth: hci6: command tx timeout [ 543.666541][ T56] Bluetooth: hci7: command tx timeout [ 544.026664][ T9313] loop6: detected capacity change from 0 to 128 [ 544.036051][ T9313] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 544.050021][ T9313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.518230][ T9319] mmap: syz.5.709 (9319) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 546.721782][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 548.197396][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 548.212251][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 548.219902][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 548.227782][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 548.235679][ T56] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 548.246297][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 549.352482][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 550.337784][ T9340] Falling back ldisc for ttyprintk. [ 550.520973][ T9248] Bluetooth: hci3: command tx timeout [ 552.670752][ T9248] Bluetooth: hci3: command tx timeout [ 554.681801][ T9248] Bluetooth: hci3: command tx timeout [ 556.072490][ T9388] Process accounting resumed [ 556.761047][ T9248] Bluetooth: hci3: command tx timeout [ 557.363589][ T9401] sctp: [Deprecated]: syz.0.728 (pid 9401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.363589][ T9401] Use struct sctp_sack_info instead [ 560.503287][ T9418] overlayfs: failed to clone upperpath [ 562.584371][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.655877][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.008376][ T9445] sctp: [Deprecated]: syz.0.739 (pid 9445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.008376][ T9445] Use struct sctp_sack_info instead [ 568.215779][ T9468] netlink: 'syz.5.746': attribute type 1 has an invalid length. [ 570.471708][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 570.859704][ T9487] openvswitch: netlink: Flow actions attr not present in new flow. [ 571.482242][ T9484] loop6: detected capacity change from 0 to 4096 [ 571.611448][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 571.620328][ T9484] sctp: [Deprecated]: syz.6.751 (pid 9484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.620328][ T9484] Use struct sctp_sack_info instead [ 581.058643][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.771'. [ 581.717475][ T9558] bond_slave_0: entered promiscuous mode [ 581.724526][ T9558] bond_slave_1: entered promiscuous mode [ 581.734345][ T9558] macvtap1: entered promiscuous mode [ 581.739731][ T9558] bond0: entered promiscuous mode [ 581.749661][ T9558] macvtap1: entered allmulticast mode [ 581.755463][ T9558] bond0: entered allmulticast mode [ 581.760913][ T9558] bond_slave_0: entered allmulticast mode [ 581.769861][ T9558] bond_slave_1: entered allmulticast mode [ 581.818836][ T9571] netlink: 116 bytes leftover after parsing attributes in process `syz.0.776'. [ 581.842861][ T9558] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 581.893759][ T9559] bond0: left allmulticast mode [ 581.910768][ T9559] bond_slave_0: left allmulticast mode [ 581.930853][ T9559] bond_slave_1: left allmulticast mode [ 581.936347][ T9559] bond0: left promiscuous mode [ 581.960178][ T9559] bond_slave_0: left promiscuous mode [ 581.965934][ T9559] bond_slave_1: left promiscuous mode [ 584.045078][ T9344] lo speed is unknown, defaulting to 1000 [ 584.272442][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 588.107642][ T9630] Driver unsupported XDP return value 0 on prog (id 222) dev N/A, expect packet loss! [ 590.695249][ T9243] chnl_net:caif_netlink_parms(): no params data found [ 590.714114][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.5.788'. [ 591.692538][ T9241] chnl_net:caif_netlink_parms(): no params data found [ 591.774375][ T9344] chnl_net:caif_netlink_parms(): no params data found [ 592.787445][ T9243] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 592.846818][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.793'. [ 593.636355][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.667473][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.710392][ T9344] bridge_slave_0: entered allmulticast mode [ 594.040538][ T9344] bridge_slave_0: entered promiscuous mode [ 594.454606][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.464509][ T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 594.517228][ T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 594.526570][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 594.535134][ T56] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 594.543063][ T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 594.589188][ T9248] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 594.628326][ T9248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 594.638689][ T9248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 594.648217][ T9248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 594.656064][ T9248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 594.663367][ T9248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 596.303024][ T9248] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 596.380899][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.392023][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.399365][ T9344] bridge_slave_1: entered allmulticast mode [ 596.449526][ T9344] bridge_slave_1: entered promiscuous mode [ 596.602214][ T9248] Bluetooth: hci1: command tx timeout [ 596.616744][ T9344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.690977][ T9248] Bluetooth: hci5: command tx timeout [ 596.757478][ T9344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.903752][ T9678] lo speed is unknown, defaulting to 1000 [ 596.909166][ T9344] team0: Port device team_slave_0 added [ 596.966081][ T9344] team0: Port device team_slave_1 added [ 597.031782][ T9680] lo speed is unknown, defaulting to 1000 [ 597.089507][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.097396][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.126384][ T9344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.206430][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.221592][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.252175][ T9344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.422094][ T9344] hsr_slave_0: entered promiscuous mode [ 597.435733][ T9344] hsr_slave_1: entered promiscuous mode [ 597.446614][ T9344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.454450][ T9344] Cannot create hsr debugfs directory [ 598.681474][ T9248] Bluetooth: hci1: command tx timeout [ 598.731453][ T9709] sctp: [Deprecated]: syz.0.805 (pid 9709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.731453][ T9709] Use struct sctp_sack_info instead [ 598.771229][ T9248] Bluetooth: hci5: command tx timeout [ 600.034282][ T9720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 601.040797][ T9248] Bluetooth: hci1: command tx timeout [ 601.046594][ T9248] Bluetooth: hci5: command tx timeout [ 602.314486][ T6689] bridge_slave_1: left allmulticast mode [ 602.340688][ T6689] bridge_slave_1: left promiscuous mode [ 602.346625][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.611918][ T6689] bridge_slave_0: left allmulticast mode [ 602.617942][ T6689] bridge_slave_0: left promiscuous mode [ 602.629482][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.705023][ T9741] overlayfs: failed to clone upperpath [ 603.417025][ T9248] Bluetooth: hci5: command tx timeout [ 603.422612][ T5844] Bluetooth: hci1: command tx timeout [ 603.611399][ T6689] bridge_slave_1: left allmulticast mode [ 603.617091][ T6689] bridge_slave_1: left promiscuous mode [ 603.644866][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.767271][ T6689] bridge_slave_0: left allmulticast mode [ 603.778689][ T6689] bridge_slave_0: left promiscuous mode [ 604.656828][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.129451][ T6689] bridge_slave_1: left allmulticast mode [ 605.138153][ T6689] bridge_slave_1: left promiscuous mode [ 605.171323][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.251913][ T6689] bridge_slave_0: left allmulticast mode [ 605.264179][ T6689] bridge_slave_0: left promiscuous mode [ 605.269899][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.479471][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.555961][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.820450][ T6689] bond0 (unregistering): Released all slaves [ 607.848283][ T6689] bond0 (unregistering): Released all slaves [ 608.909387][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.937395][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 608.947242][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 608.955332][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 608.965399][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 608.973727][ T5844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 608.991172][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 609.077481][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.327130][ T6689] bond0 (unregistering): Released all slaves [ 609.676322][ T9784] loop6: detected capacity change from 0 to 512 [ 610.104771][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.219574][ T9787] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 610.232632][ T9784] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 610.328893][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.084223][ T9248] Bluetooth: hci6: command tx timeout [ 611.177189][ T9784] EXT4-fs (loop6): 1 truncate cleaned up [ 611.184144][ T9784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.266847][ T6689] bond0 (unregistering): Released all slaves [ 612.128187][ T8290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.484497][ T9680] chnl_net:caif_netlink_parms(): no params data found [ 612.774945][ T9775] lo speed is unknown, defaulting to 1000 [ 613.602420][ T9248] Bluetooth: hci6: command tx timeout [ 614.650926][ T6689] hsr_slave_0: left promiscuous mode [ 614.671197][ T6689] hsr_slave_1: left promiscuous mode [ 