last executing test programs: 7m41.534121429s ago: executing program 0 (id=9): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@nombcache}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001080), r3) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x104}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 7m39.847627332s ago: executing program 0 (id=11): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)={0x0, 0xf}, 0x0, 0x0}) 7m33.729828601s ago: executing program 0 (id=23): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x61, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x802, 0x1) 7m30.821534556s ago: executing program 0 (id=30): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 7m29.645457735s ago: executing program 1 (id=31): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f020000000000090506"], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x27) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 7m22.905637925s ago: executing program 1 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x4006}) 7m21.990298619s ago: executing program 1 (id=39): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000700)={0x200, 0x6, 0x40, 0x9, 0x8001, 0x3f, 0xb}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 7m21.182435828s ago: executing program 0 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x10) syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) socket$netlink(0x10, 0x3, 0x9) openat$sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) 7m20.43460532s ago: executing program 1 (id=45): r0 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000880)=@multiplanar_mmap={0x6, 0x6, 0x4, 0xe000, 0x1000, {}, {0x1, 0x2, 0x4e, 0xc, 0xc, 0xf8, "d66bb72d"}, 0x4, 0x1, {0x0}, 0x889c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000300)=0xffffffffffffff86) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0xd50d195639973afc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) 7m18.686681478s ago: executing program 1 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r3, 0x6, &(0x7f00000001c0)={0x2, 0x1, 0xab4e, 0xfffffffffffffffd}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) 7m14.963653109s ago: executing program 0 (id=49): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r2, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 7m13.388733497s ago: executing program 1 (id=52): timer_create(0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xa0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) 6m59.156359581s ago: executing program 32 (id=49): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r2, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 6m56.646557445s ago: executing program 33 (id=52): timer_create(0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0xa0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) 3m14.285778663s ago: executing program 2 (id=419): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000080)=0xfff, r0, &(0x7f00000000c0)=0x3, 0xc, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x23, 0x5, 0x0) 3m11.679346289s ago: executing program 2 (id=421): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$inet(0x2, 0x5, 0xfff) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3m8.766218015s ago: executing program 2 (id=424): socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 3m6.116117865s ago: executing program 2 (id=429): socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 3m4.446588473s ago: executing program 2 (id=432): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) 3m1.90457246s ago: executing program 2 (id=434): socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2m45.932358858s ago: executing program 34 (id=434): socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14.252761719s ago: executing program 5 (id=667): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_v1(&(0x7f0000001000), 0x0, &(0x7f0000001080)={0x0, "ddbccf095fdf7a3f745794103017e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000009100", 0x33}, 0x48, 0xfffffffffffffffe) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x39, 0x1a, r3, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) 12.836189805s ago: executing program 5 (id=669): r0 = socket(0x3f, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f0000000240)=ANY=[], 0xf7, 0x1501, &(0x7f0000001980)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x10f282, 0x3e4709ea464f8ba0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x4b, "49c1b6123e95e2a26fd0d1b9db1157d9b93e62d5d1c8d3e95c276f7e5914fe263dc52dd7ee79a4d56f29a20528904cf425eda231ca4f441a7c8014661fb5ba4abfd49ff4e563fc48b411d2"}, &(0x7f00000002c0)=0x53) socket$pppoe(0x18, 0x1, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$DVB_DVR_DMX_QBUF(0xffffffffffffffff, 0xc0186f3f, &(0x7f0000000340)={0x200, 0x7fff, 0x405, 0x3, 0xe}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0xf27, 0xd7b, 0x1, 0x8, 0x6, 0x9, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0xffffffff, 0x9, 0x3, 0x0, 0xc7c, 0x3, 0x40000003, 0x2, 0xcaa3, 0x0, 0x20001e57, 0x6, 0x2000e66, 0x6, 0x1, 0x10004086, 0x3, 0xfffffff8]}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x6) ioctl$TUNDETACHFILTER(r3, 0x8903, 0x1000000000000) write(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x91994a, &(0x7f00000002c0)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@oldalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffff}}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7bd, &(0x7f0000000d00)="$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") r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') creat(&(0x7f0000000140)='./file2\x00', 0x18) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000000)=ANY=[]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) 11.14694859s ago: executing program 4 (id=671): unshare(0x200) io_setup(0x222, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC, @ANYRES16, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x81ad}}}, 0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 10.941895347s ago: executing program 5 (id=672): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_v1(&(0x7f0000001000), 0x0, &(0x7f0000001080)={0x0, "ddbccf095fdf7a3f745794103017e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000009100", 0x33}, 0x48, 0xfffffffffffffffe) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x39, 0x1a, r3, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 10.936100335s ago: executing program 3 (id=673): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_v1(&(0x7f0000001000), 0x0, &(0x7f0000001080)={0x0, "ddbccf095fdf7a3f745794103017e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000009100", 0x33}, 0x48, 0xfffffffffffffffe) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x39, 0x1a, r3, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 8.79791141s ago: executing program 5 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.612924429s ago: executing program 4 (id=675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.602118801s ago: executing program 3 (id=676): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000080)=0xfff, r0, &(0x7f00000000c0)=0x3, 0xc, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001240)='\x00\x00KK', 0x4}, {0x0, 0xea}], 0x2}, 0x80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @vbi={0x7, 0x8, 0x3d54, 0x494e4f4b, [0x0, 0x4], [0x3, 0x5], 0x2023c860d0553049}}) 6.859241666s ago: executing program 3 (id=677): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$inet(0x2, 0x5, 0xfff) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.854205293s ago: executing program 4 (id=678): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) read$rfkill(0xffffffffffffffff, &(0x7f0000002000), 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000000000/0x4000)=nil) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r5, 0x60b, 0x70bd28, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) 6.578155377s ago: executing program 5 (id=679): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 4.229164154s ago: executing program 5 (id=680): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 3.509466342s ago: executing program 3 (id=681): socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x60b, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 3.506999741s ago: executing program 4 (id=682): socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040), &(0x7f000009de80), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x1, 0x10}, 0xc) 2.519198332s ago: executing program 4 (id=683): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$fscrypt_v1(&(0x7f0000001000), 0x0, &(0x7f0000001080)={0x0, "ddbccf095fdf7a3f745794103017e211332fbf001eb127ffbed6ccc50daa5600000000000000000000000000000000009100", 0x33}, 0x48, 0xfffffffffffffffe) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x39, 0x1a, r3, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.419258458s ago: executing program 3 (id=684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 1.26206529s ago: executing program 4 (id=685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[], 0x86) dup3(0xffffffffffffffff, r4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x4) 0s ago: executing program 3 (id=686): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) read$rfkill(0xffffffffffffffff, &(0x7f0000002000), 0x8) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000000000/0x4000)=nil) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r5, 0x60b, 0x70bd28, 0x4000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): us mode [ 92.327978][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.366597][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.401233][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.408374][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.416159][ T5826] bridge_slave_1: entered allmulticast mode [ 92.423739][ T5826] bridge_slave_1: entered promiscuous mode [ 92.461883][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.500762][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.526687][ T5824] team0: Port device team_slave_0 added [ 92.533611][ T5838] Bluetooth: hci0: command tx timeout [ 92.537320][ T5824] team0: Port device team_slave_1 added [ 92.539198][ T5838] Bluetooth: hci5: command tx timeout [ 92.550519][ T5845] Bluetooth: hci3: command tx timeout [ 92.556213][ T5830] Bluetooth: hci1: command tx timeout [ 92.562015][ T5832] Bluetooth: hci4: command tx timeout [ 92.568145][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.575387][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.582629][ T5825] bridge_slave_0: entered allmulticast mode [ 92.590130][ T5825] bridge_slave_0: entered promiscuous mode [ 92.616432][ T5832] Bluetooth: hci2: command tx timeout [ 92.623211][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.636147][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.672451][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.679657][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.686947][ T5825] bridge_slave_1: entered allmulticast mode [ 92.694882][ T5825] bridge_slave_1: entered promiscuous mode [ 92.704570][ T5823] team0: Port device team_slave_0 added [ 92.726628][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.752346][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.762581][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.769528][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.795790][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.810209][ T5823] team0: Port device team_slave_1 added [ 92.869381][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.879245][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.886511][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.912709][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.939087][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.963371][ T5828] team0: Port device team_slave_0 added [ 92.972257][ T5833] team0: Port device team_slave_0 added [ 93.000213][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.007502][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.034191][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.048073][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.071950][ T5828] team0: Port device team_slave_1 added [ 93.079654][ T5833] team0: Port device team_slave_1 added [ 93.100868][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.108267][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.134327][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.199676][ T5826] team0: Port device team_slave_0 added [ 93.216935][ T5825] team0: Port device team_slave_0 added [ 93.236006][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.243161][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.269423][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.296347][ T5826] team0: Port device team_slave_1 added [ 93.305201][ T5825] team0: Port device team_slave_1 added [ 93.312047][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.318987][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.345127][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.368186][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.375347][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.401300][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.463714][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.470679][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.496908][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.523749][ T5824] hsr_slave_0: entered promiscuous mode [ 93.530501][ T5824] hsr_slave_1: entered promiscuous mode [ 93.550163][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.557439][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.583731][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.596360][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.603463][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.629510][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.690895][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.698118][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.724215][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.737053][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.744155][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.770168][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.816337][ T5823] hsr_slave_0: entered promiscuous mode [ 93.823140][ T5823] hsr_slave_1: entered promiscuous mode [ 93.829438][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 93.835358][ T5823] Cannot create hsr debugfs directory [ 93.898770][ T5828] hsr_slave_0: entered promiscuous mode [ 93.905526][ T5828] hsr_slave_1: entered promiscuous mode [ 93.912094][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 93.917822][ T5828] Cannot create hsr debugfs directory [ 93.953327][ T5833] hsr_slave_0: entered promiscuous mode [ 93.960628][ T5833] hsr_slave_1: entered promiscuous mode [ 93.966998][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 93.972748][ T5833] Cannot create hsr debugfs directory [ 94.082023][ T5826] hsr_slave_0: entered promiscuous mode [ 94.088628][ T5826] hsr_slave_1: entered promiscuous mode [ 94.095266][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 94.101098][ T5826] Cannot create hsr debugfs directory [ 94.144523][ T5825] hsr_slave_0: entered promiscuous mode [ 94.150961][ T5825] hsr_slave_1: entered promiscuous mode [ 94.157334][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 94.163379][ T5825] Cannot create hsr debugfs directory [ 94.612444][ T5832] Bluetooth: hci3: command tx timeout [ 94.612499][ T5838] Bluetooth: