last executing test programs: 4m50.531086043s ago: executing program 3 (id=4): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r4}, 0x18) fsopen(&(0x7f0000000040)='binder\x00', 0x0) 4m47.627716216s ago: executing program 3 (id=6): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r0 = creat(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x2040400) copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0x46, 0x0, "7f6c367f4cafb170a8ecc305763b1bae615dfbfca7a099c5a8e210666041ac8e21f4ee40a3ddc336a42ea6c1f7d813fea54730fc38fe652d346b424152e76bca1063ccc46c0685e63e34bb564bb143fb"}, 0xd8) sendto$inet6(r2, &(0x7f0000000340), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r3 = dup(r2) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, 0x0, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000003c0)={0x2, 0x5}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) 4m41.633027446s ago: executing program 3 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x18, 0x10, 0x701, 0x0, 0x0, {0xa}, [@nested={0x4, 0x68}]}, 0x18}}, 0x0) 4m38.451532268s ago: executing program 3 (id=18): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x34, r3, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000100)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x3ff, r6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$usbfs(0x0, 0x1ff, 0x402) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) write$FUSE_LK(r8, &(0x7f0000000080)={0x28, 0xfffffffffffffffe, r9, {{0x1, 0x4, 0x2, r10}}}, 0x28) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000240)={{r11, r12+10000000}, {0x0, 0x989680}}, 0x0) 4m30.333882924s ago: executing program 2 (id=30): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x24e, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x6, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) 4m28.176176702s ago: executing program 2 (id=32): r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) 4m26.034332256s ago: executing program 2 (id=36): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x7}, 0x20) 4m25.212596213s ago: executing program 2 (id=38): syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ptrace(0x10, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x8) write$P9_RSETATTR(r0, &(0x7f0000000400)={0x7, 0x1b, 0x1}, 0x7) 4m23.387839462s ago: executing program 2 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 4m22.873118816s ago: executing program 32 (id=18): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x34, r3, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000100)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x3ff, r6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_open_dev$usbfs(0x0, 0x1ff, 0x402) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) write$FUSE_LK(r8, &(0x7f0000000080)={0x28, 0xfffffffffffffffe, r9, {{0x1, 0x4, 0x2, r10}}}, 0x28) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000240)={{r11, r12+10000000}, {0x0, 0x989680}}, 0x0) 4m22.438820169s ago: executing program 2 (id=49): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 4m18.9340556s ago: executing program 33 (id=49): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 3m21.648692504s ago: executing program 6 (id=212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3m19.981467762s ago: executing program 6 (id=216): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 3m18.316092034s ago: executing program 6 (id=221): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3m17.163090497s ago: executing program 6 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000050000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000295"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m16.354859061s ago: executing program 6 (id=229): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000000)={0x0, 0x90000000, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000240)) tkill(r1, 0x16) 3m11.722695348s ago: executing program 6 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x4}) 2m56.361398645s ago: executing program 34 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x4}) 1m44.483938609s ago: executing program 0 (id=465): syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/uts\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e0308004d8c71ef288563"], 0xffdd) 1m42.517808818s ago: executing program 0 (id=472): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m41.378287003s ago: executing program 4 (id=475): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c17051b8822c00a599692e5bdc24ec7a60dc8f20ad00d2ba1f1b503b8a6a2046d23aac"]) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000fc0)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffb, 0x4002011, r2, 0x1000) fallocate(r2, 0x0, 0x0, 0x8800000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x808, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) getdents64(r0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x10, 0x3, 0x0) fallocate(r4, 0x22, 0xfffffffffffffff7, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8a99) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchdir(r6) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0xa15, 0x4) ioctl$KDSKBLED(r3, 0x4b65, 0xffffffffffffff6c) 1m41.25460064s ago: executing program 0 (id=476): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) 1m36.320857084s ago: executing program 0 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m36.139945686s ago: executing program 4 (id=484): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000251b00", @ANYBLOB="0200000000000000", @ANYRES32], 0x50) 1m33.746443292s ago: executing program 0 (id=489): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x81, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x2cc4d}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x100}]}}}]}, 0x50}}, 0x0) 1m33.599535649s ago: executing program 4 (id=491): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a6000000000000005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m32.660674711s ago: executing program 0 (id=492): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r2 = syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090401"], 0x0) gettid() syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) r3 = socket(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x53) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000400)=0xfffffff7, 0x4) listen(r3, 0x7f) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0xaf, @empty, 0x2}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x500000000000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/132, 0x84}], 0x4}, 0x40) 1m26.554543765s ago: executing program 4 (id=499): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f00000000c0)) 1m22.086785724s ago: executing program 4 (id=504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) 1m19.965896077s ago: executing program 4 (id=509): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000140)=0x13) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0xffffffc0, 0xce30, 0xfffff801, 0x4, 0x1, "6e29efcae4ed69003435b2d5af02ff004205d2", 0x800, 0x9}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xd) 1m16.921643015s ago: executing program 35 (id=492): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x7bc, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r2 = syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090401"], 0x0) gettid() syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0x1f5, 0x4) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) r3 = socket(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x53) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000400)=0xfffffff7, 0x4) listen(r3, 0x7f) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0xaf, @empty, 0x2}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x500000000000000) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000740)=""/132, 0x84}], 0x4}, 0x40) 1m4.14855333s ago: executing program 36 (id=509): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000140)=0x13) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0xffffffc0, 0xce30, 0xfffff801, 0x4, 0x1, "6e29efcae4ed69003435b2d5af02ff004205d2", 0x800, 0x9}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0xd) 23.116419747s ago: executing program 1 (id=572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 20.667860453s ago: executing program 7 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, 0x0, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85cc970c2d2f86dd06890000fc38078b49f5e6bdbfc95f9a3dff8c1771865e1808c9c777b801f21fc42abd02c158f01a", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 19.442527195s ago: executing program 7 (id=576): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c17051b8822c00a599692e5bdc24ec7a60dc8f20ad00d2ba1f1b503b8a6a2046d23aac"]) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x808, 0x0) flistxattr(r2, &(0x7f00000000c0)=""/23, 0x17) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) getdents64(r0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x10, 0x3, 0x0) fallocate(r5, 0x22, 0xfffffffffffffff7, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8a99) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchdir(r7) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0xa15, 0x4) ioctl$KDSKBLED(r4, 0x4b65, 0xffffffffffffff6c) 18.809607328s ago: executing program 1 (id=577): ioperm(0x2, 0x7ff, 0x8) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x9, 0x6, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x68, {0x2, 0x0, @empty}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x800040, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nombcache}]}, 0x1, 0x597, &(0x7f0000000b80)="$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") chdir(&(0x7f0000000200)='./file0\x00') r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffd, 0x1, @mcast1, @mcast2, 0x8000, 0x0, 0x2000002}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00'}}) symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17.479993661s ago: executing program 5 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) fallocate(r2, 0x0, 0x0, 0x1001f0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x10, 0x6, 0x10001) 17.148147081s ago: executing program 7 (id=579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000000)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000ca31878000000000000000000b7fc96620ecbdd8f009067373cbd236960663022867907d90d19479edc61cfaae0a2a3081e02b93f3f50b8ad31ce5d2631d2c25231cd98079811967f5a84a6f919dc2a593837206792bebb6acf3a04763fb4dd18d9e66ae27e495765d2dc0444c8f8642e59208d0f5812293630ad6a8d00a95db91", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/102, 0x66, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x2000000000000017, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffb6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) 12.864174627s ago: executing program 1 (id=580): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000480)={0x20002011}) epoll_wait(r2, &(0x7f00000002c0)=[{}], 0x1, 0x9450) 10.835976238s ago: executing program 5 (id=581): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f0000000400)={[{@grpquota}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@nomblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0x1, 0x455, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 5.416122354s ago: executing program 5 (id=582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.321331485s ago: executing program 1 (id=583): syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200300000000000000000300000000001c00090008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.272201938s ago: executing program 7 (id=584): r0 = epoll_create1(0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2005}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000440)={0x20000002}) epoll_pwait2(r0, &(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @random="210000e98e00", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0xc, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/15, 0xf}}], 0x1, 0x2, 0x0) 4.343460574s ago: executing program 5 (id=585): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 4.293250738s ago: executing program 7 (id=586): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 3.223686735s ago: executing program 5 (id=587): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="c17051b8822c00a599692e5bdc24ec7a60dc8f20ad00d2ba1f1b503b8a6a2046d23aac"]) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000fc0)="$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") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r3, 0x0, 0x0, 0x8800000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x808, 0x0) flistxattr(r2, &(0x7f00000000c0)=""/23, 