last executing test programs: 13m41.612348662s ago: executing program 4 (id=224): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) 13m39.679933251s ago: executing program 4 (id=229): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000040)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 13m35.244335228s ago: executing program 4 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getresgid(&(0x7f00000000c0), 0x0, 0x0) io_setup(0x7d, &(0x7f0000000600)) getgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) 13m31.030498132s ago: executing program 4 (id=245): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc020000000000000000000000000000ff020000000000000000000000000001040090780000000038d068994114ee"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 13m27.654565446s ago: executing program 4 (id=251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x130, 0x98, 0x1f0, 0x130, 0x98, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x81}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x6}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(0x0, &(0x7f0000000080)) mlock(&(0x7f0000007000/0x2000)=nil, 0x2000) poll(&(0x7f00000011c0)=[{r2, 0x2}], 0x1, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 13m27.136791169s ago: executing program 4 (id=254): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f00000002c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") fchdir(0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x2e4, 0x0, 0x1, 0x10000}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tkill(r3, 0x29) getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000d40)) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_ENTRY(r5, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, 0x0, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x800, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}}}, 0x90) socket(0x10, 0x3, 0x0) 13m11.887094185s ago: executing program 32 (id=254): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f00000002c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") fchdir(0xffffffffffffffff) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x2e4, 0x0, 0x1, 0x10000}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tkill(r3, 0x29) getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000d40)) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_ENTRY(r5, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, 0x0, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x800, 0x0, 0x0, {0x2, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}}}, 0x90) socket(0x10, 0x3, 0x0) 6m25.652656455s ago: executing program 1 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m24.509312668s ago: executing program 1 (id=989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca01000000bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x148}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m23.930789789s ago: executing program 1 (id=992): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) creat(&(0x7f0000000040)='./file2\x00', 0x8) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 6m20.301778751s ago: executing program 1 (id=1002): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0xfffff800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) listen(0xffffffffffffffff, 0x5) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 6m18.096136297s ago: executing program 1 (id=1008): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x56, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 6m16.247281395s ago: executing program 1 (id=1011): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 6m12.500635634s ago: executing program 3 (id=1021): prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="420000000300"/23], 0x42) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={r6, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x6bc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 6m9.8928714s ago: executing program 3 (id=1026): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 6m9.544361822s ago: executing program 3 (id=1030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x22c, &(0x7f0000000000)="$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") fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, &(0x7f0000000140)={0xa, 0x4, 0x1, 0xffffffff, '\x00', 0x4}) preadv(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0xc0, 0x7fffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x7, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303a, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000005, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x8, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001ac0)={0x44, 0x0, &(0x7f00000009c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000ac0)}) 6m8.502912041s ago: executing program 3 (id=1032): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000003c0)) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) unshare(0x8000280) 6m6.573845205s ago: executing program 3 (id=1035): prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="420000000300"/23], 0x42) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={r6, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x6bc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x8000, 0x20000, 0x0, 0xcd, 0x0, 0x4}, 0x9c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 6m5.151855205s ago: executing program 3 (id=1038): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r1 = syz_open_dev$radio(0x0, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) listen(0xffffffffffffffff, 0x5) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x8000) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x2, 0x6, 0x12, 0xffffffffffffffff, 0x10000000) 6m0.98747671s ago: executing program 33 (id=1011): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 5m59.481931133s ago: executing program 0 (id=1049): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 5m57.812343799s ago: executing program 0 (id=1051): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x400, &(0x7f0000000100)={[{@nls={'nls', 0x3d, 'cp949'}}, {@type={'type', 0x3d, "98acdea6"}}, {@part={'part', 0x3d, 0x9}}, {@part={'part', 0x3d, 0x9}}]}, 0x1, 0x5f1, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$pokeuser(0x6, r0, 0x2, 0x6) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x21}], 0x1) 5m56.706430881s ago: executing program 0 (id=1052): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10400, 0x3a) writev(r1, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x29}, 0x40}, 0x1c, 0x0}}], 0x1, 0xc040) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0x6) 5m54.505685337s ago: executing program 0 (id=1055): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0xfffff800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) listen(0xffffffffffffffff, 0x5) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 5m53.241326147s ago: executing program 0 (id=1057): prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="420000000300"/23], 0x42) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000540)={r6, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x6bc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 5m50.523018414s ago: executing program 0 (id=1058): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffffffffffffff6b, 0x2, {{0x7fffffff, 0x20007, 0x0, 0x8, 0x3}, 0x3, 0x0, 0x7636, 0x3, 0x3, 0x5, 0x9, 0x17, 0x1, 0x205, {0x7, 0x7, 0x2, 0xfd, 0x10000, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 5m49.899889998s ago: executing program 34 (id=1038): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r1 = syz_open_dev$radio(0x0, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) listen(0xffffffffffffffff, 0x5) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x8000) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x2, 0x6, 0x12, 0xffffffffffffffff, 0x10000000) 5m35.327271493s ago: executing program 35 (id=1058): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffffffffffffff6b, 0x2, {{0x7fffffff, 0x20007, 0x0, 0x8, 0x3}, 0x3, 0x0, 0x7636, 0x3, 0x3, 0x5, 0x9, 0x17, 0x1, 0x205, {0x7, 0x7, 0x2, 0xfd, 0x10000, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 1m2.253586379s ago: executing program 2 (id=1259): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[], 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0xa0011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) 1m1.279887937s ago: executing program 2 (id=1260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) write$sndseq(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 1m0.388826845s ago: executing program 2 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000002c0)=""/173, &(0x7f0000000440)=0xad) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000191000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x80000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r6, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e0", 0x98}, {&(0x7f00000005c0)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60e", 0x85}, {0x0}, {0x0}], 0x4, &(0x7f0000006200)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x20}}], 0x1, 0x0) 59.380947804s ago: executing program 2 (id=1262): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) 57.375222467s ago: executing program 2 (id=1263): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0xc000) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001a00)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x4004044) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x12, 0x10, 0xfa00, {&(0x7f0000000340), 0xffffffffffffffff, r3}}, 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 53.208092653s ago: executing program 2 (id=1264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1000000000000010, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) 52.801742012s ago: executing program 36 (id=1264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1000000000000010, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) 4.228311619s ago: executing program 5 (id=269): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x0, 0x204, &(0x7f00000003c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x189800, 0x131) mount$overlay(0x0, 0x0, 0x0, 0x400, &(0x7f0000000100)={[], [], 0x2f}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000100)) 3.550162161s ago: executing program 5 (id=1266): socket$key(0xf, 0x3, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7b, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000", @ANYRES32=0x0], 0x48) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9) 2.200629562s ago: executing program 5 (id=1267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) write$sndseq(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 1.113657906s ago: executing program 5 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x8031, 0xffffffffffffffff, 0x28f43000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, &(0x7f0000000440)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000191000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x80000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {}, {0xfffc}, {0x0, 0x8}, {0xfffe}, {}, {}, {}, {0x0, 0xfb}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {0x0, 0x46}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2000}, {}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r6, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)="1fd4787488b1f24058b8199d33a8178ba1174e104ae1b3abb3faffaeb1a08aaeb8993c5fefff92daa06a331e595157761f72d282866c198c75e5f4c1f114555440e2c923df89b8a29cf82b51cddfc9f6855b9358722868848277b2ffaa380219e2103ad94a5c527d277624d6e0957baa3bbba59334916fb41475e5e891320186c1ee0e2a48e51a93311a4d776025dafd266c7cff569c60e0", 0x98}, {&(0x7f00000005c0)="a2e1f75a5acb51fba68f72d473a1438b2fa6aee9bc10efc70b7f16e654f340c9fd9b40fcd7c2f55583cf7a2ca7be4c18b181cd1ccf007f5650ff7e01c64ccd85f8d4ed226e4ca0399034a0a45619339ff79f9c8ced0dfced5782fa0ce482417b8e9343ed19679dda57256a0078754e47388b9b107af79c32c54fc29793a2d05dd1f732e60e", 0x85}, {0x0}, {0x0}], 0x4, &(0x7f0000006200)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x20}}], 0x1, 0x0) 0s ago: executing program 5 (id=1269): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): mand tx timeout [ 710.517622][ T5633] Bluetooth: hci7: command tx timeout [ 712.594981][ T5633] Bluetooth: hci7: command tx timeout [ 717.816030][T10092] loop2: detected capacity change from 0 to 131072 [ 718.123719][ T4929] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 718.266248][ T4929] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 718.272571][T10092] F2FS-fs (loop2): invalid crc value [ 718.306864][ T4929] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 718.368973][ T4929] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 718.395933][ T4929] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 718.586243][T10092] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 719.960271][T10046] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1058'. [ 720.612115][ T5633] Bluetooth: hci8: command tx timeout [ 722.716502][ T5633] Bluetooth: hci8: command tx timeout [ 723.617384][T10132] loop2: detected capacity change from 0 to 1024 [ 724.365235][ T8903] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 724.420025][ T1027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.570440][ T8903] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 724.570476][ T8903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.603512][ T8903] usb 3-1: config 0 descriptor?? [ 724.782451][ T5633] Bluetooth: hci8: command tx timeout [ 725.033502][ T8903] ath6kl: Failed to read usb control message: -71 [ 725.033549][ T8903] ath6kl: Unable to read the bmi data from the device: -71 [ 725.033563][ T8903] ath6kl: Unable to recv target info: -71 [ 725.081252][ T8903] ath6kl: Failed to init ath6kl core: -71 [ 725.082742][ T8903] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 725.104394][ T8903] usb 3-1: USB disconnect, device number 21 [ 727.084594][ T5633] Bluetooth: hci8: command tx timeout [ 727.267855][ T1027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.801924][ T1027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.522973][ T1027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.776818][ T1027] bridge_slave_1: left allmulticast mode [ 731.776848][ T1027] bridge_slave_1: left promiscuous mode [ 731.780235][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.938693][ T1027] bridge_slave_0: left allmulticast mode [ 731.938733][ T1027] bridge_slave_0: left promiscuous mode [ 731.939086][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.295487][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.375374][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.417828][ T1027] bond0 (unregistering): Released all slaves [ 736.488960][T10190] syz.2.1091 (10190) used greatest stack depth: 19616 bytes left [ 738.317969][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.318349][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.318654][ T9987] bridge_slave_0: entered allmulticast mode [ 738.346145][ T9987] bridge_slave_0: entered promiscuous mode [ 738.411650][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.411942][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.412178][ T9987] bridge_slave_1: entered allmulticast mode [ 738.419838][ T9987] bridge_slave_1: entered promiscuous mode [ 739.126133][ T9987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.680031][ T9987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.680491][T10052] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.680846][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.681091][T10052] bridge_slave_0: entered allmulticast mode [ 740.684050][T10052] bridge_slave_0: entered promiscuous mode [ 740.739131][T10010] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.739459][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.739793][T10010] bridge_slave_0: entered allmulticast mode [ 740.742651][T10010] bridge_slave_0: entered promiscuous mode [ 740.794762][ T5734] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 740.907300][T10052] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.907657][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.908017][T10052] bridge_slave_1: entered allmulticast mode [ 740.911946][T10052] bridge_slave_1: entered promiscuous mode [ 740.943428][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.943696][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.943977][T10010] bridge_slave_1: entered allmulticast mode [ 740.977595][T10010] bridge_slave_1: entered promiscuous mode [ 740.980421][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.980724][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.981041][T10094] bridge_slave_0: entered allmulticast mode [ 741.003367][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 741.019500][ T5734] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 741.019595][ T5734] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.019625][ T5734] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.019652][ T5734] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.019677][ T5734] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.019726][ T5734] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.019751][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.069539][T10094] bridge_slave_0: entered promiscuous mode [ 741.254999][T10094] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.255385][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.255815][T10094] bridge_slave_1: entered allmulticast mode [ 741.291023][T10094] bridge_slave_1: entered promiscuous mode [ 741.319384][ T5734] usb 3-1: usb_control_msg returned -32 [ 741.319435][ T5734] usbtmc 3-1:16.0: can't read capabilities [ 741.380148][ T9987] team0: Port device team_slave_0 added [ 741.538442][ T9987] team0: Port device team_slave_1 added [ 741.567002][T10052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.661951][ T5817] usb 3-1: USB disconnect, device number 22 [ 741.692345][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.854073][T10052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.034601][ T1027] hsr_slave_0: left promiscuous mode [ 742.087377][ T1027] hsr_slave_1: left promiscuous mode [ 742.090374][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.090402][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.125895][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.125932][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.227388][ T1027] veth1_macvtap: left promiscuous mode [ 742.227480][ T1027] veth0_macvtap: left promiscuous mode [ 742.231536][ T1027] veth1_vlan: left promiscuous mode [ 742.231728][ T1027] veth0_vlan: left promiscuous mode [ 744.106688][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 744.165360][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 744.900430][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.925063][T10094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.117448][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 746.263465][T10094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.270066][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.270081][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.270103][ T9987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.427031][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.427047][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.427069][ T9987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.431174][T10052] team0: Port device team_slave_0 added [ 746.557198][T10010] team0: Port device team_slave_0 added [ 746.641582][T10052] team0: Port device team_slave_1 added [ 746.652209][T10010] team0: Port device team_slave_1 added [ 746.662426][T10094] team0: Port device team_slave_0 added [ 746.782076][T10094] team0: Port device team_slave_1 added [ 746.974684][T10052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.974705][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.974737][T10052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.977872][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.977887][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.977909][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.196571][T10052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.196593][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.196623][T10052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.199211][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.199225][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.199246][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.304093][ T9987] hsr_slave_0: entered promiscuous mode [ 747.313114][ T9987] hsr_slave_1: entered promiscuous mode [ 747.324025][T10094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.324042][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.324063][T10094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.759440][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.759603][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.920334][T10094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.920354][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.920391][T10094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.490956][T10010] hsr_slave_0: entered promiscuous mode [ 749.493802][T10010] hsr_slave_1: entered promiscuous mode [ 749.508808][T10010] debugfs: 'hsr0' already exists in 'hsr' [ 749.508919][T10010] Cannot create hsr debugfs directory [ 749.617941][T10052] hsr_slave_0: entered promiscuous mode [ 749.624040][T10052] hsr_slave_1: entered promiscuous mode [ 749.651399][T10052] debugfs: 'hsr0' already exists in 'hsr' [ 749.651431][T10052] Cannot create hsr debugfs directory [ 749.972456][T10094] hsr_slave_0: entered promiscuous mode [ 749.983957][T10094] hsr_slave_1: entered promiscuous mode [ 750.029459][T10094] debugfs: 'hsr0' already exists in 'hsr' [ 750.029483][T10094] Cannot create hsr debugfs directory [ 750.291589][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 750.341364][ T4929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.369454][ T4929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.461522][ T4929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.479413][ T4929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 752.200808][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.290702][ T4929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.307303][ T4929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.333443][ T4929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.334282][ T4929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.598690][ T4929] Bluetooth: hci0: command tx timeout [ 752.822350][ T1027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.097953][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 754.623316][ T4929] Bluetooth: hci1: command tx timeout [ 754.699757][ T5633] Bluetooth: hci0: command tx timeout [ 755.057706][ T1027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.987829][ T1027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.755072][ T5633] Bluetooth: hci1: command tx timeout [ 756.835864][ T4929] Bluetooth: hci0: command tx timeout [ 757.570375][ T1027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.915020][ T4929] Bluetooth: hci0: command tx timeout [ 758.915085][ T5633] Bluetooth: hci1: command tx timeout [ 760.510402][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 760.943404][T10052] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 760.984486][T10052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 761.006406][ T5633] Bluetooth: hci1: command tx timeout [ 761.048968][T10052] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 761.192586][T10052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 761.340673][T10052] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 761.546076][T10052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.543585][T10272] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.543936][T10272] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.544330][T10272] bridge_slave_0: entered allmulticast mode [ 762.548853][T10272] bridge_slave_0: entered promiscuous mode [ 762.563469][T10052] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 763.049224][T10052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 763.240941][ T4929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 763.311979][ T4929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 763.333001][ T4929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 763.343782][ T4929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 763.352045][ T4929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 763.479272][T10363] loop2: detected capacity change from 0 to 40427 [ 763.688584][T10363] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 763.688620][T10363] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 763.692321][T10363] F2FS-fs (loop2): invalid crc value [ 763.853643][T10363] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 763.902736][T10363] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 763.902771][T10363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 764.772712][ T1027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.192781][T10272] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.193092][T10272] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.193433][T10272] bridge_slave_1: entered allmulticast mode [ 765.202864][T10272] bridge_slave_1: entered promiscuous mode [ 765.906251][ T4929] Bluetooth: hci2: command tx timeout [ 767.943954][ T1027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.954589][ T4929] Bluetooth: hci2: command tx timeout [ 768.085038][T10272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.096805][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.097144][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.097525][T10287] bridge_slave_0: entered allmulticast mode [ 768.152708][T10287] bridge_slave_0: entered promiscuous mode [ 768.442577][T10272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.443306][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.443616][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.443902][T10287] bridge_slave_1: entered allmulticast mode [ 768.963107][T10287] bridge_slave_1: entered promiscuous mode [ 769.789300][ T1027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.851925][T10272] team0: Port device team_slave_0 added [ 769.961570][T10287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.989662][T10272] team0: Port device team_slave_1 added [ 770.011269][T10287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 770.036844][ T4929] Bluetooth: hci2: command tx timeout [ 770.384973][T10395] syz.2.1119 (10395) used greatest stack depth: 19440 bytes left [ 770.461061][ T1027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.814220][T10094] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 771.795134][T10094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.114580][ T4929] Bluetooth: hci2: command tx timeout [ 772.182227][T10094] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 772.209169][T10094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.213789][T10272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.213809][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.213836][T10272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.311787][T10287] team0: Port device team_slave_0 added [ 773.419117][T10094] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 773.508931][T10094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 773.512032][T10272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.512047][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.512069][T10272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.689746][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 773.713061][T10287] team0: Port device team_slave_1 added [ 773.741437][T10094] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 773.839475][T10094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 774.133086][T10287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.133105][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.133132][T10287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.076956][T10287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.076982][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.077024][T10287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.399426][T10272] hsr_slave_0: entered promiscuous mode [ 775.402449][T10272] hsr_slave_1: entered promiscuous mode [ 775.405670][T10272] debugfs: 'hsr0' already exists in 'hsr' [ 775.405700][T10272] Cannot create hsr debugfs directory [ 776.040633][T10287] hsr_slave_0: entered promiscuous mode [ 776.043958][T10287] hsr_slave_1: entered promiscuous mode [ 776.060697][T10287] debugfs: 'hsr0' already exists in 'hsr' [ 776.060732][T10287] Cannot create hsr debugfs directory [ 777.748046][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 777.843094][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 777.880024][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 777.909106][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 777.929695][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 780.138891][ T4929] Bluetooth: hci3: command tx timeout [ 780.513665][T10094] syz-executor (10094) used greatest stack depth: 18624 bytes left [ 782.194593][ T4929] Bluetooth: hci3: command tx timeout [ 783.918476][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.919094][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.919520][T10364] bridge_slave_0: entered allmulticast mode [ 783.929117][T10364] bridge_slave_0: entered promiscuous mode [ 783.971423][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.971693][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.971979][T10364] bridge_slave_1: entered allmulticast mode [ 783.991908][T10364] bridge_slave_1: entered promiscuous mode [ 784.279583][ T4929] Bluetooth: hci3: command tx timeout [ 784.287724][T10364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.344245][T10364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.463384][T10364] team0: Port device team_slave_0 added [ 784.492343][T10364] team0: Port device team_slave_1 added [ 786.354682][ T4929] Bluetooth: hci3: command tx timeout [ 787.670122][T10364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.670139][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.670168][T10364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.751443][ T5275] 8021q: adding VLAN 0 to HW filter on device eth9 [ 787.780213][T10364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.780234][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.780264][T10364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.385064][ T1027] bridge_slave_1: left allmulticast mode [ 788.385094][ T1027] bridge_slave_1: left promiscuous mode [ 788.385352][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.505940][ T1027] bridge_slave_0: left allmulticast mode [ 788.505977][ T1027] bridge_slave_0: left promiscuous mode [ 788.506331][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.706331][ T1027] bridge_slave_1: left allmulticast mode [ 788.706379][ T1027] bridge_slave_1: left promiscuous mode [ 788.706755][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.815952][ T1027] bridge_slave_0: left allmulticast mode [ 788.815985][ T1027] bridge_slave_0: left promiscuous mode [ 788.816300][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.034762][ T1027] bridge_slave_1: left allmulticast mode [ 789.034795][ T1027] bridge_slave_1: left promiscuous mode [ 789.035050][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.145923][ T1027] bridge_slave_0: left allmulticast mode [ 789.145986][ T1027] bridge_slave_0: left promiscuous mode [ 789.146302][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.295400][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.355530][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.402427][ T1027] bond0 (unregistering): Released all slaves [ 790.955356][ T1027] bond1 (unregistering): (slave geneve2): Releasing active interface [ 791.205688][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.315905][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.368560][ T1027] bond0 (unregistering): Released all slaves [ 791.383365][ T1027] bond1 (unregistering): Released all slaves [ 792.075785][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.136488][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.157685][ T1027] bond0 (unregistering): Released all slaves [ 792.206361][T10364] hsr_slave_0: entered promiscuous mode [ 792.209271][T10364] hsr_slave_1: entered promiscuous mode [ 792.211757][T10364] debugfs: 'hsr0' already exists in 'hsr' [ 792.211785][T10364] Cannot create hsr debugfs directory [ 793.390776][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.391687][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.392134][T10447] bridge_slave_0: entered allmulticast mode [ 793.402964][T10447] bridge_slave_0: entered promiscuous mode [ 793.707246][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.707664][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.708075][T10447] bridge_slave_1: entered allmulticast mode [ 793.713155][T10447] bridge_slave_1: entered promiscuous mode [ 795.551998][T10447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.064693][ T5735] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 797.095187][T10447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.224574][ T5735] usb 3-1: Using ep0 maxpacket: 32 [ 797.280751][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.330214][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.980075][ T5735] usb 3-1: unable to get BOS descriptor or descriptor too short [ 797.981091][ T5735] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 797.981124][ T5735] usb 3-1: can't read configurations, error -71 [ 798.100326][T10447] team0: Port device team_slave_0 added [ 798.115421][T10447] team0: Port device team_slave_1 added [ 798.689130][T10447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.689144][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.689165][T10447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.780829][T10447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.780846][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.780868][T10447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.434832][ T1027] hsr_slave_0: left promiscuous mode [ 799.474656][ T1027] hsr_slave_1: left promiscuous mode [ 799.475935][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.475965][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.521438][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.521475][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.674522][ T1027] hsr_slave_0: left promiscuous mode [ 799.694713][ T1027] hsr_slave_1: left promiscuous mode [ 799.695565][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.695585][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.734635][ T5817] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 799.736040][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.736086][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.884917][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 799.891568][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.891600][ T5817] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 799.919260][ T1027] hsr_slave_0: left promiscuous mode [ 799.920430][ T5817] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 799.920456][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.920471][ T5817] usb 3-1: Product: syz [ 799.920483][ T5817] usb 3-1: Manufacturer: syz [ 799.920495][ T5817] usb 3-1: SerialNumber: syz [ 799.952389][ T1027] hsr_slave_1: left promiscuous mode [ 799.953765][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.975659][ T5817] usb 3-1: config 0 descriptor?? [ 799.996271][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.147075][ T1027] veth1_macvtap: left promiscuous mode [ 800.147164][ T1027] veth0_macvtap: left promiscuous mode [ 800.147385][ T1027] veth1_vlan: left promiscuous mode [ 800.154186][ T1027] veth0_vlan: left promiscuous mode [ 800.274906][ T1027] veth1_macvtap: left promiscuous mode [ 800.274984][ T1027] veth0_macvtap: left promiscuous mode [ 800.394800][ T1027] veth0_vlan: left promiscuous mode [ 801.385267][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 801.447461][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 802.346090][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 802.395620][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 802.503680][ T5735] usb 3-1: USB disconnect, device number 25 [ 805.765361][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 805.825514][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 806.940051][T10447] hsr_slave_0: entered promiscuous mode [ 806.958503][T10447] hsr_slave_1: entered promiscuous mode [ 806.967921][T10447] debugfs: 'hsr0' already exists in 'hsr' [ 806.967951][T10447] Cannot create hsr debugfs directory [ 808.150634][ T5275] 8021q: adding VLAN 0 to HW filter on device eth10 [ 809.927093][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.927191][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.537279][ T5275] 8021q: adding VLAN 0 to HW filter on device eth11 [ 811.826347][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 811.866018][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 811.950498][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 812.007564][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 812.008631][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 813.134097][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 813.288627][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 813.293367][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 813.317935][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 813.322458][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 813.948623][ T5275] 8021q: adding VLAN 0 to HW filter on device eth12 [ 814.134466][ T5817] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 814.301101][ T4929] Bluetooth: hci5: command tx timeout [ 814.376094][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 814.601879][T10640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.621408][T10640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.512933][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 815.514080][ T5817] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 815.514121][ T5817] usb 3-1: can't read configurations, error -71 [ 815.565033][ T4929] Bluetooth: hci6: command tx timeout [ 816.227626][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13 [ 816.365360][ T4929] Bluetooth: hci5: command tx timeout [ 817.647722][ T4929] Bluetooth: hci6: command tx timeout [ 818.436217][ T4929] Bluetooth: hci5: command tx timeout [ 819.822308][ T4929] Bluetooth: hci6: command tx timeout [ 820.619766][ T4929] Bluetooth: hci5: command tx timeout [ 820.873957][ T5275] 8021q: adding VLAN 0 to HW filter on device eth14 [ 821.874918][ T4929] Bluetooth: hci6: command tx timeout [ 821.968212][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.968579][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.968947][T10605] bridge_slave_0: entered allmulticast mode [ 821.980684][T10605] bridge_slave_0: entered promiscuous mode [ 822.126301][T10698] loop2: detected capacity change from 0 to 128 [ 822.214046][T10698] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 822.268165][T10698] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.390436][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.390858][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.391211][T10605] bridge_slave_1: entered allmulticast mode [ 822.420201][T10605] bridge_slave_1: entered promiscuous mode [ 822.594605][T10703] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1153'. [ 822.912638][T10605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.538341][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.623886][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.654908][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.664091][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.685288][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 823.853821][T10605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.573722][T10605] team0: Port device team_slave_0 added [ 824.691621][T10605] team0: Port device team_slave_1 added [ 825.320272][ T5617] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 825.529819][T10735] loop2: detected capacity change from 0 to 1024 [ 825.583019][T10605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.583038][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.583067][T10605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.645791][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.646231][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.646596][T10621] bridge_slave_0: entered allmulticast mode [ 825.817161][T10621] bridge_slave_0: entered promiscuous mode [ 825.901059][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15 [ 825.914899][ T4929] Bluetooth: hci0: command tx timeout [ 825.939444][T10605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.939463][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.939494][T10605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.274100][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.282804][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.283168][T10621] bridge_slave_1: entered allmulticast mode [ 826.316110][T10621] bridge_slave_1: entered promiscuous mode [ 826.525956][ T5903] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 826.714605][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 826.767778][T10739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.772662][T10739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 826.802975][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.164846][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.230237][T10605] hsr_slave_0: entered promiscuous mode [ 827.232999][T10605] hsr_slave_1: entered promiscuous mode [ 827.244063][T10605] debugfs: 'hsr0' already exists in 'hsr' [ 827.244127][T10605] Cannot create hsr debugfs directory [ 827.500425][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 827.506711][ T5903] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 827.506756][ T5903] usb 3-1: can't read configurations, error -71 [ 827.756351][T10621] team0: Port device team_slave_0 added [ 827.839690][T10621] team0: Port device team_slave_1 added [ 827.944904][ T1027] bridge_slave_1: left allmulticast mode [ 827.944954][ T1027] bridge_slave_1: left promiscuous mode [ 827.949749][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.954640][ T4929] Bluetooth: hci0: command tx timeout [ 828.079007][ T1027] bridge_slave_0: left allmulticast mode [ 828.079048][ T1027] bridge_slave_0: left promiscuous mode [ 828.079378][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.296718][ T1027] bridge_slave_1: left allmulticast mode [ 828.296753][ T1027] bridge_slave_1: left promiscuous mode [ 828.297001][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.416040][ T1027] bridge_slave_0: left allmulticast mode [ 828.416073][ T1027] bridge_slave_0: left promiscuous mode [ 828.416378][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.614890][ T1027] bridge_slave_1: left allmulticast mode [ 828.614921][ T1027] bridge_slave_1: left promiscuous mode [ 828.615286][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.736038][ T1027] bridge_slave_0: left allmulticast mode [ 828.736072][ T1027] bridge_slave_0: left promiscuous mode [ 828.736343][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.004728][ T1027] bridge_slave_1: left allmulticast mode [ 829.004763][ T1027] bridge_slave_1: left promiscuous mode [ 829.005057][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.313793][ T1027] bridge_slave_0: left allmulticast mode [ 829.313905][ T1027] bridge_slave_0: left promiscuous mode [ 829.507027][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.048931][ T4929] Bluetooth: hci0: command tx timeout [ 830.734003][T10762] slcan: can't register candev [ 831.064698][ T1027] bridge_slave_1: left allmulticast mode [ 831.064740][ T1027] bridge_slave_1: left promiscuous mode [ 831.065075][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.114452][ T4929] Bluetooth: hci0: command tx timeout [ 832.335780][ T1027] bridge_slave_0: left allmulticast mode [ 832.335812][ T1027] bridge_slave_0: left promiscuous mode [ 832.336079][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.935990][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.015718][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.096981][ T1027] bond0 (unregistering): Released all slaves [ 834.453280][T10780] loop2: detected capacity change from 0 to 1024 [ 834.795713][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.217172][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.278527][ T1027] bond0 (unregistering): Released all slaves [ 835.711438][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.785453][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.805712][ T5903] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 835.867631][ T1027] bond0 (unregistering): Released all slaves [ 835.954601][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 835.983303][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.984038][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.185966][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.295676][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.360783][ T1027] bond0 (unregistering): Released all slaves [ 836.717642][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.795832][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.857671][ T1027] bond0 (unregistering): Released all slaves [ 837.953458][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 