614.698240][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.729384][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.775014][ T6689] hsr_slave_0: left promiscuous mode [ 615.629336][ T6689] hsr_slave_1: left promiscuous mode [ 615.650714][ T9248] Bluetooth: hci6: command tx timeout [ 615.657148][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.695980][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.745621][ T6689] hsr_slave_0: left promiscuous mode [ 617.136482][ T6689] hsr_slave_1: left promiscuous mode [ 617.150051][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.299279][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.720946][ T9248] Bluetooth: hci6: command tx timeout [ 621.671663][ T9855] sctp: [Deprecated]: syz.5.842 (pid 9855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 621.671663][ T9855] Use struct sctp_sack_info instead [ 622.163016][ T9864] 9pnet_fd: Insufficient options for proto=fd [ 622.189068][ T9864] loop6: detected capacity change from 0 to 2048 [ 622.999314][ T9864] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 623.127834][ T9868] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 623.681332][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 623.921967][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.931436][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.368037][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 628.180685][ T9895] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd6": -EINTR [ 629.220454][ T9906] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 630.577203][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022b31000: rx timeout, send abort [ 630.738161][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 631.064159][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 631.089937][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022b31000: abort rx timeout. Force session deactivation [ 636.287012][ T9935] overlayfs: failed to clone upperpath [ 638.553745][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 638.629173][ T9950] loop6: detected capacity change from 0 to 512 [ 638.638326][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 638.649271][ T9950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 638.863746][ T9950] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 638.921828][ T9950] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 638.940864][ T9950] EXT4-fs (loop6): 1 truncate cleaned up [ 638.960132][ T9950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.921867][ T9950] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #2: block 4: comm syz.6.864: lblock 0 mapped to illegal pblock 4 (length 1) [ 639.991980][ T9950] EXT4-fs (loop6): Remounting filesystem read-only [ 640.137568][ T8290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.156647][ T9678] chnl_net:caif_netlink_parms(): no params data found [ 640.428136][ T9942] lo speed is unknown, defaulting to 1000 [ 641.102483][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.119862][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.129133][ T9680] bridge_slave_0: entered allmulticast mode [ 641.145765][ T9680] bridge_slave_0: entered promiscuous mode [ 641.166915][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.180846][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.198195][ T9680] bridge_slave_1: entered allmulticast mode [ 641.212401][ T9680] bridge_slave_1: entered promiscuous mode [ 643.333900][ T9680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.131546][ T9680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.395547][ T9680] team0: Port device team_slave_0 added [ 644.619366][ T9987] loop6: detected capacity change from 0 to 8192 [ 645.484529][ T9680] team0: Port device team_slave_1 added [ 646.523546][ T9678] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.541311][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.596577][ T9678] bridge_slave_0: entered allmulticast mode [ 646.617122][ T9678] bridge_slave_0: entered promiscuous mode [ 648.955616][ T9678] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.977655][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.986876][ T9678] bridge_slave_1: entered allmulticast mode [ 649.016866][ T9678] bridge_slave_1: entered promiscuous mode [ 649.026757][ T26] libceph: connect (1)[c::]:6789 error -101 [ 649.043393][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 649.050383][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.5.880'. [ 649.085294][T10018] ceph: No mds server is up or the cluster is laggy [ 649.085802][ T26] libceph: connect (1)[c::]:6789 error -101 [ 649.100269][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 649.314817][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.325616][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.360986][ T9680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.441891][T10026] xt_nfacct: accounting object `syz1' does not exists [ 649.644539][ T26] libceph: connect (1)[c::]:6789 error -101 [ 650.300092][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 650.312793][ T9680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.321071][ T9680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.390703][ T9680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.506969][ T9678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.511017][ T9775] chnl_net:caif_netlink_parms(): no params data found [ 652.023411][ T9678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.179563][ T9680] hsr_slave_0: entered promiscuous mode [ 652.201509][ T9680] hsr_slave_1: entered promiscuous mode [ 652.209333][ T9680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.219221][ T9680] Cannot create hsr debugfs directory [ 652.333548][ T9678] team0: Port device team_slave_0 added [ 652.890792][ T9678] team0: Port device team_slave_1 added [ 653.260786][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.267911][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.311731][ T9775] bridge_slave_0: entered allmulticast mode [ 653.358122][ T9775] bridge_slave_0: entered promiscuous mode [ 653.429751][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.503146][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.590076][ T9775] bridge_slave_1: entered allmulticast mode [ 653.753405][ T9775] bridge_slave_1: entered promiscuous mode [ 654.273686][ T9775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.293740][ T9775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.479085][ T9775] team0: Port device team_slave_0 added [ 654.568915][ T9775] team0: Port device team_slave_1 added [ 655.272154][T10071] openvswitch: netlink: Flow actions attr not present in new flow. [ 655.696020][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.705725][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.715368][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.926665][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 655.934518][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 655.942725][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.168455][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.145358][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.351516][ T5844] Bluetooth: hci1: command tx timeout [ 658.390831][ T9775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.006024][T10093] ptrace attach of "./syz-executor exec"[8290] was attempted by "./syz-executor exec"[10093] [ 659.049657][ T9248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.066148][ T9248] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.075631][ T9248] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.092833][ T9248] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 659.104091][ T9248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 659.198789][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 660.520900][ T9248] Bluetooth: hci1: command tx timeout [ 661.281273][ T5844] Bluetooth: hci3: command tx timeout [ 661.308482][ T6689] bridge_slave_1: left allmulticast mode [ 661.624719][ T6689] bridge_slave_1: left promiscuous mode [ 661.741459][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.023370][ T6689] bridge_slave_0: left allmulticast mode [ 662.035702][ T6689] bridge_slave_0: left promiscuous mode [ 662.062712][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.103722][ T6689] bridge_slave_1: left allmulticast mode [ 662.136318][ T6689] bridge_slave_1: left promiscuous mode [ 662.165116][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.204756][ T6689] bridge_slave_0: left allmulticast mode [ 662.233111][ T6689] bridge_slave_0: left promiscuous mode [ 662.267601][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.663796][ T9248] Bluetooth: hci1: command tx timeout [ 663.323044][ T9248] Bluetooth: hci3: command tx timeout [ 663.935486][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 664.760903][ T9248] Bluetooth: hci1: command tx timeout [ 665.035965][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.039104][ T9248] Bluetooth: hci3: command tx timeout [ 666.268799][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.241324][ T6689] bond0 (unregistering): Released all slaves [ 667.331186][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.485499][T10145] netlink: 'syz.6.908': attribute type 10 has an invalid length. [ 667.493601][T10145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.908'. [ 667.505588][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.518726][ T6689] bond0 (unregistering): Released all slaves [ 667.584049][ T6689] bond0 (unregistering): Released all slaves [ 667.697211][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.705600][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.747399][ T9775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.770988][T10145] batadv0: entered promiscuous mode [ 667.776292][T10145] batadv0: entered allmulticast mode [ 667.787646][T10145] bridge0: port 3(batadv0) entered blocking state [ 667.794740][T10145] bridge0: port 3(batadv0) entered disabled state [ 667.815006][T10145] bridge0: port 3(batadv0) entered blocking state [ 667.821729][T10145] bridge0: port 3(batadv0) entered forwarding state [ 668.064476][ T6691] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 668.070503][T10067] lo speed is unknown, defaulting to 1000 [ 668.074169][ T6691] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 668.144292][ T9248] Bluetooth: hci3: command tx timeout [ 668.182635][T10094] lo speed is unknown, defaulting to 1000 [ 668.330817][ T6689] hsr_slave_0: left promiscuous mode [ 668.405384][ T6689] hsr_slave_1: left promiscuous mode [ 668.413964][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.453590][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.536821][T10162] loop6: detected capacity change from 0 to 256 [ 671.632081][T10162] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 671.951964][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 672.107014][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 672.119973][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 672.127832][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 672.136532][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 672.144257][ T5844] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 672.151912][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 672.189708][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 674.571655][ T9248] Bluetooth: hci5: command tx timeout [ 677.130420][ T9248] Bluetooth: hci5: command tx timeout [ 677.646565][ T9248] Bluetooth: hci0: command 0x0406 tx timeout [ 678.902219][T10208] loop6: detected capacity change from 0 to 1024 [ 679.299248][ T5844] Bluetooth: hci5: command tx timeout [ 679.308273][T10208] hfsplus: failed to load root directory [ 679.410482][T10214] netlink: 80 bytes leftover after parsing attributes in process `syz.5.923'. [ 680.351002][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 680.418029][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 681.650777][ T5844] Bluetooth: hci5: command tx timeout [ 682.333908][T10165] lo speed is unknown, defaulting to 1000 [ 683.238459][T10165] chnl_net:caif_netlink_parms(): no params data found [ 683.641976][T10245] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 684.519784][T10067] chnl_net:caif_netlink_parms(): no params data found [ 684.920775][T10094] chnl_net:caif_netlink_parms(): no params data found [ 684.980758][T10165] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.462474][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.830802][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.002155][T10165] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.314000][T10269] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 686.376229][T10165] bridge_slave_0: entered allmulticast mode [ 686.599071][T10165] bridge_slave_0: entered promiscuous mode [ 686.616628][T10165] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.650697][T10165] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.657908][T10165] bridge_slave_1: entered allmulticast mode [ 686.692768][T10165] bridge_slave_1: entered promiscuous mode [ 686.814806][T10281] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 687.710352][T10165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.765869][T10165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.968098][T10290] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 689.908103][T10165] team0: Port device team_slave_0 added [ 690.615780][T10165] team0: Port device team_slave_1 added [ 690.652785][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.659942][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.680001][T10067] bridge_slave_0: entered allmulticast mode [ 690.701896][T10067] bridge_slave_0: entered promiscuous mode [ 691.097572][T10301] loop6: detected capacity change from 0 to 40427 [ 691.114004][T10301] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 691.122128][T10301] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 691.165965][T10301] F2FS-fs (loop6): Found nat_bits in checkpoint [ 691.211793][T10301] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 691.218872][T10301] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 691.403776][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.944'. [ 691.595389][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.647027][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.664091][T10067] bridge_slave_1: entered allmulticast mode [ 691.686679][T10067] bridge_slave_1: entered promiscuous mode [ 691.799268][T10165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.811268][T10165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.871956][T10165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.904566][T10165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.922114][T10165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.009815][T10165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.260252][T10315] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 693.040234][T10067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.124193][T10067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.362113][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.400716][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.407987][T10094] bridge_slave_0: entered allmulticast mode [ 693.415275][T10094] bridge_slave_0: entered promiscuous mode [ 694.123728][T10165] hsr_slave_0: entered promiscuous mode [ 694.152198][T10165] hsr_slave_1: entered promiscuous mode [ 694.158672][T10165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 694.212506][T10165] Cannot create hsr debugfs directory [ 694.307812][T10094] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.430027][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.450847][T10094] bridge_slave_1: entered allmulticast mode [ 694.457911][T10094] bridge_slave_1: entered promiscuous mode [ 696.786789][T10067] team0: Port device team_slave_0 added [ 697.297797][T10094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.329481][T10067] team0: Port device team_slave_1 added [ 697.360045][T10094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.503310][T10067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.519874][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.590675][T10067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.738615][T10067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.761156][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.822700][T10067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.876103][T10094] team0: Port device team_slave_0 added [ 697.906385][T10094] team0: Port device team_slave_1 added [ 701.171137][T10094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.210926][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.289649][T10094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.303104][ T6689] bridge_slave_1: left allmulticast mode [ 701.308755][ T6689] bridge_slave_1: left promiscuous mode [ 701.319098][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.332567][ T6689] bridge_slave_0: left allmulticast mode [ 701.340698][ T6689] bridge_slave_0: left promiscuous mode [ 701.356597][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.592129][ T6689] bridge_slave_1: left allmulticast mode [ 701.597793][ T6689] bridge_slave_1: left promiscuous mode [ 701.630864][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.632173][ T6689] bridge_slave_0: left allmulticast mode [ 702.637862][ T6689] bridge_slave_0: left promiscuous mode [ 702.772923][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.263225][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.283629][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.407955][ T6689] bond0 (unregistering): Released all slaves [ 705.692267][ T6689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.432611][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.732933][ T6689] bond0 (unregistering): Released all slaves [ 707.138066][T10094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.390217][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.169973][T10094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.975638][T10395] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 708.997106][T10395] batman_adv: batadv0: Adding interface: ip6gretap1 [ 709.009147][T10395] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.036050][T10395] batman_adv: batadv0: Interface activated: ip6gretap1 [ 709.731242][T10094] hsr_slave_0: entered promiscuous mode [ 709.745417][T10094] hsr_slave_1: entered promiscuous mode [ 709.760175][T10094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.775016][T10094] Cannot create hsr debugfs directory [ 709.854844][T10067] hsr_slave_0: entered promiscuous mode [ 709.871603][T10067] hsr_slave_1: entered promiscuous mode [ 709.877690][T10067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.900624][T10067] Cannot create hsr debugfs directory [ 709.909580][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.942806][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.082261][ T6689] hsr_slave_0: left promiscuous mode [ 710.111067][ T6689] hsr_slave_1: left promiscuous mode [ 710.192959][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.234716][ T6689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.379535][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 714.431879][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 714.678085][ T6689] team0 (unregistering): Port device team_slave_1 removed [ 714.720375][ T6689] team0 (unregistering): Port device team_slave_0 removed [ 715.362051][T10165] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 715.421690][T10465] overlayfs: failed to clone upperpath [ 715.433759][T10165] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 715.493791][T10165] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 715.543434][T10165] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 716.265175][T10165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.899086][ T9248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 717.909701][ T9248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 717.918964][ T9248] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 717.961177][ T9248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 717.971123][ T9248] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 717.978415][ T9248] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.095925][T10498] loop6: detected capacity change from 0 to 256 [ 718.116102][T10165] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.213033][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.220194][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.265771][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.272954][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.384842][T10487] lo speed is unknown, defaulting to 1000 [ 718.420870][T10165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 719.367605][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 719.382605][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 719.393684][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 719.403175][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 719.411255][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 719.418531][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 720.467194][ T9248] Bluetooth: hci1: command tx timeout [ 721.938811][ T9248] Bluetooth: hci3: command tx timeout [ 722.755903][ T5844] Bluetooth: hci1: command tx timeout [ 722.783774][T10513] lo speed is unknown, defaulting to 1000 [ 723.200992][ T26] ------------[ cut here ]------------ [ 723.206600][ T26] DEBUG_LOCKS_WARN_ON(1) [ 723.206714][ T26] WARNING: CPU: 1 PID: 26 at kernel/locking/lockdep.c:234 __lock_acquire+0x564/0x2100 [ 723.220502][ T26] Modules linked in: [ 723.224395][ T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/1:0 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 723.234977][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 723.245029][ T26] Workqueue: events nsim_dev_hwstats_traffic_work [ 723.251462][ T26] RIP: 0010:__lock_acquire+0x564/0x2100 [ 723.257023][ T26] Code: 00 00 83 3d b1 4f a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 47 bd e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 723.276630][ T26] RSP: 0018:ffffc90000a0f550 EFLAGS: 00010046 [ 723.282698][ T26] RAX: 9cc1120203086400 RBX: 0000000000001b20 RCX: ffff88801daebc00 [ 723.290666][ T26] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 723.298630][ T26] RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: 1ffff110170e519a [ 723.306595][ T26] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88801daec6d4 [ 723.314564][ T26] R13: 0000000000000000 R14: 1ffff11003b5d8e2 R15: ffff88801daec710 [ 723.323052][ T26] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 723.331973][ T26] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 723.338547][ T26] CR2: 00007fb99df80f98 CR3: 000000007ef04000 CR4: 0000000000350ef0 [ 723.346513][ T26] Call Trace: [ 723.349781][ T26] [ 723.352705][ T26] ? __warn+0x165/0x4d0 [ 723.356870][ T26] ? __lock_acquire+0x564/0x2100 [ 723.361817][ T26] ? report_bug+0x2b3/0x500 [ 723.366325][ T26] ? __lock_acquire+0x564/0x2100 [ 723.371272][ T26] ? handle_bug+0x60/0x90 [ 723.375595][ T26] ? exc_invalid_op+0x1a/0x50 [ 723.380266][ T26] ? asm_exc_invalid_op+0x1a/0x20 [ 723.385300][ T26] ? __warn_printk+0x292/0x360 [ 723.390074][ T26] ? __lock_acquire+0x564/0x2100 [ 723.395038][ T26] lock_acquire+0x1ed/0x550 [ 723.399634][ T26] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 723.405188][ T26] ? __pfx_lock_acquire+0x10/0x10 [ 723.410220][ T26] ? rcu_note_context_switch+0xd44/0x1060 [ 723.415955][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.421597][ T26] ? mark_lock+0x9a/0x360 [ 723.425920][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.431561][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.437204][ T26] _raw_spin_lock_nested+0x31/0x40 [ 723.442328][ T26] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 723.447872][ T26] raw_spin_rq_lock_nested+0xb0/0x140 [ 723.453252][ T26] __schedule+0x357/0x4c90 [ 723.457677][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.463321][ T26] ? debug_object_deactivate+0x2d5/0x390 [ 723.468962][ T26] ? __pfx_lock_release+0x10/0x10 [ 723.473997][ T26] ? __pfx___schedule+0x10/0x10 [ 723.478850][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.484490][ T26] ? do_raw_spin_unlock+0x13c/0x8b0 [ 723.489698][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.495340][ T26] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 723.501331][ T26] ? preempt_schedule+0xe1/0xf0 [ 723.506186][ T26] preempt_schedule_common+0x84/0xd0 [ 723.511567][ T26] preempt_schedule+0xe1/0xf0 [ 723.516273][ T26] ? __pfx_preempt_schedule+0x10/0x10 [ 723.521649][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.527296][ T26] preempt_schedule_thunk+0x1a/0x30 [ 723.532629][ T26] _raw_spin_unlock_irq+0x44/0x50 [ 723.537656][ T26] process_scheduled_works+0x8ab/0x18e0 [ 723.543221][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 723.549212][ T26] ? assign_work+0x364/0x3d0 [ 723.553813][ T26] worker_thread+0x870/0xd30 [ 723.558414][ T26] ? __kthread_parkme+0x169/0x1d0 [ 723.563444][ T26] ? __pfx_worker_thread+0x10/0x10 [ 723.568558][ T26] kthread+0x7ab/0x920 [ 723.572727][ T26] ? __pfx_kthread+0x10/0x10 [ 723.577325][ T26] ? __pfx_worker_thread+0x10/0x10 [ 723.582439][ T26] ? __pfx_kthread+0x10/0x10 [ 723.587057][ T26] ? __pfx_kthread+0x10/0x10 [ 723.591658][ T26] ? __pfx_kthread+0x10/0x10 [ 723.596256][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 723.601459][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.607099][ T26] ? lockdep_hardirqs_on+0x99/0x150 [ 723.612307][ T26] ? __pfx_kthread+0x10/0x10 [ 723.616905][ T26] ret_from_fork+0x4d/0x80 [ 723.621324][ T26] ? __pfx_kthread+0x10/0x10 [ 723.625922][ T26] ret_from_fork_asm+0x1a/0x30 [ 723.630693][ T26] [ 723.633710][ T26] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 723.640979][ T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/1:0 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 723.651560][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 723.661611][ T26] Workqueue: events nsim_dev_hwstats_traffic_work [ 723.668043][ T26] Call Trace: [ 723.671313][ T26] [ 723.674243][ T26] dump_stack_lvl+0x241/0x360 [ 723.678924][ T26] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.684122][ T26] ? __pfx__printk+0x10/0x10 [ 723.688710][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.694357][ T26] ? vscnprintf+0x5d/0x90 [ 723.698695][ T26] panic+0x349/0x880 [ 723.702586][ T26] ? __warn+0x174/0x4d0 [ 723.706751][ T26] ? __pfx_panic+0x10/0x10 [ 723.711171][ T26] ? ret_from_fork_asm+0x1a/0x30 [ 723.716119][ T26] __warn+0x344/0x4d0 [ 723.720107][ T26] ? __lock_acquire+0x564/0x2100 [ 723.725055][ T26] report_bug+0x2b3/0x500 [ 723.729392][ T26] ? __lock_acquire+0x564/0x2100 [ 723.734339][ T26] handle_bug+0x60/0x90 [ 723.738489][ T26] exc_invalid_op+0x1a/0x50 [ 723.742989][ T26] asm_exc_invalid_op+0x1a/0x20 [ 723.747852][ T26] RIP: 0010:__lock_acquire+0x564/0x2100 [ 723.753413][ T26] Code: 00 00 83 3d b1 4f a0 0e 00 75 23 90 48 c7 c7 40 b2 2a 8c 48 c7 c6 40 b5 2a 8c e8 47 bd e4 ff 48 ba 00 00 00 00 00 fc ff df 90 <0f> 0b 90 90 90 31 db 48 81 c3 c4 00 00 00 48 89 d8 48 c1 e8 03 0f [ 723.773104][ T26] RSP: 0018:ffffc90000a0f550 EFLAGS: 00010046 [ 723.779171][ T26] RAX: 9cc1120203086400 RBX: 0000000000001b20 RCX: ffff88801daebc00 [ 723.787138][ T26] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 723.795106][ T26] RBP: 00000000000c1b20 R08: ffffffff81819e52 R09: 1ffff110170e519a [ 723.803079][ T26] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff88801daec6d4 [ 723.811058][ T26] R13: 0000000000000000 R14: 1ffff11003b5d8e2 R15: ffff88801daec710 [ 723.819029][ T26] ? __warn_printk+0x292/0x360 [ 723.823817][ T26] lock_acquire+0x1ed/0x550 [ 723.828328][ T26] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 723.833881][ T26] ? __pfx_lock_acquire+0x10/0x10 [ 723.838914][ T26] ? rcu_note_context_switch+0xd44/0x1060 [ 723.844642][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.850284][ T26] ? mark_lock+0x9a/0x360 [ 723.854605][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.860253][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.865901][ T26] _raw_spin_lock_nested+0x31/0x40 [ 723.871022][ T26] ? raw_spin_rq_lock_nested+0xb0/0x140 [ 723.876578][ T26] raw_spin_rq_lock_nested+0xb0/0x140 [ 723.881960][ T26] __schedule+0x357/0x4c90 [ 723.886389][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.892035][ T26] ? debug_object_deactivate+0x2d5/0x390 [ 723.897679][ T26] ? __pfx_lock_release+0x10/0x10 [ 723.902717][ T26] ? __pfx___schedule+0x10/0x10 [ 723.907574][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.913248][ T26] ? do_raw_spin_unlock+0x13c/0x8b0 [ 723.918454][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.924091][ T26] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 723.930080][ T26] ? preempt_schedule+0xe1/0xf0 [ 723.934936][ T26] preempt_schedule_common+0x84/0xd0 [ 723.940231][ T26] preempt_schedule+0xe1/0xf0 [ 723.944925][ T26] ? __pfx_preempt_schedule+0x10/0x10 [ 723.950306][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 723.955956][ T26] preempt_schedule_thunk+0x1a/0x30 [ 723.961172][ T26] _raw_spin_unlock_irq+0x44/0x50 [ 723.966201][ T26] process_scheduled_works+0x8ab/0x18e0 [ 723.971764][ T26] ? __pfx_process_scheduled_works+0x10/0x10 [ 723.977750][ T26] ? assign_work+0x364/0x3d0 [ 723.982347][ T26] worker_thread+0x870/0xd30 [ 723.986948][ T26] ? __kthread_parkme+0x169/0x1d0 [ 723.991985][ T26] ? __pfx_worker_thread+0x10/0x10 [ 723.997116][ T26] kthread+0x7ab/0x920 [ 724.001205][ T26] ? __pfx_kthread+0x10/0x10 [ 724.006009][ T26] ? __pfx_worker_thread+0x10/0x10 [ 724.011134][ T26] ? __pfx_kthread+0x10/0x10 [ 724.015734][ T26] ? __pfx_kthread+0x10/0x10 [ 724.020334][ T26] ? __pfx_kthread+0x10/0x10 [ 724.024932][ T26] ? _raw_spin_unlock_irq+0x23/0x50 [ 724.030149][ T26] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.035791][ T26] ? lockdep_hardirqs_on+0x99/0x150 [ 724.040996][ T26] ? __pfx_kthread+0x10/0x10 [ 724.045600][ T26] ret_from_fork+0x4d/0x80 [ 724.050031][ T26] ? __pfx_kthread+0x10/0x10 [ 724.054627][ T26] ret_from_fork_asm+0x1a/0x30 [ 724.059397][ T26] [ 724.062599][ T26] Kernel Offset: disabled [ 724.066916][ T26] Rebooting in 86400 seconds..