last executing test programs: 16m42.946106217s ago: executing program 0 (id=96): syz_emit_ethernet(0x3a8, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x372, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1b, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 16m42.433302749s ago: executing program 0 (id=99): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={0x1, 0x1b, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x1e6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000087000000030021000200000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) pipe(0x0) write$tun(r2, &(0x7f0000001600)={@val={0x8, 0x800}, @val={0x2, 0x4, 0x5, 0x6, 0x3, 0x9}, @ipv4=@generic={{0x14, 0x4, 0x1, 0x6, 0x145, 0x68, 0x0, 0xcf, 0x2, 0x0, @multicast2, @multicast1, {[@end, @generic={0x0, 0xd, "4c138cdcd8ec2454bfa021"}, @timestamp={0x44, 0x10, 0xc6, 0x0, 0x8, [0x8, 0xd79d, 0x0]}, @timestamp={0x44, 0x18, 0x22, 0x0, 0x7, [0xffffffc0, 0x0, 0x40, 0x800, 0x800]}, @ra={0x94, 0x4}]}}, "1716abdf9ffde5bbe4d2752cf0b6ef31d2429d7b80fb40262b2dd04f8e1e6384665f7a0e3cddd8832a02f41e4aa3eb59bf9ee29d26dccf8721f1808e38a1c399edfe75a79a862e653c0f6841c6509029487ce78df8fbb754457cad0b6826f66c0a08be55423365f9cc889e5065da5491a76ff0155c25c59f58b75c60fb080f7207bb3fa5f52594f3d6fa9fb123896c431734d18ffa528f44240fed5d5c1da43d1fa774540b83e534fcc7019892a97309c6dba576c242a106ece8e3d71653669d33c123f0da90138372d1e653bc0f92769fc29d5d86a1318a8ab295715abf452269772e75f1542f7d44d289ae9abd8021cb2429b736"}}, 0x153) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffc0900020073797a3000000000050001000600000005000500090000000500040000000000140007800800114000000000050015002800000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1, 0x8}, @const={0x0, {0xf3ff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES64=r7], 0x3}, 0x1, 0x0, 0x0, 0x8800}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi2\x00', 0x10081, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000013c0)={'amplc_pc263\x00', [0x1ff, 0x7, 0x80000000, 0x0, 0x6, 0x57, 0x2, 0x3, 0x6, 0x8, 0x0, 0x2ce0, 0x5, 0x2, 0x7, 0x6, 0x7, 0x2, 0x4, 0x8, 0x5, 0xa000000, 0x73f, 0x1, 0x1, 0x8, 0x4, 0xe, 0x7f, 0xfffffff7, 0x800, 0x2]}) unshare(0x8000280) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x202040, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r10}, 0x0) 16m40.306730107s ago: executing program 0 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "fbbe"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m39.388349784s ago: executing program 0 (id=111): mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x24) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') (async) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x94) (async) 16m38.890329178s ago: executing program 0 (id=116): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = openat(0xffffffffffffff9c, 0x0, 0x40040, 0x1) splice(r1, 0x0, r1, 0x0, 0x9, 0x1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix_mp={0x103, 0xb3cf, 0x3432564e, 0x0, 0x4, [{0x6}, {0x9, 0x5}, {0x0, 0x20001}, {0x8, 0x9}, {0x3, 0x20b68e}, {0x80000003, 0x7ff}, {0x3, 0x1}, {0x3}], 0x9, 0x82, 0x7, 0x2, 0x3}}) sigaltstack(&(0x7f0000000280)={0x0, 0x0, 0xfffffffffffffe73}, &(0x7f0000000140)={0x0}) sigaltstack(0x0, &(0x7f0000000100)={0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002a40)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c40)={0x6, 0x3, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001a00)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4bf3}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000280)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nodiscard}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_ignore}, {@jqfmt_vfsv0}]}, 0x0, 0x470, &(0x7f0000000bc0)="$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") 16m36.568932082s ago: executing program 0 (id=124): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') exit(0xf) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) sendmsg$NL80211_CMD_REQ_SET_REG(r2, 0x0, 0x40004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 16m36.087881959s ago: executing program 32 (id=124): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') exit(0xf) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000014) sendmsg$NL80211_CMD_REQ_SET_REG(r2, 0x0, 0x40004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 15m2.499234324s ago: executing program 1 (id=366): writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x282}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433dda8b8c0d00d0df4f8d165e0dd9ad1123fa4c2b54ba6a632d998bf3e678955c1c16d9a25109aa80dea218de038fd09c40748c2ef2c75", 0xf0}, {&(0x7f0000000840)="def015f646c27f13274cd20d6d707e2f6be3a3a4540325436209143b8ace92f28dfdf027c9cdba457301d0450aa6e7650bd347dbf0dcdc5f6b1d131a558a071e36419ed57189b720a6d2786ed2be1a91ad79bc258f6284b98db8c647affe92814cd09d97a01e852caddeb47912a00549ed86327c1b14b6b3b090b4c2a32296a4d9f0b9bbb5840ad75fbb2bb3df4b200c41d139e60cc35006b98c9a3b9a36849b57d6", 0xa2}, {&(0x7f0000000900)="76dd182c4fc8b7d7b41f42cd3ef0d3f7feb19b374acf8c681bff5bae66052fbda7900cf7836f597d138f7ecbf63e380d722760d9256ca254325b69e2a1d1a97b7894004ffc5f56f20f00a2349239fb194534f51634f8f7f39fe6abedd86153c650ddeaba837e85408d900f572cb257d95fb3ba8428f16466973832818415ff2bc6e15b95ca667ba0ec92eda20a06f55c9ef1efab414725655633", 0x9a}], 0x4) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 15m2.110651128s ago: executing program 1 (id=367): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f000068c000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068a000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000003c0)={0x0, @bt={0xe11, 0x2c55f0f2, 0x1, 0x4, 0xd59f80, 0x5, 0x10003f, 0x19ef, 0x3, 0x3, 0x2804, 0x25f3685d, 0x101, 0xd1, 0xc, 0x16, {0x8, 0x9}, 0xd0, 0xa}}) 15m1.440587843s ago: executing program 1 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x26) r2 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f00000006c0)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\x1f\x0eHmK\x86\x06\x97\xb9\xc5\xda\xba\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xdavC\xe2\xe8 \xd5-<#\x18\xc3\xb5N(vj\xa7+\xff\xff\xff\x7f0\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\x02`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2}\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x00\x00\x00\x00\x00\x00\x00\x01o\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\xc2\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6\x99\x99\xbd\x96\xf3\xa9\x8c\x1b\xb1\x9b\xe9\x0el\x83\x17\xc1\x8cK<\xe9e`\xcf\'\xd9R}>\xb7\xb4\xca\x13!\x03\xc6\xf3\xb4\x82\xb6\xa6;n\x04\x19%\v\xcf5\xf3y\xd3\xfd\xe1l\xbc\x16{\x13pD\xc40H\xee\x9fx\xc7\xb5x\xff\xb0V\x06\xe3\x92\rq\x95x\x9b\xf09\x116$\xf3\xb6\x9c\x87\xa5\x9e\xbf\x19\xf1\xcb\xb4in\xd3G\xf6B\xa51\xa2-\xb5\xd7g\xf9p?\xc9\xf7\xc1\x9b\xb5\x8c\xfaU>\xb6j\xd5N\x9f\xe0*2S,]\xe0+}A\f\xb0r\']\x14Ac^.Y0\";\x92\xd6\xb2\x9e+0\x18\xed\x8elx|\xab\\\t\\V\xd5\xc7f\xa1L\rI\xa5\xf4\xaa\x9b\az\xe0\xe3\xd3VS\xc4\xcd>', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES16=r3], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000100000014001f000000000000000000000000000000000014002000fe"], 0x5c}}, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000005756c5669a1c0963f88902ddfdf21b8519f7640988", @ANYRES16=r6, @ANYBLOB="200029bd7000fddbdf2500000000080011000000000006000300060000000c0016007300000000000000050022000100000006001a004e22000014001f0000000000000000000000ffffe000000206001b004e210000"], 0x5c}, 0x1, 0x0, 0x0, 0x8051}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200070000000500040001000000050003"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) 14m59.561265481s ago: executing program 1 (id=371): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000140), 0x4) rt_sigqueueinfo(0x0, 0x11, &(0x7f0000000080)={0x38, 0x4, 0x5}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x100, 0x0) lseek(r4, 0xd489, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) prctl$PR_MCE_KILL(0x23, 0xa, 0x7fffffffeffe) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="420033008000e100ffffffffffff080211000000293972aaa690700000000080000000b0588e0040000906060207000506053b01c242"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x888c}, 0x10) 14m59.02830122s ago: executing program 1 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = syz_clone(0x8000, &(0x7f0000000180)="8dbb3cd411495141d7d6e253cc18aad0dc6d68a693f9a064971adefd28c92b1c78049bb0be16fcd0c445e3b7ab0640f23028b068adba6c7a69b3647c574916aebd61e8c4b455f60eb61b963e1682b141c1739e53d3be739a0406b4053e4834e69be9d43013a66ad79b90875567", 0x6d, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="e049ac9ed41fa71d582076b57c0539fedf16ea37d596c5b9264013189d6ee11795") ptrace$ARCH_GET_UNTAG_MASK(0x1e, r0, &(0x7f00000002c0), 0x4001) r1 = syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000010280)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00', @ANYRES32, @ANYRES16], 0x5, 0x105c9, &(0x7f0000020bc0)="$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") r2 = openat(r1, &(0x7f0000000380)='./file1\x00', 0x145042, 0x136) mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x23) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x10040) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000005c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x2008001, 0x400055}]}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000040)={0x1fe, 0xe, 0x58000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x3, r4}) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) truncate(&(0x7f0000000940)='./file1\x00', 0xd7c) 14m57.293803239s ago: executing program 1 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, 0x0) r1 = io_uring_setup(0x3a03, &(0x7f0000000580)={0x0, 0x0, 0x2}) io_uring_enter(r1, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x1, 0x7, 0xfd, @generic=0xcc17}) 14m40.760977434s ago: executing program 33 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, 0x0) r1 = io_uring_setup(0x3a03, &(0x7f0000000580)={0x0, 0x0, 0x2}) io_uring_enter(r1, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x1, 0x7, 0xfd, @generic=0xcc17}) 12m1.600815514s ago: executing program 4 (id=775): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf25070000", @ANYRES32, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 12m0.231816781s ago: executing program 4 (id=777): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1800, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000019c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001a00)=0x30) 11m59.07400667s ago: executing program 4 (id=780): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x23, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x77, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc840}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newsa={0x19c, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0x1, 0x714, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@policy={0xac, 0x7, {{@in6=@private2, @in6=@mcast1, 0x4e24, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x20, 0x67}, {0x3, 0x4a, 0x7191, 0xc61f, 0x3, 0x975, 0x8, 0x82df}, {0x7fffffff, 0xfffffffffffffffb, 0x5, 0x9}, 0x101, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioperm(0x5453, 0x1, 0x26) r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x103}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="6e86099e870697151e9fd5357edb94826b7a13c6cf7b3a585d5b41db48ce382277cacd4530f7b8c2100975966db9d93953f78c291e83eaa2905967c6767b6e149dc0b811b29c5514f0b6735cfc83313822ac8a12028f9c160fc97e42041edafaacbd27c1e51e4b42a6e1f2a3577f660290d5a2eccf6da974b28afa233d8c8b0f6b1be707eee29bd0496944134ee37d4c3d9e88f988979c3fe134fd6abcf63e37caee2830055e42b6b925a73d12fb25d7d9fab35602bf011e43891ba49ff74d27869604c244b5a468c8dd69fe6b73bdb9cb9ef016a622b35549", 0xd9}, {&(0x7f0000000180)="614983af", 0x4}, {&(0x7f0000000240)="6b2fb189a4060fe5dbf7e1a077fcfc8012c6a7848055c30bce93a4b25610d70038be44deecdf1ac9f1ccddd4969f87c294e729a4c9df76873402e10d09e5a334156c6deca91e6f94955d87c71ceb5c3e1973c571d33c3a54e9dbfe055e1dd35fa57d269143b77ccb5519c239773fef22715d18e7c7a43b2d814e597c572b78e54c286448a9cc73a9ed39c458ffbe0d529cbd16db08608596", 0x98}], 0x3) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1001}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x9, 0x0) 11m57.882971566s ago: executing program 4 (id=785): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000002280)=0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x4, 0x0, 0xffffdffffffffffd, 0xc, 0x0, 0x0, 0x10000009, 0xffff, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 11m57.612998194s ago: executing program 4 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000340)) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000000)={[{@noenospc_debug}, {@compress}, {@treelog}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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") r1 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x0) io_setup(0xa, &(0x7f00000003c0)) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1, 0x200000000, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x9, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18040000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000640)={0x80000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380), {0x26}, &(0x7f00000004c0)=""/80, 0x50, &(0x7f0000000540)=""/187, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r1}}, 0x58) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000f00)) creat(&(0x7f00000032c0)='./file1\x00', 0x10) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) 11m56.304699977s ago: executing program 4 (id=787): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40008d4}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESOCT=r3], 0x68}, 0x1, 0x0, 0x0, 0x890}, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x4009, 0x0, 0x4e, &(0x7f0000000100)="f67b818da81017e72f07b0b1642c148743b6fb4488fc6c8975a958862b0b0b12942acbe148f2158470ff7675983c64d14c6a60ab9f28e23921a0e9fd1f4b36e555d4054272365aa91dc71b33b72c"}], 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc00) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12011003cb91d440120a105d97d3010203010902123cb9936310f90904b10100b0a02f09"], &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r6 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x8, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000001540)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1, 0x1, 0x61, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) quotactl$Q_QUOTAON(0x1, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_SET(r0, 0x560b, 0x0) 11m39.281467002s ago: executing program 34 (id=787): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40008d4}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESOCT=r3], 0x68}, 0x1, 0x0, 0x0, 0x890}, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x4009, 0x0, 0x4e, &(0x7f0000000100)="f67b818da81017e72f07b0b1642c148743b6fb4488fc6c8975a958862b0b0b12942acbe148f2158470ff7675983c64d14c6a60ab9f28e23921a0e9fd1f4b36e555d4054272365aa91dc71b33b72c"}], 0x1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_int(r5, 0x0, 0xe, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc00) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12011003cb91d440120a105d97d3010203010902123cb9936310f90904b10100b0a02f09"], &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r6 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x8, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000001540)=@IORING_OP_WAITID={0x32, 0x49, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x1, 0x1, 0x61, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) quotactl$Q_QUOTAON(0x1, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_SET(r0, 0x560b, 0x0) 8m6.528935388s ago: executing program 5 (id=1152): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x20000000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) add_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="1f70e517b91b245f543baad2", 0xc, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x1c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1bc396b6b0f08b88}, 0x20000000) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2eb, 0x282) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xb, 0x1, 0x7, 0x6}}) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 8m2.619527029s ago: executing program 5 (id=1157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x240c8806, &(0x7f0000000140)={0xa, 0x4c20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xd4, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 8m2.256990646s ago: executing program 5 (id=1158): r0 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) dup(r0) fchdir(r1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000100)=0x10000, 0x8) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x34, 0x0, 0x1, 0x80000000}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 8m1.846200375s ago: executing program 5 (id=1160): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff7873"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x37, &(0x7f0000000380)={&(0x7f0000001040)=ANY=[], 0x28}}, 0x802) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000ac0)=0x8) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f626172726965722c6e6c733d69736f383835392d31342c6e6f626172726965722c747970653de481e91c2c6e6f6465636f6d706f73652c706172743d3078303030303030303030383030666335392c6e6f626172726965722c00"], 0xfe, 0x5e5, &(0x7f0000002900)="$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") socket$nl_generic(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000b40)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x7) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0/file0\x00', r3}, 0x18) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000040) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getresuid(0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007150af000000000006000000000000009500001800000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)={0x2c, 