837.961729][ T5903] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 837.961774][ T5903] usb 3-1: can't read configurations, error -71 [ 838.048597][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.048620][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.048650][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.258145][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.258167][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.258198][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.446179][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 838.531356][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 838.552906][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 838.583762][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 838.593447][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 839.373260][T10621] hsr_slave_0: entered promiscuous mode [ 839.375486][T10621] hsr_slave_1: entered promiscuous mode [ 839.377351][T10621] debugfs: 'hsr0' already exists in 'hsr' [ 839.377372][T10621] Cannot create hsr debugfs directory [ 841.152846][ T5633] Bluetooth: hci1: command tx timeout [ 842.134719][ T1027] hsr_slave_0: left promiscuous mode [ 842.175595][ T1027] hsr_slave_1: left promiscuous mode [ 842.177789][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.238951][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.435202][ T1027] hsr_slave_0: left promiscuous mode [ 842.474513][ T1027] hsr_slave_1: left promiscuous mode [ 842.476017][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.517473][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.794565][ T1027] hsr_slave_0: left promiscuous mode [ 842.834541][ T1027] hsr_slave_1: left promiscuous mode [ 842.835639][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.858663][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.965114][ T1027] hsr_slave_0: left promiscuous mode [ 843.004760][ T1027] hsr_slave_1: left promiscuous mode [ 843.005925][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.045666][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.316894][ T5633] Bluetooth: hci1: command tx timeout [ 843.334638][ T1027] hsr_slave_0: left promiscuous mode [ 843.526008][ T1027] hsr_slave_1: left promiscuous mode [ 843.571405][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.415630][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.247434][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 845.315321][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 845.394765][ T5633] Bluetooth: hci1: command tx timeout [ 845.930362][T10832] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 845.968059][T10832] VFS: Can't find a romfs filesystem on dev nullb0. [ 845.968059][T10832] [ 846.735486][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 846.775368][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 847.325641][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 847.386513][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 847.477606][ T5633] Bluetooth: hci1: command tx timeout [ 847.785362][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 847.835731][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 848.127865][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 848.205878][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 848.502042][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16 [ 848.994607][T10835] loop2: detected capacity change from 0 to 1024 [ 850.601498][T10853] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[10853] [ 851.162945][T10708] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.172512][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.172868][T10708] bridge_slave_0: entered allmulticast mode [ 851.198365][T10708] bridge_slave_0: entered promiscuous mode [ 851.508814][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.509308][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.509672][T10708] bridge_slave_1: entered allmulticast mode [ 851.513889][T10708] bridge_slave_1: entered promiscuous mode [ 851.723164][T10708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.910308][T10708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.081745][T10708] team0: Port device team_slave_0 added [ 852.153784][T10708] team0: Port device team_slave_1 added [ 853.797465][T10708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.797484][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.797514][T10708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.856948][T10708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.856967][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.856996][T10708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.332850][T10708] hsr_slave_0: entered promiscuous mode [ 854.337554][T10708] hsr_slave_1: entered promiscuous mode [ 855.069173][T10786] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.069602][T10786] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.069957][T10786] bridge_slave_0: entered allmulticast mode [ 855.073082][T10786] bridge_slave_0: entered promiscuous mode [ 855.159064][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.159580][T10786] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.159975][T10786] bridge_slave_1: entered allmulticast mode [ 855.164041][T10786] bridge_slave_1: entered promiscuous mode [ 855.547964][T10786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.719312][T10786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.355388][T10786] team0: Port device team_slave_0 added [ 857.388905][T10786] team0: Port device team_slave_1 added [ 857.818186][T10786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.818206][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.818336][T10786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.886087][T10786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.886107][T10786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.886136][T10786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.326685][T10786] hsr_slave_0: entered promiscuous mode [ 858.342104][T10786] hsr_slave_1: entered promiscuous mode [ 858.343725][T10786] debugfs: 'hsr0' already exists in 'hsr' [ 858.343749][T10786] Cannot create hsr debugfs directory [ 859.411025][T10896] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 859.605113][T10896] VFS: Can't find a romfs filesystem on dev nullb0. [ 859.605113][T10896] [ 860.354190][T10899] loop2: detected capacity change from 0 to 1024 [ 861.021657][T10605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 861.160729][T10605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.183350][T10605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 861.291915][T10605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.802873][T10605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 861.873649][T10912] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[10912] [ 862.215894][T10605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.223009][T10605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 862.323788][T10605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 864.911885][T10605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.183365][T10605] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.460493][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.460918][ T9247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.542501][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.542710][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.242770][T10621] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.288811][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.351874][T10621] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.411323][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 866.421937][T10621] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.509200][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 866.624632][ T1027] bridge_slave_1: left allmulticast mode [ 866.624672][ T1027] bridge_slave_1: left promiscuous mode [ 866.625058][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.826227][ T1027] bridge_slave_0: left allmulticast mode [ 866.826256][ T1027] bridge_slave_0: left promiscuous mode [ 866.826532][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.074653][ T1027] bridge_slave_1: left allmulticast mode [ 867.074689][ T1027] bridge_slave_1: left promiscuous mode [ 867.074935][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.114735][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 867.175737][ T1027] bridge_slave_0: left allmulticast mode [ 867.175777][ T1027] bridge_slave_0: left promiscuous mode [ 867.179178][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.254692][ T9] usb 3-1: device descriptor read/64, error -71 [ 867.394915][ T1027] bridge_slave_1: left allmulticast mode [ 867.394963][ T1027] bridge_slave_1: left promiscuous mode [ 867.395184][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.495955][ T1027] bridge_slave_0: left allmulticast mode [ 867.495986][ T1027] bridge_slave_0: left promiscuous mode [ 867.496255][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.505536][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 867.654448][ T9] usb 3-1: device descriptor read/64, error -71 [ 867.764920][ T9] usb usb3-port1: attempt power cycle [ 867.915963][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.997840][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.056883][ T1027] bond0 (unregistering): Released all slaves [ 868.104491][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 868.127979][ T9] usb 3-1: device descriptor read/8, error -71 [ 868.327289][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.374797][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 868.395083][ T9] usb 3-1: device descriptor read/8, error -71 [ 868.425312][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.487102][ T1027] bond0 (unregistering): Released all slaves [ 868.504833][ T9] usb usb3-port1: unable to enumerate USB device [ 868.765348][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.845189][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.909515][ T1027] bond0 (unregistering): Released all slaves [ 868.955827][T10621] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 868.988145][T10621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.484549][ T1027] hsr_slave_0: left promiscuous mode [ 870.521684][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.521823][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.533691][ T1027] hsr_slave_1: left promiscuous mode [ 870.535938][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.599636][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.774498][ T1027] hsr_slave_0: left promiscuous mode [ 870.814477][ T1027] hsr_slave_1: left promiscuous mode [ 870.815630][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.857083][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.057403][ T1027] hsr_slave_0: left promiscuous mode [ 871.094486][ T1027] hsr_slave_1: left promiscuous mode [ 871.097370][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.138774][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.478389][T10986] loop2: detected capacity change from 0 to 512 [ 871.479654][T10986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 871.479711][T10986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 871.507859][T10986] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 871.538578][T10986] EXT4-fs (loop2): 1 truncate cleaned up [ 871.554892][T10986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.838622][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 871.925971][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 872.401890][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.666999][ T4929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 875.767395][ T4929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 875.803915][ T4929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 875.923519][ T4929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 876.079795][ T4929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 876.803111][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 876.931414][ T4929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 876.983744][ T4929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 876.990808][ T4929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.044007][ T4929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.057664][ T4929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 877.486460][T11005] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11005] [ 877.496326][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 878.445261][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 878.496309][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 878.789269][ T5275] 8021q: adding VLAN 0 to HW filter on device eth17 [ 878.844798][ T5633] Bluetooth: hci2: command tx timeout [ 879.242874][ T5633] Bluetooth: hci3: command tx timeout [ 880.992964][ T5633] Bluetooth: hci2: command tx timeout [ 881.327174][ T5633] Bluetooth: hci3: command tx timeout [ 883.765173][ T4929] Bluetooth: hci3: command tx timeout [ 883.765303][ T5633] Bluetooth: hci2: command tx timeout [ 884.282484][T11044] loop2: detected capacity change from 0 to 131072 [ 884.358846][T11044] F2FS-fs (loop2): invalid crc value [ 884.564922][ T4929] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 884.620747][ T4929] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 884.655040][ T4929] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 884.789727][ T4929] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 884.801185][T11044] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 884.866326][ T4929] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 884.926596][T11044] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 885.804432][ T4929] Bluetooth: hci2: command tx timeout [ 885.804471][ T4929] Bluetooth: hci3: command tx timeout [ 887.327743][ T5633] Bluetooth: hci5: command tx timeout [ 887.680287][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.680628][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.681015][T10994] bridge_slave_0: entered allmulticast mode [ 887.705576][T10994] bridge_slave_0: entered promiscuous mode [ 887.712373][T10998] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.712759][T10998] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.713111][T10998] bridge_slave_0: entered allmulticast mode [ 887.754441][T10998] bridge_slave_0: entered promiscuous mode [ 887.769519][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.769825][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.770249][T10994] bridge_slave_1: entered allmulticast mode [ 887.804179][T10994] bridge_slave_1: entered promiscuous mode [ 887.816036][T10998] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.816349][T10998] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.816651][T10998] bridge_slave_1: entered allmulticast mode [ 887.846529][T10998] bridge_slave_1: entered promiscuous mode [ 888.574992][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.693353][T10998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.737569][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.760639][T10998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.402125][ T5633] Bluetooth: hci5: command tx timeout [ 890.068044][T10994] team0: Port device team_slave_0 added [ 890.110200][T10998] team0: Port device team_slave_0 added [ 890.136590][T10994] team0: Port device team_slave_1 added [ 890.154868][T10998] team0: Port device team_slave_1 added [ 891.474521][ T5633] Bluetooth: hci5: command tx timeout [ 891.746777][T11119] loop2: detected capacity change from 0 to 1024 [ 892.036939][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.036960][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.036990][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.067592][T10998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.067647][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.067723][T10998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.142978][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.142998][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.143025][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.205860][T10998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.205878][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.205907][T10998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.510646][T10786] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 893.540168][T11127] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11127] [ 893.555294][ T5633] Bluetooth: hci5: command tx timeout [ 893.585445][T10786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 893.811497][T10786] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 893.853192][T10786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 893.881117][T10994] hsr_slave_0: entered promiscuous mode [ 893.883445][T10994] hsr_slave_1: entered promiscuous mode [ 893.895624][T10994] debugfs: 'hsr0' already exists in 'hsr' [ 893.895701][T10994] Cannot create hsr debugfs directory [ 893.919221][T10998] hsr_slave_0: entered promiscuous mode [ 893.921533][T10998] hsr_slave_1: entered promiscuous mode [ 893.923402][T10998] debugfs: 'hsr0' already exists in 'hsr' [ 893.923423][T10998] Cannot create hsr debugfs directory [ 893.991323][T10786] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 894.113421][T10786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.167600][T10786] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 894.202195][T10786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.316642][T11159] overlayfs: missing 'lowerdir' [ 897.446844][T11055] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.447134][T11055] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.447444][T11055] bridge_slave_0: entered allmulticast mode [ 897.505100][T11055] bridge_slave_0: entered promiscuous mode [ 897.591470][T11055] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.591795][T11055] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.592203][T11055] bridge_slave_1: entered allmulticast mode [ 897.603214][T11055] bridge_slave_1: entered promiscuous mode [ 898.416765][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 898.519234][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 898.523529][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 898.564827][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 898.687988][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 899.228638][T11055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.791201][T11196] loop2: detected capacity change from 0 to 131072 [ 899.807862][T11196] F2FS-fs (loop2): invalid crc value [ 899.947328][T11196] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 900.007647][T11196] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 900.102121][T11055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.783367][ T4929] Bluetooth: hci0: command tx timeout [ 901.376895][T11055] team0: Port device team_slave_0 added [ 901.831835][T11055] team0: Port device team_slave_1 added [ 902.320611][T11055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.320630][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.320658][T11055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.688660][T11055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.688674][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.688694][T11055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.835808][ T4929] Bluetooth: hci0: command tx timeout [ 903.046657][T11055] hsr_slave_0: entered promiscuous mode [ 903.052588][T11055] hsr_slave_1: entered promiscuous mode [ 903.060601][T11055] debugfs: 'hsr0' already exists in 'hsr' [ 903.060687][T11055] Cannot create hsr debugfs directory [ 903.318382][T11252] loop2: detected capacity change from 0 to 1024 [ 904.919135][ T4929] Bluetooth: hci0: command tx timeout [ 905.471130][T11265] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11265] [ 907.000890][ T4929] Bluetooth: hci0: command tx timeout [ 907.839328][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.841243][T11192] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.841596][T11192] bridge_slave_0: entered allmulticast mode [ 907.872037][T11192] bridge_slave_0: entered promiscuous mode [ 907.907332][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.908886][T11192] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.909221][T11192] bridge_slave_1: entered allmulticast mode [ 907.952755][T11192] bridge_slave_1: entered promiscuous mode [ 908.027175][T11192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.034113][T11192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.199512][T11192] team0: Port device team_slave_0 added [ 908.229481][T11192] team0: Port device team_slave_1 added [ 908.379594][T11308] overlayfs: missing 'lowerdir' [ 909.375025][ T5275] 8021q: adding VLAN 0 to HW filter on device eth17 [ 909.598657][T11192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.598671][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.598691][T11192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.602157][T11192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.602171][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.602194][T11192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.841984][T11192] hsr_slave_0: entered promiscuous mode [ 909.843974][T11192] hsr_slave_1: entered promiscuous mode [ 909.850399][T11192] debugfs: 'hsr0' already exists in 'hsr' [ 909.850428][T11192] Cannot create hsr debugfs directory [ 910.084583][ T1027] bridge_slave_1: left allmulticast mode [ 910.084620][ T1027] bridge_slave_1: left promiscuous mode [ 910.084906][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.268987][ T1027] bridge_slave_0: left allmulticast mode [ 910.269014][ T1027] bridge_slave_0: left promiscuous mode [ 910.269225][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.544528][ T1027] bridge_slave_1: left allmulticast mode [ 910.544555][ T1027] bridge_slave_1: left promiscuous mode [ 910.544764][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.666393][ T1027] bridge_slave_0: left allmulticast mode [ 910.666423][ T1027] bridge_slave_0: left promiscuous mode [ 910.666665][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.864559][ T1027] bridge_slave_1: left allmulticast mode [ 910.864587][ T1027] bridge_slave_1: left promiscuous mode [ 910.864887][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.965663][ T1027] bridge_slave_0: left allmulticast mode [ 910.965692][ T1027] bridge_slave_0: left promiscuous mode [ 910.965901][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.687712][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.839792][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.896191][ T1027] bond0 (unregistering): Released all slaves [ 912.305232][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.386852][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.446998][ T1027] bond0 (unregistering): Released all slaves [ 914.267497][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.378265][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.442307][ T1027] bond0 (unregistering): Released all slaves [ 917.472989][ T5275] 8021q: adding VLAN 0 to HW filter on device eth18 [ 919.032387][T11361] overlayfs: overlapping lowerdir path [ 919.161777][T11363] overlayfs: missing 'lowerdir' [ 920.524545][ T1027] hsr_slave_0: left promiscuous mode [ 920.544601][ T1027] hsr_slave_1: left promiscuous mode [ 920.545910][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.585378][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.744440][ T1027] hsr_slave_0: left promiscuous mode [ 920.764511][ T1027] hsr_slave_1: left promiscuous mode [ 920.766500][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.805439][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.944515][ T1027] hsr_slave_0: left promiscuous mode [ 920.964612][ T1027] hsr_slave_1: left promiscuous mode [ 920.965818][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.005724][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.655367][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 921.721809][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 922.409830][T11372] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5617] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[11372] [ 922.476829][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 923.605224][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 923.656559][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 924.862073][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 925.639484][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 926.661779][ T5275] 8021q: adding VLAN 0 to HW filter on device eth19 [ 930.112759][T11410] overlay: Unknown parameter '/' [ 931.708215][ T5275] 8021q: adding VLAN 0 to HW filter on device eth20 [ 931.983813][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.983981][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.210471][T10994] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 932.355630][T10994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 933.146053][T10994] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 933.219715][T10994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 933.223183][T10994] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 933.279369][T10994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 933.286364][T10994] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 933.439273][T10994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 934.470038][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 934.703178][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 934.720485][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 934.753870][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 934.777197][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 934.874448][T11439] loop2: detected capacity change from 0 to 1024 [ 935.105174][T11439] hfsplus: failed to load extents file [ 935.360989][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 935.428074][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 935.451678][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 935.477277][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 935.507492][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 936.838418][ T4929] Bluetooth: hci1: command tx timeout [ 938.274657][ T4929] Bluetooth: hci6: command tx timeout [ 938.938629][ T4929] Bluetooth: hci1: command tx timeout [ 940.364416][ T4929] Bluetooth: hci6: command tx timeout [ 940.998430][ T4929] Bluetooth: hci1: command tx timeout [ 941.324518][ T37] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 941.482024][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 941.499169][ T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 941.504185][ T37] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 941.521725][ T37] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 941.521828][ T37] usb 3-1: Product: syz [ 941.521873][ T37] usb 3-1: Manufacturer: syz [ 941.521920][ T37] usb 3-1: SerialNumber: syz [ 941.607904][ T37] usb 3-1: config 0 descriptor?? [ 941.609292][T11517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 941.715337][ T37] hub 3-1:0.0: bad descriptor, ignoring hub [ 941.715398][ T37] hub 3-1:0.0: probe with driver hub failed with error -5 [ 941.945461][ T37] usb 3-1: USB disconnect, device number 36 [ 942.445892][ T4929] Bluetooth: hci6: command tx timeout [ 943.074444][ T4929] Bluetooth: hci1: command tx timeout [ 944.521314][ T4929] Bluetooth: hci6: command tx timeout [ 945.433416][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 946.006518][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 946.041867][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 946.109921][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 946.112971][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 947.814388][T11606] loop2: detected capacity change from 0 to 512 [ 947.896425][T11606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.896608][T11606] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.040209][ T38] audit: type=1800 audit(1782394853.424:16): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1225" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 948.171678][ T38] audit: type=1804 audit(1782394853.654:17): pid=11614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1225" name="/newroot/415/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 948.280329][ T4929] Bluetooth: hci2: command tx timeout [ 948.552487][ T5617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.891561][T11436] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.891895][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.892175][T11436] bridge_slave_0: entered allmulticast mode [ 949.899282][T11436] bridge_slave_0: entered promiscuous mode [ 949.953000][T11444] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.953340][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.954031][T11444] bridge_slave_0: entered allmulticast mode [ 949.989268][T11444] bridge_slave_0: entered promiscuous mode [ 950.010732][T11436] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.012591][T11436] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.012999][T11436] bridge_slave_1: entered allmulticast mode [ 950.039200][T11436] bridge_slave_1: entered promiscuous mode [ 950.063473][T11444] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.063808][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.093765][T11444] bridge_slave_1: entered allmulticast mode [ 950.107072][T11444] bridge_slave_1: entered promiscuous mode [ 950.330695][T11436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.354404][ T4929] Bluetooth: hci2: command tx timeout [ 950.496749][T11444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.527715][T11436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.586266][T11444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.779441][T11436] team0: Port device team_slave_0 added [ 951.893167][T11444] team0: Port device team_slave_0 added [ 951.912760][T11436] team0: Port device team_slave_1 added [ 951.993509][T11444] team0: Port device team_slave_1 added [ 952.449899][ T4929] Bluetooth: hci2: command tx timeout [ 