0x17) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) getdents64(r0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x10, 0x3, 0x0) fallocate(r5, 0x22, 0xfffffffffffffff7, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8a99) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchdir(r7) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0xa15, 0x4) ioctl$KDSKBLED(r4, 0x4b65, 0xffffffffffffff6c) 2.73810648s ago: executing program 7 (id=588): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@usrjquota}, {@jqfmt_vfsv0}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x101}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0x0, 0x461, &(0x7f00000004c0)="$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") r1 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0x1, 0x3}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x11c80a1, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '\x81,'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, 'noload'}}, {@fsname={'fsname', 0x3d, 'noload'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'max_dir_size_kb'}}, {@euid_gt={'euid>', r3}}, {@smackfsdef={'smackfsdef', 0x3d, 'noload'}}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 1.360141066s ago: executing program 1 (id=589): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 405.459829ms ago: executing program 5 (id=590): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x6}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") 0s ago: executing program 1 (id=591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 190.947610][ T5797] cgroup: Unknown subsys name 'net' [ 191.064944][ T5797] cgroup: Unknown subsys name 'cpuset' [ 191.080444][ T5797] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 197.283421][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.746413][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.757077][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.764913][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.777466][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.785640][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.793722][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.811406][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.827723][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.836105][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.846305][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.855358][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.863766][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.872091][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.879748][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.895141][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.906630][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.919105][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.929893][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.938087][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.942545][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.951511][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.955974][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.967443][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.970783][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.993644][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.107531][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 205.061248][ T5822] Bluetooth: hci3: command tx timeout [ 205.066901][ T5822] Bluetooth: hci4: command tx timeout [ 205.074237][ T5112] Bluetooth: hci2: command tx timeout [ 205.079868][ T5112] Bluetooth: hci0: command tx timeout [ 205.086579][ T5819] Bluetooth: hci1: command tx timeout [ 205.128326][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 205.153300][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 205.219359][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 205.421658][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.429230][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.437225][ T5821] bridge_slave_0: entered allmulticast mode [ 205.447266][ T5821] bridge_slave_0: entered promiscuous mode [ 205.577246][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.586194][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.594244][ T5821] bridge_slave_1: entered allmulticast mode [ 205.603863][ T5821] bridge_slave_1: entered promiscuous mode [ 205.614470][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 205.855238][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.990592][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.207461][ T5821] team0: Port device team_slave_0 added [ 206.389530][ T5821] team0: Port device team_slave_1 added [ 206.636034][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.643755][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.651690][ T5818] bridge_slave_0: entered allmulticast mode [ 206.661196][ T5818] bridge_slave_0: entered promiscuous mode [ 206.722529][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.730282][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.741958][ T5813] bridge_slave_0: entered allmulticast mode [ 206.754204][ T5813] bridge_slave_0: entered promiscuous mode [ 206.772733][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.780344][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.791930][ T5827] bridge_slave_0: entered allmulticast mode [ 206.801737][ T5827] bridge_slave_0: entered promiscuous mode [ 206.820325][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.829577][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.837571][ T5818] bridge_slave_1: entered allmulticast mode [ 206.847293][ T5818] bridge_slave_1: entered promiscuous mode [ 206.906996][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.915263][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.923165][ T5827] bridge_slave_1: entered allmulticast mode [ 206.932937][ T5827] bridge_slave_1: entered promiscuous mode [ 206.980096][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.988563][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.996460][ T5813] bridge_slave_1: entered allmulticast mode [ 207.005759][ T5813] bridge_slave_1: entered promiscuous mode [ 207.025654][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.033030][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.059415][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.076159][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.083538][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.109853][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.141604][ T5829] Bluetooth: hci0: command tx timeout [ 207.147276][ T5829] Bluetooth: hci1: command tx timeout [ 207.154614][ T5819] Bluetooth: hci4: command tx timeout [ 207.160224][ T5819] Bluetooth: hci2: command tx timeout [ 207.162413][ T5112] Bluetooth: hci3: command tx timeout [ 207.341432][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.401451][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.457177][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.477580][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.540426][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.590116][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.598163][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.606075][ T5814] bridge_slave_0: entered allmulticast mode [ 207.614898][ T5814] bridge_slave_0: entered promiscuous mode [ 207.636795][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.723885][ T5818] team0: Port device team_slave_0 added [ 207.742086][ T5818] team0: Port device team_slave_1 added [ 207.749989][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.757671][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.765561][ T5814] bridge_slave_1: entered allmulticast mode [ 207.774350][ T5814] bridge_slave_1: entered promiscuous mode [ 208.015505][ T5821] hsr_slave_0: entered promiscuous mode [ 208.025716][ T5821] hsr_slave_1: entered promiscuous mode [ 208.055960][ T5813] team0: Port device team_slave_0 added [ 208.144634][ T5827] team0: Port device team_slave_0 added [ 208.164141][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.188023][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.207064][ T5813] team0: Port device team_slave_1 added [ 208.217557][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.224918][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.251534][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.270405][ T5827] team0: Port device team_slave_1 added [ 208.430101][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.437981][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.464855][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.516132][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.523556][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.549981][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.719786][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.727462][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.753905][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.796992][ T5814] team0: Port device team_slave_0 added [ 208.808221][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.815563][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.841887][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.862065][ T5814] team0: Port device team_slave_1 added [ 209.030420][ T5818] hsr_slave_0: entered promiscuous mode [ 209.041861][ T5818] hsr_slave_1: entered promiscuous mode [ 209.050730][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 209.058140][ T5818] Cannot create hsr debugfs directory [ 209.161550][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.168713][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.196748][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.232561][ T5112] Bluetooth: hci3: command tx timeout [ 209.238234][ T5112] Bluetooth: hci1: command tx timeout [ 209.244127][ T5822] Bluetooth: hci2: command tx timeout [ 209.249719][ T5822] Bluetooth: hci4: command tx timeout [ 209.254139][ T5829] Bluetooth: hci0: command tx timeout [ 209.376878][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.385009][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.411572][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.573281][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.580417][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.606837][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.634592][ T5813] hsr_slave_0: entered promiscuous mode [ 209.644873][ T5813] hsr_slave_1: entered promiscuous mode [ 209.653299][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 209.659197][ T5813] Cannot create hsr debugfs directory [ 209.778106][ T5827] hsr_slave_0: entered promiscuous mode [ 209.788384][ T5827] hsr_slave_1: entered promiscuous mode [ 209.797253][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 209.803246][ T5827] Cannot create hsr debugfs directory [ 210.490954][ T5814] hsr_slave_0: entered promiscuous mode [ 210.499977][ T5814] hsr_slave_1: entered promiscuous mode [ 210.509199][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 210.515232][ T5814] Cannot create hsr debugfs directory [ 211.106408][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.180805][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.219441][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.305289][ T5829] Bluetooth: hci4: command tx timeout [ 211.311282][ T5819] Bluetooth: hci1: command tx timeout [ 211.312851][ T5822] Bluetooth: hci2: command tx timeout [ 211.316926][ T5819] Bluetooth: hci3: command tx timeout [ 211.324452][ T5112] Bluetooth: hci0: command tx timeout [ 211.333547][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.492176][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.523354][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.580592][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.607842][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.863918][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.915119][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.948295][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.049024][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.246465][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.348330][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.375534][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.404575][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.659062][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.700359][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.731649][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.760036][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.924058][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.237126][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.300025][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.339894][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.347576][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.422929][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.430459][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.586350][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.719793][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.727483][ T4057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.789592][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.819920][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.827570][ T4057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.865135][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.224399][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.248083][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.358656][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.366411][ T4872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.419976][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.475374][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.483091][ T4872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.507054][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.514715][ T4872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.618338][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.726061][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.733696][ T4872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.046582][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.126982][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.206070][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.213818][ T4872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.236786][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.244435][ T4872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.467461][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.831339][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.037820][ T5821] veth0_vlan: entered promiscuous mode [ 217.168811][ T5821] veth1_vlan: entered promiscuous mode [ 217.378708][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.471176][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.576226][ T5821] veth0_macvtap: entered promiscuous mode [ 217.669072][ T5821] veth1_macvtap: entered promiscuous mode [ 217.692209][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.912446][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.958089][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.110470][ T1124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.137529][ T1124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.211653][ T5827] veth0_vlan: entered promiscuous mode [ 218.230306][ T1124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.257398][ T5813] veth0_vlan: entered promiscuous mode [ 218.300548][ T1124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.338598][ T5827] veth1_vlan: entered promiscuous mode [ 218.416922][ T5813] veth1_vlan: entered promiscuous mode [ 218.611530][ T5814] veth0_vlan: entered promiscuous mode [ 218.746816][ T5814] veth1_vlan: entered promiscuous mode [ 218.787062][ T5827] veth0_macvtap: entered promiscuous mode [ 218.838631][ T5813] veth0_macvtap: entered promiscuous mode [ 218.899775][ T5827] veth1_macvtap: entered promiscuous mode [ 218.934261][ T5813] veth1_macvtap: entered promiscuous mode [ 219.176745][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.233419][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.258129][ T5814] veth0_macvtap: entered promiscuous mode [ 219.283485][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.357509][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.379779][ T5814] veth1_macvtap: entered promiscuous mode [ 219.448624][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.574160][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.624133][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.684396][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.713716][ T4872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.752841][ T4872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.778357][ T4872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.817975][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.827392][ T3910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.873276][ T3910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.887595][ T5818] veth0_vlan: entered promiscuous mode [ 219.972354][ T3910] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.025379][ T3910] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.071101][ T3910] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.080158][ T3910] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.109878][ T5818] veth1_vlan: entered promiscuous mode [ 220.505565][ T5818] veth0_macvtap: entered promiscuous mode [ 220.591607][ T5818] veth1_macvtap: entered promiscuous mode [ 220.880539][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.015917][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.135553][ T3910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.220610][ T3910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.276464][ T3910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.331928][ T3910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.832471][ T3699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.840564][ T3699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.054347][ T3699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.062670][ T3699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.513586][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.596966][ T4669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.606015][ T4669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.965438][ T3699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.974028][ T3699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.078792][ T4444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.087081][ T4444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.129629][ T4057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.131143][ T3910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.140412][ T4057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.148366][ T3910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.148972][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.172034][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.537616][ T4669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.545962][ T4669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.947374][ T4669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.955642][ T4669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.528035][ T6020] loop0: detected capacity change from 0 to 128 [ 230.803158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 230.905535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 231.112221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 231.212275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 231.316423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 231.417343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 231.521007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 231.622007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 231.702871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 231.725035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 234.921675][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.928374][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.772607][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 239.358346][ T6050] Zero length message leads to an empty skb [ 243.542967][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 243.751865][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 243.851515][ T11] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 244.033174][ T11] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 244.042768][ T11] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 244.051227][ T11] usb 2-1: Product: syz [ 244.055533][ T11] usb 2-1: Manufacturer: syz [ 244.060266][ T11] usb 2-1: SerialNumber: syz [ 244.188550][ T11] usb 2-1: config 0 descriptor?? [ 244.196298][ T6071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 244.258164][ T11] hub 2-1:0.0: bad descriptor, ignoring hub [ 244.264592][ T11] hub 2-1:0.0: probe with driver hub failed with error -5 [ 245.208044][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.218040][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.354377][ T6082] warning: `syz.2.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 245.581882][ T11] usb 2-1: USB disconnect, device number 2 [ 247.240377][ T6091] loop2: detected capacity change from 0 to 128 [ 247.402030][ T6091] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 247.457037][ T6091] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 248.502940][ T6091] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 6 (only 1 groups) [ 249.049011][ T5814] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.348282][ T6117] loop2: detected capacity change from 0 to 256 [ 252.395003][ T6117] ======================================================= [ 252.395003][ T6117] WARNING: The mand mount option has been deprecated and [ 252.395003][ T6117] and is ignored by this kernel. Remove the mand [ 252.395003][ T6117] option from the mount to silence this warning. [ 252.395003][ T6117] ======================================================= [ 252.502586][ T6117] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.519507][ T6117] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 252.746103][ T6117] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 253.222071][ T6117] loop2: detected capacity change from 256 to 0 [ 253.259491][ C1] I/O error, dev loop2, sector 144 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 253.799400][ C1] I/O error, dev loop2, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 253.809385][ C1] Buffer I/O error on dev loop2, logical block 160, lost sync page write [ 254.472184][ C0] I/O error, dev loop2, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.642839][ T4669] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.910539][ T4669] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.167005][ T4669] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.370702][ T4669] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.058816][ T4669] bridge_slave_1: left allmulticast mode [ 256.065075][ T4669] bridge_slave_1: left promiscuous mode [ 256.072110][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.105120][ T4669] bridge_slave_0: left allmulticast mode [ 256.111611][ T4669] bridge_slave_0: left promiscuous mode [ 256.118284][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.135691][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.168362][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.183962][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.210534][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.378271][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.140672][ T4669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.189533][ T4669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.233843][ T4669] bond0 (unregistering): Released all slaves [ 258.244429][ T4669] hsr_slave_0: left promiscuous mode [ 258.271623][ T4669] hsr_slave_1: left promiscuous mode [ 258.279788][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.288387][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.374560][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.387154][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.526226][ T6148] loop4: detected capacity change from 0 to 128 [ 258.534873][ T4669] veth1_macvtap: left promiscuous mode [ 258.540766][ T4669] veth0_macvtap: left promiscuous mode [ 258.547326][ T4669] veth1_vlan: left promiscuous mode [ 258.556260][ T4669] veth0_vlan: left promiscuous mode [ 258.582906][ T5822] Bluetooth: hci1: command tx timeout [ 259.746960][ T6157] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.107953][ T4669] team0 (unregistering): Port device team_slave_1 removed [ 260.140146][ T4669] team0 (unregistering): Port device team_slave_0 removed [ 260.671621][ T5822] Bluetooth: hci1: command tx timeout [ 260.962315][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.978548][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.989561][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.009660][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.023058][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.487080][ T6173] loop0: detected capacity change from 0 to 8 [ 261.676861][ T6175] loop1: detected capacity change from 0 to 128 [ 261.856065][ T6175] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 262.008175][ T6139] chnl_net:caif_netlink_parms(): no params data found [ 262.055334][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 262.071525][ T6175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.212471][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 262.245025][ T11] usb 1-1: config 0 interface 0 has no altsetting 0 [ 262.252273][ T11] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 262.262052][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.439027][ T11] usb 1-1: config 0 descriptor?? [ 262.741269][ T5822] Bluetooth: hci1: command tx timeout [ 262.956995][ T11] hid (null): invalid report_count 28476 [ 262.973508][ T11] hid (null): unknown global tag 0xc [ 262.978970][ T11] hid (null): report_id 25068 is invalid [ 262.985088][ T11] hid (null): report_id 0 is invalid [ 262.990582][ T11] hid (null): global environment stack overflow [ 263.005620][ T11] hid (null): unknown global tag 0xc [ 263.011324][ T11] hid (null): unknown global tag 0x58 [ 263.226783][ T5822] Bluetooth: hci5: command tx timeout [ 263.354430][ T1969] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 263.463095][ T11] usb 1-1: USB disconnect, device number 2 [ 263.542576][ T1969] usb 5-1: Using ep0 maxpacket: 8 [ 263.646597][ T1969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 263.659400][ T1969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.673172][ T1969] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.684693][ T1969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 263.696448][ T1969] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 263.707783][ T1969] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 263.717548][ T1969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.028379][ T1969] usb 5-1: config 0 descriptor?? [ 264.036658][ T6187] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.563954][ T6187] loop4: detected capacity change from 0 to 8 [ 264.831766][ T5112] Bluetooth: hci1: command tx timeout [ 264.843073][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 264.965494][ T6199] tc_dump_action: action bad kind [ 265.301701][ T5112] Bluetooth: hci5: command tx timeout [ 265.393673][ T6202] loop0: detected capacity change from 0 to 1024 [ 265.631962][ T6202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.996029][ T6209] loop1: detected capacity change from 0 to 16 [ 266.104651][ T6209] erofs (device loop1): bogus i_mode (0) @ nid 5 [ 266.191552][ T5822] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 266.613880][ T5876] usb 5-1: USB disconnect, device number 2 [ 266.665401][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.188062][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.196125][ T6139] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.204208][ T6139] bridge_slave_0: entered allmulticast mode [ 267.214142][ T6139] bridge_slave_0: entered promiscuous mode [ 267.381861][ T5822] Bluetooth: hci5: command tx timeout [ 267.507932][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.515928][ T6139] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.523741][ T6139] bridge_slave_1: entered allmulticast mode [ 267.532522][ T6139] bridge_slave_1: entered promiscuous mode [ 268.077742][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.085432][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.093373][ T6164] bridge_slave_0: entered allmulticast mode [ 268.103181][ T6164] bridge_slave_0: entered promiscuous mode [ 268.133389][ T6139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.218579][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.226715][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.234780][ T6164] bridge_slave_1: entered allmulticast mode [ 268.244731][ T6164] bridge_slave_1: entered promiscuous mode [ 268.323142][ T6139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.458760][ T6226] loop4: detected capacity change from 0 to 256 [ 268.801628][ T6226] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 268.934670][ T6226] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 269.023108][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.049388][ T6139] team0: Port device team_slave_0 added [ 269.101951][ T6139] team0: Port device team_slave_1 added [ 269.131131][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.264757][ T6239] loop1: detected capacity change from 0 to 1024 [ 269.317235][ T6239] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 269.327152][ T6239] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 269.337214][ T6239] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.73: Failed to acquire dquot type 0 [ 269.368387][ T6239] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 269.383520][ T6239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.73: corrupted inode contents [ 269.407784][ T6239] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.73: mark_inode_dirty error [ 269.440175][ T6239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.73: corrupted inode contents [ 269.456462][ T6239] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.73: mark_inode_dirty error [ 269.470094][ T5822] Bluetooth: hci5: command tx timeout [ 269.551116][ T6239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.73: corrupted inode contents [ 269.579625][ T6239] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 269.591970][ T6239] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.73: corrupted inode contents [ 269.610733][ T6239] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.73: mark_inode_dirty error [ 269.636260][ T6239] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 269.651863][ T6239] EXT4-fs (loop1): 1 truncate cleaned up [ 269.659225][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.822215][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.115442][ T6164] team0: Port device team_slave_0 added [ 270.340656][ T6164] team0: Port device team_slave_1 added [ 270.375126][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.383857][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.410403][ T6139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.964206][ T6139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.975738][ T6139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.002972][ T6139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.103862][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.111284][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.137836][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.394627][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.401917][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.428800][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.574022][ T6258] loop4: detected capacity change from 0 to 512 [ 271.788975][ T6258] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.79: bad orphan inode 11862016 [ 271.922144][ T6258] EXT4-fs (loop4): Remounting filesystem read-only [ 271.932896][ T6258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 271.946653][ T6258] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.996296][ T6139] hsr_slave_0: entered promiscuous mode [ 272.006880][ T6139] hsr_slave_1: entered promiscuous mode [ 272.016031][ T6139] debugfs: 'hsr0' already exists in 'hsr' [ 272.024828][ T6139] Cannot create hsr debugfs directory [ 272.691831][ T6164] hsr_slave_0: entered promiscuous mode [ 272.700726][ T6164] hsr_slave_1: entered promiscuous mode [ 272.709039][ T6164] debugfs: 'hsr0' already exists in 'hsr' [ 272.715199][ T6164] Cannot create hsr debugfs directory [ 272.918216][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 274.879919][ T6287] loop4: detected capacity change from 0 to 1024 [ 275.046306][ T4669] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.079248][ T6287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.350684][ T4669] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.594611][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.723091][ T4669] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.758052][ T6164] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.976919][ T6164] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.082750][ T4669] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.145431][ T6139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 276.206150][ T6164] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.260060][ T6139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 276.359495][ T6164] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.370304][ T6301] loop1: detected capacity change from 0 to 2048 [ 276.446392][ T6139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 276.614979][ T6301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.688759][ T6139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 276.956280][ T4669] bridge_slave_1: left allmulticast mode [ 276.962778][ T4669] bridge_slave_1: left promiscuous mode [ 276.969570][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.173622][ T4669] bridge_slave_0: left allmulticast mode [ 277.179519][ T4669] bridge_slave_0: left promiscuous mode [ 277.191635][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.624068][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.512824][ T4669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.642585][ T4669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.697177][ T4669] bond0 (unregistering): Released all slaves [ 279.819740][ T4669] hsr_slave_0: left promiscuous mode [ 279.851857][ T4669] hsr_slave_1: left promiscuous mode [ 279.859949][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.867789][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.956934][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.965127][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.092685][ T4669] veth1_macvtap: left promiscuous mode [ 280.098589][ T4669] veth0_macvtap: left promiscuous mode [ 280.104684][ T4669] veth1_vlan: left promiscuous mode [ 280.110243][ T4669] veth0_vlan: left promiscuous mode [ 281.025461][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 281.123335][ T6358] loop0: detected capacity change from 0 to 2048 [ 281.240395][ T5876] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 281.250977][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.294667][ T5876] usb 2-1: config 0 descriptor?? [ 281.309109][ T5876] cp210x 2-1:0.0: cp210x converter detected [ 281.354732][ T6358] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.807106][ T6358] EXT4-fs: Ignoring sb option on remount [ 281.986009][ T4669] team0 (unregistering): Port device team_slave_1 removed [ 282.026894][ T6358] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 282.042579][ T6358] EXT4-fs (loop0): re-mounted 00000800-0000-0000-0000-000000000000. [ 282.042598][ T4669] team0 (unregistering): Port device team_slave_0 removed [ 282.636440][ T5876] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 282.644403][ T5876] cp210x 2-1:0.0: querying part number failed [ 282.748168][ T5876] usb 2-1: cp210x converter now attached to ttyUSB0 [ 282.754197][ T5813] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 282.776941][ T5876] usb 2-1: USB disconnect, device number 3 [ 282.848260][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 282.859207][ T5876] cp210x 2-1:0.0: device disconnected [ 283.209864][ T6139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.497251][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.524082][ T6139] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.684448][ T3910] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.692138][ T3910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.804998][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.902049][ T3910] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.909594][ T3910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.132991][ T3910] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.140667][ T3910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.164517][ T3910] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.172220][ T3910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.545274][ T6139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.827500][ T6164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.744462][ T6401] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 287.092667][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.236404][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.951459][ T6431] fuse: Bad value for 'group_id' [ 287.956653][ T6431] fuse: Bad value for 'group_id' [ 