0x5, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x7}, @pad1]}, 0x38) sendto$inet6(r5, 0x0, 0x0, 0x808, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 7m59.85600464s ago: executing program 5 (id=1167): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 7m54.398497146s ago: executing program 5 (id=1180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x40, r2, 0x25, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) 7m53.997886218s ago: executing program 35 (id=1180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x40, r2, 0x25, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) 4m35.154282385s ago: executing program 3 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r1, 0x603, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 4m34.669382213s ago: executing program 3 (id=1425): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000580)={0x1}) 4m34.39682207s ago: executing program 3 (id=1426): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 4m34.165453835s ago: executing program 3 (id=1428): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000400)={0x7}, 0x2000) 4m32.572090655s ago: executing program 3 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfe08, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x24044080) 4m29.334092768s ago: executing program 3 (id=1435): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 4m28.827815524s ago: executing program 36 (id=1435): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 4.969137951s ago: executing program 2 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x3, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{}, 0x3000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 3.213585178s ago: executing program 2 (id=1713): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07daf57ebcfa3fd03477"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000000940), 0x0, 0x40034010, 0x0) 2.448381266s ago: executing program 2 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xc}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.439857846s ago: executing program 2 (id=1715): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fanotify_init(0x4, 0x800) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x20881) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'gretap0\x00', 0x0}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004180)={{{@in=@dev={0xac, 0x14, 0x14, 0x3a}, @in6=@mcast2, 0x4e20, 0x2, 0x4e21, 0x1ff, 0x2, 0x60, 0x0, 0x2c, r1, r2}, {0x7, 0x8, 0x7, 0x5, 0x8, 0x4a21, 0x4, 0xffffffffffffffc9}, {0x6, 0x7fffffff, 0x7, 0xfffffffffffffffa}, 0x0, 0x6e6bbb, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2b}, 0x2, @in=@multicast1, 0x3505, 0x0, 0x1, 0x4, 0x7, 0x6, 0x9}}, 0xe4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000380)={[], [{@flag='async'}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfsroot={'smackfsroot', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@obj_role={'obj_role', 0x3d, 'udf\x00'}}], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO") r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x22000, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff, 0xc34, &(0x7f0000000f80)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1c, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x2, 0x8, @rand_addr=' \x01\x00', 0x5, 0x1, 0xf, 0x80}}}}}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0xb}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) 1.317071705s ago: executing program 2 (id=1716): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x20000a, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) brk(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000004c0), 0xa4400, 0x0) 0s ago: executing program 2 (id=1717): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x0, 0x590, 0x1, 0x1, 0xd59f80, 0x2004, 0x5, 0xfe, 0x400, 0x5, 0x722, 0xe72, 0x1000, 0x200007f, 0x3d, 0x1a, {0xffff945a, 0x1}, 0x3, 0xed}}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2a) read$qrtrtun(0xffffffffffffffff, &(0x7f00000005c0)=""/213, 0xd5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000240), 0x4) r4 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) (async) fcntl$setlease(r4, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) (async) fcntl$setlease(r6, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902"], 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000006a0000042cbd7000ffdbdf250a0000000000000008000a000200000004000b000400090008000a000200000004000900080001000100000004000b00614fd249bc60d09feefc96073d0440ac2240920473a1"], 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r8, @ANYRES8=r2], 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r8, @ANYRES8=r2], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000740)="fe", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000b40)={[0x4, 0x400000000006, 0xfffffffffffffffd, 0x4000000000000000, 0x8000000000010007, 0x7f, 0x4002004c3, 0x7ffffffb, 0x0, 0x20000000002c, 0x6, 0x1, 0x0, 0x1, 0x8, 0x4], 0xeeee8000, 0x4}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000b40)={[0x4, 0x400000000006, 0xfffffffffffffffd, 0x4000000000000000, 0x8000000000010007, 0x7f, 0x4002004c3, 0x7ffffffb, 0x0, 0x20000000002c, 0x6, 0x1, 0x0, 0x1, 0x8, 0x4], 0xeeee8000, 0x4}) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): n_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.508047][T12380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.508064][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.508091][T12380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.661579][T12630] loop3: detected capacity change from 0 to 764 [ 838.688332][T12630] iso9660: Unknown parameter '184467440737095516150xffffffffffffffff' [ 838.688717][T12630] Flush: task=syz.3.1386[12630] dev=loop3 state=2 [ 838.744617][T12631] loop2: detected capacity change from 0 to 512 [ 838.820051][T12630] Teardown: task=syz.3.1386[12630] dev=loop3 state=2 [ 838.851012][T12631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.276395][ T5593] do_umount: task=syz-executor[5593] propagate_mount_busy()!=0 [ 839.276647][ T5593] do_umount: task=syz-executor[5593] propagate_mount_busy()!=0 [ 839.423668][T12380] hsr_slave_0: entered promiscuous mode [ 839.430673][T12380] hsr_slave_1: entered promiscuous mode [ 839.436043][T12380] debugfs: 'hsr0' already exists in 'hsr' [ 839.436069][T12380] Cannot create hsr debugfs directory [ 839.520195][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 839.522785][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.599562][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 839.608843][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 839.631747][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 839.638899][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 839.688283][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 839.840777][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 840.583920][ T8091] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 840.657347][T12651] loop3: detected capacity change from 0 to 256 [ 840.683811][T12651] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 840.702422][T12651] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 840.925994][ T8091] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.928237][ T8091] usb 3-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=a0.27 [ 840.928263][ T8091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.928280][ T8091] usb 3-1: Product: syz [ 840.928292][ T8091] usb 3-1: Manufacturer: syz [ 840.928304][ T8091] usb 3-1: SerialNumber: syz [ 840.936956][ T8091] usb 3-1: config 0 descriptor?? [ 842.226568][ T38] audit: type=1800 audit(800.158:1344): pid=12656 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.1391" name="bus" dev="loop3" ino=1048639 res=0 errno=0 [ 842.454531][ T5604] Bluetooth: hci2: command tx timeout [ 842.476483][ T5591] do_umount: task=syz-executor[5591] propagate_mount_busy()!=0 [ 842.491426][ T5591] do_umount: task=syz-executor[5591] propagate_mount_busy()!=0 [ 842.859194][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.859475][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.859825][T12543] bridge_slave_0: entered allmulticast mode [ 842.896286][T12543] bridge_slave_0: entered promiscuous mode [ 843.302184][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.302604][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.302881][T12543] bridge_slave_1: entered allmulticast mode [ 843.307453][T12543] bridge_slave_1: entered promiscuous mode [ 843.752380][ T5724] usb 3-1: USB disconnect, device number 36 [ 844.212708][T12692] loop2: detected capacity change from 0 to 8 [ 844.218350][ T5591] Flush: task=syz-executor[5591] dev=loop3 state=2 [ 844.246318][T12543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.308164][T12543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.338945][ T5591] Teardown: task=syz-executor[5591] dev=loop3 state=2 [ 844.426934][T12695] loop3: detected capacity change from 0 to 512 [ 844.429476][T12695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 844.458714][T12695] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1392: bad orphan inode 131083 [ 844.458745][T12695] loop3: lost filesystem error report for type 5 error -117 [ 844.497476][T12695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.709842][ T5604] Bluetooth: hci2: command tx timeout [ 844.736658][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 844.892396][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 845.047129][ T7785] bridge_slave_1: left allmulticast mode [ 845.047167][ T7785] bridge_slave_1: left promiscuous mode [ 845.047386][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.138624][ T5591] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.211230][T12702] loop2: detected capacity change from 0 to 512 [ 845.243694][ T5591] Flush: task=syz-executor[5591] dev=loop3 state=2 [ 845.244415][T12702] FAT-fs (loop2): data area starts beyond volume (3104 > 128) [ 845.244439][T12702] FAT-fs (loop2): Can't find a valid FAT filesystem [ 845.280446][ T7785] bridge_slave_0: left allmulticast mode [ 845.280482][ T7785] bridge_slave_0: left promiscuous mode [ 845.292163][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.314821][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 845.342235][ T5591] Teardown: task=syz-executor[5591] dev=loop3 state=2 [ 845.448211][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 845.629955][ T7785] bridge_slave_1: left allmulticast mode [ 845.629993][ T7785] bridge_slave_1: left promiscuous mode [ 845.630241][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.759613][ T7785] bridge_slave_0: left allmulticast mode [ 845.759651][ T7785] bridge_slave_0: left promiscuous mode [ 845.759902][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.854361][ T824] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 845.993720][ T7785] bridge_slave_1: left allmulticast mode [ 845.993758][ T7785] bridge_slave_1: left promiscuous mode [ 845.994035][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.023224][ T824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 846.023249][ T824] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 846.023261][ T824] usb 4-1: config 1 has no interface number 0 [ 846.023287][ T824] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 846.023302][ T824] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 846.023316][ T824] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 846.023334][ T824] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 846.044491][ T824] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.044522][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.044542][ T824] usb 4-1: Product: syz [ 846.044556][ T824] usb 4-1: Manufacturer: syz [ 846.044571][ T824] usb 4-1: SerialNumber: syz [ 846.074316][T12712] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 846.127468][ T7785] bridge_slave_0: left allmulticast mode [ 846.127504][ T7785] bridge_slave_0: left promiscuous mode [ 846.128171][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.564055][T12712] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 846.659404][ T7785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.753029][ T7785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 846.819890][ T7785] bond0 (unregistering): Released all slaves [ 846.904000][ T5604] Bluetooth: hci2: command tx timeout [ 846.994974][ T824] cdc_ncm 4-1:1.1: bind() failure [ 847.148698][ T7785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.210710][ T5890] usb 4-1: USB disconnect, device number 47 [ 847.255489][ T7785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.336047][ T7785] bond0 (unregistering): Released all slaves [ 847.607977][ T7785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.715084][ T7785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.808850][ T7785] bond0 (unregistering): Released all slaves [ 848.648783][T12721] loop3: detected capacity change from 0 to 512 [ 848.687509][T12721] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 848.699141][T12721] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1405: bad orphan inode 131083 [ 848.699178][T12721] loop3: lost filesystem error report for type 5 error -117 [ 848.729812][T12721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.857850][T12543] team0: Port device team_slave_0 added [ 849.224346][ T5604] Bluetooth: hci2: command tx timeout [ 849.230335][T12543] team0: Port device team_slave_1 added [ 849.541745][T12543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.541763][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.541797][T12543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.737907][T12543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.737926][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.737955][T12543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.953376][T12732] loop2: detected capacity change from 0 to 1024 [ 850.045621][T12380] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 850.223124][T12380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.315812][T12380] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 850.357468][ T5591] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.389603][ T5591] Flush: task=syz-executor[5591] dev=loop3 state=2 [ 850.521490][T12380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.547352][ T5591] Teardown: task=syz-executor[5591] dev=loop3 state=2 [ 850.710403][T12380] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 850.855181][T12380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.051798][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 851.100008][T12380] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 851.145607][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 851.168811][T12380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 851.196057][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 851.225845][T12543] hsr_slave_0: entered promiscuous mode [ 851.241741][T12543] hsr_slave_1: entered promiscuous mode [ 851.244000][T12543] debugfs: 'hsr0' already exists in 'hsr' [ 851.244039][T12543] Cannot create hsr debugfs directory [ 851.297624][T12739] loop3: detected capacity change from 0 to 512 [ 851.466898][ T7785] hsr_slave_0: left promiscuous mode [ 851.657706][ T7785] hsr_slave_1: left promiscuous mode [ 851.658743][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.693803][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.685601][T12750] loop2: detected capacity change from 0 to 1024 [ 852.702839][T12750] hfsplus: failed to load attributes file [ 852.810099][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 852.856653][ T7785] hsr_slave_0: left promiscuous mode [ 852.888490][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 853.032140][ T7785] hsr_slave_1: left promiscuous mode [ 853.033265][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.114881][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.670336][ T7785] hsr_slave_0: left promiscuous mode [ 853.754505][ T7785] hsr_slave_1: left promiscuous mode [ 853.755866][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.823081][ T7785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.698434][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 854.724893][ T5591] Flush: task=syz-executor[5591] dev=loop3 state=2 [ 854.775669][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 854.800029][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 854.825256][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 854.826254][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 854.903560][ T7785] team0 (unregistering): Port device team_slave_1 removed [ 854.963516][ T5591] Teardown: task=syz-executor[5591] dev=loop3 state=2 [ 855.158969][ T7785] team0 (unregistering): Port device team_slave_0 removed [ 855.647467][ T7785] team0 (unregistering): Port device team_slave_1 removed [ 855.701145][ T7785] team0 (unregistering): Port device team_slave_0 removed [ 856.172372][ T7785] team0 (unregistering): Port device team_slave_1 removed [ 856.224538][ T7785] team0 (unregistering): Port device team_slave_0 removed [ 856.395823][T12380] kthread_run failed with err -4 [ 857.560285][T12778] loop2: detected capacity change from 0 to 1024 [ 858.350504][ T5604] Bluetooth: hci3: command tx timeout [ 858.833492][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 858.894728][T12788] loop3: detected capacity change from 0 to 256 [ 858.986388][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 858.997006][T12788] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 859.180646][ T5591] Flush: task=syz-executor[5591] dev=loop3 state=2 [ 859.377766][ T5591] Teardown: task=syz-executor[5591] dev=loop3 state=2 [ 859.780169][T12634] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.780425][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.780656][T12634] bridge_slave_0: entered allmulticast mode [ 859.784081][T12634] bridge_slave_0: entered promiscuous mode [ 859.983881][T12634] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.984142][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.984391][T12634] bridge_slave_1: entered allmulticast mode [ 859.988133][T12634] bridge_slave_1: entered promiscuous mode [ 860.319470][T12634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.498066][T12803] loop2: detected capacity change from 0 to 512 [ 860.500383][T12803] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 860.503962][T12634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.527768][T12802] loop3: detected capacity change from 0 to 2048 [ 860.555363][T12802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 860.641989][T12803] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1429: bad orphan inode 131083 [ 860.642021][T12803] loop2: lost filesystem error report for type 5 error -117 [ 860.647259][ T5604] Bluetooth: hci3: command tx timeout [ 860.650812][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 860.650831][ C1] EXT4-fs (loop2): initial error at time 817: ext4_orphan_get:1425 [ 860.650851][ C1] EXT4-fs (loop2): last error at time 817: ext4_orphan_get:1425 [ 860.656785][T12803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.063855][ T38] audit: type=1800 audit(817.744:1345): pid=12808 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.1428" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 861.498018][ T38] audit: type=1800 audit(818.183:1346): pid=12809 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.1428" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 861.537707][T12634] team0: Port device team_slave_0 added [ 861.677029][ T5591] do_umount: task=syz-executor[5591] propagate_mount_busy()!