last executing test programs: 17m41.503968924s ago: executing program 32 (id=46): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r0, &(0x7f0000000f80)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000013c0)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 16m41.395214641s ago: executing program 33 (id=363): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7f, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0x5, 0x2ba8}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000540)={0x1, 0x4, 0xe608}) close_range(r3, 0xffffffffffffffff, 0x0) 13m0.939584556s ago: executing program 34 (id=1089): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20) syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000f40)='./bus\x00', 0xe, &(0x7f0000000f80)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000001000)="$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") setxattr$trusted_overlay_origin(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0), &(0x7f0000001500), 0x2, 0x1) chdir(&(0x7f0000001540)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001580)='blkio.bfq.idle_time\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) ftruncate(r0, 0xc176) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./tracing\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m11.878458124s ago: executing program 35 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000008c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m52.359988479s ago: executing program 8 (id=1600): r0 = mq_open(&(0x7f00000028c0)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, &(0x7f0000002940)={0x9, 0x1, 0x3, 0xfffffffffffffff9}) mq_timedreceive(r0, &(0x7f0000002980)=""/128, 0x80, 0x6, &(0x7f0000002a00)={0x77359400}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x5, 0x20, 0x8000, 0x5}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 9m50.675760448s ago: executing program 8 (id=1608): socket(0x2, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) pselect6(0x40, &(0x7f0000000540)={0x8, 0x0, 0x5, 0xfffffffffffffffe, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000580)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 9m48.707022652s ago: executing program 36 (id=1608): socket(0x2, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) pselect6(0x40, &(0x7f0000000540)={0x8, 0x0, 0x5, 0xfffffffffffffffe, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000580)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 9m46.607878167s ago: executing program 6 (id=1616): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x89801) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 9m46.453007984s ago: executing program 0 (id=1617): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r8, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 9m45.774096896s ago: executing program 0 (id=1622): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000640), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x30}, {r1, 0x8}, {0xffffffffffffffff, 0x120}, {r1, 0x62f0}], 0x4, &(0x7f0000000340)={0x77359400}, 0x0, 0x0) 9m42.865432669s ago: executing program 37 (id=1622): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000640), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x30}, {r1, 0x8}, {0xffffffffffffffff, 0x120}, {r1, 0x62f0}], 0x4, &(0x7f0000000340)={0x77359400}, 0x0, 0x0) 9m42.838804661s ago: executing program 6 (id=1625): syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x1a1300) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000300)=[{0x15, 0x1, 0x0, 0x3}, {0x54, 0xfe}, {0x6, 0x0, 0x0, 0xfff}]}) 9m41.695024194s ago: executing program 6 (id=1628): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1d) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x38) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x6f) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000400)={{}, 0x1, 0x1d, 0x1}, 0x18) write$input_event(r0, &(0x7f0000000440)={{}, 0x1, 0x38, 0x1}, 0x18) write$input_event(r0, &(0x7f0000000480)={{}, 0x1, 0x6f, 0x1}, 0x18) write$input_event(r0, &(0x7f00000004c0), 0x18) 9m40.546367391s ago: executing program 6 (id=1629): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x10000, 0x0) 9m39.717917109s ago: executing program 6 (id=1630): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000600)=r1) ppoll(&(0x7f0000000640)=[{r1, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000680)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000700)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f00000008c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000a00)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000a40)=0x1) 9m39.228069226s ago: executing program 6 (id=1631): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000280)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) setpgid(r3, r3) setpgid(0x0, r3) truncate(&(0x7f0000000300)='./file0/file1\x00', 0xe2) 9m37.874099129s ago: executing program 38 (id=1631): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000280)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) setpgid(r3, r3) setpgid(0x0, r3) truncate(&(0x7f0000000300)='./file0/file1\x00', 0xe2) 9m17.546442717s ago: executing program 5 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000fc0)=0x7) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/255, 0xff}], 0x1) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) r3 = gettid() tkill(r3, 0x13) 9m17.343655984s ago: executing program 5 (id=1674): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r0, &(0x7f0000000300)=""/56, 0x38) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 9m17.22133876s ago: executing program 5 (id=1676): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/sys/net/ipv4/tcp_ecn\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='3', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) write$md_new_array(0xffffffffffffffff, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000007c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 9m17.001761057s ago: executing program 5 (id=1677): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000d80)={'wg0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x68083, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000d40)=0x1) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2000c12, &(0x7f0000000100)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,session=0x0000000000000023,utf8,map=acorn,check=strict,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRES32, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303004332c0091386ba63f775915b6b981669f99a6758fc6130e2e181f075ed46c0b97ee8c6ce2d08017924dd527144bf683e31335a3b7f24e5a1a93da15e92a08550215ecc4070da2db21d6ac07dadb5cb173d0b41818198ff783f10620b9875eeda06e2edde06600000000"], 0x1, 0xa4c, &(0x7f0000000280)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000dc0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x76, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '{\x9a.\x89=\x94\xdc\xc3\x8f\x8a\x99', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x46, 0x4f, 0x4f, 0x43, 0x43, 0x4f, 0x43]}, 0x46) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) 9m16.366956644s ago: executing program 5 (id=1679): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1e, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a40)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 9m15.786299388s ago: executing program 5 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x3) landlock_restrict_self(r3, 0xc) 9m15.054313043s ago: executing program 39 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x3) landlock_restrict_self(r3, 0xc) 3m11.237686285s ago: executing program 7 (id=2647): r0 = socket(0x1e, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/204, 0xcc}], 0x1}, 0x6}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 3m8.708501292s ago: executing program 7 (id=2653): r0 = socket(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x2000) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x20, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_rxfh_indir={0x46}}) 3m7.338912147s ago: executing program 7 (id=2655): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000240)={[{@nobarrier}]}, 0x4, 0x521, &(0x7f0000003400)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f0000003940)='./bus\x00', 0x14927e, 0x12) capset(&(0x7f0000003980)={0x20080522}, &(0x7f00000039c0)={0x200002, 0x200003, 0x801, 0x1, 0x5, 0x2000000}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000003a00)=0x4091) dup(r1) unshare(0x2c000680) getuid() unshare(0x8040480) 3m6.700492922s ago: executing program 7 (id=2663): socket$rxrpc(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0x0, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x20146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacdc, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x400, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) 3m2.38529547s ago: executing program 7 (id=2670): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x1b8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3m1.14452371s ago: executing program 7 (id=2671): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4004080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020) 2m44.814928462s ago: executing program 40 (id=2671): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ac0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4004080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/net/rpc/auth.rpcsec.init/channel\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020) 2m6.770578421s ago: executing program 9 (id=2768): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000002440)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000002480)='fd', 0x0, r0) write$tun(r0, &(0x7f00000024c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002500)='./cgroup.cpu/syz1\x00', 0x1ff) 2m1.970253951s ago: executing program 9 (id=2789): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x80002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000280)='7', 0x1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f00000001c0)=0x2a0) 2m0.272655424s ago: executing program 9 (id=2782): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x2010480, &(0x7f0000000480), 0x5, 0x76a, &(0x7f00000004c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000cc0)='./file7/file0\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x402}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r0 = syz_clone3(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000800) fallocate(0xffffffffffffffff, 0x0, 0x87, 0x2000402) syz_open_procfs(0x0, 0x0) epoll_create1(0x80000) setpgid(r0, r0) chroot(&(0x7f0000000200)='./file0\x00') 1m56.88618298s ago: executing program 4 (id=2787): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) keyctl$session_to_parent(0x12) 1m54.204498926s ago: executing program 4 (id=2792): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x6e22, 0x22, @mcast2, 0x8}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r4 = io_uring_setup(0x36c2, &(0x7f0000000280)={0x0, 0xb2d1, 0x1, 0x1, 0x383}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)=""/4095, 0x440000}], 0x100000000000011a) 1m54.113984867s ago: executing program 9 (id=2793): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, 0x0, 0x1, 0x0, 0x0) 1m49.307171692s ago: executing program 4 (id=2798): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./trace\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/options/bin\x00', 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x80000) 1m49.195694099s ago: executing program 9 (id=2799): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000000c40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019c40)=0x40003) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) 1m47.582074324s ago: executing program 4 (id=2803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000680)='GPL\x00', 0x2, 0xfd90, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000b40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x366, 0x10, &(0x7f0000000c80), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r4}, &(0x7f0000000dc0), &(0x7f0000000e00)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000240), 0x10}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40086602, 0x110e22fff2) close(r3) close(r4) recvmsg$unix(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) 1m46.159809978s ago: executing program 9 (id=2804): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1m44.698866184s ago: executing program 4 (id=2811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000005c0)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x9b00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd) 1m40.532042697s ago: executing program 4 (id=2813): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2040400) syz_emit_ethernet(0x3a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='100', 0x3) openat(r0, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x20082, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10010000}, 0x50) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f0000000500)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m29.610912658s ago: executing program 41 (id=2804): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1m25.146985937s ago: executing program 42 (id=2813): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2040400) syz_emit_ethernet(0x3a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='100', 0x3) openat(r0, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x20082, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10010000}, 0x50) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f0000000500)=@framed, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 42.507852733s ago: executing program 1 (id=2881): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x221c0, 0xac) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019380)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 38.519732816s ago: executing program 1 (id=2885): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.531602641s ago: executing program 1 (id=2891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) capset(0x0, 0x0) 33.378702701s ago: executing program 1 (id=2892): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x13) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0x4, 0x6, "af68fa15b1a8111a"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, &(0x7f00000000c0)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, "7606dd", 0x16, 0x6, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x4ea1, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8f0, 0x0, 0x6}, {"e34b"}}}}}}}}, 0x54) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000008c0)='270', 0x3) unshare(0x40000000) 28.834049693s ago: executing program 2 (id=2898): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3008000, &(0x7f0000000480), 0x1, 0x506, &(0x7f0000001d00)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4cf6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000680)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0xe, 0x0, &(0x7f0000000780)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 26.029265939s ago: executing program 3 (id=2900): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) openat(0xffffffffffffff9c, 0x0, 0x1, 0x20) 24.698472768s ago: executing program 3 (id=2901): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netstat\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x16, &(0x7f00000006c0)=ANY=[], &(0x7f00000007c0)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000480)) lseek(r3, 0x2000, 0x1) 23.443823574s ago: executing program 3 (id=2902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) unlink(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000700), 0x4) 23.365029831s ago: executing program 2 (id=2903): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000bc0), &(0x7f0000000c40)={'syz', 0x1}, &(0x7f0000000cc0)='\x00', 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) 7.495586539s ago: executing program 0 (id=2825): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000005fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000060c0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2aa, &(0x7f0000006300)="$eJzs3c9OE10Yx/EfpS/wgjBVFAVjPNGNbiZQr6AhkBibaJAa/yQmg0y16dCSToOpMcLOrWsvgbh0Z2K8ATZegQt3bFyyMI7pdIACQ4IEmYLfz+Y8nTNPc06eM81p0pmuP3y3UC76dtGpK9VllJYGtCFllFK3WrqiNhXGPWq3opvD+W9X7j96fCeXz0/NGDOdm72VNcYMXf388vWHa1/qAw8+Dn3q1Vrm6fqP7Pe1kbXR9V+zL0q+KfmmUq0bx8xVq3VnznPNfMkv28bc81zHd02p4ru1Hf1Fr7q42DBOZX6wf7Hm+r5xKg1TdhumXjX1WsM4z51Sxdi2bQb7haa+/btSxzkOJKVWyzmTksb29BRWExkQAABIVMz+f+Uw+/909Jr9/0lSWJ2ZcXJJjwJHyNp7qLn/fxL7dY/9PwAAAAAAAAAAAAAAAAAAAAAAJ8FGEFhBEFjNdvP+gB5JQXT8f0n9kgYknZE0KGkous0gI+mspHOShiWdl3RB0oiki5IuSRpte6+Ep4oY7fVvtv9F9e+m/v+E/eq/6/oPHyJB/U+fA9af6/+UantwT5+08HapsFRota3+XFEleXI1Lks/w1pGWvH07fzUuAlldHlhOcpfXip078yfkNVcMHH5E618szO/N1x3W/lZWc0FFpefjc3v043rbfm2LH19pqo8zYdrcjv/zYQxk3fzu/LHwvN26zne8vx1ttkSWz/b3q+/lX+A9RGMx9YnrbF0snOH5DdelR3Pc2sEBJ0XjHTGMA4dvO+MYRwmSPqTCcdhu+hJjwQAAAAAAAAAAAAAAAAA8CeO5jeDm/8UFn9OwlMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCP3wEAAP//t8JUVA==") prlimit64(0x0, 0xe, &(0x7f00000065c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000006600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000006640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000066c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000006740), 0x651, 0x0) recvmmsg(r1, &(0x7f0000006780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000067c0)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000069c0)='./tracing\x00', 0x1ff) unshare(0x2c020400) prctl$PR_SET_SECUREBITS(0x1c, 0x30) msgsnd(0x0, 0x0, 0x8, 0x0) 7.493305989s ago: executing program 2 (id=2913): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r3, 0x1) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ftruncate(r0, 0x1) ftruncate(r1, 0x1) ftruncate(r4, 0x1) 7.492410596s ago: executing program 3 (id=2914): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x240280) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="2e00000011008188040f46ecdb4cb9cca7480e3011000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc", 0x24}], 0x1) 7.489300979s ago: executing program 1 (id=2915): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) open(&(0x7f00000002c0)='./file1\x00', 0x4c27e, 0x1bb) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x80002, 0x0) socket$unix(0x1, 0x1, 0x0) io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0xc8a7, 0x10000, 0x8000008, 0x79}) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.216373308s