hci4: command tx timeout [ 94.617892][ T5830] Bluetooth: hci5: command tx timeout [ 94.623676][ T5845] Bluetooth: hci1: command tx timeout [ 94.629322][ T5832] Bluetooth: hci0: command tx timeout [ 94.691286][ T5832] Bluetooth: hci2: command tx timeout [ 94.887054][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.899572][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.920085][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.932519][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.004628][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.019472][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.040945][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.053150][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.124194][ T5828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.139542][ T5828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.153553][ T5828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.168886][ T5828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.301848][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.317346][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.328532][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.340027][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.419272][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.497763][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.506138][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.519499][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.530726][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.545818][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.612753][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.656395][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.663873][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.675772][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.682949][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.725186][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.748314][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.774104][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.788676][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.816882][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.833538][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.840685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.856556][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.870768][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.895986][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.903163][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.938269][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.945455][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.955431][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.962664][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.125116][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.278838][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.297240][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.339594][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.346808][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.376364][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.390566][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.397789][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.418080][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.469730][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.520316][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.527520][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.563946][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.571179][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.586378][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.593577][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.647838][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.665555][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.695377][ T5832] Bluetooth: hci4: command tx timeout [ 96.700838][ T5832] Bluetooth: hci1: command tx timeout [ 96.711475][ T5830] Bluetooth: hci3: command tx timeout [ 96.711494][ T5838] Bluetooth: hci0: command tx timeout [ 96.711531][ T5838] Bluetooth: hci5: command tx timeout [ 96.733661][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.740854][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.771177][ T5838] Bluetooth: hci2: command tx timeout [ 96.829885][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.893659][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.950116][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.048137][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.204721][ T5824] veth0_vlan: entered promiscuous mode [ 97.263416][ T5824] veth1_vlan: entered promiscuous mode [ 97.471033][ T5824] veth0_macvtap: entered promiscuous mode [ 97.514546][ T5824] veth1_macvtap: entered promiscuous mode [ 97.606314][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.665603][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.709677][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.741828][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.758771][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.791732][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.853035][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.863025][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.950783][ T5826] veth0_vlan: entered promiscuous mode [ 97.975940][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.032300][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.043475][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.064624][ T5826] veth1_vlan: entered promiscuous mode [ 98.137551][ T5825] veth0_vlan: entered promiscuous mode [ 98.155780][ T5823] veth0_vlan: entered promiscuous mode [ 98.169853][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.179119][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.199153][ T5823] veth1_vlan: entered promiscuous mode [ 98.207651][ T5825] veth1_vlan: entered promiscuous mode [ 98.263793][ T5828] veth0_vlan: entered promiscuous mode [ 98.282345][ T5826] veth0_macvtap: entered promiscuous mode [ 98.307808][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.330307][ T5833] veth0_vlan: entered promiscuous mode [ 98.350362][ T5826] veth1_macvtap: entered promiscuous mode [ 98.369654][ T5833] veth1_vlan: entered promiscuous mode [ 98.406052][ T5828] veth1_vlan: entered promiscuous mode [ 98.470760][ T5823] veth0_macvtap: entered promiscuous mode [ 98.501372][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.517757][ T5825] veth0_macvtap: entered promiscuous mode [ 98.538831][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.562743][ T5825] veth1_macvtap: entered promiscuous mode [ 98.571145][ T5823] veth1_macvtap: entered promiscuous mode [ 98.623506][ T1141] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.635794][ T1141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.660008][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 98.675107][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.689978][ T5833] veth0_macvtap: entered promiscuous mode [ 98.699087][ T1141] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.709989][ T1141] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.747350][ T5833] veth1_macvtap: entered promiscuous mode [ 98.771941][ T5845] Bluetooth: hci3: command tx timeout [ 98.774491][ T5832] Bluetooth: hci0: command tx timeout [ 98.777375][ T5845] Bluetooth: hci4: command tx timeout [ 98.782901][ T5830] Bluetooth: hci5: command tx timeout [ 98.788239][ T5838] Bluetooth: hci1: command tx timeout [ 98.804753][ T5828] veth0_macvtap: entered promiscuous mode [ 98.817376][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.834050][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.851930][ T5838] Bluetooth: hci2: command tx timeout [ 98.972665][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.985179][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.114485][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.122660][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.124976][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.130491][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.240493][ T5969] hub 9-0:1.0: USB hub found [ 99.248674][ T5969] hub 9-0:1.0: 1 port detected [ 99.475376][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.741970][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.807582][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.824774][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.912194][ T5828] veth1_macvtap: entered promiscuous mode [ 99.934800][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.950399][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.974043][ T5972] loop0: detected capacity change from 0 to 4096 [ 99.988852][ T5972] EXT4-fs: inline encryption not supported [ 100.007427][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.034134][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.047097][ T5972] EXT4-fs (loop0): Test dummy encryption mode enabled [ 100.059332][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.090449][ T5972] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 100.104614][ T5972] System zones: 0-5 [ 100.110371][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.157184][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.168824][ T5972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.200714][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.235550][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.254574][ T5972] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 100.286649][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.857409][ T5981] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 101.445434][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.527765][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.550797][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.563585][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.598975][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.611532][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.685226][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.788462][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.800351][ T64] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.205350][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.317854][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.910456][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.946610][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.957794][ T1141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.987745][ T1141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.152904][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.170425][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.248352][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.249913][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.319993][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.431720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.431836][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 103.503773][ T5836] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.534457][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.536522][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.543688][ T5836] usb 1-1: Product: syz [ 103.571822][ T5836] usb 1-1: Manufacturer: syz [ 103.580926][ T5836] usb 1-1: SerialNumber: syz [ 103.601664][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.793516][ T5836] usb 1-1: config 0 descriptor?? [ 103.843362][ T5841] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.971934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.061421][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 104.110141][ T5836] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.131563][ T5841] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.149988][ T5841] usb 4-1: config 0 has no interface number 0 [ 104.153497][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.165935][ T5841] usb 4-1: config 0 interface 184 has no altsetting 0 [ 104.171578][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.198379][ T5841] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.211904][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.227034][ T5841] usb 4-1: Product: syz [ 104.231964][ T5841] usb 4-1: Manufacturer: syz [ 104.249880][ T5841] usb 4-1: SerialNumber: syz [ 104.274176][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 104.297900][ T5841] usb 4-1: config 0 descriptor?? [ 105.805138][ T5841] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 105.825825][ T5841] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 106.161245][ T5836] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 106.239885][ T5836] usb 1-1: USB disconnect, device number 2 [ 106.542266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.551252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 106.562117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.744898][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'. [ 107.986638][ T5841] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 108.094641][ T5841] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 108.269968][ T6043] bridge_slave_0: left allmulticast mode [ 108.281482][ T5841] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 108.305563][ T5841] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 108.316268][ T6043] bridge_slave_0: left promiscuous mode [ 108.366970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.367024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.464991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 108.470954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 108.512381][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.741592][ T5841] usb 4-1: USB disconnect, device number 2 [ 108.768826][ T6043] bridge_slave_1: left allmulticast mode [ 108.789654][ T6043] bridge_slave_1: left promiscuous mode [ 108.843581][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.089869][ T6043] bond0: (slave bond_slave_0): Releasing backup interface [ 110.156667][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 110.664271][ T6043] bond0: (slave bond_slave_1): Releasing backup interface [ 110.915842][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.5.28'. [ 111.954745][ T6043] team0: Port device team_slave_0 removed [ 112.441317][ T6043] team0: Port device team_slave_1 removed [ 112.452034][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.459505][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.482927][ T6043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.490654][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.535723][ T6043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.662353][ T5960] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.981162][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 112.993346][ T5960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 113.011124][ T5960] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 113.022692][ T5960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 113.035559][ T5960] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 113.055049][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.065367][ T5960] usb 2-1: Product: syz [ 113.069551][ T5960] usb 2-1: Manufacturer: syz [ 113.095069][ T5960] usb 2-1: SerialNumber: syz [ 113.978404][ T5960] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 116.510318][ T6091] loop4: detected capacity