=0 [ 861.677283][ T5591] do_umount: task=syz-executor[5591] propagate_mount_busy()!=0 [ 861.766308][T12634] team0: Port device team_slave_1 added [ 862.071988][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.117440][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 862.290336][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 863.037185][T12814] loop2: detected capacity change from 0 to 1024 [ 863.407632][ T5604] Bluetooth: hci3: command tx timeout [ 863.835350][ T5591] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 863.995369][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 864.063371][ T5591] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 864.199721][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 864.308151][T12634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.308165][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.308189][T12634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.577553][T12819] support for the xor transformation has been removed. [ 864.812039][T12634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.812056][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.812083][T12634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.642729][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 865.649640][T12634] hsr_slave_0: entered promiscuous mode [ 865.651403][T12634] hsr_slave_1: entered promiscuous mode [ 865.755474][ T5604] Bluetooth: hci3: command tx timeout [ 865.759410][T12543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 865.808932][T12543] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.836882][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 865.839262][ T9] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.839293][ T9] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.839316][ T9] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 865.839342][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 865.839377][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 865.839402][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.922693][T12543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 865.987758][ T9] usb 3-1: config 0 descriptor?? [ 866.064496][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 866.114456][T12543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.125532][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 866.159631][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 866.160807][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 866.164399][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 866.217327][T12543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 866.348384][T12543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.438967][T12543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 866.780514][ T9] wacom 0003:056A:0323.0009: ignoring exceeding usage max [ 866.783086][T12543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.783472][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783493][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783509][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783524][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783539][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783555][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783569][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783584][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783603][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.783618][ T9] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 866.872602][ T9] usb 3-1: USB disconnect, device number 37 [ 869.003356][ T60] Bluetooth: hci0: command tx timeout [ 869.614393][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.614604][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.614819][T12759] bridge_slave_0: entered allmulticast mode [ 869.651898][T12759] bridge_slave_0: entered promiscuous mode [ 869.658489][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.658778][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.658993][T12759] bridge_slave_1: entered allmulticast mode [ 869.695501][T12759] bridge_slave_1: entered promiscuous mode [ 870.408620][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.450442][T12858] loop2: detected capacity change from 0 to 32768 [ 870.467148][T12858] btrfs: Unknown parameter 'check_int' [ 871.042748][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 871.137650][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 871.209226][ T5604] Bluetooth: hci0: command tx timeout [ 871.845678][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.256476][T12863] loop2: detected capacity change from 0 to 512 [ 872.262577][T12863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 872.278987][T12863] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 872.729635][T12863] EXT4-fs (loop2): 1 truncate cleaned up [ 872.800345][T12863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.070736][T12759] team0: Port device team_slave_0 added [ 873.192274][T12759] team0: Port device team_slave_1 added [ 873.426725][ T5604] Bluetooth: hci0: command tx timeout [ 873.624722][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.816495][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 873.906690][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 874.038299][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.038310][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.038336][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.055481][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.055497][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.055522][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.219717][T12634] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 874.349338][T12634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.363318][T12874] loop2: detected capacity change from 0 to 512 [ 874.366560][T12874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 874.402392][T12874] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1445: bad orphan inode 131083 [ 874.402424][T12874] loop2: lost filesystem error report for type 5 error -117 [ 874.405947][T12874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.715765][T12759] hsr_slave_0: entered promiscuous mode [ 874.790405][T12759] hsr_slave_1: entered promiscuous mode [ 874.791868][T12759] debugfs: 'hsr0' already exists in 'hsr' [ 874.791892][T12759] Cannot create hsr debugfs directory [ 875.014625][T12877] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.1445: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 875.569479][T12634] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 875.643934][ T60] Bluetooth: hci0: command tx timeout [ 875.647756][T12634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 875.688022][T12634] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 875.731297][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.742282][T12634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 875.828820][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 875.834849][T12634] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 875.888604][T12634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 875.928678][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 876.320081][T12890] loop2: detected capacity change from 0 to 128 [ 876.321266][T12890] vfat: Unknown parameter 'seclabel' [ 876.350558][T12890] cgroup2: Unknown parameter 'blkio' [ 876.354158][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 876.429787][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.509189][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 876.726695][T12895] loop2: detected capacity change from 0 to 8192 [ 876.960582][T12895] loop2: AHDI p1 [ 877.799589][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 877.883392][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 878.227473][ T824] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 878.364529][ T824] usb 3-1: device descriptor read/64, error -71 [ 878.381908][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.511238][ T7774] bridge_slave_1: left allmulticast mode [ 878.511287][ T7774] bridge_slave_1: left promiscuous mode [ 878.511656][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.642457][ T824] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 878.645219][ T7774] bridge_slave_0: left allmulticast mode [ 878.645242][ T7774] bridge_slave_0: left promiscuous mode [ 878.645422][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.781265][ T824] usb 3-1: device descriptor read/64, error -71 [ 878.918258][ T824] usb usb3-port1: attempt power cycle [ 879.146198][ T7774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.232924][ T7774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.283738][ T824] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 879.298531][ T7774] bond0 (unregistering): Released all slaves [ 879.308638][ T824] usb 3-1: device descriptor read/8, error -71 [ 879.339653][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.339828][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.340089][T12825] bridge_slave_0: entered allmulticast mode [ 879.342162][T12825] bridge_slave_0: entered promiscuous mode [ 879.408715][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.409691][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.409958][T12825] bridge_slave_1: entered allmulticast mode [ 879.442940][T12825] bridge_slave_1: entered promiscuous mode [ 879.569835][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.569927][ T7785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.665048][ T824] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 879.690875][ T824] usb 3-1: device descriptor read/8, error -71 [ 879.810654][ T824] usb usb3-port1: unable to enumerate USB device [ 880.148533][T12825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.208156][T12825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.311870][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.311964][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.513207][ T7774] hsr_slave_0: left promiscuous mode [ 880.556014][ T7774] hsr_slave_1: left promiscuous mode [ 880.556780][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.578199][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.995330][ T7774] team0 (unregistering): Port device team_slave_1 removed [ 881.037500][ T7774] team0 (unregistering): Port device team_slave_0 removed [ 881.547768][T12825] team0: Port device team_slave_0 added [ 881.834794][T12825] team0: Port device team_slave_1 added [ 882.000922][T12825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.000933][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.000947][T12825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.553291][T12825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.553306][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.553327][T12825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.790152][T12913] loop2: detected capacity change from 0 to 512 [ 882.791367][T12913] ext4: Unknown parameter 'context' [ 882.791773][T12913] Flush: task=syz.2.1454[12913] dev=loop2 state=2 [ 882.933840][T12825] hsr_slave_0: entered promiscuous mode [ 882.960555][T12825] hsr_slave_1: entered promiscuous mode [ 882.974590][T12825] debugfs: 'hsr0' already exists in 'hsr' [ 882.974618][T12825] Cannot create hsr debugfs directory [ 883.302397][T12913] Teardown: task=syz.2.1454[12913] dev=loop2 state=2 [ 883.370554][T12912] Bluetooth: MGMT ver 1.23 [ 883.760617][T12917] loop2: detected capacity change from 0 to 512 [ 883.793471][T12917] EXT4-fs: Ignoring removed nobh option [ 884.166313][T12634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.199472][T12917] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 884.413530][T12917] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1456: invalid indirect mapped block 256 (level 1) [ 884.413570][T12917] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 884.413950][T12917] EXT4-fs (loop2): Remounting filesystem read-only [ 884.414416][T12917] EXT4-fs (loop2): 1 truncate cleaned up [ 884.418510][T12917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.513731][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.660953][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 884.989171][T12634] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.097911][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.098122][ T7786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.126118][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 885.407791][T12936] loop2: detected capacity change from 0 to 512 [ 885.492145][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.492441][ T7786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.527020][T12936] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 885.547040][T12936] EXT4-fs (loop2): orphan cleanup on readonly fs [ 885.547445][T12936] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1457: Block bitmap for bg 0 marked uninitialized [ 885.547475][T12936] loop2: lost filesystem error report for type 5 error -117 [ 885.557559][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 885.557585][ C1] EXT4-fs (loop2): initial error at time 840: ext4_read_block_bitmap_nowait:517 [ 885.557605][ C1] EXT4-fs (loop2): last error at time 840: ext4_read_block_bitmap_nowait:517 [ 885.729562][T12936] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 885.729590][T12936] loop2: lost filesystem error report for type 5 error -117 [ 885.741078][T12936] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1457: Block bitmap for bg 0 marked uninitialized [ 885.741112][T12936] loop2: lost filesystem error report for type 5 error -117 [ 885.743309][T12936] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 885.743330][T12936] loop2: lost filesystem error report for type 5 error -117 [ 885.745916][T12936] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1457: Block bitmap for bg 0 marked uninitialized [ 885.745946][T12936] loop2: lost filesystem error report for type 5 error -117 [ 885.748135][T12936] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 885.748158][T12936] loop2: lost filesystem error report for type 5 error -117 [ 885.748737][T12936] EXT4-fs (loop2): 1 orphan inode deleted [ 885.754368][T12936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 885.975019][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.067734][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 886.323285][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 886.374684][T12944] loop2: detected capacity change from 0 to 128 [ 886.421932][T12944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 886.422020][T12944] System zones: 1-3, 19-19, 35-36 [ 886.445781][T12944] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 886.494901][T12944] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1601400575 (only 1 groups) [ 886.624149][ T5593] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 886.743288][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 886.853865][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 888.123848][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.697750][T12759] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 888.750000][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.767223][T12759] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 888.937895][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.023891][T12759] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 889.381104][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.428425][T12759] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 889.549670][T12759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 890.027138][T12634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.991417][T12825] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 891.121425][T12825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.445545][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 891.533313][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 891.538150][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 