ago: executing program 0 (id=2904): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x804, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlate}, {@fat=@nfs}, {@rodir}, {@utf8}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@errors_continue}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nocase}, {@utf8no}, {@rodir}]}, 0x1, 0x2a6, &(0x7f0000000a40)="$eJzs3c2KW2UYAOD35D/tIlm4EqEHdOGqdLyCKVJBHBCULNSFFpuCTEIhgUBUjF15BV6BCN6MG/EGvADFnV2IR05OfstJTKQzGfR5Vh/vT7/3+3oms8qZT14ZXj56Mn789MtfotVKonIe5/EsiW5UYunrKPXzb+VxAOCGe5Zl8Xs212oWoel2RX1HZ61y5cMBAFdi4/d/dupZAIDr8f4HH75z/+LiwXtp2ooYfjPpJRGtdf7+4/gsBtGPe9GJPyOylWL91tsXD6KW5rrx2nA26U16EcOPf1z2/xox7z+LTnTL+8/y7u+T2OifTXr1uLXY/3wQ/Xe/i068VN7/RlrY7I9eI15/dWP+u9GJnz6NJzGIR4vZlv1fnaXpm9m3f3zxUR7N+5PZpNdc1S2qq9f2nwIAAAAAAAAAAAAAAAAAAAAAwH/e3XSlu/3+neWL//fk97wfaLbxfp57aZpmSVG/7q/Fy7WonfLsAAAAAAAAAAAAAAAAAAAAcFOMp59fPhwM+qMDFlE5tHj5tf6SVPy1HWlGxCG7N0tTd8qK66X/TjFPVBejDZKII84+Gk/r0Zx3/nNx9ZhbHY2n7Xye/iipxTFd+Ul3X12yirQ3U3ei2CuPtIvFRuTg3X+4Xdzi86lWEVk+XZcPk+hX9t5Yq+wheQGLrOTxq+7sajwfaUf5AfPUnt0bt//VzFlnRyqJiPrqMrdr5j9kt9YPZP3F3mHpx0XjCj6CAAAAAAAAAAAAAAAAAACAhfWXfkuST08wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcwPrv/x+xmC2ad9Vk1XxRi0XkxEcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf+DvAAAA//+zu1nK") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000d80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f0000000e00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000ec0)=[{0x0, 0x11, 0x1000000, 0x80000000}], 0x0) 6.216147836s ago: executing program 1 (id=2905): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1c, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f00000005c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000600)='./bus/file0\x00', 0x143041, 0x12a) r1 = io_uring_setup(0x4dec, &(0x7f0000000640)={0x0, 0x54c4, 0x0, 0x0, 0x2ff}) openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000880), 0x651, 0x0) recvmmsg(r2, &(0x7f00000008c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.213652381s ago: executing program 2 (id=2917): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f000041b000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x96c79000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./trace\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace/trace\x00', 0x0, 0x0) lseek(r3, 0x10001, 0x100000000000000) 6.092865138s ago: executing program 8 (id=2698): socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000b80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000c00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000080)=0x38800000, 0x4) listen(r3, 0x2) 5.067555965s ago: executing program 2 (id=2906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x40000c0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@call={0x85, 0x0, 0x0, 0x2a}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5bc, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), &(0x7f0000000700)=@v3={0x3000000, [{0x83, 0x106}, {0x4, 0x1fe}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x2c3) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) truncate(&(0x7f00000006c0)='./file0/file1\x00', 0xe2) 4.951448011s ago: executing program 8 (id=2907): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) pread64(r0, &(0x7f00000195c0)=""/102356, 0x18fd4, 0x4000) 4.83280919s ago: executing program 3 (id=2908): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='0', 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000780)={0xc}) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') 2.889833863s ago: executing program 0 (id=2909): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x59a6b28c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) r4 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0xd5ee, 0x3801, 0x4, 0x402c1}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000024) close_range(r4, 0xffffffffffffffff, 0x0) 2.88798486s ago: executing program 8 (id=2910): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) syz_ublk_setup_io_uring(0x3, &(0x7f0000000640)={0x0, 0x4}, &(0x7f00000006c0)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000ac0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000b00)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 559.752839ms ago: executing program 0 (id=2911): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95c, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7b, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x9, 0x20002, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xfffffffd, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x0, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x6, 0x401, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x7, 0x13, 0x3, 0x4000009, 0x6, 0x1, 0x3, 0xbc45, 0x48c93690, 0x42], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0xac8, 0xbf, 0x2000002, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0xc, 0xf, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x0, 0x3, 0x0, 0x40, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x961e, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 349.296894ms ago: executing program 3 (id=2912): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./config\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) rmdir(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0\x00') pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) 226.186312ms ago: executing program 2 (id=2916): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}], 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socket$nl_audit(0x10, 0x3, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002c80)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002cc0)='./debug\x00', &(0x7f0000002d00)='debugfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000002d80)='10000\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000002dc0)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f0000002e00)='5', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002e40)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000002e80)='1', 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000002f40)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xfd, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) 0s ago: executing program 8 (id=2918): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) socket(0xa, 0x3, 0x87) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000403c: 0x866e instead [ 985.445950][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 985.445983][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 985.446017][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x74a5 instead [ 985.446055][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x866e instead [ 985.446145][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 985.446176][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 985.446209][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x74a5 instead [ 985.446245][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x866e instead [ 985.446334][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 985.446364][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 985.446398][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x74a5 instead [ 985.446434][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x866e instead [ 985.449107][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 985.449141][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 985.449175][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x74a5 instead [ 985.449211][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x866e instead [ 985.449299][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 985.449330][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 985.449363][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x74a5 instead [ 985.450068][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x866e instead [ 985.450159][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 985.450190][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 985.450223][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x74a5 instead [ 985.450260][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x866e instead [ 985.450349][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 985.450380][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 985.450413][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x74a5 instead [ 985.450449][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x866e instead [ 985.450542][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 985.450573][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 985.450606][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x74a5 instead [ 985.450642][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x866e instead [ 985.450730][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 985.450760][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 985.450793][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x74a5 instead [ 985.450830][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x866e instead [ 985.453324][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 985.453358][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 985.453391][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x74a5 instead [ 985.453428][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x866e instead [ 985.453521][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 985.453552][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 985.453585][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x74a5 instead [ 985.453621][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x866e instead [ 985.453708][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 985.453739][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 985.453772][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x74a5 instead [ 985.453808][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x866e instead [ 985.458799][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 985.458836][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 985.458869][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x74a5 instead [ 985.458910][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x866e instead [ 985.458999][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 985.459029][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 985.459062][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x74a5 instead [ 985.459098][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x866e instead [ 985.459191][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 985.459221][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 985.459254][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x74a5 instead [ 985.459290][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x866e instead [ 985.459378][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 985.459426][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 985.459460][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x74a5 instead [ 985.465947][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x866e instead [ 985.466047][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 985.466079][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 985.466112][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x74a5 instead [ 985.466148][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x866e instead [ 985.466236][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 985.466267][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 985.466300][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x74a5 instead [ 985.466336][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x866e instead [ 985.472097][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 985.472134][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 985.472167][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x74a5 instead [ 985.476215][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x866e instead [ 985.476314][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 985.476346][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 985.476379][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x74a5 instead [ 985.476415][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x866e instead [ 985.476510][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 985.476540][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 985.476573][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x74a5 instead [ 985.479106][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x866e instead [ 985.479200][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 985.479232][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 985.479266][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x74a5 instead [ 985.479302][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x866e instead [ 985.479392][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 985.479446][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 985.479485][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x74a5 instead [ 985.479521][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x866e instead [ 985.479656][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 985.479687][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 985.479720][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x74a5 instead [ 985.479756][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x866e instead [ 985.479843][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 985.479874][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 985.479907][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x74a5 instead [ 985.479943][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x866e instead [ 985.480048][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 985.480079][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 985.484836][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x74a5 instead [ 985.484877][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x866e instead [ 985.484967][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 985.484999][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 985.485032][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x74a5 instead [ 985.485069][T17274] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x866e instead [ 985.485141][T17274] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 985.485158][T17274] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 988.293372][T17305] loop3: detected capacity change from 0 to 8192 [ 989.325556][ T322] net_ratelimit: 71 callbacks suppressed [ 989.325588][ T322] bond0: (slave bridge1): failed to get link speed/duplex [ 990.340212][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.343392][ T320] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.346165][ T322] bond0: (slave bridge1): failed to get link speed/duplex [ 990.573046][T17329] loop2: detected capacity change from 0 to 4096 [ 990.805906][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.806275][ T320] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.910181][ T7516] bond0: (slave bridge1): failed to get link speed/duplex [ 990.927483][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.927519][ T3273] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 990.980595][T17329] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 991.010039][T17329] ntfs3(loop2): Failed to load $Extend (-22). [ 991.010073][T17329] ntfs3(loop2): Failed to initialize $Extend. [ 991.354274][ T322] bond0: (slave bridge1): failed to get link speed/duplex [ 992.130667][T17305] Dev loop3: unable to read RDB block 8 [ 992.130808][T17305] loop3: unable to read partition table [ 992.131054][T17305] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 992.372069][T17346] loop4: detected capacity change from 0 to 512 [ 992.383101][T17346] EXT4-fs: Ignoring removed nobh option [ 992.451160][T17346] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 992.451197][T17346] loop4: lost filesystem error report for type 5 error -12 [ 992.455266][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 992.455299][ C1] EXT4-fs (loop4): initial error at time 1794095502: ext4_process_orphan:346 [ 992.455340][ C1] EXT4-fs (loop4): last error at time 1794095502: ext4_process_orphan:346 [ 992.501504][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.501580][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.540153][T17346] EXT4-fs (loop4): 2 truncates cleaned up [ 992.556287][T17346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.736229][T17345] EXT4-fs error (device loop4): ext4_validate_block_bitmap:435: comm syz.4.2667: bg 0: block 5: invalid block bitmap [ 992.769779][T17345] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 992.769825][T17345] EXT4-fs (loop4): This should not happen!! Data will be lost [ 992.769825][T17345] [ 992.769851][T17345] EXT4-fs (loop4): Total free blocks count 0 [ 992.769876][T17345] EXT4-fs (loop4): Free/Dirty block details [ 992.769937][T17345] EXT4-fs (loop4): free_blocks=0 [ 992.769987][T17345] EXT4-fs (loop4): dirty_blocks=33 [ 992.770011][T17345] EXT4-fs (loop4): Block reservation details [ 992.770039][T17345] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 993.877424][ T8314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.349629][ T3273] net_ratelimit: 54 callbacks suppressed [ 994.349689][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 994.349830][ T3273] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 994.442569][T13680] bond0: (slave bridge1): failed to get link speed/duplex [ 994.477535][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 994.477663][ T320] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 994.546082][T17225] bond0: (slave bridge1): failed to get link speed/duplex [ 994.588719][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 994.588944][T17225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 994.663186][ T291] bond0: (slave bridge1): failed to get link speed/duplex [ 994.694854][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 997.499500][T17390] fuse: Bad value for 'fd' [ 998.636726][T17401] cfg80211: Invalid regulatory domain detected: BB [ 999.677958][ T64] net_ratelimit: 36 callbacks suppressed [ 999.677988][ T64] bond0: (slave bridge1): failed to get link speed/duplex [ 999.678054][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 999.678088][ T64] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 999.787082][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 