change from 0 to 32768 [ 116.520169][ T6091] ======================================================= [ 116.520169][ T6091] WARNING: The mand mount option has been deprecated and [ 116.520169][ T6091] and is ignored by this kernel. Remove the mand [ 116.520169][ T6091] option from the mount to silence this warning. [ 116.520169][ T6091] ======================================================= [ 118.621898][ T5914] usb 2-1: USB disconnect, device number 2 [ 118.871150][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35'. [ 118.906798][ T6091] read_mapping_page failed! [ 118.981635][ T6091] jfs_mount: Failed to read AGGREGATE_I [ 119.023301][ T6091] Mount JFS Failure: -5 [ 119.043066][ T6091] jfs_mount failed w/return code = -5 [ 120.044775][ T5914] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.110542][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 120.211891][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 120.224940][ T5914] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 120.249515][ T5914] usb 5-1: config 0 has no interface number 0 [ 120.272553][ T5914] usb 5-1: config 0 interface 184 has no altsetting 0 [ 120.312806][ T5914] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 120.365490][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.403293][ T5914] usb 5-1: Product: syz [ 120.407511][ T5914] usb 5-1: Manufacturer: syz [ 120.439628][ T5914] usb 5-1: SerialNumber: syz [ 120.483487][ T5914] usb 5-1: config 0 descriptor?? [ 121.885611][ T5914] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 123.218898][ T6144] loop3: detected capacity change from 0 to 512 [ 124.751719][ T5914] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 126.042661][ T6144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.057655][ T6144] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.512806][ T6144] Quota error (device loop3): do_check_range: Getting block 4128768 out of range 0-5 [ 127.676241][ T5914] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 127.687193][ T5914] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 127.699641][ T5914] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 127.831785][ T5914] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 127.850506][ T5914] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 127.864854][ T5914] usb 5-1: USB disconnect, device number 2 [ 129.476188][ T6169] loop5: detected capacity change from 0 to 128 [ 129.682621][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.804531][ T6169] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.751523][ T6169] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.684971][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 131.802181][ T5828] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.316108][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.322771][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.670418][ T6227] xt_TCPMSS: Only works on TCP SYN packets [ 137.767629][ T6227] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 138.351896][ T6229] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 138.440609][ T6229] vlan2: entered allmulticast mode [ 138.502501][ T6229] syz_tun: entered allmulticast mode [ 138.952412][ T6232] vlan2: entered allmulticast mode [ 138.985519][ T6232] veth0_to_bridge: entered allmulticast mode [ 144.880255][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.941313][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.962266][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.996160][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.007646][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.791918][ T5838] Bluetooth: hci6: command tx timeout [ 147.927383][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.963212][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.021404][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.073469][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.154824][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.813032][ T5830] Bluetooth: hci6: command tx timeout [ 150.731933][ T5830] Bluetooth: hci7: command tx timeout [ 151.695900][ T6266] chnl_net:caif_netlink_parms(): no params data found [ 151.737981][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 151.813231][ T6314] netlink: 'syz.3.86': attribute type 6 has an invalid length. [ 152.012604][ T5830] Bluetooth: hci6: command tx timeout [ 152.139874][ T6321] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 152.771175][ T5830] Bluetooth: hci7: command tx timeout [ 154.059073][ T5830] Bluetooth: hci6: command tx timeout [ 154.991980][ T5830] Bluetooth: hci7: command tx timeout [ 157.281773][ T5830] Bluetooth: hci7: command tx timeout [ 157.741202][ T5921] IPVS: starting estimator thread 0... [ 157.842089][ T6345] IPVS: using max 30 ests per chain, 72000 per kthread [ 159.529431][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 160.685009][ T6003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.829549][ T6003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.323707][ T6003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.621230][ T6003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.421767][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.463866][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.501247][ T6266] bridge_slave_0: entered allmulticast mode [ 166.513945][ T6266] bridge_slave_0: entered promiscuous mode [ 166.532520][ T6283] chnl_net:caif_netlink_parms(): no params data found [ 166.576045][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.797860][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.805737][ T6266] bridge_slave_1: entered allmulticast mode [ 166.813922][ T6266] bridge_slave_1: entered promiscuous mode [ 170.233572][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.115'. [ 170.251461][ T6266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.484144][ T6266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.276270][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.283912][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.291892][ T6283] bridge_slave_0: entered allmulticast mode [ 172.300194][ T6283] bridge_slave_0: entered promiscuous mode [ 173.975550][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.987265][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.994579][ T6283] bridge_slave_1: entered allmulticast mode [ 174.063700][ T6283] bridge_slave_1: entered promiscuous mode [ 174.546569][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 174.705694][ T6266] team0: Port device team_slave_0 added [ 174.749258][ T6266] team0: Port device team_slave_1 added [ 174.799806][ T6003] bridge_slave_1: left allmulticast mode [ 174.819817][ T6003] bridge_slave_1: left promiscuous mode [ 174.848662][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.857772][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 174.940507][ T6003] bridge_slave_0: left allmulticast mode [ 174.966413][ T6003] bridge_slave_0: left promiscuous mode [ 174.987483][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.165261][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 177.533477][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.560644][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.596739][ T6003] bond0 (unregistering): Released all slaves [ 178.434552][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.038602][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.311111][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.318477][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.409850][ T6266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.884202][ T6266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.903621][ T6266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.987160][ T6266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.972538][ T6283] team0: Port device team_slave_0 added [ 184.317438][ T6538] Zero length message leads to an empty skb [ 186.785899][ T6283] team0: Port device team_slave_1 added [ 186.878473][ T6266] hsr_slave_0: entered promiscuous mode [ 186.973399][ T6266] hsr_slave_1: entered promiscuous mode [ 186.979939][ T6266] debugfs: 'hsr0' already exists in 'hsr' [ 186.986383][ T6266] Cannot create hsr debugfs directory [ 187.520623][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.536367][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.573375][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.698995][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.816237][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.918170][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.979569][ T6003] hsr_slave_0: left promiscuous mode [ 188.001357][ T6003] hsr_slave_1: left promiscuous mode [ 188.015969][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.046783][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.088632][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.115526][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.158886][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 188.176681][ T6003] veth1_macvtap: left promiscuous mode [ 188.187006][ T6003] veth0_macvtap: left promiscuous mode [ 188.202010][ T6003] veth1_vlan: left promiscuous mode [ 188.207418][ T6003] veth0_vlan: left promiscuous mode [ 188.883327][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 188.932072][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 189.679927][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.147'. [ 189.808165][ T6283] hsr_slave_0: entered promiscuous mode [ 189.835816][ T6283] hsr_slave_1: entered promiscuous mode [ 189.841677][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 189.842933][ T6283] debugfs: 'hsr0' already exists in 'hsr' [ 189.858645][ T6283] Cannot create hsr debugfs directory [ 191.676182][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.152'. [ 192.713266][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 192.725529][ T6003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.726814][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 192.924661][ T6266] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.558208][ T6003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.591876][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.598206][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.695915][ T6266] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.837045][ T6266] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.175147][ T6657] xt_TCPMSS: Only works on TCP SYN packets [ 194.250844][ T6657] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 195.361399][ T6003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.403598][ T6266] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 195.634162][ T6003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.275568][ T6283] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.374987][ T6283] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.452264][ T6283] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.581825][ T6283] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.713944][ T6003] bridge_slave_1: left allmulticast mode [ 196.735386][ T6003] bridge_slave_1: left promiscuous mode [ 196.770179][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.063748][ T6003] bridge_slave_0: left allmulticast mode [ 197.100975][ T6003] bridge_slave_0: left promiscuous mode [ 197.134409][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.885157][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 198.222866][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.258825][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.477249][ T6003] bond0 (unregistering): Released all slaves [ 198.814896][ T6266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.096632][ T6266] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.156368][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.163576][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.267224][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.274517][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.507406][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 200.918214][ T6003] hsr_slave_0: left promiscuous mode [ 201.642701][ T6003] hsr_slave_1: left promiscuous mode [ 201.665628][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.673600][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.683590][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.701156][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.878403][ T6003] veth1_macvtap: left promiscuous mode [ 201.899562][ T6003] veth0_macvtap: left promiscuous mode [ 201.914170][ T6003] veth1_vlan: left promiscuous mode [ 201.920066][ T6003] veth0_vlan: left promiscuous mode [ 202.015244][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.180'. [ 202.308798][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 202.625782][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 202.677841][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 203.895622][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.942589][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.959229][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.967428][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.975260][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.364704][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.083134][ T5838] Bluetooth: hci1: command tx timeout [ 206.132368][ T6283] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.112963][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.120125][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.135671][ T5838] Bluetooth: hci1: command tx timeout [ 209.603129][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.619166][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.858425][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.885779][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.899940][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.013353][ T6799] xt_TCPMSS: Only works on TCP SYN packets [ 210.111795][ T6799] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.213428][ T5838] Bluetooth: hci1: command tx timeout [ 211.233282][ T6810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.287801][ T5830] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 211.288321][ T5830] Bluetooth: hci4: Malformed LE Event: 0x02 [ 211.971210][ T5830] Bluetooth: hci3: command tx timeout [ 212.152592][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.194'. [ 212.292158][ T5830] Bluetooth: hci1: command tx timeout [ 213.151187][ T6763] chnl_net:caif_netlink_parms(): no params data found [ 213.547919][ T6836] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.615474][ T5830] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 213.615878][ T5830] Bluetooth: hci4: Malformed LE Event: 0x02 [ 214.374435][ T5830] Bluetooth: hci3: command tx timeout [ 215.501254][ T6846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 216.821151][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 216.827218][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 216.833411][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 216.839446][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 216.845965][ T5138] Bluetooth: hci3: command tx timeout [ 218.972593][ T5832] Bluetooth: hci3: command tx timeout [ 219.333823][ T6795] chnl_net:caif_netlink_parms(): no params data found [ 219.860651][ T6878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.036755][ T6879] xt_TCPMSS: Only works on TCP SYN packets [ 220.128699][ T6879] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 