891.558497][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 891.559588][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 892.203734][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1465'. [ 892.330818][T12825] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 892.351282][T12825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 892.362023][T12825] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 892.424643][T12825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 892.430675][T12825] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 892.569974][T12825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.592498][T13020] loop2: detected capacity change from 0 to 1024 [ 892.685784][T13020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 893.282944][T12634] veth0_vlan: entered promiscuous mode [ 893.564578][ T38] audit: type=1800 audit(848.163:1347): pid=13032 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.1466" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 893.830412][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 893.918594][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 894.060266][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 894.282687][ T60] Bluetooth: hci4: command tx timeout [ 894.822362][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.414082][T12634] veth1_vlan: entered promiscuous mode [ 896.550502][ T60] Bluetooth: hci4: command tx timeout [ 898.112235][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.623623][T13054] loop2: detected capacity change from 0 to 32768 [ 898.706001][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.706154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.710269][T13054] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 898.730158][ T60] Bluetooth: hci4: command tx timeout [ 898.933685][T13054] XFS (loop2): Ending clean mount [ 899.160676][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.160842][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.168778][ T5593] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 900.346817][T12634] veth0_macvtap: entered promiscuous mode [ 900.464239][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.505842][T12634] veth1_macvtap: entered promiscuous mode [ 900.846763][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 900.953715][ T60] Bluetooth: hci4: command tx timeout [ 900.975604][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 901.950597][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.795566][T12634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.886115][T13009] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.886458][T13009] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.886727][T13009] bridge_slave_0: entered allmulticast mode [ 902.910902][T13009] bridge_slave_0: entered promiscuous mode [ 902.929131][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.929296][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.114398][T13009] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.114670][T13009] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.114932][T13009] bridge_slave_1: entered allmulticast mode [ 903.118520][T13009] bridge_slave_1: entered promiscuous mode [ 903.323313][T13009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.361417][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.361709][ T7770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.421880][T13009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.745593][ T7774] bridge_slave_1: left allmulticast mode [ 903.745633][ T7774] bridge_slave_1: left promiscuous mode [ 903.745914][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.895022][ T7774] bridge_slave_0: left allmulticast mode [ 903.895051][ T7774] bridge_slave_0: left promiscuous mode [ 903.899915][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.879472][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 905.032040][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 905.034332][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 905.047092][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 905.048648][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 907.400950][ T7774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.464897][ T7774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.487716][ T7774] bond0 (unregistering): Released all slaves [ 907.710436][T13100] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 907.881444][ T60] Bluetooth: hci2: command tx timeout [ 908.219142][T13009] team0: Port device team_slave_0 added [ 908.380445][T13009] team0: Port device team_slave_1 added [ 908.586927][ T7774] hsr_slave_0: left promiscuous mode [ 908.629450][ T7774] hsr_slave_1: left promiscuous mode [ 908.630344][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 908.680073][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.250145][ T7774] team0 (unregistering): Port device team_slave_1 removed [ 909.303600][ T7774] team0 (unregistering): Port device team_slave_0 removed [ 909.585392][T13112] erspan0: entered promiscuous mode [ 909.606409][T13009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.606420][T13009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.606436][T13009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.650202][T13009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.650220][T13009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.650247][T13009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.838184][T13116] loop2: detected capacity change from 0 to 512 [ 909.852906][T13116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 909.878468][T13116] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1481: bad orphan inode 131083 [ 909.878503][T13116] loop2: lost filesystem error report for type 5 error -117 [ 909.880112][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 909.880131][ C1] EXT4-fs (loop2): initial error at time 863: ext4_orphan_get:1425 [ 909.880151][ C1] EXT4-fs (loop2): last error at time 863: ext4_orphan_get:1425 [ 909.890316][T13116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.105220][ T60] Bluetooth: hci2: command tx timeout [ 910.955596][T13009] hsr_slave_0: entered promiscuous mode [ 910.957274][T13009] hsr_slave_1: entered promiscuous mode [ 910.958317][T13009] debugfs: 'hsr0' already exists in 'hsr' [ 910.958366][T13009] Cannot create hsr debugfs directory [ 911.807317][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.971244][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 912.260769][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 912.331067][ T60] Bluetooth: hci2: command tx timeout [ 912.571799][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.175870][ T5252] 8021q: adding VLAN 0 to HW filter on device eth17 [ 914.553188][ T60] Bluetooth: hci2: command tx timeout [ 914.716069][T13156] loop2: detected capacity change from 0 to 32768 [ 914.752215][T13156] btrfs: Unknown parameter 'check_int' [ 915.529143][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 915.858637][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 916.875567][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 916.915311][T12759] veth0_vlan: entered promiscuous mode [ 917.767914][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.125966][T13087] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.126124][T13087] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.126297][T13087] bridge_slave_0: entered allmulticast mode [ 918.129741][T13087] bridge_slave_0: entered promiscuous mode [ 918.540371][T13087] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.540747][T13087] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.541029][T13087] bridge_slave_1: entered allmulticast mode [ 918.544222][T13087] bridge_slave_1: entered promiscuous mode [ 918.548362][T12759] veth1_vlan: entered promiscuous mode [ 919.087128][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.624427][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.512228][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 920.653191][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 920.664017][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 920.665696][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 920.666783][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 921.728070][T13087] team0: Port device team_slave_0 added [ 921.741429][T13087] team0: Port device team_slave_1 added [ 922.361845][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.361856][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.361871][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.438184][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.438200][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.438223][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.113083][T13087] hsr_slave_0: entered promiscuous mode [ 923.129572][T13087] hsr_slave_1: entered promiscuous mode [ 923.138937][T13087] debugfs: 'hsr0' already exists in 'hsr' [ 923.138966][T13087] Cannot create hsr debugfs directory [ 923.446670][ T60] Bluetooth: hci5: command tx timeout [ 923.686568][T13216] loop2: detected capacity change from 0 to 32768 [ 923.688643][T13216] btrfs: Unknown parameter 'check_int' [ 923.691323][T13216] Flush: task=syz.2.1490[13216] dev=loop2 state=2 [ 923.863772][T13216] Teardown: task=syz.2.1490[13216] dev=loop2 state=2 [ 924.021519][T12825] veth0_vlan: entered promiscuous mode [ 924.317516][T13214] loop2: detected capacity change from 0 to 8192 [ 924.412906][T13214] loop2: AHDI p1 [ 924.603799][T12323] Flush: task=udevd[12323] dev=loop2 state=2 [ 924.690299][T12323] Teardown: task=udevd[12323] dev=loop2 state=2 [ 925.200018][T13219] loop2: detected capacity change from 0 to 32768 [ 925.206757][T13219] btrfs: Unknown parameter 'check_int' [ 925.666456][T12825] veth1_vlan: entered promiscuous mode [ 925.684142][ T60] Bluetooth: hci5: command tx timeout [ 925.905332][T13009] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 926.672755][T13009] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 926.972419][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 926.976833][T13009] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 927.030359][T13009] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 927.050085][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 927.069736][T13009] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 927.130574][T13009] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.300808][T13009] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 927.352892][T13009] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.530499][ T57] bridge_slave_1: left allmulticast mode [ 927.530525][ T57] bridge_slave_1: left promiscuous mode [ 927.530712][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.660234][ T57] bridge_slave_0: left allmulticast mode [ 927.660270][ T57] bridge_slave_0: left promiscuous mode [ 927.660537][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.968650][ T60] Bluetooth: hci5: command tx timeout [ 929.300515][T13239] FAULT_INJECTION: forcing a failure. [ 929.300515][T13239] name failslab, interval 1, probability 0, space 0, times 0 [ 929.300546][T13239] CPU: 1 UID: 0 PID: 13239 Comm: syz.2.1495 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 929.300566][T13239] Tainted: [L]=SOFTLOCKUP [ 929.300571][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 929.300580][T13239] Call Trace: [ 929.300585][T13239] [ 929.300592][T13239] dump_stack_lvl+0xe8/0x150 [ 929.300623][T13239] should_fail_ex+0x467/0x600 [ 929.300647][T13239] should_failslab+0xa8/0x100 [ 929.300666][T13239] __kmalloc_noprof+0xfb/0x790 [ 929.300681][T13239] ? tomoyo_encode+0x2ad/0x570 [ 929.300703][T13239] ? tomoyo_encode+0x2ad/0x570 [ 929.300720][T13239] tomoyo_encode+0x2ad/0x570 [ 929.300738][T13239] tomoyo_realpath_from_path+0x5fa/0x640 [ 929.300759][T13239] ? tomoyo_path_number_perm+0x219/0x5f0 [ 929.300791][T13239] tomoyo_path_number_perm+0x246/0x5f0 [ 929.300811][T13239] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 929.300827][T13239] ? __lock_acquire+0x6df/0x2e40 [ 929.300856][T13239] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 929.300874][T13239] ? lockdep_hardirqs_on+0x7a/0x110 [ 929.300904][T13239] ? __fget_files+0x2a/0x420 [ 929.300924][T13239] ? __fget_files+0x2a/0x420 [ 929.300939][T13239] ? __fget_files+0x3a8/0x420 [ 929.300954][T13239] ? __fget_files+0x2a/0x420 [ 929.300974][T13239] security_file_ioctl+0xb9/0x260 [ 929.301002][T13239] __se_sys_ioctl+0x47/0x170 [ 929.301021][T13239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.301037][T13239] do_syscall_64+0x174/0x580 [ 929.301053][T13239] ? trace_irq_disable+0x3b/0x140 [ 929.301070][T13239] ? clear_bhb_loop+0x40/0x90 [ 929.301087][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.301101][T13239] RIP: 0033:0x7f9b9e84de59 [ 929.301117][T13239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.301129][T13239] RSP: 002b:00007f9b9ca85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.301144][T13239] RAX: ffffffffffffffda RBX: 00007f9b9ead6090 RCX: 00007f9b9e84de59 [ 929.301155][T13239] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 0000000000000003 [ 929.301165][T13239] RBP: 00007f9b9ca85090 R08: 0000000000000000 R09: 0000000000000000 [ 929.301174][T13239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.301183][T13239] R13: 00007f9b9ead6128 R14: 00007f9b9ead6090 R15: 00007fff8713f788 [ 929.301207][T13239] [ 929.301276][T13239] ERROR: Out of memory at tomoyo_realpath_from_path. [ 930.145610][T12271] Bluetooth: hci5: command tx timeout [ 930.176629][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 930.182086][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 930.197951][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 930.230779][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 930.256972][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.780822][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.866419][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.889351][ T57] bond0 (unregistering): Released all slaves [ 932.213004][ T57] hsr_slave_0: left promiscuous mode [ 932.264930][ T57] hsr_slave_1: left promiscuous mode [ 932.272800][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.272828][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.299502][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.530749][ T57] veth1_macvtap: left promiscuous mode [ 932.530859][ T57] veth0_macvtap: left promiscuous mode [ 932.531252][ T57] veth1_vlan: left promiscuous mode [ 932.531455][ T57] veth0_vlan: left promiscuous mode [ 932.718609][T13258] loop2: detected capacity change from 0 to 32768 [ 932.719782][T13258] btrfs: Unknown parameter 'check_int' [ 932.782219][ T60] Bluetooth: hci3: command tx timeout [ 933.290188][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 933.431581][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 933.436805][T13261] loop2: detected capacity change from 0 to 32768 [ 933.447114][T13261] btrfs: Unknown parameter 'check_int' [ 933.450657][T13261] Flush: task=syz.2.1498[13261] dev=loop2 state=2 [ 933.539480][T13261] Teardown: task=syz.2.1498[13261] dev=loop2 state=2 [ 933.927385][T13261] loop2: detected capacity change from 0 to 8192 [ 933.985017][T13261] loop2: AHDI p1 [ 934.080997][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 934.298339][ T57] team0 (unregistering): Port device team_slave_1 removed [ 934.330677][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 935.100822][ T57] team0 (unregistering): Port device team_slave_0 removed [ 935.147692][ T60] Bluetooth: hci3: command tx timeout [ 937.179555][T13276] loop2: detected capacity change from 0 to 32768 [ 937.301652][ T60] Bluetooth: hci3: command tx timeout [ 937.331129][T13276] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1501 (13276) [ 937.451300][T13276] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 937.451333][T13276] BTRFS info (device loop2): using sha256 checksum algorithm [ 937.916854][T13276] BTRFS info (device loop2): enabling ssd optimizations [ 937.916882][T13276] BTRFS info (device loop2): turning on async discard [ 937.917006][T13276] BTRFS info (device loop2): enabling free space tree [ 938.273872][T13202] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.275640][T13202] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.275840][T13202] bridge_slave_0: entered allmulticast mode [ 938.300085][T13202] bridge_slave_0: entered promiscuous mode [ 938.390973][T13202] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.391215][T13202] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.391480][T13202] bridge_slave_1: entered allmulticast mode [ 938.398144][T13202] bridge_slave_1: entered promiscuous mode [ 938.916646][T13202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.003496][ T5593] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 939.194185][T13202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.434170][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 939.525721][ T60] Bluetooth: hci3: command tx timeout [ 939.608135][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 939.936659][T13202] team0: Port device team_slave_0 added [ 939.961020][T13009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.967731][T13202] team0: Port device team_slave_1 added [ 940.282895][T13202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.282922][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.282942][T13202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.371659][T13202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.371675][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.371698][T13202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.083835][T13009] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.590388][T13202] hsr_slave_0: entered promiscuous mode [ 941.592789][T13202] hsr_slave_1: entered promiscuous mode [ 941.685100][T13306] loop2: detected capacity change from 0 to 