999.787122][T13462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 999.787186][T13462] bond0: (slave bridge1): failed to get link speed/duplex [ 999.900898][T13462] bond0: (slave bridge1): failed to get link speed/duplex [ 999.900969][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 999.901002][T13462] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1000.005196][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1003.991520][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'. [ 1004.218927][T17440] loop2: detected capacity change from 0 to 1024 [ 1004.254621][T17440] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1004.254664][T17440] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1004.302931][T17440] EXT4-fs (loop2): invalid journal inode [ 1004.303022][T17440] EXT4-fs (loop2): can't get journal size [ 1004.366053][T17440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1004.745385][ T322] net_ratelimit: 48 callbacks suppressed [ 1004.746000][ T322] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1004.747823][ T322] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1004.804428][ T7515] bond0: (slave bridge1): failed to get link speed/duplex [ 1004.860117][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1004.873709][ T3337] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1004.949322][ T277] bond0: (slave bridge1): failed to get link speed/duplex [ 1004.976782][ T51] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1004.976820][ T51] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1005.056338][ T277] bond0: (slave bridge1): failed to get link speed/duplex [ 1005.084389][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1008.428176][T17460] loop4: detected capacity change from 0 to 1024 [ 1008.429164][T17460] EXT4-fs: Ignoring removed mblk_io_submit option [ 1008.957729][T17460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1009.089386][T17460] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1009.302362][T17460] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.2696: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1009.302497][T17460] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1009.322798][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1009.322828][ C1] EXT4-fs (loop4): initial error at time 1794095518: ext4_ext_check_inode:521: inode 11 [ 1009.322878][ C1] EXT4-fs (loop4): last error at time 1794095518: ext4_ext_check_inode:521: inode 11 [ 1009.348922][T17460] EXT4-fs error (device loop4): ext4_orphan_get:1407: comm syz.4.2696: couldn't read orphan inode 11 (err -117) [ 1009.349016][T17460] loop4: lost filesystem error report for type 5 error -117 [ 1009.374085][T17460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.808480][T17068] net_ratelimit: 31 callbacks suppressed [ 1009.808510][T17068] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1009.808552][T17068] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1009.819698][ T51] bond0: (slave bridge1): failed to get link speed/duplex [ 1009.914386][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1009.914429][ T64] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1009.924304][ T291] bond0: (slave bridge1): failed to get link speed/duplex [ 1009.995853][T12594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.025823][ T8314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.028242][ T51] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1010.028280][ T51] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1010.039404][ T64] bond0: (slave bridge1): failed to get link speed/duplex [ 1010.136858][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1010.582782][T17472] EXT4-fs warning (device sda1): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed [ 1012.606305][T17477] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1012.606410][T17477] CIFS: Attempting to mount //127.0.0.1/share [ 1012.626152][T17477] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1014.246862][T17484] FAULT_INJECTION: forcing a failure. [ 1014.246862][T17484] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.246914][T17484] CPU: 1 UID: 0 PID: 17484 Comm: syz.3.2706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.246969][T17484] Tainted: [L]=SOFTLOCKUP [ 1014.246984][T17484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1014.247008][T17484] Call Trace: [ 1014.247021][T17484] [ 1014.247042][T17484] dump_stack_lvl+0x100/0x190 [ 1014.247108][T17484] should_fail_ex.cold+0x5/0xa [ 1014.247166][T17484] should_failslab+0xc2/0x120 [ 1014.247230][T17484] __kvmalloc_node_noprof+0x113/0x9b0 [ 1014.247286][T17484] ? sort_subprogs_topo+0xac0/0xf40 [ 1014.247324][T17484] ? bpf_compute_scc+0x9f9/0xc80 [ 1014.247382][T17484] bpf_compute_scc+0x9f9/0xc80 [ 1014.247457][T17484] bpf_check+0x799b/0xa0f0 [ 1014.247547][T17484] ? __pfx_bpf_check+0x10/0x10 [ 1014.247597][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.247645][T17484] ? lock_acquire+0x1d1/0x380 [ 1014.247699][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.247745][T17484] ? find_held_lock+0x2b/0x80 [ 1014.247782][T17484] ? bpf_prog_load+0x1af0/0x2b20 [ 1014.247833][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.247884][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.247931][T17484] ? __asan_memset+0x23/0x50 [ 1014.247977][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.248032][T17484] ? bpf_prog_load+0x1baf/0x2b20 [ 1014.248085][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.248132][T17484] bpf_prog_load+0x1baf/0x2b20 [ 1014.248194][T17484] ? __pfx_bpf_prog_load+0x10/0x10 [ 1014.248241][T17484] ? lock_acquire+0x1d1/0x380 [ 1014.248297][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.248380][T17484] __sys_bpf+0x146f/0x4b60 [ 1014.248445][T17484] ? __pfx___sys_bpf+0x10/0x10 [ 1014.248494][T17484] ? find_held_lock+0x2b/0x80 [ 1014.248531][T17484] ? futex_wake+0x4ea/0x5e0 [ 1014.248583][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.248632][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.248710][T17484] ? __pfx_locks_remove_posix+0x10/0x10 [ 1014.248763][T17484] ? kmem_cache_free+0x127/0x6c0 [ 1014.248816][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.248886][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.248934][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.248980][T17484] ? __x64_sys_futex+0x358/0x4d0 [ 1014.249028][T17484] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1014.249081][T17484] ? xfd_validate_state+0x129/0x190 [ 1014.249136][T17484] ? __x64_sys_bpf+0xce/0x140 [ 1014.249186][T17484] __x64_sys_bpf+0xce/0x140 [ 1014.249241][T17484] ? do_syscall_64+0xae/0x790 [ 1014.249302][T17484] do_syscall_64+0x123/0x790 [ 1014.249365][T17484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.249405][T17484] RIP: 0033:0x7f89be59fb19 [ 1014.249437][T17484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.249475][T17484] RSP: 002b:00007f89bf4df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1014.249513][T17484] RAX: ffffffffffffffda RBX: 00007f89be825fa0 RCX: 00007f89be59fb19 [ 1014.249541][T17484] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1014.249567][T17484] RBP: 00007f89be637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1014.249592][T17484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.249621][T17484] R13: 00007f89be826038 R14: 00007f89be825fa0 R15: 00007ffcfffd9af8 [ 1014.249674][T17484] [ 1014.336997][T17486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1014.373456][T17486] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1014.384627][T17486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1014.405971][T17486] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1014.406718][T17486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1014.474813][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1014.516918][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1014.519674][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1014.522451][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1014.523227][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1014.876927][ T14] net_ratelimit: 35 callbacks suppressed [ 1014.876958][ T14] bond0: (slave bridge1): failed to get link speed/duplex [ 1014.965277][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1014.965324][ T14] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1015.003305][ T291] bond0: (slave bridge1): failed to get link speed/duplex [ 1015.117321][ T51] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.117364][ T51] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1016.022154][ T51] bond0: (slave bridge1): failed to get link speed/duplex [ 1016.040451][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1016.040488][ T320] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1016.380387][ T51] bond0: (slave bridge1): failed to get link speed/duplex [ 1016.574783][ T5639] Bluetooth: hci6: command tx timeout [ 1018.654522][ T5639] Bluetooth: hci6: command tx timeout [ 1018.947632][T17068] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.002344][T17514] bridge0: port 3(team0) entered blocking state [ 1019.002466][T17514] bridge0: port 3(team0) entered disabled state [ 1019.002815][T17514] team0: entered allmulticast mode [ 1019.002842][T17514] team_slave_0: entered allmulticast mode [ 1019.002899][T17514] team_slave_1: entered allmulticast mode [ 1019.059999][T17514] team0: entered promiscuous mode [ 1019.060032][T17514] team_slave_0: entered promiscuous mode [ 1019.060253][T17514] team_slave_1: entered promiscuous mode [ 1019.082848][T17514] bridge0: port 3(team0) entered blocking state [ 1019.083101][T17514] bridge0: port 3(team0) entered forwarding state [ 1019.933344][ T320] net_ratelimit: 66 callbacks suppressed [ 1019.933375][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1019.960907][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1019.975812][ T277] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1019.985993][T17068] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.997762][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.018814][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.035210][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.054125][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.077058][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.096016][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.124478][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.154543][T17526] team0: left allmulticast mode [ 1020.154573][T17526] team_slave_0: left allmulticast mode [ 1020.154602][T17526] team_slave_1: left allmulticast mode [ 1020.154774][T17526] team0: left promiscuous mode [ 1020.154799][T17526] team_slave_0: left promiscuous mode [ 1020.155020][T17526] team_slave_1: left promiscuous mode [ 1020.156964][T17526] bridge0: port 3(team0) entered disabled state [ 1020.269835][T17485] rxe_eth0 speed is unknown, defaulting to 1000 [ 1020.478060][T17068] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.874392][ T5639] Bluetooth: hci6: command tx timeout [ 1023.271781][ T5639] Bluetooth: hci6: command tx timeout [ 1023.511249][T17068] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.431400][T17068] bridge_slave_1: left allmulticast mode [ 1024.431438][T17068] bridge_slave_1: left promiscuous mode [ 1024.431680][T17068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.946031][ T14] net_ratelimit: 91 callbacks suppressed [ 1024.946091][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1024.974523][ T3292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1024.994525][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.025515][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.047705][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.070017][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.095996][ T3292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.115167][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.169025][ T322] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.256275][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.361783][T17068] bridge_slave_0: left allmulticast mode [ 1025.361819][T17068] bridge_slave_0: left promiscuous mode [ 1025.365206][T17068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.446463][T17068] dvmrp3: left allmulticast mode [ 1025.559604][T17582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 1026.989312][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 1027.448945][T17595] loop2: detected capacity change from 0 to 2048 [ 1028.527409][T17607] xt_TCPMSS: Only works on TCP SYN packets [ 1029.369395][T17068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.418295][T17068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.437462][T17068] bond0 (unregistering): Released all slaves [ 1029.479642][T17068] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1029.479680][T17068] veth0_to_bond: left promiscuous mode [ 1029.479876][T17068] veth0_to_bond: left allmulticast mode [ 1029.499119][T17068] bond1 (unregistering): Released all slaves [ 1029.996910][T12570] net_ratelimit: 101 callbacks suppressed [ 1029.996939][T12570] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.028380][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.052548][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.064794][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.710903][T12570] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.960959][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.976236][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.994203][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1031.014288][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1031.037652][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1031.214266][T15871] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.259127][ T5295] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1031.349732][T12570] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.350810][T12570] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.345471][ T32] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.366753][T17485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.366871][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.367022][T17485] bridge_slave_0: entered allmulticast mode [ 1032.399748][T17485] bridge_slave_0: entered promiscuous mode [ 1032.444599][T17485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.444719][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.444885][T17485] bridge_slave_1: entered allmulticast mode [ 1032.476737][T17485] bridge_slave_1: entered promiscuous mode [ 1032.513641][T17641] loop2: detected capacity change from 0 to 256 [ 1032.540047][T17641] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 1035.011106][ T277] net_ratelimit: 85 callbacks suppressed [ 1035.011206][ T277] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1035.086525][ T32] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1035.115287][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1035.134562][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1035.151241][T17485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.166273][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1035.184176][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1035.192674][T17485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.212574][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1035.212611][T17225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1035.212655][T17225] bond0: (slave bridge1): failed to get link speed/duplex [ 1035.315279][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1035.488533][T17660] loop3: detected capacity change from 0 to 1024 [ 1035.513623][T17660] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1035.513665][T17660] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1035.640986][T17660] EXT4-fs (loop3): invalid journal inode [ 1035.641076][T17660] EXT4-fs (loop3): can't get journal size [ 1036.906199][T17660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1037.738492][T17485] team0: Port device team_slave_0 added [ 1037.769504][T17485] team0: Port device team_slave_1 added [ 1038.140059][T17669] FAULT_INJECTION: forcing a failure. [ 1038.140059][T17669] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.140110][T17669] CPU: 0 UID: 0 PID: 17669 Comm: syz.2.2751 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.140165][T17669] Tainted: [L]=SOFTLOCKUP [ 1038.140180][T17669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1038.140204][T17669] Call Trace: [ 1038.140217][T17669] [ 1038.140232][T17669] dump_stack_lvl+0x100/0x190 [ 1038.140298][T17669] should_fail_ex.cold+0x5/0xa [ 1038.140356][T17669] should_failslab+0xc2/0x120 [ 1038.140418][T17669] __kmalloc_cache_noprof+0x91/0x6d0 [ 1038.140460][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.140511][T17669] ? __lock_acquire+0x5c0/0x1f40 [ 1038.140562][T17669] ? snd_timer_instance_new+0x47/0x350 [ 1038.140625][T17669] snd_timer_instance_new+0x47/0x350 [ 1038.140681][T17669] snd_seq_timer_open+0x1d4/0x5c0 [ 1038.140727][T17669] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1038.140772][T17669] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1038.140835][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.140890][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.140938][T17669] ? mark_held_locks+0x40/0x70 [ 1038.140988][T17669] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1038.141058][T17669] queue_use+0xdc/0x1f0 [ 1038.141117][T17669] snd_seq_queue_alloc+0x2e5/0x540 [ 1038.141184][T17669] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1038.141233][T17669] call_seq_client_ctl+0xa3/0x130 [ 1038.141284][T17669] snd_seq_kernel_client_ctl+0x7c/0xd0 [ 1038.141336][T17669] alloc_seq_queue+0xdb/0x180 [ 1038.141387][T17669] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1038.141460][T17669] ? find_held_lock+0x2b/0x80 [ 1038.141503][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.141550][T17669] ? mark_held_locks+0x40/0x70 [ 1038.141608][T17669] snd_seq_oss_open+0x2b2/0xa40 [ 1038.141669][T17669] odev_open+0x6f/0x90 [ 1038.141713][T17669] ? __pfx_odev_open+0x10/0x10 [ 1038.141760][T17669] soundcore_open+0x2e3/0x5a0 [ 1038.141811][T17669] ? __pfx_soundcore_open+0x10/0x10 [ 1038.141857][T17669] chrdev_open+0x234/0x6a0 [ 1038.141894][T17669] ? __pfx_apparmor_file_open+0x10/0x10 [ 1038.141947][T17669] ? __pfx_chrdev_open+0x10/0x10 [ 1038.141986][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.142032][T17669] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1038.142102][T17669] do_dentry_open+0x674/0x1470 [ 1038.142158][T17669] ? __pfx_chrdev_open+0x10/0x10 [ 1038.142195][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.142249][T17669] vfs_open_consume+0xcc/0x460 [ 1038.142292][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.142347][T17669] path_openat+0x1547/0x23f0 [ 1038.142394][T17669] ? __pfx_path_openat+0x10/0x10 [ 1038.142448][T17669] do_file_open+0x20e/0x430 [ 1038.142491][T17669] ? __pfx_do_file_open+0x10/0x10 [ 1038.142567][T17669] ? _raw_spin_unlock+0x28/0x50 [ 1038.142615][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.142662][T17669] ? alloc_fd+0x471/0x7a0 [ 1038.142717][T17669] do_sys_openat2+0x163/0x1d0 [ 1038.142762][T17669] ? __pfx_do_sys_openat2+0x10/0x10 [ 1038.142826][T17669] __x64_sys_openat+0x12d/0x210 [ 1038.142872][T17669] ? __pfx___x64_sys_openat+0x10/0x10 [ 1038.142927][T17669] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.142982][T17669] do_syscall_64+0x123/0x790 [ 1038.143044][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.143091][T17669] RIP: 0033:0x7fcbcbf9fb19 [ 1038.143121][T17669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.143159][T17669] RSP: 002b:00007fcbcceef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1038.143197][T17669] RAX: ffffffffffffffda RBX: 00007fcbcc225fa0 RCX: 00007fcbcbf9fb19 [ 1038.143223][T17669] RDX: 0000000000080200 RSI: 00002000000027c0 RDI: ffffffffffffff9c [ 1038.143250][T17669] RBP: 00007fcbcc037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1038.143274][T17669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.143299][T17669] R13: 00007fcbcc226038 R14: 00007fcbcc225fa0 R15: 00007ffd97e241e8 [ 1038.143352][T17669] [ 1038.327150][T17485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.327175][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.327220][T17485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.382814][T12551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1038.388150][T17485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.388172][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.388218][T17485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.629865][T17068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.629899][T17068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.687079][T17068] veth1_macvtap: left promiscuous mode [ 1038.687132][T17068] veth0_macvtap: left promiscuous mode [ 1038.687224][T17068] veth1_vlan: left promiscuous mode [ 1038.687319][T17068] veth0_vlan: left promiscuous mode [ 1040.014766][ T14] net_ratelimit: 77 callbacks suppressed [ 1040.014794][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.034154][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.054545][ T277] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.074139][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.095347][ T277] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.115935][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.134910][ T277] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.154110][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.174814][ T277] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1040.197675][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1042.127674][T17068] team0 (unregistering): Port device team_slave_1 removed [ 1042.215068][T17068] team0 (unregistering): Port device team_slave_0 removed [ 1044.207056][ T5295] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1044.431728][T17717] loop3: detected capacity change from 0 to 512 [ 1044.466751][T17717] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.2760: iget: bad i_size value: 38620345925642 [ 1044.466802][T17717] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1044.479920][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1044.479951][ C0] EXT4-fs (loop3): initial error at time 1794095554: ext4_orphan_get:1404: inode 15 [ 1044.480001][ C0] EXT4-fs (loop3): last error at time 1794095554: ext4_orphan_get:1404: inode 15 [ 1044.483494][T17717] EXT4-fs error (device loop3): ext4_orphan_get:1407: comm syz.3.2760: couldn't read orphan inode 15 (err -117) [ 1044.483542][T17717] loop3: lost filesystem error report for type 5 error -117 [ 1044.551819][T17717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.587951][T17485] hsr_slave_0: entered promiscuous mode [ 1044.588823][T17485] hsr_slave_1: entered promiscuous mode [ 1044.597665][T17485] debugfs: 'hsr0' already exists in 'hsr' [ 1044.597690][T17485] Cannot create hsr debugfs directory [ 1044.847230][T17724] loop2: detected capacity change from 0 to 2048 [ 1044.941134][T17717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.956380][T17724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1045.044174][T13679] net_ratelimit: 138 callbacks suppressed [ 1045.044202][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.072716][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.086513][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.106408][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.125606][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.151166][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.185931][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.207972][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.235976][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1045.254494][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1047.429139][T17729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.271496][T12594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.494541][T17757] xt_TCPMSS: Only works on TCP SYN packets [ 1052.059869][ T3273] net_ratelimit: 105 callbacks suppressed [ 1052.059901][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1052.097927][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1052.114519][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1052.123206][T17769] loop2: detected capacity change from 0 to 8 [ 1052.146545][ T32] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1052.150043][T17769] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1052.150087][T17769] SQUASHFS error: Failed to read block 0x9b: -5 [ 1052.150109][T17769] SQUASHFS error: Unable to read metadata cache entry [99] [ 1052.150130][T17769] SQUASHFS error: Unable to read inode 0x104 [ 1052.181287][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1052.198060][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1052.215395][ T277] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1052.215435][ T277] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1052.215480][ T277] bond0: (slave bridge1): failed to get link speed/duplex [ 1052.329202][T13679] bond0: (slave bridge1): failed to get link speed/duplex [ 1053.187007][ T5295] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1053.569500][T17485] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1053.594507][T17485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.597430][T17485] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1053.620812][T17485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.721423][T17485] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1053.942829][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.942942][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.485436][T17485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1054.506254][T17485] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1054.561028][T17485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1056.801458][T17485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.909788][T17485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.934336][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.934456][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.505425][T17819] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2784'. [ 1057.508903][ T13] net_ratelimit: 100 callbacks suppressed [ 1057.508927][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1057.508962][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1057.509008][ T13] bond0: (slave bridge1): failed to get link speed/duplex [ 1057.673115][T17068] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1057.685424][T13462] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1057.763214][T17068] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1057.790452][T17068] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1057.792938][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.793061][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.810343][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1057.810380][ T62] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1057.810429][ T62] bond0: (slave bridge1): failed to get link speed/duplex [ 1059.366607][T17829] loop3: detected capacity change from 0 to 512 [ 1059.382262][T17829] EXT4-fs: Ignoring removed mblk_io_submit option [ 1059.507321][T17829] EXT4-fs (loop3): unsupported inode size: 64000 [ 1059.507357][T17829] EXT4-fs (loop3): blocksize: 1024 [ 1062.574909][ T62] net_ratelimit: 61 callbacks suppressed [ 1062.574940][ T62] bond0: (slave bridge1): failed to get link speed/duplex [ 1062.589177][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1062.589218][T13679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1063.080001][T13679] bond0: (slave bridge1): failed to get link speed/duplex [ 1063.083783][ T32] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1063.083822][ T32] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1063.197741][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1063.202240][ T3292] bond0: (slave bridge1): failed to get link speed/duplex [ 1063.215722][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1063.237681][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1065.666610][T17881] FAULT_INJECTION: forcing a failure. [ 1065.666610][T17881] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.666663][T17881] CPU: 1 UID: 0 PID: 17881 Comm: syz.2.2797 Tainted: G L syzkaller #0 PREEMPT(full) [ 1065.666718][T17881] Tainted: [L]=SOFTLOCKUP [ 1065.666733][T17881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1065.666757][T17881] Call Trace: [ 1065.666770][T17881] [ 1065.666785][T17881] dump_stack_lvl+0x100/0x190 [ 1065.666851][T17881] should_fail_ex.cold+0x5/0xa [ 1065.666908][T17881] should_failslab+0xc2/0x120 [ 1065.666970][T17881] __kvmalloc_node_noprof+0x113/0x9b0 [ 1065.667023][T17881] ? bpf_compute_scc+0x9b1/0xc80 [ 1065.667075][T17881] ? bpf_compute_idoms+0x30f/0x1150 [ 1065.667145][T17881] bpf_compute_idoms+0x30f/0x1150 [ 1065.667231][T17881] bpf_check+0x8103/0xa0f0 [ 1065.667321][T17881] ? __pfx_bpf_check+0x10/0x10 [ 1065.667371][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.667424][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.667470][T17881] ? find_held_lock+0x2b/0x80 [ 1065.667508][T17881] ? bpf_prog_load+0x1af0/0x2b20 [ 1065.667565][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.667617][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.667663][T17881] ? __asan_memset+0x23/0x50 [ 1065.667710][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.667766][T17881] ? bpf_prog_load+0x1baf/0x2b20 [ 1065.667813][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.667859][T17881] bpf_prog_load+0x1baf/0x2b20 [ 1065.667922][T17881] ? __pfx_bpf_prog_load+0x10/0x10 [ 1065.667978][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.668058][T17881] __sys_bpf+0x146f/0x4b60 [ 1065.668108][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.668154][T17881] ? plist_check_list+0x1b8/0x280 [ 1065.668211][T17881] ? plist_check_list+0x150/0x280 [ 1065.668262][T17881] ? __pfx___sys_bpf+0x10/0x10 [ 1065.668310][T17881] ? find_held_lock+0x2b/0x80 [ 1065.668347][T17881] ? futex_wake+0x4ea/0x5e0 [ 1065.668397][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.668446][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.668493][T17881] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1065.668563][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.668611][T17881] ? futex_private_hash_put+0x24/0x30 [ 1065.668671][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.668729][T17881] ? __pfx_futex_wake+0x10/0x10 [ 1065.668788][T17881] ? __pfx_locks_remove_posix+0x10/0x10 [ 1065.668840][T17881] ? kmem_cache_free+0x127/0x6c0 [ 1065.668894][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.668964][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.669011][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.669057][T17881] ? __x64_sys_futex+0x358/0x4d0 [ 1065.669105][T17881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1065.669151][T17881] ? xfd_validate_state+0x129/0x190 [ 1065.669205][T17881] ? __x64_sys_bpf+0xce/0x140 [ 1065.669255][T17881] __x64_sys_bpf+0xce/0x140 [ 1065.669309][T17881] ? do_syscall_64+0xae/0x790 [ 1065.669368][T17881] do_syscall_64+0x123/0x790 [ 1065.669430][T17881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.669470][T17881] RIP: 0033:0x7fcbcbf9fb19 [ 1065.669501][T17881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.669540][T17881] RSP: 002b:00007fcbcceef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1065.669584][T17881] RAX: ffffffffffffffda RBX: 00007fcbcc225fa0 RCX: 00007fcbcbf9fb19 [ 1065.669611][T17881] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1065.669635][T17881] RBP: 00007fcbcc037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1065.669660][T17881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1065.669685][T17881] R13: 00007fcbcc226038 R14: 00007fcbcc225fa0 R15: 00007ffd97e241e8 [ 1065.669737][T17881] [ 1065.767042][ T5295] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1066.324404][T17895] loop3: detected capacity change from 0 to 512 [ 1068.104534][T17900] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2799'. [ 1068.565668][T13680] net_ratelimit: 65 callbacks suppressed [ 1068.565696][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.565733][T13680] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1068.588946][ T7515] bond0: (slave bridge1): failed to get link speed/duplex [ 1068.619228][T17895] EXT4-fs (loop3): 1 truncate cleaned up [ 1068.641128][T17895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.692276][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.692320][T17225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1068.701894][T15280] bond0: (slave bridge1): failed to get link speed/duplex [ 1068.803496][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1068.806161][ T7516] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1068.825076][ T277] bond0: (slave bridge1): failed to get link speed/duplex [ 1068.917190][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1069.148413][T17485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.340654][T12551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.819947][T17932] random: crng reseeded on system resumption [ 1070.333388][T17945] loop3: detected capacity change from 0 to 1024 [ 1070.340463][T17945] EXT4-fs: Ignoring removed mblk_io_submit option [ 1070.407758][T17945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1070.412224][T17945] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1070.657645][T17945] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.2810: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1070.657782][T17945] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1070.663980][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1070.664012][ C1] EXT4-fs (loop3): initial error at time 1794095580: ext4_ext_check_inode:521: inode 11 [ 1070.664062][ C1] EXT4-fs (loop3): last error at time 1794095580: ext4_ext_check_inode:521: inode 11 [ 1070.692386][T17945] EXT4-fs error (device loop3): ext4_orphan_get:1407: comm syz.3.2810: couldn't read orphan inode 11 (err -117) [ 1070.692487][T17945] loop3: lost filesystem error report for type 5 error -117 [ 1070.728630][T17945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.231147][T17948] EXT4-fs error (device loop3): ext4_validate_block_bitmap:444: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 1074.263361][ T320] net_ratelimit: 68 callbacks suppressed [ 1074.263387][ T320] bond0: (slave bridge1): failed to get link speed/duplex [ 1074.286830][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1074.286869][ T320] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1074.336642][T12551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.372173][T17225] bond0: (slave bridge1): failed to get link speed/duplex [ 1074.401753][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1074.401791][T17225] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1074.474237][T17225] bond0: (slave bridge1): failed to get link speed/duplex [ 1074.505460][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1074.505501][T17905] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1074.585478][T15280] bond0: (slave bridge1): failed to get link speed/duplex [ 1076.006284][T17486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1076.011193][T17486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1076.012212][T17486] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1076.013356][T17486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1076.014497][T17486] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1077.241722][T17989] loop2: detected capacity change from 0 to 512 [ 1077.281781][T17989] EXT4-fs (loop2): 1 truncate cleaned up [ 1077.289967][T17989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1077.603175][T17985] ªªªªªª: renamed from vlan0 (while UP) [ 1078.144054][T17486] Bluetooth: hci3: command tx timeout [ 1078.226851][T12594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.200277][T17486] Bluetooth: hci3: command tx timeout [ 1080.210739][T15280] net_ratelimit: 105 callbacks suppressed [ 1080.210767][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1080.770847][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1080.995126][T18011] loop2: detected capacity change from 0 to 32768 [ 1080.996031][T18011] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1081.020337][ T291] bond0: (slave bridge1): failed to get link speed/duplex [ 1081.027393][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1081.027432][T17905] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1081.029878][T18011] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2821 (18011) [ 1081.057260][T18011] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1081.057309][T18011] BTRFS info (device loop2): using crc32c checksum algorithm [ 1081.124367][ T62] bond0: (slave bridge1): failed to get link speed/duplex [ 1081.143630][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1081.143668][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1081.239649][T18011] BTRFS info (device loop2): rebuilding free space tree [ 1081.248521][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1081.253234][T18011] BTRFS info (device loop2): disabling free space tree [ 1081.253304][T18011] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1081.253343][T18011] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1081.257559][T18011] BTRFS info (device loop2): enabling ssd optimizations [ 1081.257592][T18011] BTRFS info (device loop2): turning on async discard [ 1081.257622][T18011] BTRFS info (device loop2): force clearing of disk cache [ 1081.257652][T18011] BTRFS info (device loop2): use zstd compression, level 3 [ 1081.274217][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1082.254361][T17486] Bluetooth: hci3: command tx timeout [ 1082.453168][T12594] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1084.661418][T17486] Bluetooth: hci3: command tx timeout [ 1084.675847][T17974] rxe_eth0 speed is unknown, defaulting to 1000 [ 1085.247919][T13679] net_ratelimit: 56 callbacks suppressed [ 1085.247949][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1085.696819][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1085.955695][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1085.975384][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1086.004100][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1086.030691][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1086.059164][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1086.092973][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1086.113238][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1086.140576][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1088.642802][T18064] fuse: Bad value for 'fd' [ 1088.646187][T17486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1088.658545][T17486] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1088.662097][T17486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1088.674802][T17486] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1088.675567][T17486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1089.305401][T15626] bridge0: port 1(syz_tun) entered disabled state [ 1089.342052][T15626] syz_tun (unregistering): left allmulticast mode [ 1089.342086][T15626] syz_tun (unregistering): left promiscuous mode [ 1089.342260][T15626] bridge0: port 1(syz_tun) entered disabled state [ 1090.254807][T13679] net_ratelimit: 77 callbacks suppressed [ 1090.254964][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.274257][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.296356][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.351721][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.367321][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.384158][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.406547][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.425657][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.444903][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.472676][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1090.650104][ T322] bridge_slave_1: left allmulticast mode [ 1090.650142][ T322] bridge_slave_1: left promiscuous mode [ 1090.650372][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.711782][ T322] bridge_slave_0: left allmulticast mode [ 1090.711995][ T322] bridge_slave_0: left promiscuous mode [ 1090.734057][ T5639] Bluetooth: hci6: command tx timeout [ 1090.755750][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.815079][T17486] Bluetooth: hci6: command tx timeout [ 1092.816277][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1092.826015][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1092.827087][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1092.828334][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1092.829208][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1093.809547][T18110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2838'. [ 1093.944814][T18112] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1093.946007][T18112] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1094.056442][ T322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.067470][ T322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.088805][ T322] bond0 (unregistering): Released all slaves [ 1094.419723][T15130] syz_tun (unregistering): left allmulticast mode [ 1094.894270][ T5639] Bluetooth: hci4: command tx timeout [ 1094.895009][ T5639] Bluetooth: hci6: command tx timeout [ 1095.282524][ T3273] net_ratelimit: 140 callbacks suppressed [ 1095.304669][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.324125][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.354143][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.374502][T15130] bond0: (slave syz_tun): Releasing backup interface [ 1095.390460][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.414770][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.457774][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.484073][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.504076][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.547415][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1095.566717][T17905] bond0: (slave bridge1): failed to get link speed/duplex [ 1095.913628][T18131] fuse: Bad value for 'fd' [ 1096.974220][ T5644] Bluetooth: hci6: command tx timeout [ 1096.974265][ T5644] Bluetooth: hci4: command tx timeout [ 1097.015808][T18141] loop2: detected capacity change from 0 to 1024 [ 1097.016794][T18141] EXT4-fs: Ignoring removed mblk_io_submit option [ 1099.054136][ T5644] Bluetooth: hci4: command tx timeout [ 1099.855184][T18141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1100.199696][T18141] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1100.200234][T18141] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1100.200316][T18141] EXT4-fs: failed to create workqueue [ 1100.200333][T18141] EXT4-fs (loop2): mount failed [ 1100.344263][T17225] net_ratelimit: 21 callbacks suppressed [ 1100.344287][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.364480][ T277] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.387741][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.404393][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.427278][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.444346][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.474512][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.498913][ T291] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1100.498952][ T291] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1100.498996][ T291] bond0: (slave bridge1): failed to get link speed/duplex [ 1101.136410][ T5644] Bluetooth: hci4: command tx timeout [ 1101.691544][ T322] hsr_slave_0: left promiscuous mode [ 1101.719295][ T322] hsr_slave_1: left promiscuous mode [ 1101.729720][ T322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.768930][ T322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.920942][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1101.921016][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1101.921086][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x74a5 instead [ 1101.921196][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x866e instead [ 1101.921263][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1101.921329][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1101.921394][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1101.921508][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1101.921763][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1101.922012][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1101.922078][T18162] jffs2: Further such events for this erase block will not be printed [ 1101.926023][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1101.926093][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1101.926162][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x74a5 instead [ 1101.926272][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x866e instead [ 1101.926339][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1101.926405][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1101.926471][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1101.926625][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1101.926861][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1101.927081][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1101.927147][T18162] jffs2: Further such events for this erase block will not be printed [ 1101.930832][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1101.930866][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1101.930900][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x74a5 instead [ 1101.930937][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x866e instead [ 1101.942956][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1101.943022][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1101.943089][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x74a5 instead [ 1101.943190][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x866e instead [ 1101.943542][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1101.943610][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1101.943675][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x74a5 instead [ 1101.943776][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x866e instead [ 1101.944201][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1101.944266][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1101.944419][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x74a5 instead [ 1101.944493][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x866e instead [ 1101.944851][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1101.944918][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1101.944988][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x74a5 instead [ 1101.945098][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x866e instead [ 1101.945455][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1101.945522][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1101.945634][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x74a5 instead [ 1101.945738][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x866e instead [ 1101.946102][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1101.946170][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1101.946239][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x74a5 instead [ 1101.946313][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x866e instead [ 1101.946756][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1101.946823][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1101.946892][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x74a5 instead [ 1101.946967][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x866e instead [ 1101.947323][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1101.947391][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1101.947460][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x74a5 instead [ 1101.947565][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x866e instead [ 1101.947929][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1101.947996][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1101.948065][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x74a5 instead [ 1101.948170][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x866e instead [ 1101.948528][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1101.948597][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1101.948703][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x74a5 instead [ 1101.948808][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x866e instead [ 1101.949166][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1101.949234][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1101.949303][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x74a5 instead [ 1101.949408][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x866e instead [ 1101.949845][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1101.949908][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1101.949977][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x74a5 instead [ 1101.950051][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x866e instead [ 1101.950407][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1101.950473][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1101.950542][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x74a5 instead [ 1101.950621][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x866e instead [ 1101.951017][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1101.951080][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1101.951146][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x74a5 instead [ 1101.951246][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x866e instead [ 1101.951533][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1101.951600][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1101.951665][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x74a5 instead [ 1101.951767][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x866e instead [ 1101.952122][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1101.952185][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1101.952250][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x74a5 instead [ 1101.952351][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x866e instead [ 1101.952778][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1101.952842][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1101.952911][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x74a5 instead [ 1101.952983][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x866e instead [ 1101.953381][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1101.953445][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1101.953510][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x74a5 instead [ 1101.953617][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x866e instead [ 1101.954079][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1101.954144][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1101.954210][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x74a5 instead [ 1101.954284][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x866e instead [ 1101.954681][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1101.954744][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1101.954813][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x74a5 instead [ 1101.954918][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x866e instead [ 1101.955330][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1101.955398][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1101.955467][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x74a5 instead [ 1101.955541][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x866e instead [ 1101.955903][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1101.955970][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1101.956040][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x74a5 instead [ 1101.956115][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x866e instead [ 1101.956473][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1101.956536][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1101.956612][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x74a5 instead [ 1101.956717][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x866e instead [ 1101.957077][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1101.957142][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1101.957211][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x74a5 instead [ 1101.957286][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x866e instead [ 1101.957724][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1101.957788][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1101.957858][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x74a5 instead [ 1101.957963][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x866e instead [ 1101.958320][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1101.958383][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1101.958453][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x74a5 instead [ 1101.958528][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x866e instead [ 1101.958891][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1101.958954][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1101.959024][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x74a5 instead [ 1101.959100][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x866e instead [ 1101.959558][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1101.959627][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1101.959692][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x74a5 instead [ 1101.959795][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x866e instead [ 1101.960153][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1101.960217][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1101.960283][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x74a5 instead [ 1101.968631][T18162] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x866e instead [ 1101.968900][T18162] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1101.968949][T18162] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1105.354457][ T13] net_ratelimit: 137 callbacks suppressed [ 1105.354519][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.375935][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.394393][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.414325][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.438122][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.506696][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.531246][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.550000][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.565496][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1105.584508][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1107.753222][T18190] loop2: detected capacity change from 0 to 1024 [ 