220.607411][ T5832] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 220.607484][ T5832] Bluetooth: hci4: Malformed LE Event: 0x02 [ 221.396229][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.404493][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.418180][ T6763] bridge_slave_0: entered allmulticast mode [ 221.445358][ T6763] bridge_slave_0: entered promiscuous mode [ 221.744320][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.752258][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.759515][ T6763] bridge_slave_1: entered allmulticast mode [ 221.768409][ T6763] bridge_slave_1: entered promiscuous mode [ 221.781515][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.798631][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.819352][ T6795] bridge_slave_0: entered allmulticast mode [ 221.830232][ T6795] bridge_slave_0: entered promiscuous mode [ 221.933469][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.175601][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 222.311312][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.452114][ T6795] bridge_slave_1: entered allmulticast mode [ 222.460302][ T6795] bridge_slave_1: entered promiscuous mode [ 222.745051][ T6763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.751372][ T6917] xt_TPROXY: Can be used only with -p tcp or -p udp [ 224.110266][ T5832] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 224.110339][ T5832] Bluetooth: hci4: Malformed LE Event: 0x02 [ 224.153323][ T6763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.923449][ T5832] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 224.923533][ T5832] Bluetooth: hci0: Malformed LE Event: 0x02 [ 225.213893][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.234912][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.323892][ T6763] team0: Port device team_slave_0 added [ 225.344444][ T6763] team0: Port device team_slave_1 added [ 226.514417][ T5832] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 226.519674][ T5832] Bluetooth: hci2: Malformed LE Event: 0x02 [ 227.441329][ T6942] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.315428][ T6795] team0: Port device team_slave_0 added [ 228.323127][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.330080][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.355425][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 228.462573][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.581667][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.605925][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.370263][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.571198][ T6795] team0: Port device team_slave_1 added [ 230.708772][ T6969] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.483253][ T5832] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 231.483342][ T5832] Bluetooth: hci5: Malformed LE Event: 0x02 [ 232.008122][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.121833][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.161545][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 232.211062][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.052017][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.059176][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.103081][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.344576][ T6763] hsr_slave_0: entered promiscuous mode [ 233.353371][ T6763] hsr_slave_1: entered promiscuous mode [ 233.605428][ T6983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 234.394071][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.228'. [ 234.429324][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 234.800229][ T6795] hsr_slave_0: entered promiscuous mode [ 234.814386][ T6795] hsr_slave_1: entered promiscuous mode [ 234.846942][ T6795] debugfs: 'hsr0' already exists in 'hsr' [ 234.865036][ T6795] Cannot create hsr debugfs directory [ 235.781984][ T7005] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.229519][ T7013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.299419][ T5832] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 237.299825][ T5832] Bluetooth: hci2: Malformed LE Event: 0x02 [ 238.381600][ T7018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 239.667515][ T5832] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 239.667588][ T5832] Bluetooth: hci5: Malformed LE Event: 0x02 [ 240.844512][ T6003] bridge_slave_1: left allmulticast mode [ 240.863205][ T6003] bridge_slave_1: left promiscuous mode [ 240.868997][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.887497][ T6003] bridge_slave_0: left allmulticast mode [ 242.101715][ T6003] bridge_slave_0: left promiscuous mode [ 242.107627][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.183796][ T6003] bridge_slave_1: left allmulticast mode [ 242.189485][ T6003] bridge_slave_1: left promiscuous mode [ 242.391291][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.448022][ T6003] bridge_slave_0: left allmulticast mode [ 242.480128][ T6003] bridge_slave_0: left promiscuous mode [ 242.607367][ T5832] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 242.607775][ T5832] Bluetooth: hci5: Malformed LE Event: 0x02 [ 243.219008][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.279864][ T7058] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.090292][ T5845] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 246.090694][ T5845] Bluetooth: hci2: Malformed LE Event: 0x02 [ 246.877164][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.911481][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.958723][ T6003] bond0 (unregistering): Released all slaves [ 247.000185][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 247.434929][ T7074] xt_TPROXY: Can be used only with -p tcp or -p udp [ 247.499504][ T5845] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 247.500008][ T5845] Bluetooth: hci4: Malformed LE Event: 0x02 [ 249.132769][ T7082] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.841747][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.917095][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.936444][ T6003] bond0 (unregistering): Released all slaves [ 252.109012][ T6003] hsr_slave_0: left promiscuous mode [ 252.126340][ T6003] hsr_slave_1: left promiscuous mode [ 252.145131][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.308771][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.515570][ T6003] hsr_slave_0: left promiscuous mode [ 252.535573][ T6003] hsr_slave_1: left promiscuous mode [ 252.651966][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.779047][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.972759][ T7110] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.141461][ T5845] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 254.142264][ T5845] Bluetooth: hci0: Malformed LE Event: 0x02 [ 255.056446][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.063165][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.336245][ T7119] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.467604][ T7125] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.251261][ T7136] xt_TPROXY: Can be used only with -p tcp or -p udp [ 260.196133][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 260.290804][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 261.231226][ T7149] xt_TPROXY: Can be used only with -p tcp or -p udp [ 262.073181][ T5845] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 262.073488][ T5845] Bluetooth: hci2: Malformed LE Event: 0x02 [ 263.155646][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.267'. [ 264.203009][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.269'. [ 264.211980][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 264.213411][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 264.228195][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 264.238385][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 264.247263][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 264.454019][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 264.486522][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 264.942539][ T7171] xt_TPROXY: Can be used only with -p tcp or -p udp [ 265.012010][ T5845] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 265.012400][ T5845] Bluetooth: hci5: Malformed LE Event: 0x02 [ 266.291145][ T5845] Bluetooth: hci6: command tx timeout [ 268.371608][ T5845] Bluetooth: hci6: command tx timeout [ 269.619984][ T7159] chnl_net:caif_netlink_parms(): no params data found [ 269.817329][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 270.004871][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 270.096005][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 270.221810][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 270.249719][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.476031][ T5832] Bluetooth: hci6: command tx timeout [ 272.043755][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.069357][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.091323][ T7159] bridge_slave_0: entered allmulticast mode [ 272.099500][ T7159] bridge_slave_0: entered promiscuous mode [ 272.292218][ T5832] Bluetooth: hci7: command tx timeout [ 272.531152][ T5832] Bluetooth: hci6: command tx timeout [ 272.963182][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.970908][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.187145][ T7159] bridge_slave_1: entered allmulticast mode [ 273.291040][ T7245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 273.981850][ T7159] bridge_slave_1: entered promiscuous mode [ 274.407287][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.420088][ T5832] Bluetooth: hci7: command tx timeout [ 274.456022][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.842507][ T7264] xt_TPROXY: Can be used only with -p tcp or -p udp [ 274.891449][ T5832] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 274.891833][ T5832] Bluetooth: hci4: Malformed LE Event: 0x02 [ 276.416733][ T7159] team0: Port device team_slave_0 added [ 276.456891][ T5832] Bluetooth: hci7: command tx timeout [ 276.493890][ T7159] team0: Port device team_slave_1 added [ 276.975804][ T7280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.632796][ T5832] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 277.632872][ T5832] Bluetooth: hci5: Malformed LE Event: 0x02 [ 278.026073][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.046791][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.303547][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.376746][ T7290] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.454377][ T5832] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 278.454764][ T5832] Bluetooth: hci2: Malformed LE Event: 0x02 [ 279.171545][ T5832] Bluetooth: hci7: command tx timeout [ 279.470763][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.701681][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.837565][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.161529][ T7297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 281.183153][ T7304] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.507401][ T7314] xt_TPROXY: Can be used only with -p tcp or -p udp [ 283.151900][ T5832] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 283.151973][ T5832] Bluetooth: hci4: Malformed LE Event: 0x02 [ 283.398445][ T7159] hsr_slave_0: entered promiscuous mode [ 283.414733][ T7159] hsr_slave_1: entered promiscuous mode [ 283.420896][ T7159] debugfs: 'hsr0' already exists in 'hsr' [ 283.429230][ T7159] Cannot create hsr debugfs directory [ 283.577398][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 284.613029][ T7206] chnl_net:caif_netlink_parms(): no params data found [ 284.924217][ T6003] bridge_slave_1: left allmulticast mode [ 284.989515][ T6003] bridge_slave_1: left promiscuous mode [ 285.057041][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.268436][ T6003] bridge_slave_0: left allmulticast mode [ 285.327170][ T6003] bridge_slave_0: left promiscuous mode [ 285.358250][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.763916][ T6003] bridge_slave_1: left allmulticast mode [ 285.769574][ T6003] bridge_slave_1: left promiscuous mode [ 285.824384][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.856025][ T6003] bridge_slave_0: left allmulticast mode [ 285.868046][ T6003] bridge_slave_0: left promiscuous mode [ 285.911580][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.081392][ T7358] xt_TPROXY: Can be used only with -p tcp or -p udp [ 288.846889][ T5832] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 288.846962][ T5832] Bluetooth: hci0: Malformed LE Event: 0x02 [ 293.066404][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.156038][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.512386][ T7370] xt_TPROXY: Can be used only with -p tcp or -p udp [ 294.363805][ T6003] bond0 (unregistering): Released all slaves [ 294.985506][ T7380] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.329537][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.922573][ T7392] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.791708][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.814327][ T6003] bond0 (unregistering): Released all slaves [ 297.831353][ T7393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 298.111988][ T5832] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 298.112467][ T5832] Bluetooth: hci4: Malformed LE Event: 0x02 [ 299.900073][ T7159] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.026383][ T6003] hsr_slave_0: left promiscuous mode [ 300.159937][ T6003] hsr_slave_1: left promiscuous mode [ 300.176424][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.184808][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.413160][ T6003] hsr_slave_0: left promiscuous mode [ 300.465721][ T6003] hsr_slave_1: left promiscuous mode [ 300.486801][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.504533][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.719637][ T7433] xt_TPROXY: Can be used only with -p tcp or -p udp [ 304.112744][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 304.140821][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 306.682586][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 306.703916][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 306.908263][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 308.005600][ T7159] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.083329][ T7477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 308.767137][ T7159] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.380753][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.568561][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.601571][ T7206] bridge_slave_0: entered allmulticast mode [ 309.619151][ T7482] xt_TPROXY: Can be used only with -p tcp or -p udp [ 309.629209][ T5832] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 309.629273][ T5832] Bluetooth: hci2: Malformed LE Event: 0x02 [ 309.656645][ T7206] bridge_slave_0: entered promiscuous mode [ 309.695341][ T7159] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.765731][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.796843][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.810472][ T7206] bridge_slave_1: entered allmulticast mode [ 309.832355][ T7206] bridge_slave_1: entered promiscuous mode [ 310.534780][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.604455][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.793220][ T7206] team0: Port device team_slave_0 added [ 310.822190][ T7206] team0: Port device