last executing test programs: 4m0.403402126s ago: executing program 0 (id=34): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1400000016000b63d2b947469d6628ca176d6b44", 0x14}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m56.78174123s ago: executing program 0 (id=42): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200000c0, &(0x7f00000001c0)={0xa, 0x2, 0x8001, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) listen(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) 3m56.00012797s ago: executing program 2 (id=44): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 3m55.053293249s ago: executing program 0 (id=46): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000"], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3m52.639282013s ago: executing program 2 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 3m49.358982021s ago: executing program 2 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000546439f08500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xe40, &(0x7f0000000a40)={@broadcast, @empty, @void, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0x3, 0x6, "71c424", 0xe0a, 0x6, 0x1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xbd, 0x0, 0x1c38}, {"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"}}}}}}}}, 0x0) 3m49.155160371s ago: executing program 0 (id=53): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x3, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b42c040dbbea26adf", 0x39}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734", 0x35}], 0x2}}], 0x1, 0x2090) 3m48.394626025s ago: executing program 0 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3m48.36241728s ago: executing program 2 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000a0500010007525f0252cbc12f730fd3"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 3m47.080511491s ago: executing program 2 (id=58): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m46.798269539s ago: executing program 0 (id=59): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 3m41.988756303s ago: executing program 2 (id=62): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 3m33.331597512s ago: executing program 3 (id=72): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m29.042073594s ago: executing program 32 (id=59): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 3m27.088307994s ago: executing program 3 (id=75): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) close(r0) 3m21.978970269s ago: executing program 33 (id=62): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 3m19.09848808s ago: executing program 3 (id=80): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018001280080001007070"], 0x40}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000280)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x2000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r9, r8, r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) 3m14.066555596s ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) 3m10.418452s ago: executing program 3 (id=84): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3m7.830254239s ago: executing program 3 (id=86): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x60603) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x9, @buffer={0x0, 0x84, &(0x7f0000000000)=""/132}, &(0x7f0000000540)="9edf55168046", 0x0, 0x0, 0x14, 0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4669ded5a2b7d774dbb2a0d454566f813b0cf71e860a4f9a025fc9628ab6a35fe0fc665ac85385c2d0e27a91799f9a5834fa2d7aa2e2c897c666272ccb27dfe5a051405809e4ee5536953be14d472a3c2223172b138fe849be142589386b6ccc9870e3e45804249a939464", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000001300)=ANY=[@ANYBLOB="800000000802110000010802110000000802110000000000010000000000008064000100001d029d2c0735246cc91c392d772f3facbebcd5d65e3561f50dfcb351e7c1010882848b960c12182406020800"], 0x51) flistxattr(r0, &(0x7f0000000300)=""/4096, 0x1000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r8, 0x0, 0x0) 2m52.450783973s ago: executing program 34 (id=86): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x60603) ioctl$SG_IO(r4, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x9, @buffer={0x0, 0x84, &(0x7f0000000000)=""/132}, &(0x7f0000000540)="9edf55168046", 0x0, 0x0, 0x14, 0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4669ded5a2b7d774dbb2a0d454566f813b0cf71e860a4f9a025fc9628ab6a35fe0fc665ac85385c2d0e27a91799f9a5834fa2d7aa2e2c897c666272ccb27dfe5a051405809e4ee5536953be14d472a3c2223172b138fe849be142589386b6ccc9870e3e45804249a939464", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000001300)=ANY=[@ANYBLOB="800000000802110000010802110000000802110000000000010000000000008064000100001d029d2c0735246cc91c392d772f3facbebcd5d65e3561f50dfcb351e7c1010882848b960c12182406020800"], 0x51) flistxattr(r0, &(0x7f0000000300)=""/4096, 0x1000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r8, 0x0, 0x0) 1m18.061340021s ago: executing program 4 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) 1m10.600130844s ago: executing program 4 (id=159): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0x13, 0x2, "c4a7"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000007c0)={0x34, &(0x7f000001a780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m8.151529035s ago: executing program 4 (id=160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x48, &(0x7f0000000380)="f6f4e9a1c78ad62ceef188430700000000000000dcf58100"/34, 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f00000005c0)="010a", 0x0}, 0x50) 1m7.610393797s ago: executing program 4 (id=162): socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 1m4.251093197s ago: executing program 4 (id=165): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000000)={0xe, 0x7, 0x1, {{0x1, '&'}}}, 0xe) write$P9_RVERSION(r0, 0x0, 0x50) 1m3.938334967s ago: executing program 4 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2) 48.172150411s ago: executing program 35 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = io_uring_setup(0x4126, &(0x7f0000000c40)={0x0, 0xc09, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2) 5.364736072s ago: executing program 1 (id=197): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec3ea000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000001c0)='.\x00', 0xaa) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x103000, 0x120) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) 4.151204159s ago: executing program 1 (id=198): r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, 0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000240), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088a8", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x4000, &(0x7f00000002c0)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008894}, 0x40000) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0x35a, 0x0, r0}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x8000000, 0x7e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20007682, 0x20000, 0xe, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbea7, 0x8, 0x2, 0x4b, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6886, 0x5200, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1.938860216s ago: executing program 1 (id=199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x48, &(0x7f0000000380)="f6f4e9a1c78ad62ceef188430700000000000000dcf58100"/34, 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f00000005c0)="010a", 0x0}, 0x50) 1.647767214s ago: executing program 1 (id=200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000180), 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000), 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) 1.394028985s ago: executing program 1 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x8000, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) 0s ago: executing program 1 (id=202): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 190.435489][ T5559] cgroup: Unknown subsys name 'net' [ 190.572963][ T5559] cgroup: Unknown subsys name 'cpuset' [ 190.587952][ T5559] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 196.988183][ T5559] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 201.920245][ T5579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.932277][ T5584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.963619][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.979169][ T5585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.987238][ T5585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.999591][ T5585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.014445][ T5585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.026117][ T5585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.038067][ T5585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.053502][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.065748][ T5592] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.075837][ T5592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.084035][ T5587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.104680][ T5592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.105130][ T5579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.134561][ T5592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.156370][ T5592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.183888][ T4876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.214888][ T5587] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.218269][ T4876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.232171][ T4876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.251495][ T5579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.267374][ T5579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.280461][ T5579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.296744][ T5579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.157669][ T5579] Bluetooth: hci0: command tx timeout [ 204.167175][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.176240][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.309187][ T5579] Bluetooth: hci1: command tx timeout [ 204.311117][ T48] Bluetooth: hci3: command tx timeout [ 204.390245][ T48] Bluetooth: hci4: command tx timeout [ 204.390546][ T5579] Bluetooth: hci2: command tx timeout [ 206.229206][ T5579] Bluetooth: hci0: command tx timeout [ 206.389294][ T5579] Bluetooth: hci3: command tx timeout [ 206.395191][ T48] Bluetooth: hci1: command tx timeout [ 206.469691][ T5579] Bluetooth: hci4: command tx timeout [ 206.475451][ T48] Bluetooth: hci2: command tx timeout [ 207.438253][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.446291][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.455644][ T5580] bridge_slave_0: entered allmulticast mode [ 207.466683][ T5580] bridge_slave_0: entered promiscuous mode [ 207.487072][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.519691][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.527717][ T5581] bridge_slave_0: entered allmulticast mode [ 207.555671][ T5581] bridge_slave_0: entered promiscuous mode [ 207.582044][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.593737][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.620019][ T5580] bridge_slave_1: entered allmulticast mode [ 207.645375][ T5580] bridge_slave_1: entered promiscuous mode [ 207.669255][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.677903][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.688572][ T5581] bridge_slave_1: entered allmulticast mode [ 207.701174][ T5581] bridge_slave_1: entered promiscuous mode [ 207.994895][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.060573][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.068422][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.078512][ T5588] bridge_slave_0: entered allmulticast mode [ 208.087902][ T5588] bridge_slave_0: entered promiscuous mode [ 208.107530][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.153646][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.163480][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.171687][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.179495][ T5578] bridge_slave_0: entered allmulticast mode [ 208.188129][ T5578] bridge_slave_0: entered promiscuous mode [ 208.201468][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.209327][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.217104][ T5588] bridge_slave_1: entered allmulticast mode [ 208.227020][ T5588] bridge_slave_1: entered promiscuous mode [ 208.300876][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.310844][ T5579] Bluetooth: hci0: command tx timeout [ 208.342730][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.350767][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.358313][ T5578] bridge_slave_1: entered allmulticast mode [ 208.367587][ T5578] bridge_slave_1: entered promiscuous mode [ 208.434033][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.441636][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.449572][ T5577] bridge_slave_0: entered allmulticast mode [ 208.458388][ T5577] bridge_slave_0: entered promiscuous mode [ 208.469601][ T5579] Bluetooth: hci3: command tx timeout [ 208.475439][ T48] Bluetooth: hci1: command tx timeout [ 208.549947][ T5579] Bluetooth: hci4: command tx timeout [ 208.551196][ T48] Bluetooth: hci2: command tx timeout [ 208.586738][ T5580] team0: Port device team_slave_0 added [ 208.594273][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.602397][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.610352][ T5577] bridge_slave_1: entered allmulticast mode [ 208.619461][ T5577] bridge_slave_1: entered promiscuous mode [ 208.637826][ T5581] team0: Port device team_slave_0 added [ 208.679127][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.697660][ T5580] team0: Port device team_slave_1 added [ 208.740362][ T5581] team0: Port device team_slave_1 added [ 208.755788][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.773826][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.876680][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.952211][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.063005][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.070690][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.097284][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.118143][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.130880][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.138070][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.165150][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.228307][ T5588] team0: Port device team_slave_0 added [ 209.240045][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.247282][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.275019][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.375369][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.383000][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.409349][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.428258][ T5578] team0: Port device team_slave_0 added [ 209.442151][ T5588] team0: Port device team_slave_1 added [ 209.464507][ T5577] team0: Port device team_slave_0 added [ 209.497371][ T5578] team0: Port device team_slave_1 added [ 209.567236][ T5577] team0: Port device team_slave_1 added [ 209.716513][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.724233][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.750683][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.776761][ T5580] hsr_slave_0: entered promiscuous mode [ 209.786202][ T5580] hsr_slave_1: entered promiscuous mode [ 209.859392][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.866610][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.893362][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.912423][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.919816][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.946744][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.963976][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.971533][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.998202][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.041996][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.050053][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.076450][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.111258][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.118335][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.144612][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.169984][ T5581] hsr_slave_0: entered promiscuous mode [ 210.179024][ T5581] hsr_slave_1: entered promiscuous mode [ 210.187129][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 210.193181][ T5581] Cannot create hsr debugfs directory [ 210.390480][ T48] Bluetooth: hci0: command tx timeout [ 210.549261][ T48] Bluetooth: hci3: command tx timeout [ 210.550639][ T5579] Bluetooth: hci1: command tx timeout [ 210.615467][ T5588] hsr_slave_0: entered promiscuous mode [ 210.624607][ T5588] hsr_slave_1: entered promiscuous mode [ 210.629589][ T5579] Bluetooth: hci2: command tx timeout [ 210.635961][ T48] Bluetooth: hci4: command tx timeout [ 210.640716][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 210.647436][ T5588] Cannot create hsr debugfs directory [ 210.739214][ T5578] hsr_slave_0: entered promiscuous mode [ 210.748024][ T5578] hsr_slave_1: entered promiscuous mode [ 210.756682][ T5578] debugfs: 'hsr0' already exists in 'hsr' [ 210.762752][ T5578] Cannot create hsr debugfs directory [ 210.786781][ T5577] hsr_slave_0: entered promiscuous mode [ 210.796136][ T5577] hsr_slave_1: entered promiscuous mode [ 210.805088][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 210.811348][ T5577] Cannot create hsr debugfs directory [ 212.092391][ T5580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.120924][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.134635][ T5580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.156790][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.182273][ T5580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.201333][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.213076][ T5580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.238408][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.388311][ T5588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.417770][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.432864][ T5588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.456113][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.467193][ T5588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.486719][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.496732][ T5588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.519547][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.741898][ T5577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.764708][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.775411][ T5577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.793605][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.803559][ T5577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.826934][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.837495][ T5577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.858426][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.164533][ T5578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.186894][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.199538][ T5578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.223429][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.234100][ T5578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.256536][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.288985][ T5578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.313499][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.626474][ T5581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.649925][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.680711][ T5581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.705817][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.715948][ T5581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.737410][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.772246][ T5581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.795079][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.824983][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.035781][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.127429][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.192726][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.200396][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.260131][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.267736][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.359025][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.425530][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.535005][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.542601][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.612029][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.680228][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.687670][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.750423][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.757999][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.831976][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.879345][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.886826][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.146674][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.319423][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.327197][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.474916][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.482639][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.603453][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.932350][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.122505][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.130298][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.262420][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.270078][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.163789][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.174507][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.449291][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.041962][ T5588] veth0_vlan: entered promiscuous mode [ 220.122149][ T5588] veth1_vlan: entered promiscuous mode [ 220.157619][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.417474][ T5577] veth0_vlan: entered promiscuous mode [ 220.572504][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.623657][ T5577] veth1_vlan: entered promiscuous mode [ 220.739869][ T5580] veth0_vlan: entered promiscuous mode [ 220.791609][ T5588] veth0_macvtap: entered promiscuous mode [ 220.873277][ T5588] veth1_macvtap: entered promiscuous mode [ 220.914547][ T5580] veth1_vlan: entered promiscuous mode [ 220.996426][ T5578] veth0_vlan: entered promiscuous mode [ 221.112206][ T5577] veth0_macvtap: entered promiscuous mode [ 221.170155][ T5578] veth1_vlan: entered promiscuous mode [ 221.210185][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.256811][ T5577] veth1_macvtap: entered promiscuous mode [ 221.294132][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.304199][ T5581] veth0_vlan: entered promiscuous mode [ 221.445989][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.457681][ T5580] veth0_macvtap: entered promiscuous mode [ 221.494318][ T5580] veth1_macvtap: entered promiscuous mode [ 221.507871][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.520747][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.558616][ T5581] veth1_vlan: entered promiscuous mode [ 221.576329][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.628646][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.760095][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.886288][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.896578][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.927983][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.956560][ T5578] veth0_macvtap: entered promiscuous mode [ 221.976905][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.996973][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.105229][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.124941][ T5578] veth1_macvtap: entered promiscuous mode [ 222.253628][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.264533][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.290538][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.339458][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.377788][ T5581] veth0_macvtap: entered promiscuous mode [ 222.499963][ T5581] veth1_macvtap: entered promiscuous mode [ 222.607783][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.756037][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.895176][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.979624][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.994345][ T146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.013402][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.055057][ T146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.066055][ T146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.204394][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.232060][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.264604][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.335690][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.202762][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.241208][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.434432][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.475591][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.926367][ T5588] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.017996][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.050873][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.277507][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.317109][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.584537][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.615536][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.764901][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.796498][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.142436][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.191666][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.685783][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.734299][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.759402][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.820363][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.161184][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.211498][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.289172][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 231.513448][ T30] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 231.550809][ T30] usb 4-1: config 0 has no interface number 0 [ 231.580644][ T30] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.721719][ T30] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 231.789217][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.831726][ T30] usb 4-1: Product: syz [ 231.836573][ T5858] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 231.853435][ T30] usb 4-1: Manufacturer: syz [ 231.876136][ T30] usb 4-1: SerialNumber: syz [ 231.945226][ T30] usb 4-1: config 0 descriptor?? [ 232.110688][ T30] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 232.248648][ T5690] usb 4-1: USB disconnect, device number 2 [ 232.301673][ T5690] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 234.582937][ T5690] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 234.717272][ T5878] binder: 5875:5878 ioctl c0306201 2000000006c0 returned -14 [ 234.791228][ T5690] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.850782][ T5690] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 236.480640][ T5690] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.452047][ T5690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 237.468445][ T5690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 237.540125][ T5877] Zero length message leads to an empty skb [ 237.859105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 237.962122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 238.080510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 238.269552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 238.372042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 243.003650][ T5690] usb 4-1: string descriptor 0 read error: -32 [ 243.010503][ T5690] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.021327][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.039143][ T5690] usb 4-1: can't set config #1, error -32 [ 244.887952][ T5690] usb 4-1: USB disconnect, device number 3 [ 246.369122][ T30] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 246.517706][ T5917] warning: `syz.4.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 247.263170][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.314210][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.366893][ T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.581810][ T30] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.784019][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.906794][ T30] usb 3-1: config 0 descriptor?? [ 248.170106][ T5690] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 248.381680][ T5690] usb 4-1: Using ep0 maxpacket: 8 [ 248.435722][ T5690] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 248.481150][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.516028][ T5690] usb 4-1: Product: syz [ 248.535046][ T5690] usb 4-1: Manufacturer: syz [ 248.546976][ T5690] usb 4-1: SerialNumber: syz [ 248.622011][ T5690] usb 4-1: config 0 descriptor?? [ 248.746812][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.766339][ T5690] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 248.837376][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 248.859670][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.036567][ T5690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.194276][ T5690] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 249.230789][ T5930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.290608][ T5690] usb 4-1: media controller created [ 249.336285][ T5930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.421746][ T30] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 250.228841][ T30] usb 3-1: USB disconnect, device number 2 [ 250.430126][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.939732][ T30] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 256.411852][ T5939] fido_id[5939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 257.658098][ T29] audit: type=1326 audit(1779960695.606:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 257.915900][ T29] audit: type=1326 audit(1779960695.606:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 258.248085][ T29] audit: type=1326 audit(1779960695.606:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 258.492044][ T5690] cxusb: set interface failed [ 258.497020][ T5690] dvb-usb: bulk message failed: -22 (1/0) [ 258.596933][ T29] audit: type=1326 audit(1779960695.606:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 258.668333][ T29] audit: type=1326 audit(1779960695.616:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 258.885128][ T29] audit: type=1326 audit(1779960695.616:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 259.091833][ T5690] DVB: Unable to find symbol mt352_attach() [ 259.117663][ T29] audit: type=1326 audit(1779960695.616:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 259.132056][ T5690] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 259.249462][ T29] audit: type=1326 audit(1779960695.616:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 259.404989][ T29] audit: type=1326 audit(1779960695.616:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5954 comm="syz.0.31" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f558159ce59 code=0x7ffc0000 [ 261.608569][ T5690] rc_core: IR keymap rc-dvico-portable not found [ 261.656846][ T5690] Registered IR keymap rc-empty [ 261.725669][ T5690] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 261.814124][ T5690] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 261.901133][ T5690] dvb-usb: schedule remote query interval to 100 msecs. [ 261.908588][ T5690] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 262.009088][ T5685] dvb-usb: bulk message failed: -22 (1/0) [ 262.062077][ T5690] usb 4-1: USB disconnect, device number 4 [ 263.145649][ T807] IPVS: starting estimator thread 0... [ 263.280229][ T5685] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 263.549297][ T5993] IPVS: using max 192 ests per chain, 9600 per kthread [ 263.932857][ T5685] usb 5-1: Using ep0 maxpacket: 16 [ 264.804653][ T29] audit: type=1326 audit(1779960702.766:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 265.320354][ T6002] overlayfs: failed to resolve './file0': -2 [ 265.776522][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.787780][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.755922][ T29] audit: type=1326 audit(1779960702.766:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 266.782656][ T29] audit: type=1326 audit(1779960702.766:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 266.873948][ T29] audit: type=1326 audit(1779960702.766:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 267.085098][ T5690] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 267.319817][ T29] audit: type=1326 audit(1779960702.766:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 267.751238][ T29] audit: type=1326 audit(1779960702.776:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 267.769159][ T5685] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 268.020229][ T6008] loop5: detected capacity change from 0 to 7 [ 268.051110][ T6008] Dev loop5: unable to read RDB block 7 [ 268.058088][ T6004] binder: 6003:6004 ioctl c0285840 200000000000 returned -22 [ 268.079919][ T29] audit: type=1326 audit(1779960702.776:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 268.112863][ T6008] loop5: unable to read partition table [ 268.329605][ T6008] loop5: partition table beyond EOD, truncated [ 268.337213][ T6008] loop_reread_partitions: partition scan of loop5 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 268.603263][ T29] audit: type=1326 audit(1779960702.776:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 268.664467][ T5685] usb 5-1: can't read configurations, error -71 [ 268.801522][ T29] audit: type=1326 audit(1779960702.776:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.44" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f186759ce59 code=0x7ffc0000 [ 270.570306][ T5685] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 270.774412][ T5685] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 271.075801][ T6036] block device autoloading is deprecated and will be removed. [ 271.764107][ T5685] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 271.777061][ T5685] usb 5-1: config 150 has no interface number 0 [ 271.783785][ T5685] usb 5-1: config 150 interface 204 has no altsetting 0 [ 271.800923][ T5685] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 271.810986][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.819568][ T5685] usb 5-1: Product: syz [ 271.823947][ T5685] usb 5-1: Manufacturer: syz [ 272.769106][ T5685] usb 5-1: SerialNumber: syz [ 276.806571][ T5685] usb 5-1: can't set config #150, error -71 [ 276.966784][ T5685] usb 5-1: USB disconnect, device number 4 [ 277.854066][ T6059] overlayfs: failed to resolve './file0': -2 [ 279.842423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 280.149096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 280.558848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 