1107.758971][T18190] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1107.759012][T18190] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1107.764374][T18190] EXT4-fs (loop2): invalid journal inode [ 1107.764465][T18190] EXT4-fs (loop2): can't get journal size [ 1107.769538][T18190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1107.794383][ T322] team0 (unregistering): Port device team_slave_1 removed [ 1108.826031][ T322] team0 (unregistering): Port device team_slave_0 removed [ 1109.021003][T12594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.420924][ T64] net_ratelimit: 62 callbacks suppressed [ 1110.420954][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.444863][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.474385][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.494235][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.515424][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.536839][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.556482][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.574598][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.604191][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1110.635430][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1114.404814][T17974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.407028][T17974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.407174][T17974] bridge_slave_0: entered allmulticast mode [ 1114.411571][T17974] bridge_slave_0: entered promiscuous mode [ 1114.473486][T17974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.473697][T17974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.473846][T17974] bridge_slave_1: entered allmulticast mode [ 1116.387517][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.387576][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.415523][ T64] net_ratelimit: 28 callbacks suppressed [ 1116.415567][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.457443][T17974] bridge_slave_1: entered promiscuous mode [ 1116.469881][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.482815][T18065] rxe_eth0 speed is unknown, defaulting to 1000 [ 1116.490395][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.508140][T17225] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.527199][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.546066][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.564074][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.584891][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.605656][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1116.629861][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1117.584275][T17974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.616021][T17974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.178243][T17974] team0: Port device team_slave_0 added [ 1120.200092][T17974] team0: Port device team_slave_1 added [ 1120.298488][T17974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.298515][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.298563][T17974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.300712][T17974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.300734][T17974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.300780][T17974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.641304][T18239] loop2: detected capacity change from 0 to 32768 [ 1120.642455][T18239] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 1120.662150][T18239] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2861 (18239) [ 1120.710268][T18239] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1120.710317][T18239] BTRFS info (device loop2): using crc32c checksum algorithm [ 1120.838445][T18239] BTRFS info (device loop2): rebuilding free space tree [ 1120.872356][T17974] hsr_slave_0: entered promiscuous mode [ 1120.882450][T17974] hsr_slave_1: entered promiscuous mode [ 1120.886085][T18239] BTRFS info (device loop2): disabling free space tree [ 1120.886158][T18239] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1120.886198][T18239] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1120.892498][T17974] debugfs: 'hsr0' already exists in 'hsr' [ 1120.892524][T17974] Cannot create hsr debugfs directory [ 1120.897528][T18239] BTRFS info (device loop2): enabling ssd optimizations [ 1120.897559][T18239] BTRFS info (device loop2): turning on async discard [ 1120.897595][T18239] BTRFS info (device loop2): force clearing of disk cache [ 1120.897620][T18239] BTRFS info (device loop2): use zstd compression, level 3 [ 1121.427231][T15280] net_ratelimit: 90 callbacks suppressed [ 1121.427261][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.448737][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.464486][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.484628][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.504647][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.529803][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.544097][ T322] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.566161][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.585427][ T322] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.605105][ T322] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1121.831709][T12594] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1121.987621][T18101] rxe_eth0 speed is unknown, defaulting to 1000 [ 1127.604139][ T13] net_ratelimit: 141 callbacks suppressed [ 1127.604171][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.644879][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.661125][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 1127.666724][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.686192][ T322] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.710574][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.725302][ T322] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.727448][T18312] loop2: detected capacity change from 0 to 256 [ 1127.745594][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.783527][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.800575][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1127.816828][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1129.384893][T18329] loop7: detected capacity change from 0 to 16384 [ 1129.534139][ C0] blk_print_req_error: 126 callbacks suppressed [ 1129.534171][ C0] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 1129.535229][ C0] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1129.535906][ C0] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.535995][ C0] Buffer I/O error on dev loop7, logical block 128, async page read [ 1129.541056][ C0] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1129.541148][ C0] Buffer I/O error on dev loop7, logical block 2047, async page read [ 1129.559145][T18331] loop7: detected capacity change from 16384 to 0 [ 1131.900759][T18353] fuse: fd is not a fuse device [ 1132.399891][T17905] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.660669][ T3337] net_ratelimit: 164 callbacks suppressed [ 1132.660741][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1132.931949][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1132.980868][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1133.039854][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1133.067957][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1133.095065][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1133.319086][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1133.335494][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1133.363850][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1133.374485][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1133.396556][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1133.417142][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1133.423386][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1133.446918][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1133.447883][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1134.902535][T17905] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.261508][ T5644] Bluetooth: hci1: command tx timeout [ 1136.311453][T18065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.311658][T18065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.311809][T18065] bridge_slave_0: entered allmulticast mode [ 1136.342841][T18065] bridge_slave_0: entered promiscuous mode [ 1136.423464][T18065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.423777][T18065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.427531][T18065] bridge_slave_1: entered allmulticast mode [ 1136.443156][T18065] bridge_slave_1: entered promiscuous mode [ 1136.743380][T17905] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.932459][T18065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.061262][T18065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.238140][T17905] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.501238][T18101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.501419][T18101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.501561][T18101] bridge_slave_0: entered allmulticast mode [ 1137.534181][T18101] bridge_slave_0: entered promiscuous mode [ 1137.550316][T18101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.550435][T18101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.550577][T18101] bridge_slave_1: entered allmulticast mode [ 1137.582297][T18101] bridge_slave_1: entered promiscuous mode [ 1137.664621][T15280] net_ratelimit: 103 callbacks suppressed [ 1137.664650][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1137.687274][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1137.735476][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1137.756680][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1137.777910][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1137.883025][T18065] team0: Port device team_slave_0 added [ 1137.946549][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1137.976481][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1138.006992][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1138.032256][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1138.049179][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1138.335570][ T5644] Bluetooth: hci1: command tx timeout [ 1138.536431][T18065] team0: Port device team_slave_1 added [ 1138.683012][T18101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.782379][T18101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.490157][T18065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.490179][T18065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.490215][T18065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.633161][T18065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.633188][T18065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.633227][T18065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.690630][T18101] team0: Port device team_slave_0 added [ 1139.780963][T18101] team0: Port device team_slave_1 added [ 1140.293076][T18065] hsr_slave_0: entered promiscuous mode [ 1140.303212][T18065] hsr_slave_1: entered promiscuous mode [ 1140.315533][T18065] debugfs: 'hsr0' already exists in 'hsr' [ 1140.315559][T18065] Cannot create hsr debugfs directory [ 1140.318686][T18101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.318709][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.318757][T18101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.376566][T17905] dummy0: left allmulticast mode [ 1140.391316][T17905] dummy0: left promiscuous mode [ 1140.391634][T17905] bridge0: port 3(dummy0) entered disabled state [ 1140.413244][T17905] bridge_slave_1: left allmulticast mode [ 1140.413270][T17905] bridge_slave_1: left promiscuous mode [ 1140.413450][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.414348][ T5644] Bluetooth: hci1: command tx timeout [ 1140.442615][T17905] bridge_slave_0: left allmulticast mode [ 1140.442642][T17905] bridge_slave_0: left promiscuous mode [ 1140.442801][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.515128][T17905] dvmrp3: left allmulticast mode [ 1140.563030][T17905] dvmrp3: left allmulticast mode [ 1140.610742][T18432] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2889'. [ 1140.866873][T17905] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1140.926625][T17905] bond2 (unregistering): (slave bond0): Releasing active interface [ 1140.946280][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.965668][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.972700][T17905] bond0 (unregistering): Released all slaves [ 1141.047498][T17905] bond1 (unregistering): Released all slaves [ 1141.098606][T18445] loop3: detected capacity change from 0 to 512 [ 1141.186278][T17905] bond2 (unregistering): Released all slaves [ 1141.335204][T18445] syz.3.2890: attempt to access beyond end of device [ 1141.335204][T18445] loop3: rw=34817, sector=339, nr_sectors = 896 limit=512 [ 1141.487415][ T322] kworker/u8:9: attempt to access beyond end of device [ 1141.487415][ T322] loop3: rw=1, sector=1240, nr_sectors = 1148 limit=512 [ 1141.596724][T17905] bond0 (unregistering): Released all slaves [ 1141.624158][T18101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.624182][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.624231][T18101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.044025][T13680] net_ratelimit: 136 callbacks suppressed [ 1143.044056][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.055743][ T5644] Bluetooth: hci1: command tx timeout [ 1143.630254][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.644107][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.674949][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.695252][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.714021][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.740971][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.774847][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.795453][ T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.816363][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.852879][T17905] tipc: Left network mode [ 1144.066069][T18451] rxe_eth0 speed is unknown, defaulting to 1000 [ 1144.371134][T18101] hsr_slave_0: entered promiscuous mode [ 1144.422418][T18101] hsr_slave_1: entered promiscuous mode [ 1144.467410][T18101] debugfs: 'hsr0' already exists in 'hsr' [ 1144.467437][T18101] Cannot create hsr debugfs directory [ 1145.463566][T18364] rxe_eth0 speed is unknown, defaulting to 1000 [ 1146.120595][T18482] loop2: detected capacity change from 0 to 512 [ 1146.311295][T18482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.311432][T18482] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.158701][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1147.160151][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1147.161098][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1147.162342][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1147.163086][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1147.429877][T18065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.056596][ T3337] net_ratelimit: 152 callbacks suppressed [ 1148.056655][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.084300][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.109437][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.136127][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.164594][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.194265][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.218968][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.245048][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.283541][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.305129][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1149.043864][T18065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.379144][ T5644] Bluetooth: hci3: command tx timeout [ 1150.163433][T18065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.456573][ T5644] Bluetooth: hci3: command tx timeout [ 1151.636560][ T5639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1151.652919][ T5639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1151.670647][ T5639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1151.673781][ T5639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1151.726126][T12594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.787872][T18065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.860088][ T5639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1154.571241][ T5639] Bluetooth: hci3: command tx timeout [ 1154.571314][ T5639] Bluetooth: hci7: command tx timeout [ 1154.581775][T13679] net_ratelimit: 176 callbacks suppressed [ 1154.581800][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1154.625684][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.296286][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.324443][ T7516] bond0: (slave bridge1): failed to get link speed/duplex [ 1155.324493][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.324526][ T7516] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1155.437408][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.458933][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.474479][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.495933][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1155.729864][T18492] rxe_eth0 speed is unknown, defaulting to 1000 [ 1155.901426][T17905] hsr_slave_0: left promiscuous mode [ 1155.973490][T17905] hsr_slave_0: left promiscuous mode [ 1155.981784][T17905] hsr_slave_1: left promiscuous mode [ 1156.092890][T17905] veth1_macvtap: left promiscuous mode [ 1156.092931][T17905] veth0_macvtap: left promiscuous mode [ 1156.093031][T17905] veth1_vlan: left promiscuous mode [ 1156.665668][T18539] Bluetooth: hci7: command tx timeout [ 1156.665712][T18539] Bluetooth: hci3: command tx timeout [ 1156.691475][T17905] team0 (unregistering): Port device team_slave_1 removed [ 1156.714720][T17905] team0 (unregistering): Port device team_slave_0 removed [ 1156.954440][T17905] team0 (unregistering): Port device vlan0 removed [ 1157.791151][T18526] rxe_eth0 speed is unknown, defaulting to 1000 [ 1157.983516][T18364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.983740][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.985748][T18364] bridge_slave_0: entered allmulticast mode [ 1157.988012][T18364] bridge_slave_0: entered promiscuous mode [ 