team_slave_1 added [ 311.101317][ T7502] xt_TPROXY: Can be used only with -p tcp or -p udp [ 311.235528][ T7504] xt_TPROXY: Can be used only with -p tcp or -p udp [ 311.324379][ T5832] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 311.324786][ T5832] Bluetooth: hci0: Malformed LE Event: 0x02 [ 312.131407][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.138373][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.255232][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.740246][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.748910][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.776551][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.964695][ T7206] hsr_slave_0: entered promiscuous mode [ 313.003039][ T7206] hsr_slave_1: entered promiscuous mode [ 313.070552][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.342'. [ 316.744826][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.752284][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.795299][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.840339][ T7159] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.464253][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.471397][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.484520][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.491686][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.243904][ T7159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.311268][ T7159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.903578][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 322.233125][ T7206] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.760127][ T7206] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 322.803134][ T7206] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.825570][ T7206] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.404413][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.482363][ T7206] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.857500][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.864658][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.936533][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.943728][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.471499][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.479783][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.489286][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.499018][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.523129][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.553383][ T7206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.619500][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.363'. [ 327.586543][ T5845] Bluetooth: hci1: command tx timeout [ 329.657048][ T5845] Bluetooth: hci1: command tx timeout [ 330.419177][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.482587][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.490374][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.499048][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.507188][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.731262][ T5832] Bluetooth: hci1: command tx timeout [ 333.505079][ T5832] Bluetooth: hci3: command tx timeout [ 333.847263][ T5845] Bluetooth: hci1: command tx timeout [ 334.176100][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 335.587887][ T5845] Bluetooth: hci3: command tx timeout [ 337.651133][ T5845] Bluetooth: hci3: command tx timeout [ 339.731147][ T5845] Bluetooth: hci3: command tx timeout [ 339.948218][ T7618] chnl_net:caif_netlink_parms(): no params data found [ 342.223225][ T6157] bridge_slave_1: left allmulticast mode [ 342.228957][ T6157] bridge_slave_1: left promiscuous mode [ 342.259788][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.312884][ T6157] bridge_slave_0: left allmulticast mode [ 342.318693][ T6157] bridge_slave_0: left promiscuous mode [ 342.351376][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.793168][ T7761] xt_TPROXY: Can be used only with -p tcp or -p udp [ 342.806294][ T5845] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 342.806706][ T5845] Bluetooth: hci4: Malformed LE Event: 0x02 [ 344.178052][ T7766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 345.141730][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 354.616837][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.664834][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.677424][ T6157] bond0 (unregistering): Released all slaves [ 357.041372][ T6157] hsr_slave_0: left promiscuous mode [ 357.881091][ T6157] hsr_slave_1: left promiscuous mode [ 357.898386][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.044916][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.916452][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 360.801670][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 360.992230][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 361.097708][ T7855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 361.215864][ T5845] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 361.216283][ T5845] Bluetooth: hci0: Malformed LE Event: 0x02 [ 363.501961][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.717520][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.725900][ T7618] bridge_slave_0: entered allmulticast mode [ 364.542366][ T7618] bridge_slave_0: entered promiscuous mode [ 364.581184][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.588337][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.821781][ T7618] bridge_slave_1: entered allmulticast mode [ 365.252064][ T7618] bridge_slave_1: entered promiscuous mode [ 365.309485][ T7646] chnl_net:caif_netlink_parms(): no params data found [ 365.592748][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.103826][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.869028][ T7618] team0: Port device team_slave_0 added [ 369.878444][ T7618] team0: Port device team_slave_1 added [ 371.588748][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.605597][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.196377][ T7618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.644917][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.652184][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.691272][ T7646] bridge_slave_0: entered allmulticast mode [ 372.751275][ T7646] bridge_slave_0: entered promiscuous mode [ 372.889797][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.896896][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.951596][ T7618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.054888][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.119931][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.525572][ T7646] bridge_slave_1: entered allmulticast mode [ 373.592756][ T7646] bridge_slave_1: entered promiscuous mode [ 374.249299][ T7646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.368978][ T7646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.569730][ T7618] hsr_slave_0: entered promiscuous mode [ 375.588166][ T7618] hsr_slave_1: entered promiscuous mode [ 375.807454][ T7618] debugfs: 'hsr0' already exists in 'hsr' [ 375.847354][ T7618] Cannot create hsr debugfs directory [ 376.592970][ T7646] team0: Port device team_slave_0 added [ 376.686304][ T7646] team0: Port device team_slave_1 added [ 376.853617][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 377.147041][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.154316][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.358629][ T7646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.467421][ T30] audit: type=1800 audit(1773930452.459:2): pid=7976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.432" name="bus" dev="overlay" ino=569 res=0 errno=0 [ 379.470070][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.514171][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.541249][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.591099][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.154810][ T30] audit: type=1800 audit(1773930454.429:3): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.435" name="bus" dev="overlay" ino=558 res=0 errno=0 [ 381.155199][ T7646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.524807][ T7646] hsr_slave_0: entered promiscuous mode [ 384.572060][ T7646] hsr_slave_1: entered promiscuous mode [ 384.611339][ T7646] debugfs: 'hsr0' already exists in 'hsr' [ 384.630345][ T7646] Cannot create hsr debugfs directory [ 386.192321][ T6157] bridge_slave_1: left allmulticast mode [ 386.198025][ T6157] bridge_slave_1: left promiscuous mode [ 386.227536][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.243824][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.272273][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.283120][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.293169][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.301781][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.446495][ T6157] bridge_slave_0: left allmulticast mode [ 386.731380][ T6157] bridge_slave_0: left promiscuous mode [ 386.763225][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.371399][ T5845] Bluetooth: hci6: command tx timeout [ 388.932133][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.960236][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.016630][ T6157] bond0 (unregistering): Released all slaves [ 391.071118][ T5845] Bluetooth: hci6: command tx timeout [ 392.698222][ T30] audit: type=1800 audit(1773930466.289:4): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.446" name="bus" dev="overlay" ino=601 res=0 errno=0 [ 393.477897][ T5845] Bluetooth: hci6: command tx timeout [ 394.190730][ T6157] hsr_slave_0: left promiscuous mode [ 394.222612][ T6157] hsr_slave_1: left promiscuous mode [ 394.292144][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.331777][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.338818][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.355264][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.363673][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.375826][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.383772][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.501491][ T5845] Bluetooth: hci6: command tx timeout [ 396.380012][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.403796][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 396.411651][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.431436][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.450601][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.458056][ T5832] Bluetooth: hci1: command tx timeout [ 396.461342][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.491957][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 397.131507][ T8085] xt_TPROXY: Can be used only with -p tcp or -p udp [ 397.202401][ T5838] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 397.202473][ T5838] Bluetooth: hci5: Malformed LE Event: 0x02 [ 398.531184][ T5845] Bluetooth: hci1: command tx timeout [ 398.540584][ T5838] Bluetooth: hci2: command tx timeout [ 401.296120][ T30] audit: type=1800 audit(1773930474.299:5): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.457" name="bus" dev="overlay" ino=599 res=0 errno=0 [ 401.322100][ T5838] Bluetooth: hci2: command tx timeout [ 401.322363][ T5845] Bluetooth: hci1: command tx timeout [ 401.426076][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 401.461722][ T8009] chnl_net:caif_netlink_parms(): no params data found [ 402.876508][ T6157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.336433][ T5845] Bluetooth: hci2: command tx timeout [ 403.412498][ T5845] Bluetooth: hci1: command tx timeout [ 403.448790][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.700404][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.743335][ T8060] bridge_slave_0: entered allmulticast mode [ 403.759541][ T8060] bridge_slave_0: entered promiscuous mode [ 404.204902][ T6157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.371488][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.447662][ T5845] Bluetooth: hci2: command tx timeout [ 405.466522][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.507368][ T8060] bridge_slave_1: entered allmulticast mode [ 405.542042][ T8060] bridge_slave_1: entered promiscuous mode [ 406.232481][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.246466][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.269492][ T8009] bridge_slave_0: entered allmulticast mode [ 406.289115][ T8009] bridge_slave_0: entered promiscuous mode [ 406.365208][ T6157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.459016][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.489966][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.725766][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.733662][ T8009] bridge_slave_1: entered allmulticast mode [ 407.132852][ T8172] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 407.317923][ T8009] bridge_slave_1: entered promiscuous mode [ 407.340355][ T8078] chnl_net:caif_netlink_parms(): no params data found [ 407.437716][ T6157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.500701][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.823602][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.468'. [ 408.856793][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.918254][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.964051][ T8060] team0: Port device team_slave_0 added [ 409.183455][ T8060] team0: Port device team_slave_1 added [ 409.213404][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.221180][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.248292][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.262658][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.269661][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.315068][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.375607][ T8009] team0: Port device team_slave_0 added [ 409.385130][ T8009] team0: Port device team_slave_1 added [ 411.932251][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.955745][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.995125][ T8078] bridge_slave_0: entered allmulticast mode [ 412.029830][ T8078] bridge_slave_0: entered promiscuous mode [ 412.120298][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.151059][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.220048][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.330184][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.344567][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.353197][ T8078] bridge_slave_1: entered allmulticast mode [ 412.361627][ T8078] bridge_slave_1: entered promiscuous mode [ 412.375523][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.618173][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.095601][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.180315][ T8060] hsr_slave_0: entered promiscuous mode [ 413.676950][ T8060] hsr_slave_1: entered promiscuous mode [ 414.415545][ T6157] bridge_slave_1: left allmulticast mode [ 414.421819][ T6157] bridge_slave_1: left promiscuous mode [ 414.427521][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.499734][ T6157] bridge_slave_0: left allmulticast mode [ 414.515077][ T6157] bridge_slave_0: left promiscuous mode [ 414.520864][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.582478][ T6157] bridge_slave_1: left allmulticast mode [ 414.588155][ T6157] bridge_slave_1: left promiscuous mode [ 414.601512][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.624416][ T6157] bridge_slave_0: left allmulticast