280.660440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 281.481389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 288.229003][ T5579] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 301.246692][ T6115] IPv6: Can't replace route, no match found [ 301.288487][ T6115] IPv6: Can't replace route, no match found [ 308.421450][ T5579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.433694][ T5579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.452058][ T5579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.471495][ T5579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.497825][ T5579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.754160][ T5579] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.773395][ T5579] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.792190][ T5579] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.846102][ T5579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.874714][ T5579] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.049464][ T30] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 309.393702][ T30] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 310.689181][ T5579] Bluetooth: hci5: command tx timeout [ 310.923727][ T30] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 310.933163][ T30] usb 2-1: Product: syz [ 310.937652][ T30] usb 2-1: Manufacturer: syz [ 310.942589][ T30] usb 2-1: SerialNumber: syz [ 310.949975][ T5579] Bluetooth: hci6: command tx timeout [ 310.962426][ T30] usb 2-1: config 0 descriptor?? [ 312.709081][ T5579] Bluetooth: hci5: command tx timeout [ 313.042479][ T5579] Bluetooth: hci6: command tx timeout [ 315.082388][ T5579] Bluetooth: hci5: command tx timeout [ 315.128494][ T5579] Bluetooth: hci6: command tx timeout [ 316.078822][ T30] usb 2-1: can't set config #0, error -110 [ 317.110353][ T5579] Bluetooth: hci5: command tx timeout [ 317.190922][ T5579] Bluetooth: hci6: command tx timeout [ 318.926211][ T30] usb 2-1: USB disconnect, device number 2 [ 319.941496][ T6158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.421415][ T6162] input: syz0 as /devices/virtual/input/input6 [ 327.042123][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.054644][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.917164][ T5587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 328.930946][ T5587] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 328.947259][ T5587] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 328.964354][ T5587] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 328.977204][ T5587] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 329.110632][ T5587] Bluetooth: hci4: command 0x0406 tx timeout [ 329.117719][ T4876] Bluetooth: hci0: command 0x0406 tx timeout [ 329.117852][ T5592] Bluetooth: hci3: command 0x0406 tx timeout [ 329.124582][ T4876] Bluetooth: hci2: command 0x0406 tx timeout [ 329.124699][ T4876] Bluetooth: hci1: command 0x0406 tx timeout [ 331.119570][ T5585] Bluetooth: hci7: command tx timeout [ 331.456480][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.456753][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.192610][ T5585] Bluetooth: hci7: command tx timeout [ 333.325088][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.731810][ T6210] fuse: Bad value for 'fd' [ 334.611512][ T6215] mmap: syz.4.93 (6215) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 335.277435][ T5585] Bluetooth: hci7: command tx timeout [ 335.461374][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.349407][ T5585] Bluetooth: hci7: command tx timeout [ 337.882469][ T80] bridge_slave_1: left allmulticast mode [ 337.911371][ T80] bridge_slave_1: left promiscuous mode [ 337.943471][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.991978][ T80] bridge_slave_0: left allmulticast mode [ 338.017310][ T80] bridge_slave_0: left promiscuous mode [ 338.026811][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.271968][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.338845][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.379360][ T80] bond0 (unregistering): Released all slaves [ 342.681094][ T6264] loop4: detected capacity change from 0 to 1024 [ 342.704119][ T6264] ======================================================= [ 342.704119][ T6264] WARNING: The mand mount option has been deprecated and [ 342.704119][ T6264] and is ignored by this kernel. Remove the mand [ 342.704119][ T6264] option from the mount to silence this warning. [ 342.704119][ T6264] ======================================================= [ 342.756875][ T6264] EXT4-fs: inline encryption not supported [ 342.797096][ T6264] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 342.911460][ T6264] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.102: lblock 2 mapped to illegal pblock 2 (length 1) [ 342.981335][ T6264] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 342.984988][ T6264] EXT4-fs (loop4): Remounting filesystem read-only [ 342.994622][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 342.994736][ C1] EXT4-fs (loop4): initial error at time 1779960780: ext4_map_blocks:791: inode 3: block 2 [ 342.994951][ C1] EXT4-fs (loop4): last error at time 1779960780: ext4_map_blocks:791: inode 3: block 2 [ 343.174920][ T6264] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 343.195268][ T6264] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 343.210958][ T6264] EXT4-fs (loop4): 1 orphan inode deleted [ 343.220250][ T6264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.466163][ T5580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.691748][ T80] hsr_slave_0: left promiscuous mode [ 343.743891][ T80] hsr_slave_1: left promiscuous mode [ 343.785088][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.822764][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.872285][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.883831][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.963621][ T80] veth1_macvtap: left promiscuous mode [ 343.992938][ T80] veth0_macvtap: left promiscuous mode [ 344.013553][ T80] veth1_vlan: left promiscuous mode [ 344.030832][ T80] veth0_vlan: left promiscuous mode [ 345.046787][ T80] team0 (unregistering): Port device team_slave_1 removed [ 345.091521][ T80] team0 (unregistering): Port device team_slave_0 removed [ 345.974816][ T6284] fuse: Unknown parameter 'grou00000000000000000000' [ 346.030771][ T6283] loop1: detected capacity change from 0 to 512 [ 346.090490][ T6283] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 346.179017][ T6283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 346.269980][ T6283] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.106: invalid indirect mapped block 9 (level 0) [ 346.349177][ T6283] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 346.351080][ T6283] EXT4-fs (loop1): 1 truncate cleaned up [ 346.360875][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 346.360970][ C1] EXT4-fs (loop1): initial error at time 1779960784: ext4_free_branches:1023: inode 11 [ 346.361136][ C1] EXT4-fs (loop1): last error at time 1779960784: ext4_free_branches:1023: inode 11 [ 346.481767][ T6283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.792082][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.822710][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.849485][ T6128] bridge_slave_0: entered allmulticast mode [ 346.876763][ T6128] bridge_slave_0: entered promiscuous mode [ 346.940449][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.975057][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.025983][ T6128] bridge_slave_1: entered allmulticast mode [ 347.091803][ T6128] bridge_slave_1: entered promiscuous mode [ 347.387969][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.694357][ T6128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.789716][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.135437][ T6128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.341349][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.359936][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.367753][ T6135] bridge_slave_0: entered allmulticast mode [ 348.395650][ T6135] bridge_slave_0: entered promiscuous mode [ 348.608586][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.812238][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.831066][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.864196][ T6135] bridge_slave_1: entered allmulticast mode [ 348.893319][ T6135] bridge_slave_1: entered promiscuous mode [ 349.151574][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.459959][ T6128] team0: Port device team_slave_0 added [ 349.536970][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.627462][ T6128] team0: Port device team_slave_1 added [ 349.793123][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.130608][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.208076][ T6135] team0: Port device team_slave_0 added [ 350.355153][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.389628][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.455410][ T6128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.475100][ T6128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.483443][ T6128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.573449][ T6128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.641563][ T6304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.735325][ T5232] 8021q: adding VLAN 0 to HW filter on device eth1 [ 350.785683][ T6135] team0: Port device team_slave_1 added [ 351.871952][ T56] bridge_slave_1: left allmulticast mode [ 351.896939][ T56] bridge_slave_1: left promiscuous mode [ 351.924365][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.978760][ T56] bridge_slave_0: left allmulticast mode [ 351.996891][ T56] bridge_slave_0: left promiscuous mode [ 352.014767][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.392423][ T6326] overlay: Unknown parameter 'func' [ 355.157068][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.293719][ T5584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.304028][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.322846][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.339636][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.363148][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.175898][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.244187][ T56] bond0 (unregistering): Released all slaves [ 356.319011][ T6183] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.381389][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.416350][ T6183] bridge_slave_0: entered allmulticast mode [ 356.464805][ T6183] bridge_slave_0: entered promiscuous mode [ 356.561474][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.592806][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.737852][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.839831][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.895778][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.964765][ T6183] bridge_slave_1: entered allmulticast mode [ 357.055671][ T6183] bridge_slave_1: entered promiscuous mode [ 357.127669][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.149257][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.225893][ T6338] loop1: detected capacity change from 0 to 512 [ 357.236363][ T6338] EXT4-fs: Ignoring removed nobh option [ 357.281620][ T6338] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 357.298111][ T6338] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.114: attempt to clear invalid blocks 1 len 1 [ 357.319193][ T6338] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 357.328796][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 357.344889][ C1] EXT4-fs (loop1): initial error at time 1779960795: ext4_clear_blocks:876: inode 13 [ 357.354938][ C1] EXT4-fs (loop1): last error at time 1779960795: ext4_clear_blocks:876: inode 13 [ 357.388558][ T6338] EXT4-fs (loop1): Remounting filesystem read-only [ 357.399459][ T6338] EXT4-fs (loop1): 1 truncate cleaned up [ 357.407669][ T6338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.439398][ T5585] Bluetooth: hci0: command tx timeout [ 357.850048][ T6343] fuse: Unknown parameter 'grou00000000000000000000' [ 358.198916][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.241672][ T6336] vlan0: entered promiscuous mode [ 360.201576][ T5585] Bluetooth: hci0: command tx timeout [ 360.462625][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.963045][ T6183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.637823][ T5584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 361.660210][ T5584] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 361.740363][ T5584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.228947][ T5584] Bluetooth: hci0: command tx timeout [ 362.618807][ T5584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.664711][ T5584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.675008][ T6183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.291619][ T56] hsr_slave_0: left promiscuous mode [ 364.351561][ T56] hsr_slave_1: left promiscuous mode [ 364.392954][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.436394][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.493188][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.532434][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.629059][ T5584] Bluetooth: hci0: command tx timeout [ 364.713645][ T56] veth1_macvtap: left promiscuous mode [ 364.749872][ T56] veth0_macvtap: left promiscuous mode [ 364.777706][ T56] veth1_vlan: left promiscuous mode [ 364.810519][ T56] veth0_vlan: left promiscuous mode [ 365.500866][ T5584] Bluetooth: hci1: command tx timeout [ 367.511039][ T5584] Bluetooth: hci1: command tx timeout [ 367.718565][ T56] team0 (unregistering): Port device team_slave_1 removed [ 367.796377][ T56] team0 (unregistering): Port device team_slave_0 removed [ 368.460430][ T6183] team0: Port device team_slave_0 added [ 368.586660][ T6183] team0: Port device team_slave_1 added [ 369.588988][ T5584] Bluetooth: hci1: command tx timeout [ 370.778393][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.833957][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.920749][ T6183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.050070][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.165337][ T6183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.213525][ T6183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.364741][ T6183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.501690][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.676799][ T5584] Bluetooth: hci1: command tx timeout [ 371.790458][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.015262][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.397558][ T6183] hsr_slave_0: entered promiscuous mode [ 373.428391][ T6380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.447175][ T6183] hsr_slave_1: entered promiscuous mode [ 373.479176][ T6183] debugfs: 'hsr0' already exists in 'hsr' [ 373.512279][ T6183] Cannot create hsr debugfs directory [ 374.677062][ T56] bridge_slave_1: left allmulticast mode [ 374.683622][ T56] bridge_slave_1: left promiscuous mode [ 375.647766][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.681474][ T56] bridge_slave_0: left allmulticast mode [ 375.701327][ T56] bridge_slave_0: left promiscuous mode [ 376.086315][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.567226][ T56] bridge_slave_1: left allmulticast mode [ 377.636100][ T56] bridge_slave_1: left promiscuous mode [ 377.687519][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.775592][ T56] bridge_slave_0: left allmulticast mode [ 377.795051][ T56] bridge_slave_0: left promiscuous mode [ 377.828519][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.870163][ T56] bridge_slave_1: left allmulticast mode [ 377.884888][ T56] bridge_slave_1: left promiscuous mode [ 377.894653][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.919461][ T56] bridge_slave_0: left allmulticast mode [ 377.926701][ T56] bridge_slave_0: left promiscuous mode [ 377.953987][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.686662][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.740444][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.786894][ T56] bond0 (unregistering): Released all slaves [ 379.151288][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.185040][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.207556][ T56] bond0 (unregistering): Released all slaves [ 379.624620][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.646754][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.695490][ T56] bond0 (unregistering): Released all slaves [ 379.838573][ T5232] 8021q: adding VLAN 0 to HW filter on device eth2 [ 381.269318][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 381.440172][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.464558][ T30] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 381.495613][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.560957][ T30] usb 2-1: config 0 descriptor?? [ 381.645110][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 382.297644][ T30] pwc: recv_control_msg error -71 req 02 val 2700 [ 382.336839][ T30] pwc: recv_control_msg error -71 req 02 val 2c00 [ 382.378096][ T30] pwc: recv_control_msg error -71 req 04 val 1000 [ 382.409557][ T30] pwc: recv_control_msg error -71 req 04 val 1300 [ 382.450690][ T30] pwc: recv_control_msg error -71 req 04 val 1400 [ 382.505039][ T30] pwc: recv_control_msg error -71 req 02 val 2000 [ 382.572620][ T30] pwc: recv_control_msg error -71 req 02 val 2100 [ 382.639593][ T30] pwc: recv_control_msg error -71 req 04 val 1500 [ 382.673667][ T30] pwc: recv_control_msg error -71 req 02 val 2500 [ 382.759606][ T30] pwc: recv_control_msg error -71 req 02 val 2400 [ 382.797504][ T30] pwc: recv_control_msg error -71 req 02 val 2600 [ 382.866034][ T30] pwc: recv_control_msg error -71 req 02 val 2900 [ 382.969473][ T30] pwc: recv_control_msg error -71 req 02 val 2800 [ 383.031702][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 383.053147][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 383.576032][ T30] pwc: Registered as video103. [ 383.585077][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 383.616803][ T30] usb 2-1: USB disconnect, device number 3 [ 383.867903][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.919854][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.965211][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.052473][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.142781][ T56] hsr_slave_0: left promiscuous mode [ 384.177502][ T56] hsr_slave_1: left promiscuous mode [ 384.206552][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.236243][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.270396][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.299185][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.397341][ T56] veth1_macvtap: left promiscuous mode [ 384.427803][ T56] veth0_macvtap: left promiscuous mode [ 384.454348][ T56] veth1_vlan: left promiscuous mode [ 384.479376][ T56] veth0_vlan: left promiscuous mode [ 386.672961][ T56] team0 (unregistering): Port device team_slave_1 removed [ 386.817419][ T56] team0 (unregistering): Port device team_slave_0 removed [ 387.575425][ T56] team0 (unregistering): Port device team_slave_1 removed [ 387.659257][ T56] team0 (unregistering): Port device team_slave_0 removed [ 388.059547][ T5585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.084838][ T5585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.099667][ T5585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.127669][ T5585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.146693][ T5585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.483845][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.492705][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.627810][ T56] team0 (unregistering): Port device team_slave_1 removed [ 388.676577][ T56] team0 (unregistering): Port device team_slave_0 removed [ 388.969429][ T5232] 8021q: adding VLAN 0 to HW filter on device eth3 [ 390.231565][ T5584] Bluetooth: hci4: command tx timeout [ 390.537975][ T6456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.138379][ T6488] loop4: detected capacity change from 0 to 256 [ 391.192451][ T6488] exfat: Deprecated parameter 'namecase' [ 391.234603][ T6488] exfat: Deprecated parameter 'namecase' [ 391.361402][ T6488] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 392.417751][ T5584] Bluetooth: hci4: command tx timeout [ 393.330477][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.357704][ T6486] batadv_slave_1: entered promiscuous mode [ 393.783318][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.815740][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.853817][ T6328] bridge_slave_0: entered allmulticast mode [ 393.884462][ T6328] bridge_slave_0: entered promiscuous mode [ 394.065537][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.096815][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.136113][ T6328] bridge_slave_1: entered allmulticast mode [ 394.172177][ T6328] bridge_slave_1: entered promiscuous mode [ 394.469904][ T5584] Bluetooth: hci4: command tx timeout [ 395.840026][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.112837][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.559196][ T5584] Bluetooth: hci4: command tx timeout [ 396.757729][ T6328] team0: Port device team_slave_0 added [ 396.795894][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.817793][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.844121][ T6354] bridge_slave_0: entered allmulticast mode [ 396.867014][ T6354] bridge_slave_0: entered promiscuous mode [ 396.961948][ T6328] team0: Port device team_slave_1 added [ 396.969551][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.994417][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.021332][ T6354] bridge_slave_1: entered allmulticast mode [ 397.052955][ T6354] bridge_slave_1: entered promiscuous mode [ 397.604217][ T5232] 8021q: adding VLAN 0 to HW filter on device eth4 [ 397.642723][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.667897][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.895811][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.932900][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.020960][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.318917][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.329864][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.070483][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.454963][ T6354] team0: Port device team_slave_0 added [ 399.466294][ T6526] random: crng reseeded on system resumption [ 400.335582][ T6328] hsr_slave_0: entered promiscuous mode [ 400.346897][ T6328] hsr_slave_1: entered promiscuous mode [ 400.688466][ T6531] loop1: detected capacity change from 0 to 16 [ 400.997284][ T6531] erofs (device loop1): invalid checksum 0xa1fe5575, 0xc32427af expected [ 401.214287][ T6204] udevd[6204]: incorrect erofs checksum on /dev/loop1 [ 401.308308][ T6328] debugfs: 'hsr0' already exists in 'hsr' [ 401.315049][ T6328] Cannot create hsr debugfs directory [ 401.398152][ T6533] loop4: detected capacity change from 0 to 256 [ 401.443481][ T6354] team0: Port device team_slave_1 added [ 401.515506][ T6533] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.615319][ T6533] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 402.268024][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.335920][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.536848][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.618331][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.626391][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.663143][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.390665][ T6038] bridge_slave_1: left allmulticast mode [ 404.396848][ T6038] bridge_slave_1: left promiscuous mode [ 404.404151][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.430494][ T6038] bridge_slave_0: left allmulticast mode [ 404.436486][ T6038] bridge_slave_0: left promiscuous mode [ 404.443932][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.673323][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.719314][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.735703][ T6038] bond0 (unregistering): Released all slaves [ 404.976203][ T6038] hsr_slave_0: left promiscuous mode [ 404.985760][ T6038] hsr_slave_1: left promiscuous mode [ 404.995627][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.006442][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.562564][ T6038] team0 (unregistering): Port device team_slave_1 removed [ 405.594979][ T6536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.603368][ T6038] team0 (unregistering): Port device team_slave_0 removed [ 405.808378][ T6550] loop1: detected capacity change from 0 to 512 [ 405.961551][ T6550] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 408.336654][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.346864][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.754678][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.805324][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.034585][ T6555] vlan0: left promiscuous mode [ 409.586034][ T6354] hsr_slave_0: entered promiscuous mode [ 409.687787][ T6354] hsr_slave_1: entered promiscuous mode [ 409.740116][ T6354] debugfs: 'hsr0' already exists in 'hsr' [ 409.762500][ T6354] Cannot create hsr debugfs directory [ 409.947414][ T5887] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.966841][ T5887] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.133967][ T5887] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.169964][ T5887] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.302239][ T6577] : renamed from bond_slave_1 [ 410.406524][ T6577] loop1: detected capacity change from 0 to 512 [ 412.504972][ T6598] loop4: detected capacity change from 0 to 256 [ 414.659448][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.681379][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.194366][ T6462] bridge_slave_0: entered allmulticast mode [ 415.336981][ T6462] bridge_slave_0: entered promiscuous mode [ 415.814834][ T5585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.970997][ T5585] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.981761][ T5585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.025716][ T5585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.062479][ T5585] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.259894][ T5232] 8021q: adding VLAN 0 to HW filter on device eth5 [ 416.286647][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.294871][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.306364][ T6462] bridge_slave_1: entered allmulticast mode [ 416.345764][ T6462] bridge_slave_1: entered promiscuous mode [ 417.147723][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.292624][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.839751][ T6462] team0: Port device team_slave_0 added [ 418.031280][ T6462] team0: Port device team_slave_1 added [ 418.249720][ T5585] Bluetooth: hci5: command tx timeout [ 418.502156][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.536366][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.620665][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.666859][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.676573][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.706003][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.780614][ T6640] xt_CONNSECMARK: invalid mode: 66 [ 418.962445][ T6641] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 419.854137][ T6625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.869469][ T5584] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 419.883019][ T5584] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 419.896455][ T5584] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 419.913747][ T5584] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 419.928499][ T5584] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 420.308885][ T5585] Bluetooth: hci5: command tx timeout [ 421.103861][ T6462] hsr_slave_0: entered promiscuous mode [ 421.194532][ T6462] hsr_slave_1: entered promiscuous mode [ 421.241524][ T6462] debugfs: 'hsr0' already exists in 'hsr' [ 421.268437][ T6462] Cannot create hsr debugfs directory [ 422.039047][ T5585] Bluetooth: hci6: command tx timeout [ 422.390175][ T5585] Bluetooth: hci5: command tx timeout [ 422.776621][ T6659] loop1: detected capacity change from 0 to 512 [ 422.909849][ T6659] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.157: bg 0: block 5: invalid block bitmap [ 422.989363][ T6659] loop1: lost filesystem error report for type 5 error -117 [ 422.998766][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 423.013422][ C0] EXT4-fs (loop1): initial error at time 1779960860: ext4_validate_block_bitmap:432 [ 423.023329][ C0] EXT4-fs (loop1): last error at time 1779960860: ext4_validate_block_bitmap:432 [ 423.037103][ T6659] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 423.101799][ T6659] loop1: lost filesystem error report for type 5 error -117 [ 423.105302][ T6659] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.157: invalid indirect mapped block 3 (level 2) [ 423.189758][ T6659] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 423.191478][ T6659] EXT4-fs (loop1): 2 truncates cleaned up [ 423.317493][ T6659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.069667][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.079816][ T5585] Bluetooth: hci6: command tx timeout [ 424.470456][ T5585] Bluetooth: hci5: command tx timeout [ 426.149100][ T5585] Bluetooth: hci6: command tx timeout [ 428.195044][ T6670] lo speed is unknown, defaulting to 1000 [ 428.241195][ T5585] Bluetooth: hci6: command tx timeout [ 428.367477][ T6670] lo speed is unknown, defaulting to 1000 [ 428.516278][ T6670] lo speed is unknown, defaulting to 1000 [ 428.555681][ T6670] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 428.622396][ T6670] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 428.689066][ T6670] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 428.740679][ T6670] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 428.809000][ T6562] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 428.845124][ T6670] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 428.987753][ T6562] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.020808][ T6562] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 429.075358][ T6562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.117521][ T6562] usb 5-1: config 0 descriptor?? [ 429.156170][ T6562] pwc: Askey VC010 type 2 USB webcam detected. [ 429.233775][ T6670] lo speed is unknown, defaulting to 1000 [ 429.383101][ T6670] lo speed is unknown, defaulting to 1000 [ 429.517560][ T6670] lo speed is unknown, defaulting to 1000 [ 429.605944][ T6643] lo speed is unknown, defaulting to 1000 [ 429.615942][ T35] bridge_slave_1: left allmulticast mode [ 429.628309][ T35] bridge_slave_1: left promiscuous mode [ 429.641593][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.659138][ T35] bridge_slave_0: left allmulticast mode [ 429.676222][ T35] bridge_slave_0: left promiscuous mode [ 429.685049][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.832530][ T6562] pwc: recv_control_msg error -71 req 02 val 2700 [ 429.851677][ T6562] pwc: recv_control_msg error -71 req 02 val 2c00 [ 429.884823][ T6562] pwc: recv_control_msg error -71 req 04 val 1000 [ 429.919742][ T6562] pwc: recv_control_msg error -71 req 04 val 1300 [ 429.940249][ T6562] pwc: recv_control_msg error -71 req 04 val 1400 [ 429.950664][ T6562] pwc: recv_control_msg error -71 req 02 val 2000 [ 429.963982][ T6562] pwc: recv_control_msg error -71 req 02 val 2100 [ 429.972584][ T6562] pwc: recv_control_msg error -71 req 04 val 1500 [ 429.981470][ T6562] pwc: recv_control_msg error -71 req 02 val 2500 [ 429.991309][ T6562] pwc: recv_control_msg error -71 req 02 val 2400 [ 430.000608][ T6562] pwc: recv_control_msg error -71 req 02 val 2600 [ 430.014295][ T6562] pwc: recv_control_msg error -71 req 02 val 2900 [ 430.051102][ T6562] pwc: recv_control_msg error -71 req 02 val 2800 [ 430.063109][ T6562] pwc: recv_control_msg error -71 req 04 val 1100 [ 430.080876][ T6562] pwc: recv_control_msg error -71 req 04 val 1200 [ 430.107110][ T6562] pwc: Registered as video103. [ 430.117993][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.140372][ T6562] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 430.193911][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.217571][ T35] bond0 (unregistering): Released all slaves [ 430.244479][ T6562] usb 5-1: USB disconnect, device number 5 [ 430.466943][ T6670] lo speed is unknown, defaulting to 1000 [ 430.729478][ T6670] lo speed is unknown, defaulting to 1000 [ 430.850969][ T6670] lo speed is unknown, defaulting to 1000 [ 431.214854][ T35] hsr_slave_0: left promiscuous mode [ 431.255446][ T35] hsr_slave_1: left promiscuous mode [ 431.278202][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.314459][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.022210][ T35] team0 (unregistering): Port device team_slave_1 removed [ 433.106423][ T35] team0 (unregistering): Port device team_slave_0 removed [ 433.364346][ T6702] loop1: detected capacity change from 0 to 1024 [ 433.380749][ T6702] EXT4-fs: Ignoring removed bh option [ 433.460852][ T6702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 433.514966][ T6702] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.611460][ T6702] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.163: lblock 3 mapped to illegal pblock 3 (length 3) [ 433.642760][ T6702] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 433.658290][ T6702] EXT4-fs (loop1): This should not happen!! Data will be lost [ 433.658290][ T6702] [ 433.678358][ T6706] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.163: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 433.699663][ T5232] 8021q: adding VLAN 0 to HW filter on device eth6 [ 433.709844][ T6706] EXT4-fs error (device loop1) in ext4_setattr:6120: Corrupt filesystem [ 434.084402][ T5581] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 434.124880][ T5581] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 434.247711][ T6691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.274085][ T6462] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 435.878487][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.893870][ T6462] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 435.951918][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.987199][ T6712] lo speed is unknown, defaulting to 1000 [ 436.031968][ T6462] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.106564][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.369047][ T6462] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.431875][ T6462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.858926][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.873762][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.884339][ T6612] bridge_slave_0: entered allmulticast mode [ 436.900961][ T6612] bridge_slave_0: entered promiscuous mode [ 437.180578][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.207266][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.251115][ T6612] bridge_slave_1: entered allmulticast mode [ 437.265156][ T6612] bridge_slave_1: entered promiscuous mode [ 437.366483][ T5232] 8021q: adding VLAN 0 to HW filter on device eth7 [ 437.607132][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.650775][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.905663][ T6612] team0: Port device team_slave_0 added [ 437.982633][ T6612] team0: Port device team_slave_1 added [ 438.221146][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.228312][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.255108][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.417836][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.431668][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.460147][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.666931][ T35] bridge_slave_1: left allmulticast mode [ 438.681146][ T35] bridge_slave_1: left promiscuous mode [ 438.711020][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.749788][ T35] bridge_slave_0: left allmulticast mode [ 438.769449][ T35] bridge_slave_0: left promiscuous mode [ 438.776263][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.124257][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.151225][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.166991][ T35] bond0 (unregistering): Released all slaves [ 439.189664][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.197898][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.205921][ T6643] bridge_slave_0: entered allmulticast mode [ 439.216234][ T6643] bridge_slave_0: entered promiscuous mode [ 439.247018][ T6643] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.254749][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.280540][ T6643] bridge_slave_1: entered allmulticast mode [ 439.302267][ T6643] bridge_slave_1: entered promiscuous mode [ 439.440477][ T35] hsr_slave_0: left promiscuous mode [ 439.452630][ T35] hsr_slave_1: left promiscuous mode [ 439.463711][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.474307][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.891680][ T35] team0 (unregistering): Port device team_slave_1 removed [ 441.984716][ T35] team0 (unregistering): Port device team_slave_0 removed [ 442.816040][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 443.206897][ T6612] hsr_slave_0: entered promiscuous mode [ 443.235431][ T6612] hsr_slave_1: entered promiscuous mode [ 443.274654][ T6612] debugfs: 'hsr0' already exists in 'hsr' [ 443.300185][ T6612] Cannot create hsr debugfs directory [ 443.367757][ T6643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.436324][ T6643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.859839][ T6643] team0: Port device team_slave_0 added [ 444.026430][ T6643] team0: Port device team_slave_1 added [ 445.651235][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.659477][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.700740][ T6643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.735166][ T6643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.769070][ T6643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.815047][ T6643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.619318][ T6643] hsr_slave_0: entered promiscuous mode [ 446.642679][ T6643] hsr_slave_1: entered promiscuous mode [ 446.664539][ T6643] debugfs: 'hsr0' already exists in 'hsr' [ 446.683872][ T6643] Cannot create hsr debugfs directory [ 448.626685][ T5584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.637235][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.651104][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.672693][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.689256][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.368510][ T6763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.403369][ T6643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.473858][ T6643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.542525][ T6612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.633946][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.666442][ T6643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 449.748521][ T6643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.795312][ T6643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 449.876474][ T6643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.903526][ T6612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.921547][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.928299][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.999222][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.043890][ T5232] 8021q: adding VLAN 0 to HW filter on device eth8 [ 450.079113][ T6643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 450.195758][ T6643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.251690][ T6612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 450.305589][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.375272][ T6612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.509232][ T6612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.790375][ T5584] Bluetooth: hci0: command tx timeout [ 450.866506][ T6794] loop1: detected capacity change from 0 to 128 [ 451.076102][ T6796] syz.1.174: attempt to access beyond end of device [ 451.076102][ T6796] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 451.151294][ T6796] syz.1.174: attempt to access beyond end of device [ 451.151294][ T6796] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 452.070251][ T6803] loop1: detected capacity change from 0 to 256 [ 452.114975][ T6803] exfat: Unknown parameter 'gtĖ0x0000000000000000' [ 452.613482][ T5585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 452.625177][ T5585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 452.642252][ T5585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.668495][ T5585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.689432][ T5585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.869484][ T5585] Bluetooth: hci0: command tx timeout [ 453.604313][ T6780] lo speed is unknown, defaulting to 1000 [ 454.799826][ T5585] Bluetooth: hci1: command tx timeout [ 454.949698][ T5585] Bluetooth: hci0: command tx timeout [ 455.400825][ T80] bridge_slave_1: left allmulticast mode [ 455.424477][ T80] bridge_slave_1: left promiscuous mode [ 455.462284][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.515625][ T80] bridge_slave_0: left allmulticast mode [ 455.543706][ T80] bridge_slave_0: left promiscuous mode [ 455.575895][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.739829][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.827790][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.869547][ T5585] Bluetooth: hci1: command tx timeout [ 456.905707][ T80] bond0 (unregistering): Released all slaves [ 457.033844][ T5585] Bluetooth: hci0: command tx timeout [ 457.357652][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.718298][ T80] hsr_slave_0: left promiscuous mode [ 457.781371][ T80] hsr_slave_1: left promiscuous mode [ 457.824826][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.900990][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.950238][ T5585] Bluetooth: hci1: command tx timeout [ 459.582667][ T80] team0 (unregistering): Port device team_slave_1 removed [ 459.725406][ T80] team0 (unregistering): Port device team_slave_0 removed [ 460.423314][ T5232] 8021q: adding VLAN 0 to HW filter on device eth11 [ 461.029951][ T5585] Bluetooth: hci1: command tx timeout [ 461.226405][ T6643] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.336674][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 461.849988][ T6805] lo speed is unknown, defaulting to 1000 [ 461.898849][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.906484][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.067095][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.088556][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.096457][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.812251][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.015895][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.023529][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.440831][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.448967][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.306746][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.328113][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.364171][ T6780] bridge_slave_0: entered allmulticast mode [ 466.390800][ T6780] bridge_slave_0: entered promiscuous mode [ 466.475841][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.499511][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.507658][ T6780] bridge_slave_1: entered allmulticast mode [ 466.522629][ T6780] bridge_slave_1: entered promiscuous mode [ 466.729713][ T5232] 8021q: adding VLAN 0 to HW filter on device eth12 [ 466.753729][ T6780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.926753][ T6780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.020686][ T80] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.365516][ T80] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.453950][ T6780] team0: Port device team_slave_0 added [ 467.523236][ T6780] team0: Port device team_slave_1 added [ 467.618385][ T80] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.888708][ T80] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.918277][ T6780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.932338][ T6780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.967406][ T6780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.992217][ T6852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.134313][ T6780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.168473][ T6780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.246265][ T6780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.311691][ T6805] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.335432][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.348246][ T6805] bridge_slave_0: entered allmulticast mode [ 468.359689][ T6805] bridge_slave_0: entered promiscuous mode [ 468.516364][ T6805] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.531484][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.566334][ T6805] bridge_slave_1: entered allmulticast mode [ 468.597374][ T6805] bridge_slave_1: entered promiscuous mode [ 469.073288][ T6780] hsr_slave_0: entered promiscuous mode [ 469.151640][ T6780] hsr_slave_1: entered promiscuous mode [ 469.206346][ T6780] debugfs: 'hsr0' already exists in 'hsr' [ 469.263396][ T6780] Cannot create hsr debugfs directory [ 470.483518][ T6805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.129801][ T6805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.126712][ T6904] loop1: detected capacity change from 0 to 256 [ 472.176600][ T6805] team0: Port device team_slave_0 added [ 472.204393][ T80] bridge_slave_1: left allmulticast mode [ 472.253195][ T80] bridge_slave_1: left promiscuous mode [ 472.294211][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.333051][ T80] bridge_slave_0: left allmulticast mode [ 472.357241][ T80] bridge_slave_0: left promiscuous mode [ 472.390293][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.450074][ T6904] FAT-fs (loop1): Directory bread(block 64) failed [ 472.479492][ T6904] FAT-fs (loop1): Directory bread(block 65) failed [ 472.490027][ T6904] FAT-fs (loop1): Directory bread(block 66) failed [ 472.504192][ T6904] FAT-fs (loop1): Directory bread(block 67) failed [ 472.518101][ T6904] FAT-fs (loop1): Directory bread(block 68) failed [ 472.541206][ T6904] FAT-fs (loop1): Directory bread(block 69) failed [ 472.549455][ T6904] FAT-fs (loop1): Directory bread(block 70) failed [ 472.556896][ T6904] FAT-fs (loop1): Directory bread(block 71) failed [ 472.573915][ T6904] FAT-fs (loop1): Directory bread(block 72) failed [ 472.582084][ T6904] FAT-fs (loop1): Directory bread(block 73) failed [ 472.618907][ T6904] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 473.408429][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 474.155730][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.207820][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.263013][ T80] bond0 (unregistering): Released all slaves [ 474.410149][ T6805] team0: Port device team_slave_1 added [ 474.465615][ T5232] 8021q: adding VLAN 0 to HW filter on device eth9 [ 476.415115][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.426412][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.454962][ T5584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.511660][ T5584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.527452][ T5584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.540818][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.552279][ T5584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.593064][ T6805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.010408][ T6805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.040610][ T6805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.162548][ T6805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.420948][ T6643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.639055][ T5584] Bluetooth: hci3: command tx timeout [ 479.520329][ T80] hsr_slave_0: left promiscuous mode [ 479.557303][ T80] hsr_slave_1: left promiscuous mode [ 479.614801][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.644427][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.691816][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.805554][ T80] veth1_macvtap: left promiscuous mode [ 479.829130][ T80] veth0_macvtap: left promiscuous mode [ 479.860874][ T80] veth1_vlan: left promiscuous mode [ 479.878090][ T80] veth0_vlan: left promiscuous mode [ 480.533755][ T5585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.544113][ T5585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.557523][ T5585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.583342][ T5585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.602028][ T5585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.710658][ T5584] Bluetooth: hci3: command tx timeout [ 482.669610][ T5584] Bluetooth: hci4: command tx timeout [ 482.790161][ T5584] Bluetooth: hci3: command tx timeout [ 483.477561][ T80] team0 (unregistering): Port device team_slave_1 removed [ 483.523578][ T80] team0 (unregistering): Port device team_slave_0 removed [ 483.708960][ T5681] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 483.772814][ T6805] hsr_slave_0: entered promiscuous mode [ 483.784544][ T6805] hsr_slave_1: entered promiscuous mode [ 483.923630][ T5681] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 483.945869][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 483.980461][ T5681] usb 2-1: Product: syz [ 484.020472][ T5681] usb 2-1: config 0 descriptor?? [ 484.130027][ T5681] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 484.169285][ T5681] usb 2-1: Detected FT232H [ 484.305524][ T5681] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 484.710482][ T5584] Bluetooth: hci4: command tx timeout [ 484.808865][ T5681] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 484.869569][ T5584] Bluetooth: hci3: command tx timeout [ 484.924371][ T6918] lo speed is unknown, defaulting to 1000 [ 484.984400][ T6563] usb 2-1: USB disconnect, device number 4 [ 485.054590][ T6563] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 485.111660][ T6563] ftdi_sio 2-1:0.0: device disconnected [ 486.789008][ T5584] Bluetooth: hci4: command tx timeout [ 487.140463][ T6951] lo speed is unknown, defaulting to 1000 [ 487.365894][ T6780] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 487.441974][ T6780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.583458][ T6780] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 487.659396][ T6780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.804085][ T6780] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 487.860152][ T6780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.875321][ T6780] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 487.930756][ T6780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.870276][ T5584] Bluetooth: hci4: command tx timeout [ 489.187526][ T6805] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 489.293146][ T6805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.359391][ T6805] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 489.548174][ T6805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.560620][ T6805] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 489.613266][ T6805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.950369][ T6805] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 490.032081][ T6805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.169046][ T5232] 8021q: adding VLAN 0 to HW filter on device eth10 [ 493.289326][ T80] bridge_slave_1: left allmulticast mode [ 493.359526][ T80] bridge_slave_1: left promiscuous mode [ 493.390742][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.466527][ T80] bridge_slave_0: left allmulticast mode [ 493.510549][ T80] bridge_slave_0: left promiscuous mode [ 493.532356][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.604371][ T80] bridge_slave_1: left allmulticast mode [ 493.610483][ T80] bridge_slave_1: left promiscuous mode [ 493.617068][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.677502][ T80] bridge_slave_0: left allmulticast mode [ 493.683696][ T80] bridge_slave_0: left promiscuous mode [ 493.714758][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.678469][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.757973][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.788082][ T80] bond0 (unregistering): Released all slaves [ 495.886126][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.936055][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.975352][ T80] bond0 (unregistering): Released all slaves [ 496.341721][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.350371][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.358348][ T6918] bridge_slave_0: entered allmulticast mode [ 496.371785][ T6918] bridge_slave_0: entered promiscuous mode [ 496.397557][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.405564][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.435453][ T6918] bridge_slave_1: entered allmulticast mode [ 496.447106][ T6918] bridge_slave_1: entered promiscuous mode [ 496.595037][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.625727][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.789578][ T6918] team0: Port device team_slave_0 added [ 496.815803][ T6918] team0: Port device team_slave_1 added [ 497.006586][ T5232] 8021q: adding VLAN 0 to HW filter on device eth13 [ 497.131114][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.175321][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.226910][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.272645][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.285612][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.316347][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.422048][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.445536][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.453930][ T6951] bridge_slave_0: entered allmulticast mode [ 497.479369][ T6951] bridge_slave_0: entered promiscuous mode [ 497.635332][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.688999][ T6805] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.826314][ T6805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.837348][ T6805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.963434][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.971497][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.050671][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.058734][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.388973][ T80] hsr_slave_0: left promiscuous mode [ 498.404524][ T80] hsr_slave_1: left promiscuous mode [ 498.420798][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.441129][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.474103][ T80] hsr_slave_0: left promiscuous mode [ 498.510581][ T80] hsr_slave_1: left promiscuous mode [ 498.519509][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.536482][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.481692][ T56] ===================================================== [ 499.490036][ T56] BUG: KMSAN: uninit-value in n_tty_lookahead_flow_ctrl+0x372/0x6e0 [ 499.499555][ T56] n_tty_lookahead_flow_ctrl+0x372/0x6e0 [ 499.506310][ T56] tty_port_default_lookahead_buf+0x146/0x200 [ 499.513723][ T56] flush_to_ldisc+0x808/0xe40 [ 499.519620][ T56] process_scheduled_works+0xb65/0x1e40 [ 499.526594][ T56] worker_thread+0xee4/0x1590 [ 499.532514][ T56] kthread+0x53a/0x5f0 [ 499.544465][ T56] ret_from_fork+0x20f/0x8d0 [ 499.550787][ T56] ret_from_fork_asm+0x1a/0x30 [ 499.556818][ T56] [ 499.560071][ T56] Uninit was created at: [ 499.565387][ T56] __kmalloc_noprof+0x482/0x1660 [ 499.571365][ T56] __tty_buffer_request_room+0x3d4/0x7a0 [ 499.578115][ T56] __tty_insert_flip_string_flags+0x157/0x6e0 [ 499.585416][ T56] uart_insert_char+0x368/0x930 [ 499.594642][ T56] serial8250_read_char+0x1ba/0x670 [ 499.601194][ T56] serial8250_handle_irq_locked+0x6d4/0xa40 [ 499.608158][ T56] serial8250_handle_irq+0x189/0x710 [ 499.614609][ T56] serial8250_default_handle_irq+0x116/0x350 [ 499.621858][ T56] serial8250_interrupt+0xcb/0x3f0 [ 499.628458][ T56] __handle_irq_event_percpu+0x118/0xf30 [ 499.635368][ T56] handle_irq_event+0xe0/0x2a0 [ 499.641749][ T56] handle_edge_irq+0x2a9/0xaf0 [ 499.648480][ T56] __common_interrupt+0x9d/0x180 [ 499.654537][ T56] common_interrupt+0x94/0xb0 [ 499.660369][ T56] asm_common_interrupt+0x2b/0x40 [ 499.666374][ T56] [ 499.669815][ T56] CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(lazy) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 499.680599][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.691888][ T56] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 499.699332][ T56] ===================================================== [ 499.709232][ T56] Disabling lock debugging due to kernel taint [ 499.731138][ T56] Kernel panic - not syncing: kmsan.panic set ... [ 499.737995][ T56] CPU: 0 UID: 0 PID: 56 Comm: kworker/u8:4 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 499.749252][ T56] Tainted: [B]=BAD_PAGE [ 499.753718][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 499.763946][ T56] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 499.770407][ T56] Call Trace: [ 499.773807][ T56] [ 499.776862][ T56] __dump_stack+0x26/0x30 [ 499.781410][ T56] dump_stack_lvl+0x50/0x1c0 [ 499.786304][ T56] ? dump_stack+0x12/0x25 [ 499.791033][ T56] dump_stack+0x1e/0x25 [ 499.795381][ T56] vpanic+0x7b4/0x1430 [ 499.799808][ T56] panic+0x15d/0x160 [ 499.804010][ T56] kmsan_report+0x31a/0x320 [ 499.808764][ T56] ? __msan_warning+0x1b/0x30 [ 499.813682][ T56] ? n_tty_lookahead_flow_ctrl+0x372/0x6e0 [ 499.819722][ T56] ? tty_port_default_lookahead_buf+0x146/0x200 [ 499.826412][ T56] ? flush_to_ldisc+0x808/0xe40 [ 499.831559][ T56] ? process_scheduled_works+0xb65/0x1e40 [ 499.837549][ T56] ? worker_thread+0xee4/0x1590 [ 499.842717][ T56] ? kthread+0x53a/0x5f0 [ 499.847382][ T56] ? ret_from_fork+0x20f/0x8d0 [ 499.852363][ T56] ? ret_from_fork_asm+0x1a/0x30 [ 499.857542][ T56] ? up_read+0x6a/0xf0 [ 499.861994][ T56] ? n_tty_receive_buf_common+0x239e/0x25a0 [ 499.868155][ T56] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 499.874205][ T56] ? hrtimer_start_range_ns+0x170c/0x38f0 [ 499.880241][ T56] ? kmsan_get_metadata+0xf1/0x160 [ 499.885632][ T56] __msan_warning+0x1b/0x30 [ 499.890369][ T56] n_tty_lookahead_flow_ctrl+0x372/0x6e0 [ 499.896229][ T56] ? kmsan_get_metadata+0xf1/0x160 [ 499.901715][ T56] ? __pfx_n_tty_lookahead_flow_ctrl+0x10/0x10 [ 499.908130][ T56] tty_port_default_lookahead_buf+0x146/0x200 [ 499.914530][ T56] flush_to_ldisc+0x808/0xe40 [ 499.919465][ T56] ? __pfx_tty_port_default_lookahead_buf+0x10/0x10 [ 499.926691][ T56] ? __pfx_flush_to_ldisc+0x10/0x10 [ 499.932177][ T56] process_scheduled_works+0xb65/0x1e40 [ 499.938031][ T56] worker_thread+0xee4/0x1590 [ 499.942978][ T56] kthread+0x53a/0x5f0 [ 499.947291][ T56] ? __pfx_worker_thread+0x10/0x10 [ 499.952646][ T56] ? __pfx_kthread+0x10/0x10 [ 499.957501][ T56] ret_from_fork+0x20f/0x8d0 [ 499.962309][ T56] ? __switch_to+0x573/0x7a0 [ 499.967465][ T56] ? __pfx_kthread+0x10/0x10 [ 499.972315][ T56] ret_from_fork_asm+0x1a/0x30 [ 499.977344][ T56] [ 499.981154][ T56] Kernel Offset: disabled [ 499.985589][ T56] Rebooting in 86400 seconds..