288.193339][ T6431] loop1: detected capacity change from 0 to 1024 [ 288.249779][ T6431] EXT4-fs: Ignoring removed nobh option [ 288.257384][ T6431] EXT4-fs: Ignoring removed bh option [ 288.431698][ T6431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.620688][ T6431] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.126: Allocating blocks 385-513 which overlap fs metadata [ 288.738689][ T6431] EXT4-fs (loop1): Remounting filesystem read-only [ 289.360417][ T6447] EXT4-fs (loop1): pa ffff8881239cd150: logic 16, phys. 129, len 24 [ 289.409295][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.378368][ T6164] veth0_vlan: entered promiscuous mode [ 290.593970][ T6164] veth1_vlan: entered promiscuous mode [ 290.913312][ T6139] veth0_vlan: entered promiscuous mode [ 291.109619][ T6139] veth1_vlan: entered promiscuous mode [ 291.157768][ T6164] veth0_macvtap: entered promiscuous mode [ 291.254757][ T6164] veth1_macvtap: entered promiscuous mode [ 291.492865][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.613108][ T6139] veth0_macvtap: entered promiscuous mode [ 291.682911][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.730692][ T6139] veth1_macvtap: entered promiscuous mode [ 291.899461][ T3674] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.971871][ T3674] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.036564][ T3910] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.080584][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.115590][ T3910] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.282210][ T6139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.390530][ T1327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.452490][ T1327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.525274][ T1327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.565062][ T1327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.774927][ T6490] fuse: Bad value for 'group_id' [ 292.780221][ T6490] fuse: Bad value for 'group_id' [ 293.175029][ T6493] loop4: detected capacity change from 0 to 1024 [ 293.267733][ T6493] EXT4-fs: Ignoring removed nobh option [ 293.274957][ T6493] EXT4-fs: Ignoring removed bh option [ 293.464214][ T6493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.714951][ T6490] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.139: Allocating blocks 385-513 which overlap fs metadata [ 293.777323][ T6490] EXT4-fs (loop4): Remounting filesystem read-only [ 294.453382][ T6490] EXT4-fs (loop4): pa ffff8881239cd0e0: logic 16, phys. 129, len 24 [ 294.536998][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.080085][ T6540] loop1: detected capacity change from 0 to 1024 [ 296.146026][ T6540] EXT4-fs: inline encryption not supported [ 296.153312][ T6540] EXT4-fs: Ignoring removed i_version option [ 296.284237][ T6540] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 296.368633][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.375677][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.503600][ T6540] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.149: lblock 2 mapped to illegal pblock 2 (length 1) [ 296.583622][ T6544] pim6reg1: entered promiscuous mode [ 296.583939][ T6540] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 296.589134][ T6544] pim6reg1: entered allmulticast mode [ 296.605814][ T6540] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.149: lblock 0 mapped to illegal pblock 48 (length 1) [ 296.725578][ T6540] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 296.735625][ T6540] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.149: Failed to acquire dquot type 0 [ 296.872840][ T6540] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 296.922315][ T6540] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.149: mark_inode_dirty error [ 297.021400][ T6540] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 297.033606][ T6540] EXT4-fs (loop1): 1 orphan inode deleted [ 297.042451][ T6540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.064186][ T4057] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 297.116015][ T4057] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 297.125655][ T4057] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:23: Failed to release dquot type 0 [ 297.362024][ T6540] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm syz.1.149: lblock 1 mapped to illegal pblock 1 (length 1) [ 297.486381][ T6540] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 297.510109][ T6560] fuse: Bad value for 'group_id' [ 297.515773][ T6560] fuse: Bad value for 'group_id' [ 297.729531][ T6560] loop0: detected capacity change from 0 to 1024 [ 297.828439][ T6560] EXT4-fs: Ignoring removed nobh option [ 297.834545][ T6560] EXT4-fs: Ignoring removed bh option [ 297.914871][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.936962][ T5827] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 297.988845][ T5827] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 298.026295][ T6560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.068447][ T5827] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 298.822576][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.913688][ T3674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.921890][ T3674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.067650][ T3910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.075891][ T3910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.086983][ T4669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.095675][ T4669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.383299][ T3910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.391613][ T3910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.396863][ T6619] loop5: detected capacity change from 0 to 1024 [ 302.477067][ T6619] EXT4-fs: Ignoring removed nobh option [ 302.487846][ T6619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.856624][ T6619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.273564][ T6619] EXT4-fs error (device loop5): __ext4_remount:6740: comm syz.5.45: Abort forced by user [ 303.409660][ T6619] EXT4-fs (loop5): Remounting filesystem read-only [ 303.416760][ T6619] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 304.081122][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.104351][ T6650] pim6reg1: entered promiscuous mode [ 305.109992][ T6650] pim6reg1: entered allmulticast mode [ 307.789350][ T6682] fuse: Bad value for 'group_id' [ 307.796158][ T6682] fuse: Bad value for 'group_id' [ 314.136557][ T6756] syzkaller0: entered promiscuous mode [ 314.143101][ T6756] syzkaller0: entered allmulticast mode [ 316.141609][ T6775] pim6reg1: entered promiscuous mode [ 316.147428][ T6775] pim6reg1: entered allmulticast mode [ 319.502313][ T6794] pim6reg1: entered promiscuous mode [ 319.508599][ T6794] pim6reg1: entered allmulticast mode [ 323.598732][ T6846] sit0: entered promiscuous mode [ 323.604223][ T6846] sit0: entered allmulticast mode [ 326.409167][ T6878] veth0_vlan: entered allmulticast mode [ 329.142665][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 329.151424][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 329.158102][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 330.983244][ T6925] pim6reg1: entered promiscuous mode [ 330.988957][ T6925] pim6reg1: entered allmulticast mode [ 334.262477][ T6954] loop4: detected capacity change from 0 to 512 [ 334.319605][ T6954] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.334213][ T6954] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 334.485243][ T6954] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 334.542448][ T6954] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 334.551790][ T6954] System zones: 0-2, 18-18, 34-34 [ 334.577486][ T6954] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.269: iget: bad i_size value: 360287970189639680 [ 334.601864][ T6954] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.269: couldn't read orphan inode 15 (err -117) [ 334.637225][ T6954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.120173][ T5815] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 335.130157][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(none) [ 335.130308][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.130445][ T5815] Workqueue: hci2 hci_rx_work [ 335.130643][ T5815] Call Trace: [ 335.130709][ T5815] [ 335.130766][ T5815] __dump_stack+0x26/0x30 [ 335.130958][ T5815] dump_stack_lvl+0x1df/0x270 [ 335.131163][ T5815] dump_stack+0x1e/0x25 [ 335.131344][ T5815] sysfs_create_dir_ns+0x46c/0x540 [ 335.131594][ T5815] kobject_add_internal+0xeed/0x1840 [ 335.131798][ T5815] kobject_add+0x2c1/0x410 [ 335.131988][ T5815] ? kmsan_get_metadata+0xfb/0x160 [ 335.132180][ T5815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 335.132373][ T5815] device_add+0xa70/0x1c10 [ 335.132570][ T5815] hci_conn_add_sysfs+0x15f/0x2f0 [ 335.132801][ T5815] le_conn_complete_evt+0x1b35/0x21b0 [ 335.133044][ T5815] hci_le_enh_conn_complete_evt+0x158/0x260 [ 335.133274][ T5815] hci_le_meta_evt+0x6e8/0x960 [ 335.133456][ T5815] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 335.133679][ T5815] hci_event_packet+0xce2/0x1e40 [ 335.133842][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 335.134075][ T5815] hci_rx_work+0x9a8/0x12b0 [ 335.134278][ T5815] ? __pfx_hci_rx_work+0x10/0x10 [ 335.134452][ T5815] process_scheduled_works+0xb8e/0x1d80 [ 335.134740][ T5815] worker_thread+0xedf/0x1590 [ 335.134998][ T5815] kthread+0xd59/0xf00 [ 335.135159][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 335.135395][ T5815] ? __pfx_kthread+0x10/0x10 [ 335.135564][ T5815] ret_from_fork+0x1e3/0x310 [ 335.135724][ T5815] ? __pfx_kthread+0x10/0x10 [ 335.135884][ T5815] ret_from_fork_asm+0x1a/0x30 [ 335.136119][ T5815] [ 335.305565][ T5815] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 335.321509][ T5815] Bluetooth: hci2: failed to register connection device [ 336.994497][ T6966] syzkaller0: entered promiscuous mode [ 337.000210][ T6966] syzkaller0: entered allmulticast mode [ 337.853949][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.742977][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.753346][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.769141][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.787556][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.812297][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.901575][ T5815] Bluetooth: hci3: command tx timeout [ 346.422751][ T7021] chnl_net:caif_netlink_parms(): no params data found [ 346.996073][ T5815] Bluetooth: hci3: command tx timeout [ 347.339437][ T7059] Driver unsupported XDP return value 0 on prog (id 115) dev N/A, expect packet loss! [ 347.909891][ T3674] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.138310][ T3674] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.384985][ T3674] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.619519][ T3674] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.079795][ T5815] Bluetooth: hci3: command tx timeout [ 349.235992][ T7021] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.243902][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.252068][ T7021] bridge_slave_0: entered allmulticast mode [ 349.262246][ T7021] bridge_slave_0: entered promiscuous mode [ 349.598852][ T7021] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.606697][ T7021] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.615373][ T7021] bridge_slave_1: entered allmulticast mode [ 349.625420][ T7021] bridge_slave_1: entered promiscuous mode [ 349.672161][ T3674] bridge_slave_1: left allmulticast mode [ 349.678056][ T3674] bridge_slave_1: left promiscuous mode [ 349.690902][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.856753][ T3674] bridge_slave_0: left allmulticast mode [ 349.863192][ T3674] bridge_slave_0: left promiscuous mode [ 349.869772][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.106442][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.141805][ T5815] Bluetooth: hci3: command tx timeout [ 351.254773][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.318756][ T3674] bond0 (unregistering): Released all slaves [ 351.897554][ T7021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.159031][ T7021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.944996][ T3674] hsr_slave_0: left promiscuous mode [ 352.977536][ T3674] hsr_slave_1: left promiscuous mode [ 352.986844][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.994760][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.123869][ T3674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.131626][ T3674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.251792][ T3674] veth1_macvtap: left promiscuous mode [ 353.257555][ T3674] veth0_macvtap: left promiscuous mode [ 353.264265][ T3674] veth1_vlan: left promiscuous mode [ 353.274322][ T3674] veth0_vlan: left promiscuous mode [ 354.656033][ T3674] team0 (unregistering): Port device team_slave_1 removed [ 354.753450][ T3674] team0 (unregistering): Port device team_slave_0 removed [ 355.428614][ T7021] team0: Port device team_slave_0 added [ 355.663669][ T7021] team0: Port device team_slave_1 added [ 356.883303][ T7149] loop5: detected capacity change from 0 to 512 [ 357.055951][ T5815] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 357.069827][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(none) [ 357.069979][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.070116][ T5815] Workqueue: hci1 hci_rx_work [ 357.070284][ T5815] Call Trace: [ 357.070340][ T5815] [ 357.070394][ T5815] __dump_stack+0x26/0x30 [ 357.070584][ T5815] dump_stack_lvl+0x1df/0x270 [ 357.070786][ T5815] dump_stack+0x1e/0x25 [ 357.070953][ T5815] sysfs_create_dir_ns+0x46c/0x540 [ 357.071199][ T5815] kobject_add_internal+0xeed/0x1840 [ 357.071390][ T5815] kobject_add+0x2c1/0x410 [ 357.071565][ T5815] ? kmsan_get_metadata+0xfb/0x160 [ 357.071747][ T5815] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 357.071941][ T5815] device_add+0xa70/0x1c10 [ 357.072121][ T5815] hci_conn_add_sysfs+0x15f/0x2f0 [ 357.072337][ T5815] le_conn_complete_evt+0x1b35/0x21b0 [ 357.072565][ T5815] hci_le_enh_conn_complete_evt+0x158/0x260 [ 357.072783][ T5815] hci_le_meta_evt+0x6e8/0x960 [ 357.072949][ T5815] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 357.073161][ T5815] hci_event_packet+0xce2/0x1e40 [ 357.073309][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 357.073524][ T5815] hci_rx_work+0x9a8/0x12b0 [ 357.073717][ T5815] ? __pfx_hci_rx_work+0x10/0x10 [ 357.073881][ T5815] process_scheduled_works+0xb8e/0x1d80 [ 357.074156][ T5815] worker_thread+0xedf/0x1590 [ 357.074403][ T5815] kthread+0xd59/0xf00 [ 357.074543][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 357.074773][ T5815] ? __pfx_kthread+0x10/0x10 [ 357.074924][ T5815] ret_from_fork+0x1e3/0x310 [ 357.075077][ T5815] ? __pfx_kthread+0x10/0x10 [ 357.075229][ T5815] ret_from_fork_asm+0x1a/0x30 [ 357.075459][ T5815] [ 357.246423][ T5815] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 357.263420][ T5815] Bluetooth: hci1: failed to register connection device [ 357.360037][ T7149] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 357.373509][ T7149] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 357.645541][ T7149] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 357.668865][ T7149] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 357.681793][ T7149] System zones: 0-2, 18-18, 34-34 [ 357.815247][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.822281][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.901940][ T7149] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.333: iget: bad i_size value: 360287970189639680 [ 357.939430][ T7149] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.333: couldn't read orphan inode 15 (err -117) [ 357.962577][ T7149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.398438][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.406987][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.436532][ T7021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.957733][ T7021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.965106][ T7021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.991571][ T7021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.673413][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.889896][ T7021] hsr_slave_0: entered promiscuous mode [ 360.900413][ T7021] hsr_slave_1: entered promiscuous mode [ 363.592739][ T7021] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 363.635813][ T7021] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 363.867516][ T7194] loop4: detected capacity change from 0 to 512 [ 363.931164][ T7194] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 363.940443][ T7194] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 364.114799][ T7021] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 364.167606][ T7194] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 364.180086][ T7194] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 364.189426][ T7194] System zones: 0-2, 18-18, 34-34 [ 364.284149][ T7194] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.345: iget: bad i_size value: 360287970189639680 [ 364.302281][ T7194] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.345: couldn't read orphan inode 15 (err -117) [ 364.334672][ T7194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.815595][ T7021] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.182596][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.671593][ T7021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.837802][ T7021] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.958235][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.965876][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.088991][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.096642][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.619539][ T7238] loop5: detected capacity change from 0 to 512 [ 370.694016][ T7238] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 370.703638][ T7238] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 370.846100][ T7238] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 370.897710][ T7238] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 370.907990][ T7238] System zones: 0-2, 18-18, 34-34 [ 371.479656][ T7238] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.359: iget: bad i_size value: 360287970189639680 [ 371.507924][ T7238] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.359: couldn't read orphan inode 15 (err -117) [ 372.636007][ T7238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.554607][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.811029][ T7021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.201357][ T7285] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 378.680430][ T7299] loop1: detected capacity change from 0 to 512 [ 378.918627][ T7299] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.928442][ T7299] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 379.050390][ T7299] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 379.102697][ T7299] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 379.111804][ T7299] System zones: 0-2, 18-18, 34-34 [ 379.149950][ T7299] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.373: iget: bad i_size value: 360287970189639680 [ 379.196557][ T7299] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.373: couldn't read orphan inode 15 (err -117) [ 379.240011][ T7299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.933652][ T7021] veth0_vlan: entered promiscuous mode [ 380.423248][ T5112] Bluetooth: hci1: command 0x0406 tx timeout [ 380.518052][ T7021] veth1_vlan: entered promiscuous mode [ 381.488848][ T7021] veth0_macvtap: entered promiscuous mode [ 381.684832][ T7021] veth1_macvtap: entered promiscuous mode [ 382.172074][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.259852][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.285162][ T7021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.366266][ T4057] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.419135][ T4057] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.506446][ T4057] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.563429][ T4057] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.795321][ T7317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.802943][ T7317] IPv6: NLM_F_CREATE should be set when creating new route [ 382.810594][ T7317] IPv6: NLM_F_CREATE should be set when creating new route [ 382.818320][ T7317] IPv6: NLM_F_CREATE should be set when creating new route [ 383.854325][ T7332] netlink: 'syz.4.382': attribute type 29 has an invalid length. [ 383.953527][ T7333] netlink: 'syz.4.382': attribute type 29 has an invalid length. [ 384.644802][ T7335] syzkaller0: entered promiscuous mode [ 384.650618][ T7335] syzkaller0: entered allmulticast mode [ 386.308295][ T7355] loop4: detected capacity change from 0 to 512 [ 386.500312][ T7355] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 386.510574][ T7355] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 386.589900][ T7355] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 386.623504][ T7355] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 386.632601][ T7355] System zones: 0-2, 18-18, 34-34 [ 386.642957][ T5112] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 386.672069][ T7355] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.386: iget: bad i_size value: 360287970189639680 [ 386.716072][ T7355] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.386: couldn't read orphan inode 15 (err -117) [ 386.740270][ T7355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.284544][ T7368] fuse: Bad value for 'group_id' [ 389.289735][ T7368] fuse: Bad value for 'group_id' [ 389.698332][ T7368] loop1: detected capacity change from 0 to 1024 [ 389.751982][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.763829][ T7368] EXT4-fs: Ignoring removed nobh option [ 389.769827][ T7368] EXT4-fs: Ignoring removed bh option [ 390.023196][ T7368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.183998][ T7368] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.389: Allocating blocks 385-513 which overlap fs metadata [ 390.259409][ T7368] EXT4-fs (loop1): Remounting filesystem read-only [ 390.683107][ T7368] EXT4-fs (loop1): pa ffff8881239cd1c0: logic 16, phys. 129, len 24 [ 390.826631][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.178704][ T7390] netlink: 'syz.0.395': attribute type 29 has an invalid length. [ 391.272143][ T7391] netlink: 'syz.0.395': attribute type 29 has an invalid length. [ 391.374379][ T7393] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.394'. [ 393.299792][ T7417] loop4: detected capacity change from 0 to 512 [ 393.321985][ T5815] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 393.558217][ T7417] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 393.568905][ T7417] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 393.606186][ T7417] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 393.638436][ T7417] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 393.647516][ T7417] System zones: 0-2, 18-18, 34-34 [ 393.710433][ T7417] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.400: iget: bad i_size value: 360287970189639680 [ 393.762752][ T7417] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.400: couldn't read orphan inode 15 (err -117) [ 393.803013][ T7417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.475794][ T7423] netlink: 'syz.5.402': attribute type 10 has an invalid length. [ 396.473539][ T7428] fuse: Bad value for 'group_id' [ 396.478721][ T7428] fuse: Bad value for 'group_id' [ 396.591550][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.817092][ T7428] loop1: detected capacity change from 0 to 1024 [ 396.908866][ T7428] EXT4-fs: Ignoring removed nobh option [ 396.915856][ T7428] EXT4-fs: Ignoring removed bh option [ 397.117030][ T7428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.376248][ T7428] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.403: Allocating blocks 385-513 which overlap fs metadata [ 397.447975][ T7428] EXT4-fs (loop1): Remounting filesystem read-only [ 397.846422][ T7428] EXT4-fs (loop1): pa ffff8881239cd150: logic 16, phys. 129, len 24 [ 398.004064][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.747992][ T4057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.756417][ T4057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.187921][ T7421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.196203][ T7421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.757301][ T7484] fuse: Bad value for 'group_id' [ 400.763936][ T7484] fuse: Bad value for 'group_id' [ 401.055132][ T7484] loop4: detected capacity change from 0 to 1024 [ 401.110353][ T7484] EXT4-fs: Ignoring removed nobh option [ 401.116393][ T7484] EXT4-fs: Ignoring removed bh option [ 401.447047][ T7484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.645766][ T7484] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.419: Allocating blocks 385-513 which overlap fs metadata [ 401.801297][ T7484] EXT4-fs (loop4): Remounting filesystem read-only [ 402.618050][ T7484] EXT4-fs (loop4): pa ffff8881239cd230: logic 16, phys. 129, len 24 [ 402.707993][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.463241][ T7542] fuse: Bad value for 'group_id' [ 406.468531][ T7542] fuse: Bad value for 'group_id' [ 