953.236192][T11436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.236213][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.236241][T11436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.243031][T11444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.243050][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.243077][T11444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.419406][T11436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.419427][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.419458][T11436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.423025][T11444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.423042][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.423068][T11444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.774514][ T1027] bridge_slave_1: left allmulticast mode [ 953.774554][ T1027] bridge_slave_1: left promiscuous mode [ 953.774849][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.876587][ T1027] bridge_slave_0: left allmulticast mode [ 953.876635][ T1027] bridge_slave_0: left promiscuous mode [ 953.876964][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.094484][ T1027] bridge_slave_1: left allmulticast mode [ 954.094521][ T1027] bridge_slave_1: left promiscuous mode [ 954.094764][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.196213][ T1027] bridge_slave_0: left allmulticast mode [ 954.196254][ T1027] bridge_slave_0: left promiscuous mode [ 954.196548][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.534470][ T4929] Bluetooth: hci2: command tx timeout [ 956.213128][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.345557][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 956.428521][ T1027] bond0 (unregistering): Released all slaves [ 957.083389][T11652] loop2: detected capacity change from 0 to 40427 [ 957.120846][T11652] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 957.120958][T11652] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 957.134437][T11652] F2FS-fs (loop2): invalid crc value [ 957.263847][T11652] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 957.283456][T11652] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 957.283487][T11652] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 957.318408][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.605209][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.262003][ T1027] bond0 (unregistering): Released all slaves [ 958.993352][T11436] hsr_slave_0: entered promiscuous mode [ 959.000153][T11436] hsr_slave_1: entered promiscuous mode [ 959.101265][T11444] hsr_slave_0: entered promiscuous mode [ 959.103733][T11444] hsr_slave_1: entered promiscuous mode [ 959.122874][T11444] debugfs: 'hsr0' already exists in 'hsr' [ 959.122962][T11444] Cannot create hsr debugfs directory [ 959.392342][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 959.527053][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 959.531399][T11664] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 959.565760][T11664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 959.596171][T11664] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 960.544757][ T1027] hsr_slave_0: left promiscuous mode [ 960.615952][ T1027] hsr_slave_1: left promiscuous mode [ 960.617197][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.696204][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.054602][ T1027] hsr_slave_0: left promiscuous mode [ 961.301464][ T1027] hsr_slave_1: left promiscuous mode [ 961.773925][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.964604][ T4929] Bluetooth: hci7: command tx timeout [ 961.995367][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.272240][T11677] netlink: 'syz.2.1236': attribute type 20 has an invalid length. [ 962.638787][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 962.705313][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 963.119647][T11679] loop2: detected capacity change from 0 to 4096 [ 963.129961][T11679] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 963.201178][T11679] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 963.562498][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 963.624080][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 964.037801][ T4929] Bluetooth: hci7: command tx timeout [ 964.504408][ T5903] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 964.684590][ T5903] usb 3-1: device descriptor read/64, error -71 [ 964.927144][ T5903] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 965.099624][ T5903] usb 3-1: device descriptor read/64, error -71 [ 965.214837][ T5903] usb usb3-port1: attempt power cycle [ 965.449042][T11566] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.450222][T11566] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.450562][T11566] bridge_slave_0: entered allmulticast mode [ 965.459635][T11566] bridge_slave_0: entered promiscuous mode [ 965.574603][ T5903] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 965.679951][ T5903] usb 3-1: device descriptor read/8, error -71 [ 965.815047][T11566] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.815435][T11566] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.815755][T11566] bridge_slave_1: entered allmulticast mode [ 965.819493][T11566] bridge_slave_1: entered promiscuous mode [ 965.934491][ T5903] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 965.955636][ T5903] usb 3-1: device descriptor read/8, error -71 [ 966.065159][ T5903] usb usb3-port1: unable to enumerate USB device [ 966.118409][ T4929] Bluetooth: hci7: command tx timeout [ 966.510198][T11566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.675882][ T5275] 8021q: adding VLAN 0 to HW filter on device eth17 [ 966.726922][T11566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.923141][T11566] team0: Port device team_slave_0 added [ 966.945854][T11566] team0: Port device team_slave_1 added [ 967.881414][T11566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.881430][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.881451][T11566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.022194][T11566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.022210][T11566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.022232][T11566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.198042][ T4929] Bluetooth: hci7: command tx timeout [ 968.294685][ T8903] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 968.444403][ T8903] usb 3-1: Using ep0 maxpacket: 8 [ 968.460824][ T8903] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 968.460913][ T8903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.491323][ T8903] usb 3-1: config 0 descriptor?? [ 968.612825][ T8903] gm12u320 3-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 968.612906][ T8903] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 968.700321][ T8903] usb-storage 3-1:0.0: USB Mass Storage device detected [ 968.752050][ T8903] usb-storage 3-1:0.0: device ignored [ 968.929496][ T8903] usb 3-1: USB disconnect, device number 41 [ 969.302305][T11566] hsr_slave_0: entered promiscuous mode [ 969.307015][T11566] hsr_slave_1: entered promiscuous mode [ 969.390779][T11566] debugfs: 'hsr0' already exists in 'hsr' [ 969.390816][T11566] Cannot create hsr debugfs directory [ 970.828901][ T5275] 8021q: adding VLAN 0 to HW filter on device eth18 [ 971.215526][T11738] netlink: 'syz.2.1243': attribute type 20 has an invalid length. [ 973.245031][T11757] loop2: detected capacity change from 0 to 4096 [ 973.251334][T11757] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 973.356038][T11662] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.363529][T11662] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.363894][T11662] bridge_slave_0: entered allmulticast mode [ 973.394820][T11662] bridge_slave_0: entered promiscuous mode [ 973.401236][T11662] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.401620][T11662] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.401921][T11662] bridge_slave_1: entered allmulticast mode [ 973.435114][T11662] bridge_slave_1: entered promiscuous mode [ 973.459951][T11757] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 973.869694][ T5275] 8021q: adding VLAN 0 to HW filter on device eth19 [ 973.942116][T11662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.977496][T11662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.191035][T11662] team0: Port device team_slave_0 added [ 974.205522][T11662] team0: Port device team_slave_1 added [ 974.550905][T11662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.550923][T11662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.550948][T11662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.557744][T11662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.557797][T11662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.557873][T11662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.681051][T11662] hsr_slave_0: entered promiscuous mode [ 975.683691][T11662] hsr_slave_1: entered promiscuous mode [ 975.699595][T11662] debugfs: 'hsr0' already exists in 'hsr' [ 975.699692][T11662] Cannot create hsr debugfs directory [ 977.086855][T11799] loop2: detected capacity change from 0 to 2048 [ 977.796960][T11800] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 977.971100][T11800] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 977.971147][T11800] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 978.040346][T11800] Remounting filesystem read-only [ 978.324115][ T5617] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 980.043271][T11813] netlink: 'syz.2.1250': attribute type 20 has an invalid length. [ 982.896373][ T5275] 8021q: adding VLAN 0 to HW filter on device eth19 [ 984.043613][ T5275] 8021q: adding VLAN 0 to HW filter on device eth20 [ 984.456109][T11869] bridge_slave_0: left allmulticast mode [ 984.456149][T11869] bridge_slave_0: left promiscuous mode [ 984.494048][T11869] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.788499][T11869] bridge_slave_1: left allmulticast mode [ 984.788542][T11869] bridge_slave_1: left promiscuous mode [ 984.788848][T11869] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.085999][T11869] bond0: (slave bond_slave_0): Releasing backup interface [ 985.177462][T11869] bond0: (slave bond_slave_1): Releasing backup interface [ 985.322105][T11869] team0: Port device team_slave_0 removed [ 985.364023][T11869] team0: Port device team_slave_1 removed [ 985.376618][T11869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.376670][T11869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.424156][T11869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.458159][T11869] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 985.814627][ T1027] bridge_slave_1: left allmulticast mode [ 985.814663][ T1027] bridge_slave_1: left promiscuous mode [ 985.814925][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.935659][ T1027] bridge_slave_0: left allmulticast mode [ 985.935692][ T1027] bridge_slave_0: left promiscuous mode [ 985.936045][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.174634][ T1027] bridge_slave_1: left allmulticast mode [ 986.174682][ T1027] bridge_slave_1: left promiscuous mode [ 986.175017][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.360452][ T1027] bridge_slave_0: left allmulticast mode [ 987.360500][ T1027] bridge_slave_0: left promiscuous mode [ 987.360826][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.716682][T11889] netlink: 'syz.2.1257': attribute type 20 has an invalid length. [ 988.144496][ T1027] bridge_slave_1: left allmulticast mode [ 988.144527][ T1027] bridge_slave_1: left promiscuous mode [ 988.144826][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.245914][ T1027] bridge_slave_0: left allmulticast mode [ 988.245946][ T1027] bridge_slave_0: left promiscuous mode [ 988.246734][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.850422][T11892] loop2: detected capacity change from 0 to 2048 [ 989.414606][T11892] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 990.895684][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.998355][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.078546][ T1027] bond0 (unregistering): Released all slaves [ 991.385505][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.466757][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.526519][ T1027] bond0 (unregistering): Released all slaves [ 991.815307][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.895646][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.977082][ T1027] bond0 (unregistering): Released all slaves [ 993.125543][T11913] loop2: detected capacity change from 0 to 64 [ 993.414622][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.414738][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.737982][ T5275] 8021q: adding VLAN 0 to HW filter on device eth18 [ 994.554823][ T1027] hsr_slave_0: left promiscuous mode [ 994.559476][ T5617] BFS-fs: bfs_iget(): Bad inode number loop2:0000fe02 [ 994.602937][ T1027] hsr_slave_1: left promiscuous mode [ 994.603989][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.642896][ T5617] BFS-fs: bfs_iget(): Bad inode number loop2:0000fe02 [ 994.651917][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.854692][ T1027] hsr_slave_0: left promiscuous mode [ 994.894483][ T1027] hsr_slave_1: left promiscuous mode [ 994.896715][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.936621][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.234582][ T1027] hsr_slave_0: left promiscuous mode [ 995.282912][T11664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 995.316416][ T1027] hsr_slave_1: left promiscuous mode [ 995.317844][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.322104][T11664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 995.324004][T11664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 995.351121][T11664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 995.352921][T11664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 995.392432][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.920021][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 995.975937][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 996.393214][T11664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 996.477710][T11664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 996.480634][T11664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 996.484455][T11664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 996.534827][T11664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 996.925497][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 996.977478][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 997.496071][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 997.554623][T11664] Bluetooth: hci0: command tx timeout [ 997.555282][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 997.803850][ T5275] 8021q: adding VLAN 0 to HW filter on device eth21 [ 998.759523][T11664] Bluetooth: hci3: command tx timeout [ 999.645495][T11664] Bluetooth: hci0: command tx timeout [ 1000.473293][ T4929] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1000.503275][ T4929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1000.526144][ T4929] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1000.527818][ T4929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1000.548899][ T4929] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1000.836399][T11664] Bluetooth: hci3: command tx timeout [ 1001.760676][T11664] Bluetooth: hci0: command tx timeout [ 