32768 [ 941.693176][T13306] btrfs: Unknown parameter 'check_int' [ 942.024364][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.024567][ T7788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.012080][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 943.224600][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 943.938560][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.938811][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.942401][T13245] bridge_slave_0: entered allmulticast mode [ 943.946348][T13245] bridge_slave_0: entered promiscuous mode [ 944.065723][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.065888][ T7788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.071123][T13245] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.071393][T13245] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.071773][T13245] bridge_slave_1: entered allmulticast mode [ 944.094518][T13245] bridge_slave_1: entered promiscuous mode [ 949.202316][T13245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.246793][T13245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.960390][T13245] team0: Port device team_slave_0 added [ 951.029766][T13245] team0: Port device team_slave_1 added [ 951.045300][T13087] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 951.085520][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.368687][T13087] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 951.406930][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 951.457111][T13087] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 951.519868][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.544917][T13245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.544928][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.544944][T13245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.615132][T13087] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 951.665523][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 951.668888][T13245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.668902][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.668921][T13245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.835464][T13245] hsr_slave_0: entered promiscuous mode [ 953.856873][T13245] hsr_slave_1: entered promiscuous mode [ 953.859098][T13245] debugfs: 'hsr0' already exists in 'hsr' [ 953.859126][T13245] Cannot create hsr debugfs directory [ 954.732400][T13376] input: syz0 as /devices/virtual/input/input17 [ 956.304979][T13385] loop2: detected capacity change from 0 to 64 [ 956.306589][T13385] hfs: type requires a 4 character value [ 956.307003][T13385] Flush: task=syz.2.1520[13385] dev=loop2 state=2 [ 956.427078][T13385] Teardown: task=syz.2.1520[13385] dev=loop2 state=2 [ 956.695147][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 956.733932][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 956.736267][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 956.746418][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 956.762455][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 958.505269][T13087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.764105][ T57] bridge_slave_1: left allmulticast mode [ 958.764143][ T57] bridge_slave_1: left promiscuous mode [ 958.764409][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.939396][ T60] Bluetooth: hci0: command tx timeout [ 959.101291][ T57] bridge_slave_0: left allmulticast mode [ 959.101323][ T57] bridge_slave_0: left promiscuous mode [ 959.102789][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.431380][ T57] bridge_slave_1: left allmulticast mode [ 959.431416][ T57] bridge_slave_1: left promiscuous mode [ 959.431679][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.731797][ T57] bridge_slave_0: left allmulticast mode [ 959.731822][ T57] bridge_slave_0: left promiscuous mode [ 959.731998][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.163088][ T60] Bluetooth: hci0: command tx timeout [ 961.580552][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.666161][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.689835][ T57] bond0 (unregistering): Released all slaves [ 962.339537][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.425100][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.448191][ T57] bond0 (unregistering): Released all slaves [ 962.757952][ T5252] 8021q: adding VLAN 0 to HW filter on device eth19 [ 962.870491][T13427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1527'. [ 963.396603][ T60] Bluetooth: hci0: command tx timeout [ 965.610558][ T60] Bluetooth: hci0: command tx timeout [ 966.344095][T13087] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.590426][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.590666][ T7785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.323327][ T57] hsr_slave_0: left promiscuous mode [ 967.360438][T13438] loop2: detected capacity change from 0 to 8 [ 967.377722][T13438] unable to read fragment index table [ 967.387147][ T57] hsr_slave_1: left promiscuous mode [ 967.393164][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.402911][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 967.443432][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.495004][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 967.631548][ T57] hsr_slave_0: left promiscuous mode [ 967.652243][ T57] hsr_slave_1: left promiscuous mode [ 967.653077][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.696267][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.888531][ T57] veth1_vlan: left promiscuous mode [ 967.888669][ T57] veth0_vlan: left promiscuous mode [ 967.930565][ T57] veth1_vlan: left promiscuous mode [ 967.930704][ T57] veth0_vlan: left promiscuous mode [ 968.529373][ T57] team0 (unregistering): Port device team_slave_1 removed [ 968.593505][ T57] team0 (unregistering): Port device team_slave_0 removed [ 969.074569][ T57] team0 (unregistering): Port device team_slave_1 removed [ 969.117694][ T57] team0 (unregistering): Port device team_slave_0 removed [ 970.883259][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 971.018700][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 971.083677][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 971.163463][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 971.164393][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 972.003633][ T824] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 972.241025][ T824] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 972.241053][ T824] usb 3-1: config 0 has no interface number 0 [ 972.241116][ T824] usb 3-1: config 0 interface 41 has no altsetting 0 [ 972.243674][ T824] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 972.243701][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.243717][ T824] usb 3-1: Product: syz [ 972.243730][ T824] usb 3-1: Manufacturer: syz [ 972.243747][ T824] usb 3-1: SerialNumber: syz [ 972.257236][ T824] usb 3-1: config 0 descriptor?? [ 973.177993][ T824] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 973.628408][ T60] Bluetooth: hci4: command tx timeout [ 973.940592][T13452] loop2: detected capacity change from 0 to 512 [ 973.944933][T13452] EXT4-fs: Ignoring removed nobh option [ 973.945757][T13452] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 973.987028][T13452] EXT4-fs (loop2): 1 truncate cleaned up [ 974.035212][T13452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 974.106573][T13452] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.1532: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 974.385886][ T824] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 974.385915][ T824] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 974.386171][ T824] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 974.396942][ T824] usb 3-1: USB disconnect, device number 42 [ 974.550238][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.550539][T13386] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.550770][T13386] bridge_slave_0: entered allmulticast mode [ 974.553654][T13386] bridge_slave_0: entered promiscuous mode [ 974.568606][T13386] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.568859][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.569801][T13386] bridge_slave_1: entered allmulticast mode [ 974.629474][T13386] bridge_slave_1: entered promiscuous mode [ 974.938785][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.133945][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 975.230830][T13386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.253963][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 975.357267][T13386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.620109][T13386] team0: Port device team_slave_0 added [ 975.634729][T13386] team0: Port device team_slave_1 added [ 975.862983][ T60] Bluetooth: hci4: command tx timeout [ 975.924962][T13386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.924980][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.925007][T13386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.002016][T13386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.002035][T13386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.002064][T13386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.300628][T13488] loop2: detected capacity change from 0 to 32768 [ 976.314229][T13488] jfs: Unknown parameter 'iochaúWÂڃLŮŕÇ?ŕ@đżrset' [ 976.603109][T11950] Flush: task=udevd[11950] dev=loop2 state=2 [ 976.696529][T11950] Teardown: task=udevd[11950] dev=loop2 state=2 [ 976.962654][T13493] loop2: detected capacity change from 0 to 512 [ 976.970679][T13493] Flush: task=syz.2.1536[13493] dev=loop2 state=2 [ 977.042859][T13386] hsr_slave_0: entered promiscuous mode [ 977.045200][T13386] hsr_slave_1: entered promiscuous mode [ 977.053766][T13386] debugfs: 'hsr0' already exists in 'hsr' [ 977.053793][T13386] Cannot create hsr debugfs directory [ 977.168034][T13493] Teardown: task=syz.2.1536[13493] dev=loop2 state=2 [ 977.853094][T13202] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 977.927394][T13202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 978.012943][ T60] Bluetooth: hci4: command tx timeout [ 978.781606][T13202] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 979.538530][T13202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 979.643088][T13202] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 979.715867][T13202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.038919][T13517] loop2: detected capacity change from 0 to 512 [ 980.043650][T13517] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 980.074689][T13517] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1542: bad orphan inode 131083 [ 980.074719][T13517] loop2: lost filesystem error report for type 5 error -117 [ 980.078141][T13517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.235488][ T60] Bluetooth: hci4: command tx timeout [ 980.922847][T13202] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 981.011159][T13202] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 981.155199][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.295465][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 981.426852][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 981.627640][T13530] loop2: detected capacity change from 0 to 512 [ 981.640111][T13530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 981.659696][T13530] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1544: bad orphan inode 131083 [ 981.659726][T13530] loop2: lost filesystem error report for type 5 error -117 [ 981.668675][T13530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 981.756116][T13445] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.756333][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.756486][T13445] bridge_slave_0: entered allmulticast mode [ 981.758352][T13445] bridge_slave_0: entered promiscuous mode [ 982.460154][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.460536][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.461141][T13445] bridge_slave_1: entered allmulticast mode [ 982.472297][T13445] bridge_slave_1: entered promiscuous mode [ 982.575984][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 982.844142][ T5593] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.992062][ T5593] Flush: task=syz-executor[5593] dev=loop2 state=2 [ 983.078968][ T5593] Teardown: task=syz-executor[5593] dev=loop2 state=2 [ 983.867445][T13445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.179570][T13544] loop2: detected capacity change from 0 to 32768 [ 984.251120][T13544] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 984.266246][T13544] JBD2: Ignoring recovery information on journal [ 984.327419][T13544] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 984.734503][T13445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.123398][T13245] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 985.466452][T13245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.501712][T13445] team0: Port device team_slave_0 added [ 985.543173][T13445] team0: Port device team_slave_1 added [ 985.543397][T13245] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 985.803218][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 985.870329][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 985.879451][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 985.903145][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 985.908781][T13245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.928915][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 986.044924][T13245] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 986.133051][T13245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.594294][T13245] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 986.716380][T13245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.785132][T13445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.785148][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.785169][T13445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.372112][T13544] ocfs2: Unmounting device (7,2) on (node local) [ 987.961414][T13445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.961428][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.961448][T13445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.571732][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 988.616836][ T60] Bluetooth: hci2: command tx timeout [ 988.631913][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 989.345543][T13445] hsr_slave_0: entered promiscuous mode [ 989.346900][T13445] hsr_slave_1: entered promiscuous mode [ 989.347983][T13445] debugfs: 'hsr0' already exists in 'hsr' [ 989.348008][T13445] Cannot create hsr debugfs directory [ 990.840096][ T60] Bluetooth: hci2: command tx timeout [ 991.086128][ T57] bridge_slave_1: left allmulticast mode [ 991.086152][ T57] bridge_slave_1: left promiscuous mode [ 991.086336][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.238439][ T57] bridge_slave_0: left allmulticast mode [ 991.238556][ T57] bridge_slave_0: left promiscuous mode [ 991.238845][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.717878][ T57] bridge_slave_1: left allmulticast mode [ 991.717916][ T57] bridge_slave_1: left promiscuous mode [ 991.718179][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.747559][T13586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1553'. [ 991.846454][ T57] bridge_slave_0: left allmulticast mode [ 991.846482][ T57] bridge_slave_0: left promiscuous mode [ 991.846664][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.947637][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.055505][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.063907][ T60] Bluetooth: hci2: command tx timeout [ 993.147413][ T57] bond0 (unregistering): Released all slaves [ 993.824153][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.908951][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 993.932784][ T57] bond0 (unregistering): Released all slaves [ 995.308741][ T60] Bluetooth: hci2: command tx timeout [ 995.583977][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 995.678185][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 995.691187][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 995.721707][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 995.731033][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 996.506233][ T57] hsr_slave_0: left promiscuous mode [ 996.550606][ T57] hsr_slave_1: left promiscuous mode [ 996.552553][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.606781][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.816435][ T57] hsr_slave_0: left promiscuous mode [ 996.858959][ T57] hsr_slave_1: left promiscuous mode [ 996.859744][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.902673][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.597108][ T57] team0 (unregistering): Port device team_slave_1 removed [ 997.650568][ T57] team0 (unregistering): Port device team_slave_0 removed [ 997.859990][T13629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1561'. [ 997.860005][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 997.860038][T13629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1561'. [ 997.950923][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 998.260352][ T57] team0 (unregistering): Port device team_slave_1 removed [ 998.313727][ T57] team0 (unregistering): Port device team_slave_0 removed [ 998.452218][ T5604] Bluetooth: hci5: command tx timeout [ 998.536119][ T5252] 8021q: adding VLAN 0 to HW filter on device eth17 [ 999.674708][T13386] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 999.706211][T13386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 999.715489][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.715645][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.715815][T13549] bridge_slave_0: entered allmulticast mode [ 999.717749][T13549] bridge_slave_0: entered promiscuous mode [ 999.754957][T13386] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 999.894112][T13386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 999.914221][T13549] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.914625][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.914895][T13549] bridge_slave_1: entered allmulticast mode [ 999.937083][T13549] bridge_slave_1: entered promiscuous mode [ 999.980834][T13386] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1000.129977][T13386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1000.678650][ T5604] Bluetooth: hci5: command tx timeout [ 1000.718960][T13386] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1000.770540][T13386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1000.867207][T13549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.923074][T13549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.485499][ T5252] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1001.675219][T13549] team0: Port device team_slave_0 added [ 1001.805745][T13549] team0: Port device team_slave_1 added [ 1001.926128][T13549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.934886][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.934916][T13549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.007398][T13549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.007415][T13549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.007454][T13549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.899308][ T5604] Bluetooth: hci5: command tx timeout [ 1003.816009][T13549] hsr_slave_0: entered promiscuous mode [ 1003.819279][T13549] hsr_slave_1: entered promiscuous mode [ 1003.832164][T13549] debugfs: 'hsr0' already exists in 'hsr' [ 1003.832190][T13549] Cannot create hsr debugfs directory [ 1005.103026][T13702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 1005.103043][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'. [ 1005.124651][ T5604] Bluetooth: hci5: command tx timeout [ 1005.475381][T13599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.476171][T13599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.476552][T13599] bridge_slave_0: entered allmulticast mode [ 1005.480077][T13599] bridge_slave_0: entered promiscuous mode [ 1005.503952][T13599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.504325][T13599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.504585][T13599] bridge_slave_1: entered allmulticast mode [ 1005.508730][T13599] bridge_slave_1: entered promiscuous mode [ 1005.974959][T13599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.018692][T13599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.338127][T13386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.356730][T13599] team0: Port device team_slave_0 added [ 1010.058544][T13599] team0: Port device team_slave_1 added [ 1010.382727][T13599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.382744][T13599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.382771][T13599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.388488][T13599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.388504][T13599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.388531][T13599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.562701][T13386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.632029][T13445] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1011.665645][T13445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1011.748760][T13445] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1011.840523][T13445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.854924][T13599] hsr_slave_0: entered promiscuous mode [ 1011.856872][T13599] hsr_slave_1: entered promiscuous mode [ 1011.870934][T13599] debugfs: 'hsr0' already exists in 'hsr' [ 1011.870962][T13599] Cannot create hsr debugfs directory [ 1012.374074][T13445] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1012.516576][T13445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1012.834568][ T7788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.840858][ T7788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.023245][T13445] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1014.042410][T13445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1014.486276][ T7777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.486454][ T7777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.221833][T13445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.406829][T13445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.454591][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.454846][ T7771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.547360][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.547560][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.117915][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1022.194875][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1022.212840][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1022.214571][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1022.215299][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1023.473274][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1023.473298][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.603304][ T5252] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1024.565647][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.565671][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.135926][ T5604] Bluetooth: hci3: command tx timeout [ 1025.991987][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1025.992020][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.839993][T13445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.993028][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.993061][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.359548][ T5604] Bluetooth: hci3: command tx timeout [ 1030.291095][ T5604] Bluetooth: hci3: command tx timeout [ 1032.492371][ T5604] Bluetooth: hci3: command tx timeout [ 1032.608168][T13445] veth0_vlan: entered promiscuous mode [ 1032.951514][T13549] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1033.006714][T13549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1033.008390][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.008601][T13851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.008793][T13851] bridge_slave_0: entered allmulticast mode [ 1033.010711][T13851] bridge_slave_0: entered promiscuous mode [ 1033.264841][T13549] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1033.323216][T13982] netlink: 'syz.2.1603': attribute type 5 has an invalid length. [ 1033.351189][T13549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1033.376982][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.377134][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.377307][T13851] bridge_slave_1: entered allmulticast mode [ 1033.380391][T13851] bridge_slave_1: entered promiscuous mode [ 1033.384822][T13445] veth1_vlan: entered promiscuous mode [ 1033.402557][T13549] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1033.452968][T13549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1033.460833][ T5604] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1033.511217][T13549] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1033.553271][T13549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1033.656350][ T57] bridge_slave_1: left allmulticast mode [ 1033.656427][ T57] bridge_slave_1: left promiscuous mode [ 1033.656694][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.764820][ T57] bridge_slave_0: left allmulticast mode [ 1033.764856][ T57] bridge_slave_0: left promiscuous mode [ 1033.774886][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.998416][ T57] bridge_slave_1: left allmulticast mode [ 1033.998453][ T57] bridge_slave_1: left promiscuous mode [ 1033.998708][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.106182][ T57] bridge_slave_0: left allmulticast mode [ 1034.106210][ T57] bridge_slave_0: left promiscuous mode [ 1034.106379][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.319484][ T57] macvlan3: left allmulticast mode [ 1034.319543][ T57] batadv0: left allmulticast mode [ 1034.320614][ T57] macvlan3: left promiscuous mode [ 1034.322218][ T57] bridge0: port 3(macvlan3) entered disabled state [ 1035.025044][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.110911][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.175667][ T57] bond0 (unregistering): Released all slaves [ 1035.441900][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.527691][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.592829][ T57] bond0 (unregistering): Released all slaves [ 1036.181067][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1036.319100][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1036.369344][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1036.370662][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1036.385990][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.804356][ T57] bond0 (unregistering): Released all slaves [ 1038.265717][T13851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.272620][ T57] : left promiscuous mode [ 1038.822749][ T60] Bluetooth: hci0: command tx timeout [ 1038.856879][T13851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.161499][T13851] team0: Port device team_slave_0 added [ 1040.304756][T13851] team0: Port device team_slave_1 added [ 1041.054155][ T60] Bluetooth: hci0: command tx timeout [ 1041.352924][T13851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.352941][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.352968][T13851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.497121][T13851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.497232][T13851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.497262][T13851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.680066][T13599] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1041.713396][T13599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1041.757030][T13599] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1041.801160][T13599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1042.291771][T13599] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1042.361825][T13599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1042.477618][T13599] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1042.598341][T13599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1042.796139][T13851] hsr_slave_0: entered promiscuous mode [ 1042.806240][T13851] hsr_slave_1: entered promiscuous mode [ 1042.808552][T13851] debugfs: 'hsr0' already exists in 'hsr' [ 1042.808575][T13851] Cannot create hsr debugfs directory [ 1043.077016][ T57] hsr_slave_0: left promiscuous mode [ 1043.117515][ T57] hsr_slave_1: left promiscuous mode [ 1043.118687][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.161640][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.266912][ T60] Bluetooth: hci0: command tx timeout [ 1043.373884][ T57] hsr_slave_0: left promiscuous mode [ 1043.417300][ T57] hsr_slave_1: left promiscuous mode [ 1043.420177][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.461181][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.662848][ T57] hsr_slave_0: left promiscuous mode [ 1043.705283][ T57] hsr_slave_1: left promiscuous mode [ 1043.814580][ T57] batadv0: left promiscuous mode [ 1043.814981][ T57] dummy0: left promiscuous mode [ 1043.827573][ T57] veth1_macvtap: left promiscuous mode [ 1043.827635][ T57] veth0_macvtap: left promiscuous mode [ 1043.828451][ T57] veth1_vlan: left promiscuous mode [ 1043.828578][ T57] veth0_vlan: left promiscuous mode [ 1045.508747][ T60] Bluetooth: hci0: command tx timeout [ 1045.533961][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1045.565802][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1046.004501][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1046.057721][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1047.087698][ T5252] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1048.370304][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1049.830322][T14072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1615'. [ 1050.386521][T14087] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1050.386556][T14087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.416033][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1050.447644][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 1050.512697][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1050.527324][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1050.528553][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1050.558136][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1051.218365][T14087] IPv6: sit1: Disabled Multicast RS [ 1051.227512][T14087] sit1: entered allmulticast mode [ 1051.812763][T14102] kAFS: unable to lookup cell 'Žyz0' [ 1053.277607][ T60] Bluetooth: hci4: command tx timeout [ 1053.592294][T13599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.634367][T13986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.634716][T13986] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.634983][T13986] bridge_slave_0: entered allmulticast mode [ 1053.659527][T13986] bridge_slave_0: entered promiscuous mode [ 1053.666572][ T5252] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1053.682592][T13986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.682852][T13986] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.683113][T13986] bridge_slave_1: entered allmulticast mode [ 1053.686514][T13986] bridge_slave_1: entered promiscuous mode [ 1053.808537][T13986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.836701][T13986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.706430][T13986] team0: Port device team_slave_0 added [ 1054.740123][T13599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.763482][T13986] team0: Port device team_slave_1 added [ 1055.400049][T13986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.400061][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.400076][T13986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.453142][T13447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.453297][T13447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.474389][T13986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.474403][T13986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.474425][T13986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.507544][ T60] Bluetooth: hci4: command tx timeout [ 1055.613290][T13447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.613532][T13447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.688070][T13986] hsr_slave_0: entered promiscuous mode [ 1056.690259][T13986] hsr_slave_1: entered promiscuous mode [ 1057.722045][ T60] Bluetooth: hci4: command tx timeout [ 1059.008348][ T5252] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1059.728269][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1059.786228][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1059.791676][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1059.792796][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1059.866693][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1059.945636][ T5604] Bluetooth: hci4: command tx timeout [ 1060.796748][T14181] netlink: 'syz.2.1634': attribute type 39 has an invalid length. [ 1061.402892][ T5252] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1062.513568][ T60] Bluetooth: hci2: command tx timeout [ 1064.647342][T13851] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1064.666386][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1064.744371][ T60] Bluetooth: hci2: command tx timeout [ 1064.886400][T13851] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1064.929427][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1066.677935][T13851] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1066.707163][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1066.957342][ T60] Bluetooth: hci2: command tx timeout [ 1067.210305][T13851] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1067.230894][T13851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.905816][T14082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.906084][T14082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.906455][T14082] bridge_slave_0: entered allmulticast mode [ 1067.910203][T14082] bridge_slave_0: entered promiscuous mode [ 1067.950776][T14082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.951270][T14082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.952038][T14082] bridge_slave_1: entered allmulticast mode [ 1067.956712][T14082] bridge_slave_1: entered promiscuous mode [ 1068.536743][T14082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.620999][T14082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.746029][T14251] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 1069.122118][T14251] bond2: entered promiscuous mode [ 1069.131890][T14251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1069.180975][ T60] Bluetooth: hci2: command tx timeout [ 1069.232167][T14252] veth9: entered promiscuous mode [ 1069.243973][T14252] bond2: (slave veth9): Enslaving as an active interface with an up link [ 1069.302639][ T38] audit: type=1326 audit(1012.569:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.302774][ T38] audit: type=1326 audit(1012.569:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.303145][ T38] audit: type=1326 audit(1012.569:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.303261][ T38] audit: type=1326 audit(1012.569:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.303406][ T38] audit: type=1326 audit(1012.569:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.303738][ T38] audit: type=1326 audit(1012.569:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.303900][ T38] audit: type=1326 