406.744223][ T7542] loop7: detected capacity change from 0 to 1024 [ 406.803273][ T7542] EXT4-fs: Ignoring removed nobh option [ 406.809120][ T7542] EXT4-fs: Ignoring removed bh option [ 407.093698][ T7542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.274349][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.284366][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.296241][ T7552] bridge0: entered allmulticast mode [ 407.635356][ T7552] bridge_slave_1: left allmulticast mode [ 407.641760][ T7552] bridge_slave_1: left promiscuous mode [ 407.654366][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.862196][ T7552] bridge_slave_0: left allmulticast mode [ 407.868223][ T7552] bridge_slave_0: left promiscuous mode [ 407.875311][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.273823][ T7021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.713718][ T7599] fuse: Bad value for 'group_id' [ 410.723545][ T7599] fuse: Bad value for 'group_id' [ 410.991662][ T7599] loop5: detected capacity change from 0 to 1024 [ 411.065247][ T7599] EXT4-fs: Ignoring removed nobh option [ 411.071909][ T7599] EXT4-fs: Ignoring removed bh option [ 411.334155][ T7599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.484045][ T7599] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.457: Allocating blocks 385-513 which overlap fs metadata [ 411.627138][ T7599] EXT4-fs (loop5): Remounting filesystem read-only [ 411.914700][ T7607] pim6reg1: entered allmulticast mode [ 412.575999][ T7611] EXT4-fs (loop5): pa ffff8881239fe540: logic 16, phys. 129, len 24 [ 412.952622][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.285630][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.292526][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 425.711246][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 425.931991][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 425.964421][ T5878] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 425.976974][ T5878] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.986686][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.997233][ T5878] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 426.006506][ T5878] usb 1-1: config 0 has no interface number 0 [ 426.012923][ T5878] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.026321][ T5878] usb 1-1: config 0 interface 150 has no altsetting 0 [ 426.033522][ T5878] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 426.043386][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.056978][ T7716] fuse: Bad value for 'group_id' [ 426.062460][ T7716] fuse: Bad value for 'group_id' [ 426.274174][ T5878] usb 1-1: config 0 descriptor?? [ 426.533047][ T7718] loop1: detected capacity change from 0 to 1024 [ 426.644312][ T7718] EXT4-fs: Ignoring removed nobh option [ 426.650169][ T7718] EXT4-fs: Ignoring removed bh option [ 428.439000][ T7718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.836259][ T7716] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.494: Allocating blocks 385-513 which overlap fs metadata [ 429.293174][ T7716] EXT4-fs (loop1): Remounting filesystem read-only [ 430.420253][ T7739] loop7: detected capacity change from 0 to 16 [ 430.464332][ T7739] erofs: Unknown parameter '18446744073709551615' [ 431.382147][ T30] audit: type=1326 audit(1756880945.068:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.409770][ T30] audit: type=1326 audit(1756880945.078:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.433711][ T30] audit: type=1326 audit(1756880945.078:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.456532][ T30] audit: type=1326 audit(1756880945.078:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.479112][ T30] audit: type=1326 audit(1756880945.078:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.501732][ T30] audit: type=1326 audit(1756880945.078:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.527896][ T30] audit: type=1326 audit(1756880945.078:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.551735][ T30] audit: type=1326 audit(1756880945.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.574958][ T30] audit: type=1326 audit(1756880945.078:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.597342][ T30] audit: type=1326 audit(1756880945.818:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7736 comm="syz.7.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 431.676513][ T7716] EXT4-fs (loop1): pa ffff8881239fe4d0: logic 16, phys. 129, len 24 [ 432.783516][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.543044][ T7784] fuse: Bad value for 'group_id' [ 438.543142][ T7784] fuse: Bad value for 'group_id' [ 439.206149][ T7784] loop5: detected capacity change from 0 to 1024 [ 439.224759][ T7784] EXT4-fs: Ignoring removed nobh option [ 439.224904][ T7784] EXT4-fs: Ignoring removed bh option [ 439.496924][ T7784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.765017][ T7784] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.510: Allocating blocks 385-513 which overlap fs metadata [ 439.805505][ T7784] EXT4-fs (loop5): Remounting filesystem read-only [ 441.346631][ T7784] EXT4-fs (loop5): pa ffff8881239fe540: logic 16, phys. 129, len 24 [ 441.749269][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.200025][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.252462][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.267817][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.289506][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.301543][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.411688][ T5876] usb 1-1: USB disconnect, device number 3 [ 444.441253][ T5815] Bluetooth: hci5: command tx timeout [ 445.546754][ T7805] chnl_net:caif_netlink_parms(): no params data found [ 446.415328][ T7834] loop1: detected capacity change from 0 to 512 [ 446.519988][ T5815] Bluetooth: hci5: command tx timeout [ 446.746495][ T7834] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 446.764749][ T7834] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 446.985710][ T7841] loop5: detected capacity change from 0 to 256 [ 448.147303][ T7841] FAT-fs (loop5): Directory bread(block 64) failed [ 448.154432][ T7841] FAT-fs (loop5): Directory bread(block 65) failed [ 448.161607][ T7841] FAT-fs (loop5): Directory bread(block 66) failed [ 448.168345][ T7841] FAT-fs (loop5): Directory bread(block 67) failed [ 448.175360][ T7841] FAT-fs (loop5): Directory bread(block 68) failed [ 448.182449][ T7841] FAT-fs (loop5): Directory bread(block 69) failed [ 448.189337][ T7841] FAT-fs (loop5): Directory bread(block 70) failed [ 448.200872][ T7841] FAT-fs (loop5): Directory bread(block 71) failed [ 448.209159][ T7841] FAT-fs (loop5): Directory bread(block 72) failed [ 448.216069][ T7841] FAT-fs (loop5): Directory bread(block 73) failed [ 448.619524][ T5815] Bluetooth: hci5: command tx timeout [ 449.002143][ T7834] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.519: bad orphan inode 131083 [ 449.434022][ T7834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.685723][ T5815] Bluetooth: hci5: command tx timeout [ 453.384116][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.437325][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.445019][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.453287][ T7805] bridge_slave_0: entered allmulticast mode [ 453.463238][ T7805] bridge_slave_0: entered promiscuous mode [ 453.732787][ T4057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.087314][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.095209][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.103317][ T7805] bridge_slave_1: entered allmulticast mode [ 454.113161][ T7805] bridge_slave_1: entered promiscuous mode [ 454.433502][ T4057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.505059][ T7861] fuse: Bad value for 'group_id' [ 455.514457][ T7861] fuse: Bad value for 'group_id' [ 455.616547][ T4057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.794789][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.908683][ T4057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.958757][ T7861] loop1: detected capacity change from 0 to 1024 [ 456.103090][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.178207][ T7861] EXT4-fs: Ignoring removed nobh option [ 456.188829][ T7861] EXT4-fs: Ignoring removed bh option [ 456.418805][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 456.428583][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.439462][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.462710][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.535435][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.007160][ T7861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.134847][ T7805] team0: Port device team_slave_0 added [ 457.473644][ T7805] team0: Port device team_slave_1 added [ 457.881575][ T4057] bridge_slave_1: left allmulticast mode [ 457.887641][ T4057] bridge_slave_1: left promiscuous mode [ 457.896605][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.972152][ T4057] bridge_slave_0: left allmulticast mode [ 457.978054][ T4057] bridge_slave_0: left promiscuous mode [ 457.985325][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.096767][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.759002][ T5112] Bluetooth: hci0: command tx timeout [ 459.943674][ T4057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.194909][ T4057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.318319][ T7887] loop7: detected capacity change from 0 to 512 [ 460.338742][ T4057] bond0 (unregistering): Released all slaves [ 460.474178][ T7889] overlay: filesystem on ./file0 not supported as upperdir [ 460.670431][ T7887] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 460.860469][ T5112] Bluetooth: hci0: command tx timeout [ 461.307441][ T7881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.328791][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.336645][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.363345][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.547554][ T7887] EXT4-fs (loop7): 1 truncate cleaned up [ 461.555727][ T7887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.773328][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.780502][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.808908][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.941082][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 461.941164][ T30] audit: type=1800 audit(1756880976.258:17): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.532" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 462.211873][ T30] audit: type=1326 audit(1756880976.558:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 462.453713][ T30] audit: type=1326 audit(1756880976.618:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 462.476587][ T30] audit: type=1326 audit(1756880976.618:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 462.499241][ T30] audit: type=1326 audit(1756880976.618:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 462.521950][ T30] audit: type=1326 audit(1756880976.618:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7892 comm="syz.1.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 462.765791][ T7021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.902482][ T5112] Bluetooth: hci0: command tx timeout [ 463.622677][ T4057] hsr_slave_0: left promiscuous mode [ 463.662276][ T4057] hsr_slave_1: left promiscuous mode [ 463.670409][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.678943][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.767630][ T4057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.775568][ T4057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.205193][ T4057] veth1_macvtap: left promiscuous mode [ 464.211245][ T4057] veth0_macvtap: left promiscuous mode [ 464.217146][ T4057] veth1_vlan: left promiscuous mode [ 464.222993][ T4057] veth0_vlan: left promiscuous mode [ 465.219387][ T5112] Bluetooth: hci0: command tx timeout [ 465.749088][ T7912] fuse: Bad value for 'group_id' [ 465.754614][ T7912] fuse: Bad value for 'group_id' [ 466.065989][ T7912] loop7: detected capacity change from 0 to 1024 [ 466.197436][ T7912] EXT4-fs: Ignoring removed nobh option [ 466.203643][ T7912] EXT4-fs: Ignoring removed bh option [ 466.704572][ T7912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.709156][ T4057] team0 (unregistering): Port device team_slave_1 removed [ 466.759879][ T4057] team0 (unregistering): Port device team_slave_0 removed [ 467.183166][ T7805] hsr_slave_0: entered promiscuous mode [ 467.194047][ T7805] hsr_slave_1: entered promiscuous mode [ 467.203532][ T7805] debugfs: 'hsr0' already exists in 'hsr' [ 467.209468][ T7805] Cannot create hsr debugfs directory [ 467.236597][ T7909] netlink: 'syz.1.536': attribute type 3 has an invalid length. [ 467.249168][ T7909] netlink: 'syz.1.536': attribute type 3 has an invalid length. [ 467.782031][ T5112] Bluetooth: hci3: command 0x0406 tx timeout [ 467.805842][ T7021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.279727][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 468.346466][ T30] audit: type=1326 audit(1756880982.678:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.372024][ T30] audit: type=1326 audit(1756880982.688:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.654937][ T30] audit: type=1326 audit(1756880982.818:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.680626][ T30] audit: type=1326 audit(1756880982.818:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.704712][ T30] audit: type=1326 audit(1756880982.828:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.727329][ T30] audit: type=1326 audit(1756880982.828:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.750182][ T30] audit: type=1326 audit(1756880982.848:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.772915][ T30] audit: type=1326 audit(1756880982.848:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.798301][ T30] audit: type=1326 audit(1756880982.858:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.821684][ T30] audit: type=1326 audit(1756880982.858:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7923 comm="syz.1.