mode [ 414.641094][ T6157] bridge_slave_0: left promiscuous mode [ 414.660729][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.319024][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.131860][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.660943][ T6157] bond0 (unregistering): Released all slaves [ 419.194992][ T8250] loop5: detected capacity change from 0 to 256 [ 419.790031][ T8250] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 419.842110][ T30] audit: type=1800 audit(1773930493.909:6): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.480" name="file2" dev="loop5" ino=1048610 res=0 errno=0 [ 421.719220][ T6157] bond0 (unregistering): Released all slaves [ 422.495382][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.760401][ T8280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 423.388331][ T5845] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 423.388419][ T5845] Bluetooth: hci0: Malformed LE Event: 0x02 [ 423.473927][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.516621][ T6157] bond0 (unregistering): Released all slaves [ 423.729924][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.795145][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.317898][ T8009] hsr_slave_0: entered promiscuous mode [ 425.332862][ T8009] hsr_slave_1: entered promiscuous mode [ 425.351938][ T8009] debugfs: 'hsr0' already exists in 'hsr' [ 425.357767][ T8009] Cannot create hsr debugfs directory [ 426.094329][ T8078] team0: Port device team_slave_0 added [ 426.465287][ T8078] team0: Port device team_slave_1 added [ 427.374926][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.238319][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.265950][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.612315][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.619299][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.711104][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.782863][ T6157] hsr_slave_0: left promiscuous mode [ 429.811247][ T6157] hsr_slave_1: left promiscuous mode [ 429.842434][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.958322][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.127882][ T6157] hsr_slave_0: left promiscuous mode [ 431.402543][ T6157] hsr_slave_1: left promiscuous mode [ 431.527737][ T6157] hsr_slave_0: left promiscuous mode [ 431.608774][ T6157] hsr_slave_1: left promiscuous mode [ 431.623007][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.631570][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.649927][ T6157] veth1_macvtap: left promiscuous mode [ 431.656000][ T6157] veth0_macvtap: left promiscuous mode [ 431.662549][ T6157] veth1_vlan: left promiscuous mode [ 431.668066][ T6157] veth0_vlan: left promiscuous mode [ 433.721788][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 433.831802][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 439.597358][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.611145][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.106298][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 444.210550][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 444.311825][ T8419] block nbd4: shutting down sockets [ 445.316172][ T8078] hsr_slave_0: entered promiscuous mode [ 445.324339][ T8078] hsr_slave_1: entered promiscuous mode [ 445.330855][ T8078] debugfs: 'hsr0' already exists in 'hsr' [ 445.338702][ T8078] Cannot create hsr debugfs directory [ 446.585240][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 446.629406][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 446.648259][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 446.667417][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.687473][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.307129][ T8450] loop5: detected capacity change from 0 to 256 [ 448.327688][ T8060] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 448.393618][ T8450] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 448.477409][ T8060] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 448.628424][ T8060] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 448.675371][ T8060] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 449.182105][ T5832] Bluetooth: hci3: command tx timeout [ 450.009983][ T8078] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 451.113155][ T8078] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 451.193286][ T8078] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 451.552927][ T5832] Bluetooth: hci3: command tx timeout [ 451.587058][ T8078] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 452.619700][ T6157] IPVS: stop unused estimator thread 0... [ 453.532860][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.564610][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 453.573591][ T5832] Bluetooth: hci3: command tx timeout [ 453.942525][ T6157] bridge_slave_1: left allmulticast mode [ 453.948213][ T6157] bridge_slave_1: left promiscuous mode [ 453.964232][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.049025][ T6157] bridge_slave_0: left allmulticast mode [ 454.058672][ T6157] bridge_slave_0: left promiscuous mode [ 454.082434][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.619106][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.165832][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.651118][ T5832] Bluetooth: hci3: command tx timeout [ 455.780827][ T6157] bond0 (unregistering): Released all slaves [ 455.937945][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.948389][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.956415][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 456.013211][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 456.021558][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.062420][ T5845] Bluetooth: hci1: command tx timeout [ 458.986838][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 459.001319][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 459.014674][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 459.032024][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 459.039926][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 459.108196][ T6157] hsr_slave_0: left promiscuous mode [ 460.141295][ T5832] Bluetooth: hci1: command tx timeout [ 460.483073][ T6157] hsr_slave_1: left promiscuous mode [ 460.489242][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.512552][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.411162][ T5832] Bluetooth: hci6: command tx timeout [ 462.231166][ T5832] Bluetooth: hci1: command tx timeout [ 462.375711][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 463.355737][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 463.491571][ T5832] Bluetooth: hci6: command tx timeout [ 463.800929][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.827443][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.321126][ T5832] Bluetooth: hci1: command tx timeout [ 464.630733][ T8440] bridge_slave_0: entered allmulticast mode [ 464.661225][ T8440] bridge_slave_0: entered promiscuous mode [ 464.938547][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.952653][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.960151][ T8440] bridge_slave_1: entered allmulticast mode [ 464.996276][ T8440] bridge_slave_1: entered promiscuous mode [ 465.074294][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.088952][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.195623][ T8440] team0: Port device team_slave_0 added [ 465.238863][ T8440] team0: Port device team_slave_1 added [ 465.591204][ T5832] Bluetooth: hci6: command tx timeout [ 466.160280][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.169438][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.214256][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.247762][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.261582][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.301971][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.530705][ T8440] hsr_slave_0: entered promiscuous mode [ 466.544087][ T8440] hsr_slave_1: entered promiscuous mode [ 467.062779][ T8440] debugfs: 'hsr0' already exists in 'hsr' [ 467.068556][ T8440] Cannot create hsr debugfs directory [ 467.655340][ T5832] Bluetooth: hci6: command tx timeout [ 468.352976][ T5845] block nbd5: Receive control failed (result -32) [ 468.371577][ T5832] block nbd5: Receive control failed (result -32) [ 468.411357][ T5838] block nbd5: Receive control failed (result -32) [ 468.804259][ T8605] block nbd5: shutting down sockets [ 470.316207][ T8561] chnl_net:caif_netlink_parms(): no params data found [ 471.346660][ T8539] chnl_net:caif_netlink_parms(): no params data found [ 473.073299][ T8668] loop4: detected capacity change from 0 to 256 [ 473.164303][ T8668] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 473.301176][ T30] audit: type=1800 audit(1773930547.369:7): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.566" name="file2" dev="loop4" ino=1048611 res=0 errno=0 [ 473.333783][ T8539] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.341309][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.363390][ T8539] bridge_slave_0: entered allmulticast mode [ 473.393205][ T8539] bridge_slave_0: entered promiscuous mode [ 474.410285][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.442288][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.450904][ T8561] bridge_slave_0: entered allmulticast mode [ 474.583223][ T8561] bridge_slave_0: entered promiscuous mode [ 474.621930][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.629116][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.741387][ T8561] bridge_slave_1: entered allmulticast mode [ 474.771201][ T8561] bridge_slave_1: entered promiscuous mode [ 475.489157][ T8539] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.527823][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.561897][ T8539] bridge_slave_1: entered allmulticast mode [ 475.628236][ T8539] bridge_slave_1: entered promiscuous mode [ 476.633785][ T8561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.789847][ T8539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.148921][ T8539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.318196][ T8561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.423799][ T8440] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 477.436544][ T8561] team0: Port device team_slave_0 added [ 477.454246][ T8561] team0: Port device team_slave_1 added [ 477.461390][ T8440] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 477.681714][ T8440] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.717314][ T8440] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 478.016374][ T8539] team0: Port device team_slave_0 added [ 478.023180][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.033909][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.051921][ T8705] block nbd5: shutting down sockets [ 478.480492][ T8561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.677134][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.716520][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.801171][ T8561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.858612][ T8539] team0: Port device team_slave_1 added [ 480.013844][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.021655][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.048805][ T8539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.254587][ T8539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.272985][ T8539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.427297][ T8539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.942753][ T8561] hsr_slave_0: entered promiscuous mode [ 480.953686][ T8561] hsr_slave_1: entered promiscuous mode [ 480.970979][ T8561] debugfs: 'hsr0' already exists in 'hsr' [ 480.988823][ T8561] Cannot create hsr debugfs directory [ 481.064486][ T6157] bridge_slave_1: left allmulticast mode [ 481.141106][ T6157] bridge_slave_1: left promiscuous mode [ 481.146979][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.225231][ T6157] bridge_slave_0: left allmulticast mode [ 481.230923][ T6157] bridge_slave_0: left promiscuous mode [ 481.276067][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.494879][ T6157] bridge_slave_1: left allmulticast mode [ 482.500570][ T6157] bridge_slave_1: left promiscuous mode [ 482.522680][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.557791][ T6157] bridge_slave_0: left allmulticast mode [ 482.763786][ T6157] bridge_slave_0: left promiscuous mode [ 482.873620][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.801824][ T30] audit: type=1800 audit(1773930557.789:8): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.585" name="bus" dev="overlay" ino=864 res=0 errno=0 [ 485.298715][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.351801][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.374063][ T6157] bond0 (unregistering): Released all slaves [ 485.715618][ T6157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.740908][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.754993][ T6157] bond0 (unregistering): Released all slaves [ 485.945870][ T5845] block nbd4: Receive control failed (result -32) [ 485.951349][ T8767] block nbd4: shutting down sockets [ 486.173449][ T6157] hsr_slave_0: left promiscuous mode [ 486.180428][ T6157] hsr_slave_1: left promiscuous mode [ 486.202232][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.219675][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.236708][ T6157] hsr_slave_0: left promiscuous mode [ 486.272012][ T6157] hsr_slave_1: left promiscuous mode [ 486.281664][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.416316][ T8780] loop3: detected capacity change from 0 to 256 [ 486.424773][ T6157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.562591][ T8780] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 486.713840][ T30] audit: type=1800 audit(1773930560.779:9): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.589" name="file2" dev="loop3" ino=1048612 res=0 errno=0 [ 487.309003][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 487.361248][ T30] audit: type=1800 audit(1773930561.429:10): pid=8787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.590" name="bus" dev="overlay" ino=794 res=0 errno=0 [ 487.452039][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 489.196030][ T8802] loop3: detected capacity change from 0 to 256 [ 489.308749][ T8802] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 489.401351][ T30] audit: type=1800 audit(1773930563.469:11): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="file2" dev="loop3" ino=1048613 res=0 errno=0 [ 489.496197][ T6157] team0 (unregistering): Port device team_slave_1 removed [ 489.521874][ T6157] team0 (unregistering): Port device team_slave_0 removed [ 492.462148][ T8539] hsr_slave_0: entered promiscuous mode [ 492.469722][ T8539] hsr_slave_1: entered promiscuous mode [ 493.777345][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.801254][ T8828] loop5: detected capacity change from 0 to 256 [ 493.839777][ T8828] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 493.997238][ T30] audit: type=1800 audit(1773930568.069:12): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.603" name="file2" dev="loop5" ino=1048614 res=0 errno=0 [ 494.090078][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.244647][ T30] audit: type=1800 audit(1773930568.309:13): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.604" name="bus" dev="overlay" ino=910 res=0 errno=0 [ 