1002.331213][T11945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.331588][T11945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.331902][T11945] bridge_slave_0: entered allmulticast mode [ 1002.415856][T11945] bridge_slave_0: entered promiscuous mode [ 1002.479006][T11945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.479326][T11945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.479677][T11945] bridge_slave_1: entered allmulticast mode [ 1002.490847][T11945] bridge_slave_1: entered promiscuous mode [ 1002.822037][T11664] Bluetooth: hci4: command tx timeout [ 1002.914466][T11664] Bluetooth: hci3: command tx timeout [ 1003.273497][T11945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.367992][T11945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.794722][T11664] Bluetooth: hci0: command tx timeout [ 1003.967831][T11945] team0: Port device team_slave_0 added [ 1004.003238][T11945] team0: Port device team_slave_1 added [ 1004.538955][T11945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.538976][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.539000][T11945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.827869][T11945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.827888][T11945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.827912][T11945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.834480][T11664] Bluetooth: hci4: command tx timeout [ 1004.953402][T11940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.953700][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.953928][T11940] bridge_slave_0: entered allmulticast mode [ 1004.978109][T11940] bridge_slave_0: entered promiscuous mode [ 1004.983626][T11940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.983898][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.984133][T11940] bridge_slave_1: entered allmulticast mode [ 1004.995042][T11664] Bluetooth: hci3: command tx timeout [ 1005.032401][T11940] bridge_slave_1: entered promiscuous mode [ 1005.454691][T11945] hsr_slave_0: entered promiscuous mode [ 1005.457026][T11945] hsr_slave_1: entered promiscuous mode [ 1005.458883][T11945] debugfs: 'hsr0' already exists in 'hsr' [ 1005.458909][T11945] Cannot create hsr debugfs directory [ 1005.640540][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1005.720344][ T4929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1005.741575][ T4929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1005.783758][ T4929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1005.813133][ T4929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1005.978017][T11940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.090930][T11940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.571406][T11940] team0: Port device team_slave_0 added [ 1006.685138][T11940] team0: Port device team_slave_1 added [ 1006.914598][ T4929] Bluetooth: hci4: command tx timeout [ 1007.098179][T11940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.098200][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.098231][T11940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.244590][T11940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.244608][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.244631][T11940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.912753][T11940] hsr_slave_0: entered promiscuous mode [ 1007.948397][T11940] hsr_slave_1: entered promiscuous mode [ 1007.960578][ T4929] Bluetooth: hci1: command tx timeout [ 1007.986718][T11940] debugfs: 'hsr0' already exists in 'hsr' [ 1007.986752][T11940] Cannot create hsr debugfs directory [ 1007.988505][T11979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.988849][T11979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.989199][T11979] bridge_slave_0: entered allmulticast mode [ 1008.020282][T11979] bridge_slave_0: entered promiscuous mode [ 1008.106593][T11979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.106980][T11979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.107304][T11979] bridge_slave_1: entered allmulticast mode [ 1008.110877][T11979] bridge_slave_1: entered promiscuous mode [ 1008.463966][T11979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.569896][T11979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.996279][ T4929] Bluetooth: hci4: command tx timeout [ 1009.296873][T11979] team0: Port device team_slave_0 added [ 1009.331932][T11979] team0: Port device team_slave_1 added [ 1009.659447][T11979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.659465][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.659488][T11979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.821775][T11979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.821803][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.821831][T11979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.035752][ T4929] Bluetooth: hci1: command tx timeout [ 1010.501936][ T1027] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.106877][T11979] hsr_slave_0: entered promiscuous mode [ 1011.109921][T11979] hsr_slave_1: entered promiscuous mode [ 1011.112108][T11979] debugfs: 'hsr0' already exists in 'hsr' [ 1011.112136][T11979] Cannot create hsr debugfs directory [ 1011.388595][ T1027] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.635045][T11662] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1011.678129][T11662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1011.777781][T11662] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1011.829099][T11662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1012.133876][ T4929] Bluetooth: hci1: command tx timeout [ 1012.303321][ T1027] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.372626][T11662] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1012.389760][T11662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1012.426149][T11662] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1012.459639][T11662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1013.148114][ T1027] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.250967][T12014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.251334][T12014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.251738][T12014] bridge_slave_0: entered allmulticast mode [ 1013.262488][T12014] bridge_slave_0: entered promiscuous mode [ 1013.301714][T12014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.303021][T12014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.303410][T12014] bridge_slave_1: entered allmulticast mode [ 1013.332666][T12014] bridge_slave_1: entered promiscuous mode [ 1013.737760][T12014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.807929][T12014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.214241][ T4929] Bluetooth: hci1: command tx timeout [ 1014.447383][T12014] team0: Port device team_slave_0 added [ 1014.501004][T12014] team0: Port device team_slave_1 added [ 1014.857725][T12014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.857748][T12014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.857774][T12014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.932137][T12014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.932154][T12014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.932185][T12014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.916197][T12014] hsr_slave_0: entered promiscuous mode [ 1015.922605][T12014] hsr_slave_1: entered promiscuous mode [ 1015.935495][T12014] debugfs: 'hsr0' already exists in 'hsr' [ 1015.935528][T12014] Cannot create hsr debugfs directory [ 1016.464566][ T1027] bridge_slave_1: left allmulticast mode [ 1016.464609][ T1027] bridge_slave_1: left promiscuous mode [ 1016.464943][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.566183][ T1027] bridge_slave_0: left allmulticast mode [ 1016.566214][ T1027] bridge_slave_0: left promiscuous mode [ 1016.566517][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.275568][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.356396][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.416950][ T1027] bond0 (unregistering): Released all slaves [ 1018.311716][ T1027] bond0 (unregistering): Released all slaves [ 1019.794132][T11664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1019.871319][T11664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1019.872921][T11664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1019.962107][T11664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1019.980768][T11664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1020.976452][ T5275] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1021.716153][T11945] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1021.753623][T11945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1021.784939][T11945] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1021.820881][T11945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1021.971988][T11945] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1022.002720][T11945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1022.244510][ T1027] hsr_slave_0: left promiscuous mode [ 1022.274817][ T4929] Bluetooth: hci2: command tx timeout [ 1022.299449][ T1027] hsr_slave_1: left promiscuous mode [ 1022.300626][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.345515][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.524563][ T1027] hsr_slave_0: left promiscuous mode [ 1022.564526][ T1027] hsr_slave_1: left promiscuous mode [ 1022.586375][ T1027] veth1_macvtap: left promiscuous mode [ 1022.586454][ T1027] veth0_macvtap: left promiscuous mode [ 1022.586725][ T1027] veth1_vlan: left promiscuous mode [ 1022.586868][ T1027] veth0_vlan: left promiscuous mode [ 1023.236831][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 1023.275268][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 1024.256928][T11945] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1024.300766][T11945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.328249][ T5275] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1024.354643][ T4929] Bluetooth: hci2: command tx timeout [ 1026.038989][ T5275] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1026.210230][T12104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.210552][T12104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.210838][T12104] bridge_slave_0: entered allmulticast mode [ 1026.213615][T12104] bridge_slave_0: entered promiscuous mode [ 1026.293637][T12104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.293991][T12104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.294739][T12104] bridge_slave_1: entered allmulticast mode [ 1026.297716][T12104] bridge_slave_1: entered promiscuous mode [ 1026.444244][ T4929] Bluetooth: hci2: command tx timeout [ 1026.490243][T11945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.695228][T12104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.777492][T12104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.015237][T12104] team0: Port device team_slave_0 added [ 1027.046997][T12104] team0: Port device team_slave_1 added [ 1027.655936][T11945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.717969][T12104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.717991][T12104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.718021][T12104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.771737][T12104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.771751][T12104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.771773][T12104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.976703][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.977041][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.170336][ T5275] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1028.293614][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.293790][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.392736][T11979] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1028.471095][T11979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1028.524531][ T4929] Bluetooth: hci2: command tx timeout [ 1028.528065][T11979] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1028.782254][T11979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.849284][T12104] hsr_slave_0: entered promiscuous mode [ 1028.859284][T12104] hsr_slave_1: entered promiscuous mode [ 1028.890652][T11979] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1028.940970][T11979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.048423][T11979] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1029.079322][T11979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.713619][T11940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1030.835445][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1031.197703][T11940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1031.240908][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1031.324015][T11940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1031.353631][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1031.405796][T11940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1031.450063][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1032.411868][T12014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1032.450304][T12014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1032.514137][T12014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1032.593893][T12014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1032.637543][T12014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1032.710887][T12014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1032.837165][T12014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1032.909584][T12014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1033.484696][ T1027] bridge_slave_1: left allmulticast mode [ 1033.484741][ T1027] bridge_slave_1: left promiscuous mode [ 1033.485013][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.595830][ T1027] bridge_slave_0: left allmulticast mode [ 1033.595865][ T1027] bridge_slave_0: left promiscuous mode [ 1033.596228][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.834609][ T1027] bridge_slave_1: left allmulticast mode [ 1033.834638][ T1027] bridge_slave_1: left promiscuous mode [ 1033.834872][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.006260][ T1027] bridge_slave_0: left allmulticast mode [ 1034.006289][ T1027] bridge_slave_0: left promiscuous mode [ 1034.006499][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.204618][ T1027] bridge_slave_1: left allmulticast mode [ 1034.204665][ T1027] bridge_slave_1: left promiscuous mode [ 1034.204978][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.306493][ T1027] bridge_slave_0: left allmulticast mode [ 1034.306543][ T1027] bridge_slave_0: left promiscuous mode [ 1034.306918][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.945441][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.025469][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.099990][ T1027] bond0 (unregistering): Released all slaves [ 1035.405236][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.485467][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.569865][ T1027] bond0 (unregistering): Released all slaves [ 1035.926767][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.005762][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.068641][ T1027] bond0 (unregistering): Released all slaves [ 