1158.046886][T18364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.047005][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.047164][T18364] bridge_slave_1: entered allmulticast mode [ 1158.050727][T18364] bridge_slave_1: entered promiscuous mode [ 1158.261951][T18364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.302967][T18364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.341361][T17905] IPVS: stop unused estimator thread 0... [ 1158.506960][T18364] team0: Port device team_slave_0 added [ 1158.571128][T18364] team0: Port device team_slave_1 added [ 1158.700112][T17905] bridge_slave_1: left allmulticast mode [ 1158.700151][T17905] bridge_slave_1: left promiscuous mode [ 1158.700406][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.711330][T17905] bridge_slave_0: left allmulticast mode [ 1158.711362][T17905] bridge_slave_0: left promiscuous mode [ 1158.711647][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.736320][T17486] Bluetooth: hci7: command tx timeout [ 1158.750137][T17905] bridge_slave_1: left allmulticast mode [ 1158.750169][T17905] bridge_slave_1: left promiscuous mode [ 1158.750383][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.752969][T17905] bridge_slave_0: left allmulticast mode [ 1158.753000][T17905] bridge_slave_0: left promiscuous mode [ 1158.789885][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.097011][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.099508][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.106094][T17905] bond0 (unregistering): Released all slaves [ 1159.197314][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.199640][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.201032][T17905] bond0 (unregistering): Released all slaves [ 1159.305125][T18364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.305153][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.305200][T18364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.405023][ T5295] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1159.423134][T18364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.423160][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.423215][T18364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.584779][T13680] net_ratelimit: 184 callbacks suppressed [ 1159.584808][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.606454][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.626760][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.646059][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.668208][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.686162][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.706955][ T14] bond0: (slave bridge1): failed to get link speed/duplex [ 1159.707019][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.707159][T18492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.707353][T18492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.707522][T18492] bridge_slave_0: entered allmulticast mode [ 1159.724104][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.744244][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1159.771732][T18492] bridge_slave_0: entered promiscuous mode [ 1159.808087][T18364] hsr_slave_0: entered promiscuous mode [ 1159.809281][T18364] hsr_slave_1: entered promiscuous mode [ 1159.811583][T18364] debugfs: 'hsr0' already exists in 'hsr' [ 1159.811610][T18364] Cannot create hsr debugfs directory [ 1159.812110][T18492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.812276][T18492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.812438][T18492] bridge_slave_1: entered allmulticast mode [ 1159.870608][T18492] bridge_slave_1: entered promiscuous mode [ 1160.239756][T18492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.282159][T17905] hsr_slave_0: left promiscuous mode [ 1160.282957][T17905] hsr_slave_1: left promiscuous mode [ 1160.294987][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.295835][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.301303][T17905] hsr_slave_0: left promiscuous mode [ 1160.302079][T17905] hsr_slave_1: left promiscuous mode [ 1160.303077][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.303788][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.586335][T17905] team0 (unregistering): Port device team_slave_1 removed [ 1160.603732][T17905] team0 (unregistering): Port device team_slave_0 removed [ 1160.814135][T17486] Bluetooth: hci7: command tx timeout [ 1160.897744][T17905] team0 (unregistering): Port device team_slave_1 removed [ 1160.912316][T17905] team0 (unregistering): Port device team_slave_0 removed [ 1161.052643][T18492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.144214][T18492] team0: Port device team_slave_0 added [ 1161.147469][T18492] team0: Port device team_slave_1 added [ 1161.333128][T18492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.333161][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.333204][T18492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.407200][T18492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.407227][T18492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.407268][T18492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.662774][T18492] hsr_slave_0: entered promiscuous mode [ 1161.664463][T18492] hsr_slave_1: entered promiscuous mode [ 1161.665277][T18492] debugfs: 'hsr0' already exists in 'hsr' [ 1161.665302][T18492] Cannot create hsr debugfs directory [ 1161.792218][T18526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.792423][T18526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.792582][T18526] bridge_slave_0: entered allmulticast mode [ 1161.814977][T18526] bridge_slave_0: entered promiscuous mode [ 1161.845850][T18526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.845980][T18526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.846128][T18526] bridge_slave_1: entered allmulticast mode [ 1161.848165][T18526] bridge_slave_1: entered promiscuous mode [ 1161.989824][T18526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.990188][T18364] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1161.996333][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1161.997480][T18364] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1162.008448][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.014648][T18364] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1162.049498][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.071718][T18526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.090995][T17905] bridge_slave_1: left allmulticast mode [ 1162.091025][T17905] bridge_slave_1: left promiscuous mode [ 1162.091206][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.093421][T17905] bridge_slave_0: left allmulticast mode [ 1162.093445][T17905] bridge_slave_0: left promiscuous mode [ 1162.095470][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.201224][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1162.203585][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1162.222520][T17905] bond0 (unregistering): Released all slaves [ 1162.230662][T18364] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1162.235179][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1162.335375][T18526] team0: Port device team_slave_0 added [ 1162.337901][T18526] team0: Port device team_slave_1 added [ 1162.400266][T18526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.400289][T18526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.400325][T18526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.476914][T18526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.476936][T18526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.476974][T18526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.740105][T18526] hsr_slave_0: entered promiscuous mode [ 1162.741328][T18526] hsr_slave_1: entered promiscuous mode [ 1162.743163][T18526] debugfs: 'hsr0' already exists in 'hsr' [ 1162.743189][T18526] Cannot create hsr debugfs directory [ 1162.815619][T17905] hsr_slave_0: left promiscuous mode [ 1162.818512][T17905] hsr_slave_1: left promiscuous mode [ 1162.819276][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.819825][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.000027][T17905] team0 (unregistering): Port device team_slave_1 removed [ 1163.012678][T17905] team0 (unregistering): Port device team_slave_0 removed [ 1163.352119][T18492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1163.357987][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.359063][T18492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1163.366739][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1163.387365][T18492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1163.396183][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1163.422407][T18492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1163.439347][T18492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1163.559313][T18364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.659550][T18364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.678394][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.678519][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.726705][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.726797][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.727401][T18526] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1163.730612][T18526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.731577][T18526] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1163.740427][T18526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1163.755984][T18526] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1163.783779][T18526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1163.800501][T18526] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1163.806968][T18526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1163.911388][T18492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.993180][T18492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.033121][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.033253][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.051888][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.052008][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.216953][T18526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.288226][T18526] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.322724][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.322857][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.353137][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.353231][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.605676][T17905] net_ratelimit: 217 callbacks suppressed [ 1164.605706][T17905] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1164.605742][T17905] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.605865][ T14] bond0: (slave bridge1): failed to get link speed/duplex [ 1164.716411][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1164.716457][T13679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.717429][ T14] bond0: (slave bridge1): failed to get link speed/duplex [ 1164.825329][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1164.844187][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1164.844229][ T64] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1164.846078][ T64] bond0: (slave bridge1): failed to get link speed/duplex [ 1165.389798][T18364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.823176][T18492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.972692][T18492] veth0_vlan: entered promiscuous mode [ 1166.005237][T18492] veth1_vlan: entered promiscuous mode [ 1166.011995][T18526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.155834][T18492] veth0_macvtap: entered promiscuous mode [ 1166.162292][T18364] veth0_vlan: entered promiscuous mode [ 1166.189079][T18492] veth1_macvtap: entered promiscuous mode [ 1166.212073][T18364] veth1_vlan: entered promiscuous mode [ 1166.281425][T18492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.331945][T18492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.345057][T18364] veth0_macvtap: entered promiscuous mode [ 1166.372535][T18364] veth1_macvtap: entered promiscuous mode [ 1166.524975][T18364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.644379][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.707142][T17905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.707350][T17905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.707415][T17905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.718565][T18364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.791435][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.791471][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.846603][T13679] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.846676][T13679] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.846740][T13679] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.912395][ T277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.912429][ T277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.930237][ T277] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.175801][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.175836][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.312955][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.312990][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.509654][T18526] veth0_vlan: entered promiscuous mode [ 1167.558277][T18526] veth1_vlan: entered promiscuous mode [ 1167.560044][T18714] loop0: detected capacity change from 0 to 128 [ 1167.586099][T18714] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1167.586152][T18714] FAT-fs (loop0): data area starts beyond volume (36 > 11) [ 1167.586181][T18714] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1167.632744][T18709] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2914'. [ 1168.798154][T18526] veth0_macvtap: entered promiscuous mode [ 1169.745234][T18526] veth1_macvtap: entered promiscuous mode [ 1169.773628][T13679] net_ratelimit: 147 callbacks suppressed [ 1169.773690][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1169.811599][T13680] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1169.824083][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1169.845157][ T320] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1169.851186][T18737] loop0: detected capacity change from 0 to 256 [ 1169.877070][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1169.894534][T15280] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1169.915279][ T14] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1169.934996][ T3273] bond0: (slave bridge1): failed to get link speed/duplex [ 1169.935048][ T3273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1169.935082][ T3273] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.369438][T18526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.478529][T18526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.676978][T18747] evm: overlay not supported [ 1172.684807][T13679] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.748083][T15871] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.748162][T15871] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.223347][ T7515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.693441][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.693475][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.792797][T18760] [ 1174.795145][T18760] ====================================================== [ 1174.802172][T18760] WARNING: possible circular locking dependency detected [ 1174.809208][T18760] syzkaller #0 Tainted: G L [ 1174.815174][T18760] ------------------------------------------------------ [ 1174.822186][T18760] syz.3.2912/18760 is trying to acquire lock: [ 1174.828261][T18760] ffffffff91639228 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 1174.838058][T18760] [ 1174.838058][T18760] but task is already holding lock: [ 1174.845411][T18760] ffff88804d1bec00 (&sb->s_type->i_mutex_key#36){++++}-{4:4}, at: vfs_rmdir+0xed/0x8e0 [ 1174.855144][T18760] [ 1174.855144][T18760] which lock already depends on the new lock. [ 1174.855144][T18760] [ 1174.865541][T18760] [ 1174.865541][T18760] the existing dependency chain (in reverse order) is: [ 1174.874561][T18760] [ 1174.874561][T18760] -> #3 (&sb->s_type->i_mutex_key#36){++++}-{4:4}: [ 1174.883307][T18760] lock_acquire+0x1d1/0x380 [ 1174.888361][T18760] down_write+0x86/0x1f0 [ 1174.893160][T18760] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1174.899618][T18760] usbg_make_tpg+0x251/0x610 [ 1174.904767][T18760] target_fabric_make_tpg+0xab/0x8c0 [ 1174.910599][T18760] configfs_mkdir+0x525/0xd40 [ 1174.915815][T18760] vfs_mkdir+0x36d/0x8a0 [ 1174.920610][T18760] filename_mkdirat+0x4c4/0x630 [ 1174.925990][T18760] __x64_sys_mkdirat+0x89/0xc0 [ 1174.931282][T18760] do_syscall_64+0x123/0x790 [ 1174.936421][T18760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.942848][T18760] [ 1174.942848][T18760] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 1174.950788][T18760] lock_acquire+0x1d1/0x380 [ 1174.955878][T18760] __mutex_lock+0x19f/0x1c10 [ 1174.961017][T18760] tcm_alloc_inst+0x5f/0x1e0 [ 1174.966156][T18760] try_get_usb_function_instance+0x136/0x1f0 [ 1174.972677][T18760] usb_get_function_instance+0x16/0x70 [ 1174.978679][T18760] function_make+0x18c/0x3f0 [ 1174.983811][T18760] configfs_mkdir+0x525/0xd40 [ 1174.989019][T18760] vfs_mkdir+0x36d/0x8a0 [ 1174.993843][T18760] filename_mkdirat+0x4c4/0x630 [ 1174.999228][T18760] __x64_sys_mkdirat+0x89/0xc0 [ 1175.004528][T18760] do_syscall_64+0x123/0x790 [ 1175.009669][T18760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.016093][T18760] [ 1175.016093][T18760] -> #1 (func_lock){+.+.