494.302800][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.310017][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.458674][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.465901][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.685973][ T8440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.875423][ T30] audit: type=1800 audit(1773930570.929:14): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.608" name="bus" dev="overlay" ino=907 res=0 errno=0 [ 497.063798][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.313835][ T30] audit: type=1326 audit(1773930571.389:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8865 comm="syz.4.609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe379d9c799 code=0x0 [ 497.375458][ T8869] block nbd4: Device being setup by another task [ 497.410762][ T8561] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 497.421325][ T8872] block nbd4: Device being setup by another task [ 497.536171][ T8561] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 497.624258][ T8561] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 497.861184][ T5838] block nbd4: Receive control failed (result -32) [ 497.862133][ T8875] block nbd4: shutting down sockets [ 498.101348][ T8561] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 499.480688][ T30] audit: type=1800 audit(1773930573.549:16): pid=8902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.613" name="bus" dev="overlay" ino=934 res=0 errno=0 [ 499.699111][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.774665][ T8539] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 499.827557][ T8561] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.020620][ T8539] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 500.075412][ T8539] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 500.231294][ T8539] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 500.295514][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.302762][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.317307][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.324543][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.801631][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.811182][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.962932][ T8440] veth0_vlan: entered promiscuous mode [ 501.184474][ T8440] veth1_vlan: entered promiscuous mode [ 501.904158][ T8440] veth0_macvtap: entered promiscuous mode [ 502.991654][ T8440] veth1_macvtap: entered promiscuous mode [ 503.256253][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.312255][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.387160][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.461326][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.725453][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.550621][ T6156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.603567][ T1141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.602738][ T8539] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.770906][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.778070][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.905465][ T8440] ieee80211 phy15: Failed to add default virtual iface [ 506.926371][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.933583][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.986586][ T8561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.292629][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 509.370248][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 509.383274][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 509.407819][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 509.417095][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.678225][ T30] audit: type=1800 audit(1773930583.719:17): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.626" name="bus" dev="overlay" ino=947 res=0 errno=0 [ 510.027609][ T64] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.974642][ T64] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.445075][ T64] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.495024][ T5838] Bluetooth: hci2: command tx timeout [ 511.840337][ T8539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.162817][ T64] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.495826][ T8561] veth0_vlan: entered promiscuous mode [ 512.893161][ T30] audit: type=1800 audit(1773930586.959:18): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.630" name="bus" dev="overlay" ino=980 res=0 errno=0 [ 513.066602][ T8561] veth1_vlan: entered promiscuous mode [ 513.211421][ T64] bridge_slave_1: left allmulticast mode [ 513.217113][ T64] bridge_slave_1: left promiscuous mode [ 513.246546][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.569966][ T64] bridge_slave_0: left allmulticast mode [ 513.585648][ T5838] Bluetooth: hci2: command tx timeout [ 514.371242][ T64] bridge_slave_0: left promiscuous mode [ 514.377063][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.818606][ T5838] Bluetooth: hci2: command tx timeout [ 517.235462][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.269152][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.291815][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.300510][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.309199][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 517.891138][ T5832] Bluetooth: hci2: command tx timeout [ 518.819886][ T5832] block nbd3: Receive control failed (result -32) [ 518.827355][ T5838] block nbd3: Receive control failed (result -32) [ 522.505244][ T30] audit: type=1800 audit(1773930595.339:19): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.638" name="bus" dev="overlay" ino=972 res=0 errno=0 [ 522.506661][ T5832] Bluetooth: hci3: command tx timeout [ 522.605844][ T9079] block nbd3: shutting down sockets [ 522.679467][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 522.693977][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 522.703624][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 522.713789][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 522.743485][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 522.780882][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.828916][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.863513][ T64] bond0 (unregistering): Released all slaves [ 522.950792][ T8997] chnl_net:caif_netlink_parms(): no params data found [ 524.612258][ T5838] Bluetooth: hci3: command tx timeout [ 524.931151][ T5838] Bluetooth: hci7: command tx timeout [ 526.362187][ T64] hsr_slave_0: left promiscuous mode [ 526.379373][ T64] hsr_slave_1: left promiscuous mode [ 526.584961][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.691754][ T5838] Bluetooth: hci3: command tx timeout [ 526.716859][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.031465][ T5838] Bluetooth: hci7: command tx timeout [ 527.149057][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.186768][ T9124] block nbd4: Device being setup by another task [ 527.231091][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.269996][ T30] audit: type=1326 audit(1773930601.339:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.4.644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe379d9c799 code=0x0 [ 527.563410][ T64] veth1_macvtap: left promiscuous mode [ 527.568978][ T64] veth0_macvtap: left promiscuous mode [ 527.588512][ T5832] block nbd4: Receive control failed (result -32) [ 527.603027][ T5832] block nbd4: Receive control failed (result -32) [ 528.192725][ T9124] block nbd4: shutting down sockets [ 528.374101][ T64] veth1_vlan: left promiscuous mode [ 528.379449][ T64] veth0_vlan: left promiscuous mode [ 528.842848][ T5832] Bluetooth: hci3: command tx timeout [ 529.293293][ T5832] Bluetooth: hci7: command tx timeout [ 529.438764][ T30] audit: type=1800 audit(1773930603.509:21): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.647" name="bus" dev="overlay" ino=1020 res=0 errno=0 [ 531.105041][ T64] team0 (unregistering): Port device team_slave_1 removed [ 531.170178][ T64] team0 (unregistering): Port device team_slave_0 removed [ 531.331145][ T5832] Bluetooth: hci7: command tx timeout [ 534.561454][ T30] audit: type=1800 audit(1773930607.609:22): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.652" name="bus" dev="overlay" ino=1002 res=0 errno=0 [ 535.019208][ T8997] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.053483][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.060810][ T8997] bridge_slave_0: entered allmulticast mode [ 535.105171][ T8997] bridge_slave_0: entered promiscuous mode [ 535.139560][ T8997] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.162325][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.186841][ T8997] bridge_slave_1: entered allmulticast mode [ 535.214403][ T8997] bridge_slave_1: entered promiscuous mode [ 535.403581][ T8997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.442244][ T8997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.695791][ T8997] team0: Port device team_slave_0 added [ 535.757735][ T8997] team0: Port device team_slave_1 added [ 537.933508][ T8997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.971163][ T8997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.027348][ T8997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.457177][ T8997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.464527][ T8997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.491482][ T8997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.359141][ T9205] loop5: detected capacity change from 0 to 256 [ 539.376175][ T9207] loop3: detected capacity change from 0 to 256 [ 539.419840][ T9205] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 539.422950][ T9207] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 539.453208][ T9092] chnl_net:caif_netlink_parms(): no params data found [ 539.543688][ T30] audit: type=1800 audit(1773930613.609:23): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.657" name="file2" dev="loop5" ino=1048615 res=0 errno=0 [ 539.663399][ T30] audit: type=1800 audit(1773930613.699:24): pid=9207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.658" name="file2" dev="loop3" ino=1048616 res=0 errno=0 [ 539.831998][ T8997] hsr_slave_0: entered promiscuous mode [ 539.839047][ T8997] hsr_slave_1: entered promiscuous mode [ 539.847203][ T8997] debugfs: 'hsr0' already exists in 'hsr' [ 539.853663][ T8997] Cannot create hsr debugfs directory [ 539.872902][ T9067] chnl_net:caif_netlink_parms(): no params data found [ 544.327530][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.334918][ T9092] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.343122][ T9092] bridge_slave_0: entered allmulticast mode [ 544.351701][ T9092] bridge_slave_0: entered promiscuous mode [ 544.360931][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.368632][ T9092] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.571456][ T9092] bridge_slave_1: entered allmulticast mode [ 545.399739][ T9092] bridge_slave_1: entered promiscuous mode [ 545.537940][ T9067] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.547141][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.555351][ T9067] bridge_slave_0: entered allmulticast mode [ 545.593785][ T9067] bridge_slave_0: entered promiscuous mode [ 545.793382][ T9092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.845179][ T9092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.106050][ T9067] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.113414][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.120949][ T9067] bridge_slave_1: entered allmulticast mode [ 546.130448][ T9067] bridge_slave_1: entered promiscuous mode [ 547.277861][ T9092] team0: Port device team_slave_0 added [ 547.313412][ T9092] team0: Port device team_slave_1 added [ 547.365339][ T9067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.126271][ T9265] loop5: detected capacity change from 0 to 256 [ 549.145809][ T9067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.333028][ T9265] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 549.679670][ T9092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.735469][ T9092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.857395][ T30] audit: type=1800 audit(1773930623.869:25): pid=9265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.669" name="file2" dev="loop5" ino=1048617 res=0 errno=0 [ 549.952033][ T9092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.562213][ T9092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.569191][ T9092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.716037][ T9092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.788777][ T9067] team0: Port device team_slave_0 added [ 552.089354][ T9067] team0: Port device team_slave_1 added [ 554.672571][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.679568][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.800811][ T9067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.183723][ T30] audit: type=1326 audit(1773930629.249:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9293 comm="syz.4.678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe379d9c799 code=0x0 [ 557.210282][ T30] audit: type=1800 audit(1773930629.989:27): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.679" name="bus" dev="overlay" ino=1073 res=0 errno=0 [ 557.234992][ T9067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.290086][ T9067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.469279][ T9067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.580323][ T5838] block nbd4: Receive control failed (result -32) [ 557.590330][ T5832] block nbd4: Receive control failed (result -32) [ 557.590502][ T9298] block nbd4: shutting down sockets [ 557.689094][ T9092] hsr_slave_0: entered promiscuous mode [ 557.753700][ T9092] hsr_slave_1: entered promiscuous mode [ 557.785345][ T9092] debugfs: 'hsr0' already exists in 'hsr' [ 557.797958][ T9092] Cannot create hsr debugfs directory [ 558.243257][ T9067] hsr_slave_0: entered promiscuous mode [ 558.250078][ T9067] hsr_slave_1: entered promiscuous mode [ 558.276137][ T9067] debugfs: 'hsr0' already exists in 'hsr' [ 558.357047][ T9067] Cannot create hsr debugfs directory [ 561.419076][ T8997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 561.501766][ T64] bridge_slave_1: left allmulticast mode [ 561.508132][ T64] bridge_slave_1: left promiscuous mode [ 561.521894][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.592865][ T64] bridge_slave_0: left allmulticast mode [ 561.598558][ T64] bridge_slave_0: left promiscuous mode [ 561.609552][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.667007][ T64] bridge_slave_1: left allmulticast mode [ 561.678813][ T64] bridge_slave_1: left promiscuous mode [ 561.693260][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.695153][ T9329] ================================================================== [ 561.708341][ T9329] BUG: KASAN: slab-out-of-bounds in blk_mq_free_rqs+0x6e2/0x760 [ 561.715986][ T9329] Read of size 8 at addr ffff888027b4f7e8 by task syz.3.686/9329 [ 561.723708][ T9329] [ 561.726037][ T9329] CPU: 0 UID: 0 PID: 9329 Comm: syz.3.686 Not tainted syzkaller #0 PREEMPT(full) [ 561.726081][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.726104][ T9329] Call Trace: [ 561.726115][ T9329] [ 561.726128][ T9329] dump_stack_lvl+0x100/0x190 [ 561.726186][ T9329] print_report+0x156/0x4c9 [ 561.726239][ T9329] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.726285][ T9329] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.726331][ T9329] ? __phys_addr+0xe8/0x180 [ 561.726384][ T9329] ? blk_mq_free_rqs+0x6e2/0x760 [ 561.726438][ T9329] kasan_report+0xdf/0x1e0 [ 561.726490][ T9329] ? blk_mq_free_rqs+0x6e2/0x760 [ 561.726549][ T9329] blk_mq_free_rqs+0x6e2/0x760 [ 561.726609][ T9329] blk_mq_free_map_and_rqs+0x30/0x120 [ 561.726668][ T9329] blk_mq_free_sched_tags+0xeb/0x1b0 [ 561.726720][ T9329] blk_mq_free_sched_res+0x52/0x150 [ 561.726787][ T9329] elevator_change_done+0x187/0x650 [ 561.726835][ T9329] ? lockdep_hardirqs_on+0x78/0x100 [ 561.726898][ T9329] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.726945][ T9329] ? __pfx_elevator_change_done+0x10/0x10 [ 561.726996][ T9329] elevator_change+0x2d7/0x530 [ 561.727044][ T9329] elevator_set_none+0x92/0xf0 [ 561.727089][ T9329] ? __pfx_elevator_set_none+0x10/0x10 [ 561.727135][ T9329] ? blk_mq_unregister_hctx.part.0+0x1ba/0x230 [ 561.727186][ T9329] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.727236][ T9329] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 561.727302][ T9329] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.727348][ T9329] ? __mutex_unlock_slowpath+0x15c/0x790 [ 561.727408][ T9329] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 561.727481][ T9329] nbd_start_device+0x1a6/0xbd0 [ 561.727520][ T9329] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.727567][ T9329] ? security_capable+0x80/0x260 [ 561.727633][ T9329] nbd_ioctl+0x4a6/0xd30 [ 561.727669][ T9329] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 561.727713][ T9329] ? __pfx_nbd_ioctl+0x10/0x10 [ 561.727753][ T9329] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.727798][ T9329] ? find_held_lock+0x2b/0x80 [ 561.727843][ T9329] ? srso_alias_return_thunk+0x5/0xfbef5 [ 561.727896][ T9329] ? __pfx_nbd_ioctl+0x10/0x10 [ 561.727932][ T9329] blkdev_ioctl+0x5ad/0x6f0 [ 561.727983][ T9329] ? __pfx_blkdev_ioctl+0x10/0x10 [ 561.728038][ T9329] ? __pfx_blkdev_ioctl+0x10/0x10 [ 561.728089][ T9329] __x64_sys_ioctl+0x18e/0x210 [ 561.728135][ T9329] do_syscall_64+0x106/0xf80 [ 561.728188][ T9329] ? irqentry_exit+0x138/0x670 [ 561.728245][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.728284][ T9329] RIP: 0033:0x7f854359c799 [ 561.728313][ T9329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.728351][ T9329] RSP: 002b:00007f854451d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.728386][ T9329] RAX: ffffffffffffffda RBX: 00007f8543815fa0 RCX: 00007f854359c799 [ 561.728413][ T9329] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 561.728436][ T9329] RBP: 00007f8543632c99 R08: 0000000000000000 R09: 0000000000000000 [ 561.728460][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.728484][ T9329] R13: 00007f8543816038 R14: 00007f8543815fa0 R15: 00007ffc336cfa78 [ 561.728522][ T9329] [ 561.728535][ T9329] [ 562.046437][ T9329] Allocated by task 1: [ 562.050497][ T9329] kasan_save_stack+0x30/0x50 [ 562.055206][ T9329] kasan_save_track+0x14/0x30 [ 562.059985][ T9329] __kasan_kmalloc+0xaa/0xb0 [ 562.064585][ T9329] __kmalloc_node_noprof+0x307/0x850 [ 562.069875][ T9329] blk_mq_alloc_tag_set+0x477/0x1330 [ 562.075270][ T9329] nbd_dev_add+0x342/0xb10 [ 562.079685][ T9329] nbd_init+0x291/0x2b0 [ 562.083866][ T9329] do_one_initcall+0x11d/0x760 [ 562.088710][ T9329] kernel_init_freeable+0x6e5/0x7a0 [ 562.093913][ T9329] kernel_init+0x1f/0x1e0 [ 562.098247][ T9329] ret_from_fork+0x754/0xd80 [ 562.102860][ T9329] ret_from_fork_asm+0x1a/0x30 [ 562.107640][ T9329] [ 562.109950][ T9329] The buggy address belongs to the object at ffff888027b4f7e0 [ 562.109950][ T9329] which belongs to the cache kmalloc-8 of size 8 [ 562.123663][ T9329] The buggy address is located 0 bytes to the right of [ 562.123663][ T9329] allocated 8-byte region [ffff888027b4f7e0, ffff888027b4f7e8) [ 562.137994][ T9329] [ 562.140317][ T9329] The buggy address belongs to the physical page: [ 562.146723][ T9329] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027b4f680 pfn:0x27b4f [ 562.156826][ T9329] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 562.164913][ T9329] page_type: f5(slab) [ 562.168903][ T9329] raw: 00fff00000000200 ffff88813fe39500 ffffea0000abdd90 ffffea0000d70550 [ 562.177532][ T9329] raw: ffff888027b4f680 000000080080007b 00000000f5000000 0000000000000000 [ 562.186138][ T9329] page dumped because: kasan: bad access detected [ 562.192552][ T9329] page_owner tracks the page as allocated [ 562.198263][ T9329] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5607902614, free_ts 5601697774 [ 562.217914][ T9329] post_alloc_hook+0x153/0x170 [ 562.222709][ T9329] get_page_from_freelist+0x111d/0x3140 [ 562.228273][ T9329] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 562.234202][ T9329] new_slab+0xa6/0x6b0 [ 562.238295][ T9329] refill_objects+0x26b/0x400 [ 562.242981][ T9329] __pcs_replace_empty_main+0x1ab/0x660 [ 562.248533][ T9329] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 562.254969][ T9329] kstrdup+0x51/0xe0 [ 562.258895][ T9329] kstrdup_const+0x63/0x80 [ 562.263329][ T9329] __kernfs_new_node+0x9b/0x960 [ 562.268201][ T9329] kernfs_new_node+0x11b/0x1a0 [ 562.272985][ T9329] kernfs_create_link+0xcc/0x240 [ 562.277924][ T9329] sysfs_do_create_link_sd+0x90/0x140 [ 562.283307][ T9329] sysfs_create_link+0x61/0xc0 [ 562.288079][ T9329] device_add+0x675/0x1950 [ 562.292499][ T9329] __add_disk+0x518/0xe40 [ 562.296850][ T9329] page last free pid 10 tgid 10 stack trace: [ 562.302820][ T9329] __free_frozen_pages+0x7e1/0x10d0 [ 562.308048][ T9329] vfree.part.0+0x12b/0x9d0 [ 562.312658][ T9329] delayed_vfree_work+0x8e/0xd0 [ 562.317529][ T9329] process_one_work+0xa23/0x19a0 [ 562.322466][ T9329] worker_thread+0x5ef/0xe50 [ 562.327062][ T9329] kthread+0x370/0x450 [ 562.331236][ T9329] ret_from_fork+0x754/0xd80 [ 562.335854][ T9329] ret_from_fork_asm+0x1a/0x30 [ 562.340627][ T9329] [ 562.342938][ T9329] Memory state around the buggy address: [ 562.348554][ T9329] ffff888027b4f680: fa fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 562.356614][ T9329] ffff888027b4f700: 06 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 562.364671][ T9329] >ffff888027b4f780: 00 fc fc fc 05 fc fc fc 00 fc fc fc 00 fc fc fc [ 562.372723][ T9329] ^ [ 562.380173][ T9329] ffff888027b4f800: 06 fc fc fc 06 fc fc fc 06 fc fc fc 05 fc fc fc [ 562.388232][ T9329] ffff888027b4f880: 05 fc fc fc 05 fc fc fc 05 fc fc fc 02 fc fc fc [ 562.396284][ T9329] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.431753][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.438432][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.477068][ T9329] Disabling lock debugging due to kernel taint [ 562.556449][ T30] audit: type=1326 audit(1773930636.629:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9328 comm="syz.3.686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f854359c799 code=0x0 [ 562.598968][ T64] bridge_slave_0: left allmulticast mode [ 562.604725][ T64] bridge_slave_0: left promiscuous mode [ 562.610534][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.795978][ T9329] block nbd3: shutting down sockets [ 563.141521][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.183140][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.193520][ T64] bond0 (unregistering): Released all slaves [ 563.341541][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.353317][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.365529][ T64] bond0 (unregistering): Released all slaves [ 563.388120][ T8997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 563.639637][ T64] hsr_slave_0: left promiscuous mode [ 563.647239][ T64] hsr_slave_1: left promiscuous mode [ 563.663619][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.681936][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.715793][ T64] hsr_slave_0: left promiscuous mode [ 563.737883][ T64] hsr_slave_1: left promiscuous mode [ 563.754494][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.792496][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.823786][ T64] veth1_vlan: left promiscuous mode [ 563.829082][ T64] veth0_vlan: left promiscuous mode [ 564.019825][ T64] team0 (unregistering): Port device team_slave_1 removed [ 564.032125][ T64] team0 (unregistering): Port device team_slave_0 removed [ 564.168285][ T64] team0 (unregistering): Port device team_slave_1 removed [ 564.180303][ T64] team0 (unregistering): Port device team_slave_0 removed [ 565.191910][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.255857][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.327634][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.386718][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.492430][ T64] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.544117][ T64] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.588026][ T64] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.647748][ T64] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.745127][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.790492][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.855054][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.908302][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.025429][ T64] bridge_slave_1: left allmulticast mode [ 566.032446][ T64] bridge_slave_1: left promiscuous mode [ 566.038171][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.046839][ T64] bridge_slave_0: left allmulticast mode [ 566.053844][ T64] bridge_slave_0: left promiscuous mode [ 566.059566][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.069420][ T64] bridge_slave_1: left allmulticast mode [ 566.077120][ T64] bridge_slave_1: left promiscuous mode [ 566.083057][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.091414][ T64] bridge_slave_0: left allmulticast mode [ 566.097383][ T64] bridge_slave_0: left promiscuous mode [ 566.103280][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.112231][ T64] bridge_slave_1: left allmulticast mode [ 566.117899][ T64] bridge_slave_1: left promiscuous mode [ 566.123848][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.132128][ T64] bridge_slave_0: left allmulticast mode [ 566.137763][ T64] bridge_slave_0: left promiscuous mode [ 566.143686][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.152798][ T64] bridge_slave_1: left allmulticast mode [ 566.158422][ T64] bridge_slave_1: left promiscuous mode [ 566.164391][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.173947][ T64] bridge_slave_0: left allmulticast mode [ 566.179603][ T64] bridge_slave_0: left promiscuous mode [ 566.185713][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.199339][ T64] bridge_slave_1: left allmulticast mode [ 566.205053][ T64] bridge_slave_1: left promiscuous mode [ 566.210728][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.219135][ T64] bridge_slave_0: left allmulticast mode [ 566.224955][ T64] bridge_slave_0: left promiscuous mode [ 566.230607][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.247131][ T64] bridge_slave_1: left allmulticast mode [ 566.252875][ T64] bridge_slave_1: left promiscuous mode [ 566.258544][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.267593][ T64] bridge_slave_0: left allmulticast mode [ 566.274395][ T64] bridge_slave_0: left promiscuous mode [ 566.280056][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.476284][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.486252][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.495883][ T64] bond0 (unregistering): Released all slaves [ 566.552311][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.562396][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.572166][ T64] bond0 (unregistering): Released all slaves [ 566.647259][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.657353][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.667213][ T64] bond0 (unregistering): Released all slaves [ 566.970938][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.981258][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.991719][ T64] bond0 (unregistering): Released all slaves [ 567.514737][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.524819][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.535734][ T64] bond0 (unregistering): Released all slaves [ 567.934840][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.946352][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.956038][ T64] bond0 (unregistering): Released all slaves [ 568.478026][ T64] hsr_slave_0: left promiscuous mode [ 568.485359][ T64] hsr_slave_1: left promiscuous mode [ 568.496660][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.507657][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.518824][ T64] hsr_slave_0: left promiscuous mode [ 568.524956][ T64] hsr_slave_1: left promiscuous mode [ 568.530850][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.539361][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.550905][ T64] hsr_slave_0: left promiscuous mode [ 568.557153][ T64] hsr_slave_1: left promiscuous mode [ 568.563331][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.573045][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.589611][ T64] hsr_slave_0: left promiscuous mode [ 568.595604][ T64] hsr_slave_1: left promiscuous mode [ 568.601947][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.609397][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.620349][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.628692][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.639696][ T64] hsr_slave_0: left promiscuous mode [ 568.651332][ T64] hsr_slave_1: left promiscuous mode [ 568.657287][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.665000][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.674453][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.682903][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.695139][ T64] hsr_slave_0: left promiscuous mode [ 568.703460][ T64] hsr_slave_1: left promiscuous mode [ 568.709378][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.717800][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.729333][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.737114][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.759300][ T64] veth1_macvtap: left promiscuous mode [ 568.764931][ T64] veth0_macvtap: left promiscuous mode [ 568.770508][ T64] veth1_vlan: left promiscuous mode [ 568.776313][ T64] veth0_vlan: left promiscuous mode [ 568.783105][ T64] veth1_macvtap: left promiscuous mode [ 568.788614][ T64] veth0_macvtap: left promiscuous mode [ 568.794566][ T64] veth1_vlan: left promiscuous mode [ 568.799829][ T64] veth0_vlan: left promiscuous mode [ 568.807117][ T64] veth1_macvtap: left promiscuous mode [ 568.812920][ T64] veth0_macvtap: left promiscuous mode [ 568.818464][ T64] veth1_vlan: left promiscuous mode [ 568.824001][ T64] veth0_vlan: left promiscuous mode [ 569.109782][ T64] team0 (unregistering): Port device team_slave_1 removed [ 569.143577][ T64] team0 (unregistering): Port device team_slave_0 removed [ 569.322109][ T64] team0 (unregistering): Port device team_slave_1 removed [ 569.339050][ T64] team0 (unregistering): Port device team_slave_0 removed [ 569.523426][ T64] team0 (unregistering): Port device team_slave_1 removed [ 569.546975][ T64] team0 (unregistering): Port device team_slave_0 removed [ 569.721774][ T64] team0 (unregistering): Port device team_slave_1 removed [ 569.748890][ T64] team0 (unregistering): Port device team_slave_0 removed [ 569.938268][ T64] team0 (unregistering): Port device team_slave_1 removed [ 569.952263][ T64] team0 (unregistering): Port device team_slave_0 removed [ 570.127265][ T64] team0 (unregistering): Port device team_slave_1 removed [ 570.138959][ T64] team0 (unregistering): Port device team_slave_0 removed