1037.031267][T11979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.521972][T11979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.547121][T11945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.824489][ T1027] hsr_slave_0: left promiscuous mode [ 1037.844506][ T1027] hsr_slave_1: left promiscuous mode [ 1037.845722][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.885383][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.024537][ T1027] hsr_slave_0: left promiscuous mode [ 1038.044452][ T1027] hsr_slave_1: left promiscuous mode [ 1038.045290][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.090158][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.224608][ T1027] hsr_slave_0: left promiscuous mode [ 1038.244630][ T1027] hsr_slave_1: left promiscuous mode [ 1038.245680][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.286807][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.775353][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 1038.825381][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 1039.385430][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 1039.435396][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 1040.005240][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 1040.055417][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 1040.307222][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.307461][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.418212][T11940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.669168][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.669452][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.176402][T11940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.381825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.382025][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.517610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.517843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.682616][T12014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.162522][T12014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.508118][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.508441][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.553253][T11945] veth0_vlan: entered promiscuous mode [ 1042.748755][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.748928][ T3404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.295273][T11945] veth1_vlan: entered promiscuous mode [ 1043.803525][T12104] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1043.833481][T12104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1043.927902][T12104] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1043.990894][T12104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.012378][T12104] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1044.103669][T12104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1044.180675][T12104] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1044.312398][T12104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1044.450124][T11945] veth0_macvtap: entered promiscuous mode [ 1044.495492][T11945] veth1_macvtap: entered promiscuous mode [ 1044.876717][T11979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.086147][T11945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.165935][T11945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.439979][ T3352] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.442643][ T3352] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.488506][ T3352] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.499090][ T3352] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.550934][T11940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.326047][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.326070][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.432719][T12104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.480813][T11979] veth0_vlan: entered promiscuous mode [ 1047.508818][T12014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.708426][ T1202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.708448][ T1202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.813389][T11979] veth1_vlan: entered promiscuous mode [ 1047.848767][T12104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.121502][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.121798][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.305912][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.306097][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.341585][T12360] loop5: detected capacity change from 0 to 256 [ 1048.462087][T11940] veth0_vlan: entered promiscuous mode [ 1048.717179][T11940] veth1_vlan: entered promiscuous mode [ 1048.767702][T11979] veth0_macvtap: entered promiscuous mode [ 1048.895033][T11979] veth1_macvtap: entered promiscuous mode [ 1049.294119][T11979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.305038][T12014] veth0_vlan: entered promiscuous mode [ 1049.407072][T11979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.621502][T11940] veth0_macvtap: entered promiscuous mode [ 1049.629350][ T1377] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.645206][T12014] veth1_vlan: entered promiscuous mode [ 1049.650015][ T1377] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.686930][ T1377] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.692212][ T1377] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.734539][T11940] veth1_macvtap: entered promiscuous mode [ 1050.439642][T11940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.908333][T11940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.130517][ T3352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.130542][ T3352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.163877][T12014] veth0_macvtap: entered promiscuous mode [ 1051.334585][ T3352] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.677961][ T3352] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.093051][ T3352] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.117780][T12014] veth1_macvtap: entered promiscuous mode [ 1052.326769][ T3352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.419099][T12415] loop5: detected capacity change from 0 to 64 [ 1052.729860][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.729882][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.001082][T12014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.037151][T12104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.298282][T12014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.472850][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.505236][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.509883][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.534099][ T8970] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.299956][T12415] ------------[ cut here ]------------ [ 1054.299975][T12415] !buffer_uptodate(bh) [ 1054.299994][T12415] WARNING: fs/buffer.c:1093 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.5.1269/12415 [ 1054.300060][T12415] Modules linked in: [ 1054.300091][T12415] CPU: 0 UID: 0 PID: 12415 Comm: syz.5.1269 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1054.300121][T12415] Tainted: [L]=SOFTLOCKUP [ 1054.300130][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1054.300143][T12415] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1054.300179][T12415] Code: 4c 89 f7 e8 59 e7 dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 04 78 fb ff e8 8f 1c 72 ff eb 8c e8 88 1c 72 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a 1c 72 ff 90 0f 0b 90 e9 cf fd ff ff [ 1054.300199][T12415] RSP: 0018:ffffc9000446f828 EFLAGS: 00010287 [ 1054.300218][T12415] RAX: ffffffff8252db48 RBX: ffff88803fbe95a0 RCX: 0000000000080000 [ 1054.300235][T12415] RDX: ffffc90010ddd000 RSI: 0000000000001d2d RDI: 0000000000001d2e [ 1054.300249][T12415] RBP: 0000000000000201 R08: 0000000000000000 R09: 0000000000000000 [ 1054.300262][T12415] R10: dffffc0000000000 R11: ffffed1007f7d2b5 R12: 000000000000000a [ 1054.300278][T12415] R13: ffff88803fbe95a0 R14: ffff8880607f9c60 R15: dffffc0000000000 [ 1054.300295][T12415] FS: 00007fd4df8566c0(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000 [ 1054.300315][T12415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1054.300330][T12415] CR2: 00007f24c7ba5eac CR3: 00000000343be000 CR4: 00000000003526f0 [ 1054.300351][T12415] Call Trace: [ 1054.300360][T12415] [ 1054.300374][T12415] bfs_get_block+0x5d2/0xb60 [ 1054.300431][T12415] __block_write_begin_int+0x6c2/0x1900 [ 1054.300487][T12415] ? __pfx_bfs_get_block+0x10/0x10 [ 1054.300525][T12415] ? __pfx___block_write_begin_int+0x10/0x10 [ 1054.300566][T12415] ? __filemap_get_folio_mpol+0x710/0xf50 [ 1054.300599][T12415] ? __pfx_bfs_get_block+0x10/0x10 [ 1054.300632][T12415] block_write_begin+0x8d/0x120 [ 1054.300651][T12415] ? bfs_write_begin+0x1e/0xd0 [ 1054.300690][T12415] bfs_write_begin+0x35/0xd0 [ 1054.300728][T12415] generic_perform_write+0x2ad/0x8b0 [ 1054.300772][T12415] ? __pfx_generic_perform_write+0x10/0x10 [ 1054.300804][T12415] ? file_update_time_flags+0x21f/0x4b0 [ 1054.300840][T12415] ? __generic_file_write_iter+0xfc/0x240 [ 1054.300869][T12415] ? generic_file_write_iter+0x9b/0x330 [ 1054.300903][T12415] generic_file_write_iter+0xaf/0x330 [ 1054.300956][T12415] vfs_write+0x61e/0xbb0 [ 1054.301023][T12415] ? __pfx_vfs_write+0x10/0x10 [ 1054.301067][T12415] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1054.301105][T12415] ? lockdep_hardirqs_on+0x7a/0x110 [ 1054.301149][T12415] ? mutex_lock_nested+0x152/0x1d0 [ 1054.301176][T12415] ? fdget_pos+0x252/0x320 [ 1054.301212][T12415] ksys_write+0x156/0x270 [ 1054.301247][T12415] ? __pfx_ksys_write+0x10/0x10 [ 1054.301287][T12415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.301313][T12415] do_syscall_64+0x174/0x580 [ 1054.301334][T12415] ? trace_irq_disable+0x3b/0x140 [ 1054.301363][T12415] ? clear_bhb_loop+0x40/0x90 [ 1054.301390][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.301411][T12415] RIP: 0033:0x7fd4e15fce59 [ 1054.301431][T12415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.301448][T12415] RSP: 002b:00007fd4df856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.301471][T12415] RAX: ffffffffffffffda RBX: 00007fd4e1875fa0 RCX: 00007fd4e15fce59 [ 1054.301487][T12415] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 1054.301501][T12415] RBP: 00007fd4e1692e6f R08: 0000000000000000 R09: 0000000000000000 [ 1054.301515][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.301528][T12415] R13: 00007fd4e1876038 R14: 00007fd4e1875fa0 R15: 00007ffcabdb8e88 [ 1054.301559][T12415] [ 1054.301583][T12415] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1054.301603][T12415] CPU: 0 UID: 0 PID: 12415 Comm: syz.5.1269 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1054.301634][T12415] Tainted: [L]=SOFTLOCKUP [ 1054.301642][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1054.301656][T12415] Call Trace: [ 1054.301664][T12415] [ 1054.301673][T12415] vpanic+0x56c/0xa60 [ 1054.301706][T12415] ? __pfx__printk+0x10/0x10 [ 1054.301728][T12415] ? __pfx_vpanic+0x10/0x10 [ 1054.301755][T12415] ? is_bpf_text_address+0x292/0x2b0 [ 1054.301792][T12415] ? is_bpf_text_address+0x26/0x2b0 [ 1054.301837][T12415] panic+0xc5/0xd0 [ 1054.301868][T12415] ? __pfx_panic+0x10/0x10 [ 1054.301915][T12415] __warn+0x315/0x4c0 [ 1054.301945][T12415] ? mark_buffer_dirty+0x299/0x410 [ 1054.301981][T12415] ? mark_buffer_dirty+0x299/0x410 [ 1054.302014][T12415] __report_bug+0x331/0x530 [ 1054.302047][T12415] ? filemap_get_entry+0xcd/0x3f0 [ 1054.302073][T12415] ? mark_buffer_dirty+0x299/0x410 [ 1054.302100][T12415] ? __pfx___report_bug+0x10/0x10 [ 1054.302117][T12415] ? folio_mark_accessed+0x425/0x8b0 [ 1054.302148][T12415] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1054.302176][T12415] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1054.302212][T12415] ? mark_buffer_dirty+0x299/0x410 [ 1054.302242][T12415] report_bug+0x16a/0x220 [ 1054.302263][T12415] ? mark_buffer_dirty+0x299/0x410 [ 1054.302291][T12415] ? mark_buffer_dirty+0x29b/0x410 [ 1054.302322][T12415] handle_bug+0x9c/0x200 [ 1054.302346][T12415] exc_invalid_op+0x1a/0x50 [ 1054.302369][T12415] asm_exc_invalid_op+0x1a/0x20 [ 1054.302390][T12415] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1054.302421][T12415] Code: 4c 89 f7 e8 59 e7 dd ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 04 78 fb ff e8 8f 1c 72 ff eb 8c e8 88 1c 72 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 7a 1c 72 ff 90 0f 0b 90 e9 cf fd ff ff [ 1054.302440][T12415] RSP: 0018:ffffc9000446f828 EFLAGS: 00010287 [ 1054.302458][T12415] RAX: ffffffff8252db48 RBX: ffff88803fbe95a0 RCX: 0000000000080000 [ 1054.302476][T12415] RDX: ffffc90010ddd000 RSI: 0000000000001d2d RDI: 0000000000001d2e [ 1054.302492][T12415] RBP: 0000000000000201 R08: 0000000000000000 R09: 0000000000000000 [ 1054.302507][T12415] R10: dffffc0000000000 R11: ffffed1007f7d2b5 R12: 000000000000000a [ 1054.302524][T12415] R13: ffff88803fbe95a0 R14: ffff8880607f9c60 R15: dffffc0000000000 [ 1054.302550][T12415] ? mark_buffer_dirty+0x298/0x410 [ 1054.302586][T12415] ? mark_buffer_dirty+0x298/0x410 [ 1054.302617][T12415] bfs_get_block+0x5d2/0xb60 [ 1054.302664][T12415] __block_write_begin_int+0x6c2/0x1900 [ 1054.302715][T12415] ? __pfx_bfs_get_block+0x10/0x10 [ 1054.302752][T12415] ? __pfx___block_write_begin_int+0x10/0x10 [ 1054.302788][T12415] ? __filemap_get_folio_mpol+0x710/0xf50 [ 1054.302818][T12415] ? __pfx_bfs_get_block+0x10/0x10 [ 1054.302850][T12415] block_write_begin+0x8d/0x120 [ 1054.302868][T12415] ? bfs_write_begin+0x1e/0xd0 [ 1054.302903][T12415] bfs_write_begin+0x35/0xd0 [ 1054.302938][T12415] generic_perform_write+0x2ad/0x8b0 [ 1054.302979][T12415] ? __pfx_generic_perform_write+0x10/0x10 [ 1054.303009][T12415] ? file_update_time_flags+0x21f/0x4b0 [ 1054.303055][T12415] ? __generic_file_write_iter+0xfc/0x240 [ 1054.303084][T12415] ? generic_file_write_iter+0x9b/0x330 [ 1054.303115][T12415] generic_file_write_iter+0xaf/0x330 [ 1054.303145][T12415] vfs_write+0x61e/0xbb0 [ 1054.303181][T12415] ? __pfx_vfs_write+0x10/0x10 [ 1054.303211][T12415] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1054.303246][T12415] ? lockdep_hardirqs_on+0x7a/0x110 [ 1054.303284][T12415] ? mutex_lock_nested+0x152/0x1d0 [ 1054.303310][T12415] ? fdget_pos+0x252/0x320 [ 1054.303342][T12415] ksys_write+0x156/0x270 [ 1054.303374][T12415] ? __pfx_ksys_write+0x10/0x10 [ 1054.303409][T12415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.303432][T12415] do_syscall_64+0x174/0x580 [ 1054.303453][T12415] ? trace_irq_disable+0x3b/0x140 [ 1054.303484][T12415] ? clear_bhb_loop+0x40/0x90 [ 1054.303513][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.303535][T12415] RIP: 0033:0x7fd4e15fce59 [ 1054.303558][T12415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.303575][T12415] RSP: 002b:00007fd4df856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1054.303597][T12415] RAX: ffffffffffffffda RBX: 00007fd4e1875fa0 RCX: 00007fd4e15fce59 [ 1054.303613][T12415] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 1054.303628][T12415] RBP: 00007fd4e1692e6f R08: 0000000000000000 R09: 0000000000000000 [ 1054.303643][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.303656][T12415] R13: 00007fd4e1876038 R14: 00007fd4e1875fa0 R15: 00007ffcabdb8e88 [ 1054.303688][T12415] [ 1054.306416][T12415] Kernel Offset: disabled