audit(1012.569:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.304145][ T38] audit: type=1326 audit(1012.569:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.304290][ T38] audit: type=1326 audit(1012.569:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.304401][ T38] audit: type=1326 audit(1012.569:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14255 comm="syz.2.1648" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x7ffc0000 [ 1069.646391][T14082] team0: Port device team_slave_0 added [ 1069.703392][T14082] team0: Port device team_slave_1 added [ 1070.349623][T14082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.349634][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.349649][T14082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.403981][T14082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.403998][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.404025][T14082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.917632][T14082] hsr_slave_0: entered promiscuous mode [ 1070.919057][T14082] hsr_slave_1: entered promiscuous mode [ 1070.937707][T14082] debugfs: 'hsr0' already exists in 'hsr' [ 1070.937728][T14082] Cannot create hsr debugfs directory [ 1071.464611][T14270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.712256][T14276] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 1072.147244][T14276] bond3: entered promiscuous mode [ 1072.148823][T14276] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1072.247482][T14277] veth11: entered promiscuous mode [ 1072.248287][T14277] bond3: (slave veth11): Enslaving as an active interface with an up link [ 1072.628693][T14171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.629006][T14171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.629440][T14171] bridge_slave_0: entered allmulticast mode [ 1072.635557][T14171] bridge_slave_0: entered promiscuous mode [ 1072.854709][T14171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.854940][T14171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.855107][T14171] bridge_slave_1: entered allmulticast mode [ 1072.857428][T14171] bridge_slave_1: entered promiscuous mode [ 1073.100929][T14171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.178382][T14171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.189018][T13851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.462252][T14171] team0: Port device team_slave_0 added [ 1073.496951][T14171] team0: Port device team_slave_1 added [ 1073.498475][T13986] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1073.537938][T13986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.091892][T13986] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1074.134420][T13986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.193062][T13986] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1074.268809][T13986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1074.328983][T14171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.329005][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.329021][T14171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.412684][T13986] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1074.454432][T13986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1074.458140][T14171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.458156][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.458184][T14171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.275964][T13851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.464286][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.474966][ T7774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.632294][T14171] hsr_slave_0: entered promiscuous mode [ 1075.634246][T14171] hsr_slave_1: entered promiscuous mode [ 1075.636090][T14171] debugfs: 'hsr0' already exists in 'hsr' [ 1075.636115][T14171] Cannot create hsr debugfs directory [ 1075.654881][T13447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.655016][T13447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.913283][ T5252] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1077.828893][T13986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.021319][T13986] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.069300][ T7777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.069879][ T7777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.155826][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.156953][ T7785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.310899][T14331] tipc: Started in network mode [ 1078.310927][T14331] tipc: Node identity 080211000001, cluster identity 4711 [ 1078.382435][T14331] tipc: Enabled bearer , priority 0 [ 1079.218591][ T5252] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1079.596011][ T8091] tipc: Node number set to 134418688 [ 1079.977625][T13851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.115639][T13986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.647496][T13851] veth0_vlan: entered promiscuous mode [ 1081.857639][T13851] veth1_vlan: entered promiscuous mode [ 1083.137399][ T5252] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1084.267940][T13851] veth0_macvtap: entered promiscuous mode [ 1084.467283][T13851] veth1_macvtap: entered promiscuous mode [ 1084.782950][T13986] veth0_vlan: entered promiscuous mode [ 1084.923495][ T57] bridge_slave_1: left allmulticast mode [ 1084.923531][ T57] bridge_slave_1: left promiscuous mode [ 1084.923813][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.187914][ T57] bridge_slave_0: left allmulticast mode [ 1085.187951][ T57] bridge_slave_0: left promiscuous mode [ 1085.188234][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.655316][ T57] bridge_slave_1: left allmulticast mode [ 1085.655353][ T57] bridge_slave_1: left promiscuous mode [ 1085.655623][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.785094][ T57] bridge_slave_0: left allmulticast mode [ 1085.785220][ T57] bridge_slave_0: left promiscuous mode [ 1085.785482][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.919632][T14446] bad cache= option: none˙˙ [ 1085.919632][T14446] [ 1085.919943][T14446] CIFS: VFS: bad cache= option: none˙˙ [ 1086.083647][ T57] bridge_slave_1: left allmulticast mode [ 1086.083686][ T57] bridge_slave_1: left promiscuous mode [ 1086.083953][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.203897][ T57] bridge_slave_0: left allmulticast mode [ 1086.203923][ T57] bridge_slave_0: left promiscuous mode [ 1086.204139][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.458792][ T57] bridge_slave_1: left allmulticast mode [ 1086.458820][ T57] bridge_slave_1: left promiscuous mode [ 1086.458989][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.618283][ T57] bridge_slave_0: left allmulticast mode [ 1086.618314][ T57] bridge_slave_0: left promiscuous mode [ 1086.618508][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.386130][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1087.450192][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1087.504743][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1087.630926][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1087.639195][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1090.435221][T14465] fuse: Bad value for 'fd' [ 1090.553233][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1090.616117][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1090.647941][ T60] Bluetooth: hci5: command tx timeout [ 1090.669656][ T57] bond0 (unregistering): Released all slaves [ 1091.181611][T14470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1675'. [ 1091.418291][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.525065][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.591128][ T57] bond0 (unregistering): Released all slaves [ 1092.390847][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.476464][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.499450][ T57] bond0 (unregistering): Released all slaves [ 1092.890409][ T60] Bluetooth: hci5: command tx timeout [ 1093.278525][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.365407][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.388077][ T57] bond0 (unregistering): Released all slaves [ 1095.150315][ T60] Bluetooth: hci5: command tx timeout [ 1096.420619][ T57] hsr_slave_0: left promiscuous mode [ 1096.624252][ T57] hsr_slave_1: left promiscuous mode [ 1096.626285][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.678010][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.987238][ T57] hsr_slave_0: left promiscuous mode [ 1097.622297][ T60] Bluetooth: hci5: command tx timeout [ 1097.995780][ T57] hsr_slave_1: left promiscuous mode [ 1097.996868][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.276291][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.441091][ T57] hsr_slave_0: left promiscuous mode [ 1098.484884][ T57] hsr_slave_1: left promiscuous mode [ 1098.486761][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.527549][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.698128][ T57] hsr_slave_0: left promiscuous mode [ 1098.719104][ T57] hsr_slave_1: left promiscuous mode [ 1098.720385][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.762668][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.897921][ T57] veth1_vlan: left promiscuous mode [ 1098.898139][ T57] veth0_vlan: left promiscuous mode [ 1100.473409][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1100.515629][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1100.998453][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1101.071489][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1101.564768][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1101.616824][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1102.132300][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1102.276866][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1102.301107][T14515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1682'. [ 1102.307223][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1102.393416][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1102.411296][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1102.466190][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1102.467022][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1103.064786][T13986] veth1_vlan: entered promiscuous mode [ 1105.197726][ T60] Bluetooth: hci3: command tx timeout [ 1107.140978][T14574] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1689'. [ 1107.334341][ T5252] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1107.451434][ T60] Bluetooth: hci3: command tx timeout [ 1109.273042][T14450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.273386][T14450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.273642][T14450] bridge_slave_0: entered allmulticast mode [ 1109.276696][T14450] bridge_slave_0: entered promiscuous mode [ 1109.301069][T14450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.301357][T14450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.301601][T14450] bridge_slave_1: entered allmulticast mode [ 1109.307484][T14450] bridge_slave_1: entered promiscuous mode [ 1110.332717][ T60] Bluetooth: hci3: command tx timeout [ 1111.122525][T14450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.919533][T14450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.097129][T14512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.097418][T14512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.097667][T14512] bridge_slave_0: entered allmulticast mode [ 1112.099781][T14512] bridge_slave_0: entered promiscuous mode [ 1112.226041][T14450] team0: Port device team_slave_0 added [ 1112.551421][ T5604] Bluetooth: hci3: command tx timeout [ 1112.758830][T14605] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 1112.832314][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.832530][T14512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.832686][T14512] bridge_slave_1: entered allmulticast mode [ 1112.834685][T14512] bridge_slave_1: entered promiscuous mode [ 1112.851355][T14450] team0: Port device team_slave_1 added [ 1113.157967][T14512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.160005][T14450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.160019][T14450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.160047][T14450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.224844][T14450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.224861][T14450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.224888][T14450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.396104][T14512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.642313][T14512] team0: Port device team_slave_0 added [ 1113.690649][T14512] team0: Port device team_slave_1 added [ 1113.877241][T14450] hsr_slave_0: entered promiscuous mode [ 1113.891198][T14450] hsr_slave_1: entered promiscuous mode [ 1113.898242][T14450] debugfs: 'hsr0' already exists in 'hsr' [ 1113.898270][T14450] Cannot create hsr debugfs directory [ 1113.919916][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1114.481311][T14512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.481328][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.481354][T14512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.685947][T14512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.685964][T14512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.685990][T14512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.184612][T14512] hsr_slave_0: entered promiscuous mode [ 1115.186768][T14512] hsr_slave_1: entered promiscuous mode [ 1115.188338][T14512] debugfs: 'hsr0' already exists in 'hsr' [ 1115.188365][T14512] Cannot create hsr debugfs directory [ 1116.215634][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1116.305958][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1116.311442][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1116.347588][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1116.361558][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1118.885123][ T5604] Bluetooth: hci0: command tx timeout [ 1119.697447][ T38] kauditd_printk_skb: 152 callbacks suppressed [ 1119.697464][ T38] audit: type=1326 audit(1059.703:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14700 comm="syz.2.1701" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e84de59 code=0x0 [ 1121.094616][ T5604] Bluetooth: hci0: command tx timeout [ 1121.121209][T14171] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1121.185581][T14171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1121.222953][T14171] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1121.275874][T14171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1121.767430][T14171] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1121.809948][T14171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1121.873913][T14171] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1121.933032][T14171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1123.318230][ T5604] Bluetooth: hci0: command tx timeout [ 1124.563391][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1124.682837][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1124.688235][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1124.715381][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1124.723142][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1125.542106][ T5604] Bluetooth: hci0: command tx timeout [ 1125.576062][T14641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.576445][T14641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.576718][T14641] bridge_slave_0: entered allmulticast mode [ 1125.580186][T14641] bridge_slave_0: entered promiscuous mode [ 1125.615687][T14641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.615906][T14641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.616169][T14641] bridge_slave_1: entered allmulticast mode [ 1125.642389][T14641] bridge_slave_1: entered promiscuous mode [ 1126.209058][T14641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.213811][T14641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.442904][T14641] team0: Port device team_slave_0 added [ 1126.453129][T14641] team0: Port device team_slave_1 added [ 1127.092065][ T57] bridge_slave_1: left allmulticast mode [ 1127.092101][ T57] bridge_slave_1: left promiscuous mode [ 1127.092405][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.182741][ T5604] Bluetooth: hci4: command tx timeout [ 1127.296060][ T57] bridge_slave_0: left allmulticast mode [ 1127.296086][ T57] bridge_slave_0: left promiscuous mode [ 1127.296261][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.530505][ T57] bridge_slave_1: left allmulticast mode [ 1127.530540][ T57] bridge_slave_1: left promiscuous mode [ 1127.530796][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.640201][ T57] bridge_slave_0: left allmulticast mode [ 1127.640239][ T57] bridge_slave_0: left promiscuous mode [ 1127.640432][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.232342][T14770] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1708'. [ 1129.432459][ T5604] Bluetooth: hci4: command tx timeout [ 1129.787129][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.872312][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.895310][ T57] bond0 (unregistering): Released all slaves [ 1130.599044][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.685874][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.708311][ T57] bond0 (unregistering): Released all slaves [ 1130.751093][T14641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.751105][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.751120][T14641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.053206][ T5252] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1131.067658][T14641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.067675][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.067703][T14641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.633497][ T5604] Bluetooth: hci4: command tx timeout [ 1131.992413][T14641] hsr_slave_0: entered promiscuous mode [ 1131.996035][T14641] hsr_slave_1: entered promiscuous mode [ 1131.997725][T14641] debugfs: 'hsr0' already exists in 'hsr' [ 1131.997748][T14641] Cannot create hsr debugfs directory [ 1132.309073][ T57] hsr_slave_0: left promiscuous mode [ 1132.351801][ T57] hsr_slave_1: left promiscuous mode [ 1132.352875][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.374338][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.544218][ T57] hsr_slave_0: left promiscuous mode [ 1132.565671][ T57] hsr_slave_1: left promiscuous mode [ 1132.566458][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.609340][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.696266][ T57] veth1_vlan: left promiscuous mode [ 1132.696406][ T57] veth0_vlan: left promiscuous mode [ 1132.716841][ T57] veth1_macvtap: left promiscuous mode [ 1132.716943][ T57] veth0_macvtap: left promiscuous mode [ 1132.717231][ T57] veth1_vlan: left promiscuous mode [ 1132.717391][ T57] veth0_vlan: left promiscuous mode [ 1133.691652][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1133.759502][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1133.837710][ T5604] Bluetooth: hci4: command tx timeout [ 1134.802540][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1134.843703][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1137.241305][ T39] INFO: task kworker/0:2:203 blocked for more than 143 seconds. [ 1137.241334][ T39] Tainted: G L syzkaller #0 [ 1137.241344][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1137.241355][ T39] task:kworker/0:2 state:D stack:22000 pid:203 tgid:203 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1137.241403][ T39] Workqueue: usb_hub_wq hub_event [ 1137.241509][ T39] Call Trace: [ 1137.241517][ T39] [ 1137.241531][ T39] __schedule+0x1709/0x5530 [ 1137.241580][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1137.241605][ T39] ? __pfx___schedule+0x10/0x10 [ 1137.241634][ T39] ? schedule+0x90/0x2b0 [ 1137.241657][ T39] schedule+0x164/0x2b0 [ 1137.241680][ T39] usb_kill_urb+0x1cf/0x2f0 [ 1137.241738][ T39] ? __pfx_usb_kill_urb+0x10/0x10 [ 1137.241761][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1137.241860][ T39] usb_start_wait_urb+0x22a/0x5b0 [ 1137.241888][ T39] ? rcu_is_watching+0x15/0xb0 [ 1137.241912][ T39] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1137.241934][ T39] ? trace_kmalloc+0x2a/0xf0 [ 1137.241974][ T39] usb_control_msg+0x234/0x3e0 [ 1137.242006][ T39] hub_port_init+0xb0b/0x28b0 [ 1137.242051][ T39] hub_event+0x24e2/0x4cf0 [ 1137.242135][ T39] ? __pfx_hub_event+0x10/0x10 [ 1137.242182][ T39] ? rcu_is_watching+0x15/0xb0 [ 1137.242208][ T39] ? process_one_work+0x7fd/0x1480 [ 1137.242323][ T39] process_one_work+0xaaf/0x1480 [ 1137.242368][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1137.242389][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1137.242416][ T39] ? assign_work+0x3cf/0x5d0 [ 1137.242444][ T39] worker_thread+0xb05/0x10d0 [ 1137.242489][ T39] kthread+0x388/0x470 [ 1137.242504][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1137.242519][ T39] ? __pfx_kthread+0x10/0x10 [ 1137.242533][ T39] ret_from_fork+0x514/0xb70 [ 1137.242550][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.242565][ T39] ? __switch_to+0xc89/0x1420 [ 1137.242587][ T39] ? __pfx_kthread+0x10/0x10 [ 1137.242601][ T39] ret_from_fork_asm+0x1a/0x30 [ 1137.242628][ T39] [ 1137.242878][ T39] [ 1137.242878][ T39] Showing all locks held in the system: [ 1137.242936][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 1137.243007][ T39] #0: ffffffff8e1c3840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1137.243095][ T39] locks held by kworker/u8:3/57: 4, on CPU#0: [ 1137.243107][ T39] #0: ffff88801bea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1137.243145][ T39] #1: ffffc9000123fc60 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1137.243182][ T39] #2: ffffffff8f59ec60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1137.243217][ T39] #3: ffffffff8f5adf78 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 1137.243274][ T39] locks held by kworker/0:2/203: 5, on CPU#0: [ 1137.243284][ T39] #0: ffff8880206e3d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1137.243408][ T39] #1: ffffc90004307c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1137.243443][ T39] #2: ffff88802bb60210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1137.243480][ T39] #3: ffff88802bb57658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 1137.243516][ T39] #4: ffff88802af96458 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 1137.243572][ T39] locks held by dhcpcd/5252: 1, on CPU#0: [ 1137.243583][ T39] #0: ffffffff8f5adf78 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 1137.243624][ T39] locks held by getty/5344: 2, on CPU#0: [ 1137.243635][ T39] #0: ffff888036e5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1137.243755][ T39] #1: ffffc900044be2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1137.243795][ T39] locks held by kworker/1:4/5601: 3, last CPU#1: [ 1137.243806][ T39] #0: ffff88813fe1f938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1137.243841][ T39] #1: ffffc90005637c60 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1137.243878][ T39] #2: ffffffff8e1c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 1137.243917][ T39] locks held by kworker/u8:20/7773: 5, last CPU#0: [ 1137.243928][ T39] #0: ffff88813fe5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1137.243965][ T39] #1: ffffc90005687c60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480 [ 1137.244005][ T39] #2: ffffffff8e051c30 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1137.244126][ T39] #3: ffffffff8e299598 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 1137.244165][ T39] #4: ffffffff8e068558 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1137.244269][ T39] locks held by syz-executor/14450: 4, on CPU#0: [ 1137.244281][ T39] #0: ffff888037b06510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1137.244344][ T39] #1: ffff888060394478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1137.244463][ T39] #2: ffff88802a9373c8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1137.244501][ T39] #3: ffffffff8ee22098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 1137.244539][ T39] locks held by syz-executor/14512: 12, last CPU#1: [ 1137.244561][ T39] #0: ffff888037b06510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1137.244600][ T39] #1: ffff88805f7cac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1137.244636][ T39] #2: ffff88802a9372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1137.244676][ T39] #3: ffffffff8ee22098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1137.244710][ T39] #4: ffff88805c824160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1137.244746][ T39] #5: ffff88803d9ce310 (&devlink->lock_key#21){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1137.244790][ T39] #6: ffffffff8f5adf78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1137.244825][ T39] #7: ffff88803d341070 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2120 [ 1137.244869][ T39] #8: ffffffff8f5b1378 (lweventlist_lock){+.+.}-{3:3}, at: linkwatch_fire_event+0x78/0x210 [ 1137.244908][ T39] #9: ffffffff8e1c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1137.244951][ T39] #10: ffff88803d340828 (&dir->lock#2){+.+.}-{3:3}, at: ref_tracker_alloc+0x1ec/0x4c0 [ 1137.245039][ T39] #11: ffff8880b873b8e0 (&rq->__lock){-...}-{2:2}, at: finish_task_switch+0x15d/0xc60 [ 1137.245126][ T39] locks held by syz-executor/14641: 4, on CPU#1: [ 1137.245137][ T39] #0: ffff888037b06510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1137.245175][ T39] #1: ffff88805fb36c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1137.245213][ T39] #2: ffff88802a9372d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1137.245255][ T39] #3: ffffffff8ee22098 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1137.245295][ T39] locks held by syz-executor/14726: 2, on CPU#1: [ 1137.245306][ T39] #0: ffffffff8ed1f208 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1137.245343][ T39] #1: ffffffff8f5adf78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 1137.245393][ T39] locks held by syz.2.1717/14795: 1, last CPU#1: [ 1137.245404][ T39] #0: ffff888034608510 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1137.245539][ T39] [ 1137.245544][ T39] ============================================= [ 1137.245544][ T39] [ 1137.245560][ T39] NMI backtrace for cpu 0 [ 1137.245576][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1137.245597][ T39] Tainted: [L]=SOFTLOCKUP [ 1137.245603][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1137.245613][ T39] Call Trace: [ 1137.245621][ T39] [ 1137.245628][ T39] dump_stack_lvl+0xe8/0x150 [ 1137.245655][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1137.245709][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1137.245786][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1137.245804][ T39] sys_info+0x135/0x170 [ 1137.245824][ T39] watchdog+0xfd7/0x1030 [ 1137.245883][ T39] ? watchdog+0x1c7/0x1030 [ 1137.245904][ T39] kthread+0x388/0x470 [ 1137.245919][ T39] ? __pfx_watchdog+0x10/0x10 [ 1137.245934][ T39] ? __pfx_kthread+0x10/0x10 [ 1137.245952][ T39] ret_from_fork+0x514/0xb70 [ 1137.245971][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.245987][ T39] ? __switch_to+0xc89/0x1420 [ 1137.246008][ T39] ? __pfx_kthread+0x10/0x10 [ 1137.246021][ T39] ret_from_fork_asm+0x1a/0x30 [ 1137.246046][ T39] [ 1137.246079][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1137.246108][ C1] NMI backtrace for cpu 1 [ 1137.246131][ C1] CPU: 1 UID: 0 PID: 14512 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1137.246153][ C1] Tainted: [L]=SOFTLOCKUP [ 1137.246159][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1137.246168][ C1] RIP: 0010:__lock_acquire+0x19ed/0x2e40 [ 1137.246190][ C1] Code: 14 25 ff 0f 00 00 39 05 5d 67 04 12 73 06 89 05 55 67 04 12 48 8b 02 49 89 d8 4c 39 e8 0f 84 30 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 49 89 d8 e9 1c fe ff ff 48 c7 c7 f0 0a 09 8e 4c 89 [ 1137.246204][ C1] RSP: 0018:ffffc90005736c70 EFLAGS: 00000002 [ 1137.246219][ C1] RAX: ffffffff96615988 RBX: 00000000000003cd RCX: 000000000000001c [ 1137.246231][ C1] RDX: ffffffff96292188 RSI: ffff888028cb2d38 RDI: ffff888028cb1f40 [ 1137.246243][ C1] RBP: 1176621c68851a66 R08: 00000000000003cd R09: 0000000000000020 [ 1137.246254][ C1] R10: 0000000000000000 R11: ffffffff81a17680 R12: 000000000000001b [ 1137.246264][ C1] R13: ffffffff9346b530 R14: ffff888028cb2d38 R15: ffffffff962b3358 [ 1137.246276][ C1] FS: 000055557bf14500(0000) GS:ffff888125d43000(0000) knlGS:0000000000000000 [ 1137.246290][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1137.246301][ C1] CR2: 000055c3a1403078 CR3: 0000000052736000 CR4: 00000000003526f0 [ 1137.246316][ C1] Call Trace: [ 1137.246323][ C1] [ 1137.246341][ C1] lock_acquire+0x115/0x350 [ 1137.246358][ C1] ? hrtimer_start_range_ns+0x8c/0x3f0 [ 1137.246455][ C1] ? debug_object_assert_init+0x1fe/0x310 [ 1137.246528][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 1137.246547][ C1] ? hrtimer_start_range_ns+0x8c/0x3f0 [ 1137.246575][ C1] hrtimer_start_range_ns+0x8c/0x3f0 [ 1137.246597][ C1] finish_task_switch+0x3c4/0xc60 [ 1137.246617][ C1] __schedule+0x1711/0x5530 [ 1137.246635][ C1] ? lapic_next_event+0x11/0x20 [ 1137.246653][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1137.246704][ C1] ? __pfx___schedule+0x10/0x10 [ 1137.246720][ C1] ? irqentry_exit+0x218/0x8f0 [ 1137.246736][ C1] ? trace_irq_disable+0x3b/0x140 [ 1137.246757][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1137.246776][ C1] preempt_schedule_common+0x82/0xd0 [ 1137.246794][ C1] preempt_schedule_thunk+0x16/0x40 [ 1137.246814][ C1] rt_spin_lock+0x316/0x400 [ 1137.246844][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1137.246870][ C1] ref_tracker_alloc+0x1ec/0x4c0 [ 1137.246890][ C1] ? linkwatch_fire_event+0x157/0x210 [ 1137.246907][ C1] ? nsim_stop+0x88/0x430 [ 1137.246926][ C1] ? __dev_close_many+0x366/0x6e0 [ 1137.246947][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1137.246964][ C1] ? __nsim_dev_port_del+0x14e/0x200 [ 1137.246985][ C1] ? linkwatch_fire_event+0x1b6/0x210 [ 1137.247002][ C1] ? nsim_stop+0x88/0x430 [ 1137.247020][ C1] ? __dev_close_many+0x366/0x6e0 [ 1137.247039][ C1] ? netif_close_many+0x249/0x660 [ 1137.247057][ C1] ? unregister_netdevice_many_notify+0x843/0x2120 [ 1137.247076][ C1] ? unregister_netdevice_queue+0x2f5/0x340 [ 1137.247093][ C1] ? nsim_destroy+0x275/0x800 [ 1137.247110][ C1] ? __nsim_dev_port_del+0x14e/0x200 [ 1137.247130][ C1] ? nsim_dev_reload_destroy+0x288/0x490 [ 1137.247150][ C1] ? nsim_drv_remove+0x58/0x160 [ 1137.247170][ C1] ? device_release_driver_internal+0x48b/0x880 [ 1137.247187][ C1] ? bus_remove_device+0x449/0x560 [ 1137.247206][ C1] ? device_del+0x528/0x8f0 [ 1137.247220][ C1] ? device_unregister+0x21/0xf0 [ 1137.247235][ C1] ? del_device_store+0x2b5/0x370 [ 1137.247253][ C1] ? kernfs_fop_write_iter+0x3a5/0x540 [ 1137.247276][ C1] ? linkwatch_urgent_event+0x62/0x3a0 [ 1137.247295][ C1] linkwatch_fire_event+0x1b6/0x210 [ 1137.247313][ C1] ? __pfx_nsim_stop+0x10/0x10 [ 1137.247333][ C1] nsim_stop+0x88/0x430 [ 1137.247352][ C1] ? __pfx_nsim_stop+0x10/0x10 [ 1137.247371][ C1] __dev_close_many+0x366/0x6e0 [ 1137.247394][ C1] ? __pfx___dev_close_many+0x10/0x10 [ 1137.247418][ C1] netif_close_many+0x249/0x660 [ 1137.247441][ C1] ? __pfx_netif_close_many+0x10/0x10 [ 1137.247459][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1137.247476][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1137.247493][ C1] ? mutex_lock_nested+0x152/0x1d0 [ 1137.247513][ C1] ? unregister_netdevice_many_notify+0x5bb/0x2120 [ 1137.247534][ C1] unregister_netdevice_many_notify+0x843/0x2120 [ 1137.247554][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1137.247577][ C1] ? rt_mutex_slowlock+0x422/0x780 [ 1137.247599][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1137.247619][ C1] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1137.247646][ C1] unregister_netdevice_queue+0x2f5/0x340 [ 1137.247665][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1137.247687][ C1] nsim_destroy+0x275/0x800 [ 1137.247708][ C1] __nsim_dev_port_del+0x14e/0x200 [ 1137.247731][ C1] nsim_dev_reload_destroy+0x288/0x490 [ 1137.247752][ C1] ? nsim_drv_remove+0x50/0x160 [ 1137.247773][ C1] nsim_drv_remove+0x58/0x160 [ 1137.247795][ C1] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1137.247813][ C1] device_release_driver_internal+0x48b/0x880 [ 1137.247833][ C1] bus_remove_device+0x449/0x560 [ 1137.247856][ C1] ? __pfx_bus_remove_device+0x10/0x10 [ 1137.247877][ C1] ? up_read+0x34/0x180 [ 1137.247896][ C1] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1137.247919][ C1] device_del+0x528/0x8f0 [ 1137.247938][ C1] ? __pfx_device_del+0x10/0x10 [ 1137.247957][ C1] device_unregister+0x21/0xf0 [ 1137.247973][ C1] del_device_store+0x2b5/0x370 [ 1137.247994][ C1] ? __pfx_del_device_store+0x10/0x10 [ 1137.248013][ C1] ? sysfs_file_kobj+0x1e4/0x230 [ 1137.248061][ C1] ? sysfs_kf_write+0x166/0x260 [ 1137.248079][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1137.248095][ C1] kernfs_fop_write_iter+0x3a5/0x540 [ 1137.248119][ C1] vfs_write+0x61e/0xbb0 [ 1137.248143][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1137.248163][ C1] ? do_sys_openat2+0x14e/0x200 [ 1137.248179][ C1] ? kmem_cache_free+0x187/0x6c0 [ 1137.248202][ C1] ksys_write+0x156/0x270 [ 1137.248222][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1137.248245][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.248261][ C1] do_syscall_64+0x174/0x580 [ 1137.248279][ C1] ? clear_bhb_loop+0x40/0x90 [ 1137.248296][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.248311][ C1] RIP: 0033:0x7fdf5f1be68e [ 1137.248328][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1137.248340][ C1] RSP: 002b:00007fff492d0c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1137.248356][ C1] RAX: ffffffffffffffda RBX: 000055557bf14500 RCX: 00007fdf5f1be68e [ 1137.248368][ C1] RDX: 0000000000000001 RSI: 00007fff492d0cf0 RDI: 0000000000000005 [ 1137.248378][ C1] RBP: 00007fdf5f2946f2 R08: 0000000000000000 R09: 0000000000000000 [ 1137.248388][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.248398][ C1] R13: 00007fff492d0cf0 R14: 00007fdf5ffb4620 R15: 0000000000000003 [ 1137.248417][ C1] [ 1137.250404][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1137.250423][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1137.250447][ T39] Tainted: [L]=SOFTLOCKUP [ 1137.250453][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1137.250463][ T39] Call Trace: [ 1137.250472][ T39] [ 1137.250480][ T39] vpanic+0x5d9/0xad0 [ 1137.250502][ T39] ? __pfx_vpanic+0x10/0x10 [ 1137.250516][ T39] ? irqentry_exit+0x218/0x8f0 [ 1137.250538][ T39] ? __pfx___schedule+0x10/0x10 [ 1137.250567][ T39] panic+0xc5/0xd0 [ 1137.250585][ T39] ? __pfx_panic+0x10/0x10 [ 1137.250600][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1137.250621][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1137.250644][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1137.250665][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1137.250686][ T39] watchdog+0x1030/0x1030 [ 1137.250714][ T39] ? watchdog+0x1c7/0x1030 [ 1137.250740][ T39] kthread+0x388/0x470 [ 1137.250762][ T39] ? __pfx_watchdog+0x10/0x10 [ 1137.250780][ T39] ? __pfx_kthread+0x10/0x10 [ 1137.250799][ T39] ret_from_fork+0x514/0xb70 [ 1137.250820][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.250838][ T39] ? __switch_to+0xc89/0x1420 [ 1137.250865][ T39] ? __pfx_kthread+0x10/0x10 [ 1137.250884][ T39] ret_from_fork_asm+0x1a/0x30 [ 1137.250917][ T39] [ 1137.251191][ T39] Kernel Offset: disabled