}-{4:4}: [ 1175.023242][T18760] lock_acquire+0x1d1/0x380 [ 1175.028287][T18760] __mutex_lock+0x19f/0x1c10 [ 1175.033425][T18760] try_get_usb_function_instance+0x26/0x1f0 [ 1175.039856][T18760] usb_get_function_instance+0x16/0x70 [ 1175.045860][T18760] function_make+0x18c/0x3f0 [ 1175.050982][T18760] configfs_mkdir+0x525/0xd40 [ 1175.056196][T18760] vfs_mkdir+0x36d/0x8a0 [ 1175.061030][T18760] filename_mkdirat+0x4c4/0x630 [ 1175.066417][T18760] __x64_sys_mkdirat+0x89/0xc0 [ 1175.071713][T18760] do_syscall_64+0x123/0x790 [ 1175.076852][T18760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.083282][T18760] [ 1175.083282][T18760] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1175.091567][T18760] check_prev_add+0xeb/0xe60 [ 1175.096725][T18760] __lock_acquire+0x1528/0x1f40 [ 1175.102124][T18760] lock_acquire+0x1d1/0x380 [ 1175.107172][T18760] __mutex_lock+0x19f/0x1c10 [ 1175.112317][T18760] configfs_rmdir+0x5ae/0x950 [ 1175.117524][T18760] vfs_rmdir+0x328/0x8e0 [ 1175.122312][T18760] filename_rmdir+0x31a/0x610 [ 1175.127524][T18760] __x64_sys_rmdir+0x46/0x70 [ 1175.132650][T18760] do_syscall_64+0x123/0x790 [ 1175.137819][T18760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.144249][T18760] [ 1175.144249][T18760] other info that might help us debug this: [ 1175.144249][T18760] [ 1175.154475][T18760] Chain exists of: [ 1175.154475][T18760] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#36 [ 1175.154475][T18760] [ 1175.169472][T18760] Possible unsafe locking scenario: [ 1175.169472][T18760] [ 1175.176928][T18760] CPU0 CPU1 [ 1175.182298][T18760] ---- ---- [ 1175.187664][T18760] lock(&sb->s_type->i_mutex_key#36); [ 1175.193152][T18760] lock(tpg_instances_lock); [ 1175.200361][T18760] lock(&sb->s_type->i_mutex_key#36); [ 1175.208370][T18760] lock(gadget_subsys.su_mutex); [ 1175.213412][T18760] [ 1175.213412][T18760] *** DEADLOCK *** [ 1175.213412][T18760] [ 1175.221549][T18760] locks held by syz.3.2912/18760: 3, last CPU#1: [ 1175.227888][T18760] #0: ffff88801ff2a478 (sb_writers#27){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x610 [ 1175.237358][T18760] #1: ffff8880574b4f80 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x610 [ 1175.248751][T18760] #2: ffff88804d1bec00 (&sb->s_type->i_mutex_key#36){++++}-{4:4}, at: vfs_rmdir+0xed/0x8e0 [ 1175.258922][T18760] [ 1175.258922][T18760] stack backtrace: [ 1175.264824][T18760] CPU: 1 UID: 0 PID: 18760 Comm: syz.3.2912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1175.275777][T18760] Tainted: [L]=SOFTLOCKUP [ 1175.280099][T18760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1175.290161][T18760] Call Trace: [ 1175.293440][T18760] [ 1175.296371][T18760] dump_stack_lvl+0x100/0x190 [ 1175.301088][T18760] print_circular_bug.cold+0x178/0x1be [ 1175.306587][T18760] check_noncircular+0x146/0x160 [ 1175.311590][T18760] check_prev_add+0xeb/0xe60 [ 1175.316202][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.321858][T18760] ? configfs_rmdir+0x598/0x950 [ 1175.326719][T18760] __lock_acquire+0x1528/0x1f40 [ 1175.331601][T18760] lock_acquire+0x1d1/0x380 [ 1175.336130][T18760] ? configfs_rmdir+0x5ae/0x950 [ 1175.340992][T18760] ? __pfx___might_resched+0x10/0x10 [ 1175.346291][T18760] ? __lock_acquire+0x5c0/0x1f40 [ 1175.351253][T18760] __mutex_lock+0x19f/0x1c10 [ 1175.355874][T18760] ? configfs_rmdir+0x5ae/0x950 [ 1175.360736][T18760] ? configfs_rmdir+0x5ae/0x950 [ 1175.365598][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.371265][T18760] ? reacquire_held_locks+0xdd/0x1f0 [ 1175.376577][T18760] ? __pfx___mutex_lock+0x10/0x10 [ 1175.381652][T18760] ? do_raw_spin_lock+0x128/0x260 [ 1175.386717][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.392374][T18760] ? find_held_lock+0x2b/0x80 [ 1175.397064][T18760] ? fast_dput+0x2fe/0x6f0 [ 1175.401505][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.407159][T18760] ? do_raw_spin_unlock+0x145/0x1e0 [ 1175.412389][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.418040][T18760] ? _raw_spin_unlock+0x28/0x50 [ 1175.422914][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.428564][T18760] ? fast_dput+0x168/0x6f0 [ 1175.433012][T18760] ? configfs_rmdir+0x5ae/0x950 [ 1175.437874][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.443531][T18760] configfs_rmdir+0x5ae/0x950 [ 1175.448233][T18760] ? __pfx_configfs_rmdir+0x10/0x10 [ 1175.453450][T18760] ? __pfx_down_write+0x10/0x10 [ 1175.458333][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.463995][T18760] vfs_rmdir+0x328/0x8e0 [ 1175.468272][T18760] filename_rmdir+0x31a/0x610 [ 1175.472965][T18760] ? __pfx_filename_rmdir+0x10/0x10 [ 1175.478186][T18760] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.483839][T18760] ? do_getname+0x191/0x390 [ 1175.488374][T18760] __x64_sys_rmdir+0x46/0x70 [ 1175.492986][T18760] do_syscall_64+0x123/0x790 [ 1175.497618][T18760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.503537][T18760] RIP: 0033:0x7f89be59fb19 [ 1175.507959][T18760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.527586][T18760] RSP: 002b:00007f89bf4df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1175.536027][T18760] RAX: ffffffffffffffda RBX: 00007f89be825fa0 RCX: 00007f89be59fb19 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1175.544013][T18760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000540 [ 1175.552007][T18760] RBP: 00007f89be637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1175.559999][T18760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.567989][T18760] R13: 00007f89be826038 R14: 00007f89be825fa0 R15: 00007ffcfffd9af8 [ 1175.575988][T18760] [ 1175.695659][T18766] FAULT_INJECTION: forcing a failure. [ 1175.695659][T18766] name failslab, interval 1, probability 5, space 0, times 9998 [ 1175.695711][T18766] CPU: 1 UID: 0 PID: 18766 Comm: syz.2.2916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1175.695763][T18766] Tainted: [L]=SOFTLOCKUP [ 1175.695778][T18766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1175.695801][T18766] Call Trace: [ 1175.695813][T18766] [ 1175.695827][T18766] dump_stack_lvl+0x100/0x190 [ 1175.695888][T18766] should_fail_ex.cold+0x5/0xa [ 1175.695941][T18766] should_failslab+0xc2/0x120 [ 1175.695999][T18766] __kmalloc_cache_noprof+0x91/0x6d0 [ 1175.696041][T18766] ? sctp_add_bind_addr+0xae/0x3e0 [ 1175.696089][T18766] sctp_add_bind_addr+0xae/0x3e0 [ 1175.696136][T18766] sctp_copy_local_addr_list+0x349/0x550 [ 1175.696190][T18766] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1175.696243][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.696288][T18766] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1175.696340][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.696385][T18766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1175.696446][T18766] sctp_bind_addr_copy+0xe0/0x530 [ 1175.696490][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.696539][T18766] sctp_connect_new_asoc+0x1c9/0x770 [ 1175.696601][T18766] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1175.696670][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.696715][T18766] ? apparmor_sctp_bind_connect+0x65/0xa0 [ 1175.696761][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.696810][T18766] sctp_sendmsg+0x1743/0x22e0 [ 1175.696873][T18766] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1175.696937][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.696983][T18766] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 1175.697055][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.697100][T18766] ? aa_sock_msg_perm+0x11e/0x200 [ 1175.697144][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.697189][T18766] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1175.697249][T18766] inet_sendmsg+0x11c/0x140 [ 1175.697285][T18766] ____sys_sendmsg+0xa23/0xc30 [ 1175.697327][T18766] ? __pfx_inet_sendmsg+0x10/0x10 [ 1175.697366][T18766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1175.697422][T18766] ___sys_sendmsg+0x190/0x1e0 [ 1175.697468][T18766] ? __pfx____sys_sendmsg+0x10/0x10 [ 1175.697512][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.697558][T18766] ? futex_wait+0x11e/0x370 [ 1175.697614][T18766] ? rcu_is_watching+0x13/0xc0 [ 1175.697659][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.697724][T18766] __sys_sendmsg+0x160/0x210 [ 1175.697781][T18766] ? __pfx___sys_sendmsg+0x10/0x10 [ 1175.697848][T18766] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1175.697893][T18766] ? rcu_is_watching+0x13/0xc0 [ 1175.697933][T18766] do_syscall_64+0x123/0x790 [ 1175.697991][T18766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.698032][T18766] RIP: 0033:0x7fcbcbf9fb19 [ 1175.698060][T18766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.698097][T18766] RSP: 002b:00007fcbccece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1175.698134][T18766] RAX: ffffffffffffffda RBX: 00007fcbcc226090 RCX: 00007fcbcbf9fb19 [ 1175.698161][T18766] RDX: 0000000024000052 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1175.698186][T18766] RBP: 00007fcbcc037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1175.698211][T18766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.698235][T18766] R13: 00007fcbcc226128 R14: 00007fcbcc226090 R15: 00007ffd97e241e8 [ 1175.698275][T18766] [ 1175.926768][ T7515] net_ratelimit: 51 callbacks suppressed [ 1175.926795][ T7515] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.926829][ T7515] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1175.926880][ T7515] bond0: (slave bridge1): failed to get link speed/duplex [ 1175.992834][T15871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.992868][T15871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.144678][ T322] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.168836][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.184920][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.218802][ T7516] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.237976][T15871] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.276792][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.296851][ T62] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.664028][ T3103] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1176.821341][ T3103] usb 1-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 1176.825334][ T3103] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1176.829355][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.829413][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.832430][ T3103] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1176.843367][ T3103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.843404][ T3103] usb 1-1: Product: syz [ 1176.843430][ T3103] usb 1-1: Manufacturer: syz [ 1176.843456][ T3103] usb 1-1: SerialNumber: syz [ 1176.851820][ T3103] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 1176.863402][ T3103] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1176.874133][ T3103] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1177.176382][T16143] syz_tun (unregistering): left allmulticast mode [ 1177.731345][ T3337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.850603][ T3337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.969469][ T3337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.009270][ T25] usb 1-1: USB disconnect, device number 13 [ 1178.028603][ T25] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1178.049539][ T25] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1178.050186][ T25] ti_usb_3410_5052 1-1:2.0: device disconnected [ 1178.088016][ T3337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.225652][ T3337] bridge_slave_1: left allmulticast mode [ 1178.225691][ T3337] bridge_slave_1: left promiscuous mode [ 1178.225912][ T3337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.227557][ T3337] bridge_slave_0: left allmulticast mode [ 1178.227588][ T3337] bridge_slave_0: left promiscuous mode [ 1178.227743][ T3337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.239084][ T3337] dvmrp3: left allmulticast mode [ 1178.406508][ T3337] bond2 (unregistering): (slave bridge1): Removing an active aggregator [ 1178.406843][ T3337] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1178.436470][ T3337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.439592][ T3337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.440664][ T3337] bond0 (unregistering): Released all slaves [ 1178.447208][ T3337] bond1 (unregistering): Released all slaves [ 1178.463284][ T3337] bond2 (unregistering): Released all slaves [ 1178.525582][ T3337] tipc: Left network mode [ 1178.778808][ T3337] hsr_slave_0: left promiscuous mode [ 1178.779352][ T3337] hsr_slave_1: left promiscuous mode [ 1178.779986][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.780014][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.780779][ T3337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.780803][ T3337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.829713][ T3337] veth1_macvtap: left promiscuous mode [ 1178.829754][ T3337] veth0_macvtap: left promiscuous mode [ 1178.829833][ T3337] veth1_vlan: left promiscuous mode [ 1178.829901][ T3337] veth0_vlan: left promiscuous mode [ 1179.039266][ T3337] team0 (unregistering): Port device team_slave_1 removed [ 1179.056310][ T3337] team0 (unregistering): Port device team_slave_0 removed [ 1179.393486][ T3337] IPVS: stop unused estimator thread 0... [ 1179.539773][T17905] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.572869][T17905] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.610203][T17905] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.670198][T17905] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.769798][T17905] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.822253][T17905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.880628][T17905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.912205][T17905] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.055371][T17905] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.082084][T17905] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.121405][T17905] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.170535][T17905] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.259785][T17905] bridge_slave_1: left allmulticast mode [ 1180.259822][T17905] bridge_slave_1: left promiscuous mode [ 1180.259987][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.276483][T17905] bridge_slave_0: left allmulticast mode [ 1180.276516][T17905] bridge_slave_0: left promiscuous mode [ 1180.276686][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.310955][T17905] bridge_slave_1: left allmulticast mode [ 1180.310991][T17905] bridge_slave_1: left promiscuous mode [ 1180.311149][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.312938][T17905] bridge_slave_0: left allmulticast mode [ 1180.312967][T17905] bridge_slave_0: left promiscuous mode [ 1180.313130][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.354192][T17905] bridge_slave_1: left allmulticast mode [ 1180.354226][T17905] bridge_slave_1: left promiscuous mode [ 1180.354388][T17905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.355842][T17905] bridge_slave_0: left allmulticast mode [ 1180.355871][T17905] bridge_slave_0: left promiscuous mode [ 1180.355983][T17905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.552009][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.564441][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.565843][T17905] bond0 (unregistering): Released all slaves [ 1180.638584][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.656969][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.658261][T17905] bond0 (unregistering): Released all slaves [ 1180.730107][T17905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.732033][T17905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.733275][T17905] bond0 (unregistering): Released all slaves [ 1181.006104][ T3337] net_ratelimit: 159 callbacks suppressed [ 1181.006143][ T3337] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.034502][ T64] bond0: (slave bridge1): failed to get link speed/duplex [ 1181.042035][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.042075][T13679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.157749][ T64] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.174121][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.174162][T13679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1181.174455][ T7515] bond0: (slave bridge1): failed to get link speed/duplex [ 1181.284196][T13679] bond0: (slave bridge1): failed to get link speed/duplex [ 1181.284243][T13679] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.419833][ T5295] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1181.510133][T17905] hsr_slave_0: left promiscuous mode [ 1181.510682][T17905] hsr_slave_1: left promiscuous mode [ 1181.511276][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.511302][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.511930][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.511954][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.537286][T17905] hsr_slave_0: left promiscuous mode [ 1181.542338][T17905] hsr_slave_1: left promiscuous mode [ 1181.543022][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.543049][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.552820][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.552850][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.585702][T17905] hsr_slave_0: left promiscuous mode [ 1181.591639][T17905] hsr_slave_1: left promiscuous mode [ 1181.592313][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.592339][T17905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.599461][T17905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.599510][T17905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.640433][T17905] veth1_macvtap: left promiscuous mode [ 1181.640477][T17905] veth0_macvtap: left promiscuous mode [ 1181.640571][T17905] veth1_vlan: left promiscuous mode [ 1181.640634][T17905] veth0_vlan: left promiscuous mode [ 1181.641648][T17905] veth1_macvtap: left promiscuous mode [ 1181.641689][T17905] veth0_macvtap: left promiscuous mode [ 1181.641775][T17905] veth1_vlan: left promiscuous mode [ 1181.641850][T17905] veth0_vlan: left promiscuous mode [ 1181.642781][T17905] veth1_macvtap: left promiscuous mode [ 1181.642819][T17905] veth0_macvtap: left promiscuous mode [ 1181.642904][T17905] veth1_vlan: left promiscuous mode [ 1181.642967][T17905] veth0_vlan: left promiscuous mode [ 1181.985818][T17905] team0 (unregistering): Port device team_slave_1 removed [ 1181.990224][T17905] team0 (unregistering): Port device team_slave_0 removed [ 1182.115289][T17905] team0 (unregistering): Port device team_slave_1 removed [ 1182.119725][T17905] team0 (unregistering): Port device team_slave_0 removed [ 1182.258850][T17905] team0 (unregistering): Port device team_slave_1 removed [ 1182.263320][T17905] team0 (unregistering): Port device team_slave_0 removed [ 1182.852445][ T5295] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1183.210892][ T5295] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1183.568098][ T5295] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1183.908764][ T5295] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1184.626255][ T5295] 8021q: adding VLAN 0 to HW filter on device eth11