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 468.962050][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.541'. [ 469.072061][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.541'. [ 469.135586][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.541'. [ 471.056422][ T7805] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 471.227993][ T7805] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 471.528563][ T7805] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 472.215010][ T7805] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 472.398344][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.406222][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.414252][ T7866] bridge_slave_0: entered allmulticast mode [ 472.424139][ T7866] bridge_slave_0: entered promiscuous mode [ 472.904752][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.912756][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.923331][ T7866] bridge_slave_1: entered allmulticast mode [ 472.933350][ T7866] bridge_slave_1: entered promiscuous mode [ 474.648912][ T7966] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 475.727911][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.7.547'. [ 475.738635][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.746298][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.859214][ T7866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.277406][ T7866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.208527][ T7866] team0: Port device team_slave_0 added [ 477.310419][ T7866] team0: Port device team_slave_1 added [ 477.336561][ T7973] fuse: Bad value for 'group_id' [ 477.341976][ T7973] fuse: Bad value for 'group_id' [ 477.579108][ T7973] loop7: detected capacity change from 0 to 1024 [ 477.666064][ T7973] EXT4-fs: Ignoring removed nobh option [ 477.672180][ T7973] EXT4-fs: Ignoring removed bh option [ 477.766846][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.774707][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.804150][ T7866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.047544][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.070213][ T7973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.108984][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.116390][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.142890][ T7866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.275479][ T7973] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.549: Allocating blocks 385-513 which overlap fs metadata [ 478.301938][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.366116][ T7973] EXT4-fs (loop7): Remounting filesystem read-only [ 478.394999][ T3910] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.402776][ T3910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.642421][ T3910] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.649940][ T3910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.873895][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 478.873973][ T30] audit: type=1326 audit(1756880993.198:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 479.048959][ T30] audit: type=1326 audit(1756880993.298:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ff318d550 code=0x7ffc0000 [ 479.072260][ T30] audit: type=1326 audit(1756880993.298:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ff318d550 code=0x7ffc0000 [ 479.094912][ T30] audit: type=1326 audit(1756880993.298:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 479.117569][ T30] audit: type=1326 audit(1756880993.298:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 479.143312][ T30] audit: type=1326 audit(1756880993.348:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 479.166885][ T30] audit: type=1326 audit(1756880993.348:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ff318ebe9 code=0x7ffc0000 [ 479.295842][ T7981] EXT4-fs (loop7): pa ffff8881239fe4d0: logic 16, phys. 129, len 24 [ 479.335109][ T7866] hsr_slave_0: entered promiscuous mode [ 479.345848][ T7866] hsr_slave_1: entered promiscuous mode [ 479.355004][ T7866] debugfs: 'hsr0' already exists in 'hsr' [ 479.361023][ T7866] Cannot create hsr debugfs directory [ 479.491562][ T7021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.252022][ T30] audit: type=1326 audit(1756880994.568:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.7.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 480.275920][ T30] audit: type=1326 audit(1756880994.618:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.7.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 480.299373][ T30] audit: type=1326 audit(1756880994.638:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7992 comm="syz.7.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f04bbb8ebe9 code=0x7ffc0000 [ 480.694079][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.701067][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.252378][ T7995] loop1: detected capacity change from 0 to 1024 [ 481.340588][ T7995] EXT4-fs: Ignoring removed bh option [ 481.501319][ T5876] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 481.677474][ T7995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 481.864965][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 481.875337][ T5876] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 481.888215][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 481.899182][ T5876] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 482.093516][ T7866] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 482.151440][ T5876] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 482.161077][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.169367][ T5876] usb 6-1: Product: syz [ 482.174016][ T5876] usb 6-1: Manufacturer: syz [ 482.178821][ T5876] usb 6-1: SerialNumber: syz [ 482.257201][ T7866] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 482.361226][ T5876] usb 6-1: config 0 descriptor?? [ 482.392336][ T7866] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 482.466057][ T5876] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 482.519277][ T7866] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 482.936478][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.046159][ T5876] scsi host1: usb-storage 6-1:0.0 [ 483.334525][ T5876] usb 6-1: USB disconnect, device number 2 [ 484.712220][ T7866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.976662][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 485.289759][ T4669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.393450][ T7866] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.536221][ T4669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.686526][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.694250][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.819039][ T4669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.938725][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.946412][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.137436][ T4669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.203355][ T8040] fuse: Bad value for 'group_id' [ 486.208697][ T8040] fuse: Bad value for 'group_id' [ 487.082770][ T8044] loop1: detected capacity change from 0 to 1024 [ 487.176871][ T4669] bridge_slave_1: left allmulticast mode [ 487.184241][ T4669] bridge_slave_1: left promiscuous mode [ 487.191048][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.205607][ T8044] EXT4-fs: Ignoring removed nobh option [ 487.215605][ T8044] EXT4-fs: Ignoring removed bh option [ 487.297171][ T4669] bridge_slave_0: left allmulticast mode [ 487.305373][ T4669] bridge_slave_0: left promiscuous mode [ 487.316140][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.109226][ T8044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.647247][ T4669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.732692][ T4669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.797490][ T4669] bond0 (unregistering): Released all slaves [ 489.240576][ T7805] veth0_vlan: entered promiscuous mode [ 489.612266][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.700176][ T7805] veth1_vlan: entered promiscuous mode [ 489.708148][ T8069] loop7: detected capacity change from 0 to 512 [ 489.784840][ T8069] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.791813][ T8069] EXT4-fs: inline encryption not supported [ 489.798215][ T8069] EXT4-fs: Ignoring removed mblk_io_submit option [ 489.858761][ T8069] EXT4-fs (loop7): Test dummy encryption mode enabled [ 489.867152][ T8069] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 490.185385][ T8069] EXT4-fs (loop7): 1 truncate cleaned up [ 490.194140][ T8069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.201479][ T4669] hsr_slave_0: left promiscuous mode [ 490.222986][ T4669] hsr_slave_1: left promiscuous mode [ 490.231785][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.239380][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.320617][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.328458][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.494331][ T8069] fscrypt (loop7): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 490.533190][ T4669] veth1_macvtap: left promiscuous mode [ 490.539124][ T4669] veth0_macvtap: left promiscuous mode [ 490.548648][ T4669] veth1_vlan: left promiscuous mode [ 490.554552][ T4669] veth0_vlan: left promiscuous mode [ 491.504036][ T7021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.797823][ T4669] team0 (unregistering): Port device team_slave_1 removed [ 492.014992][ T4669] team0 (unregistering): Port device team_slave_0 removed [ 492.066130][ T8080] loop1: detected capacity change from 0 to 4096 [ 492.095962][ T8080] EXT4-fs: Ignoring removed mblk_io_submit option [ 492.216342][ T8080] EXT4-fs (loop1): Test dummy encryption mode enabled [ 492.261118][ T8086] loop7: detected capacity change from 0 to 16 [ 492.466388][ T8086] erofs (device loop7): mounted with root inode @ nid 36. [ 492.544611][ T8080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.156996][ T8080] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 493.414306][ T7805] veth0_macvtap: entered promiscuous mode [ 493.439849][ T7866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.667757][ T7805] veth1_macvtap: entered promiscuous mode [ 493.926060][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.156565][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.236785][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.304521][ T7421] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.366899][ T7421] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.389205][ T4669] ------------[ cut here ]------------ [ 494.395316][ T4669] WARNING: CPU: 1 PID: 4669 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x2f7/0x4c0 [ 494.405547][ T4669] Modules linked in: [ 494.409702][ T4669] CPU: 1 UID: 0 PID: 4669 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT(none) [ 494.419804][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.430390][ T4669] Workqueue: netns cleanup_net [ 494.435668][ T4669] RIP: 0010:xfrm_state_fini+0x2f7/0x4c0 [ 494.441669][ T4669] Code: 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 a6 0e 02 cc 8b 3a e8 b8 81 c4 f3 4d 39 f7 0f 84 ac fd ff ff e8 da bf 21 f3 90 <0f> 0b 90 e9 a3 fd ff ff 8b 3a e8 9a 81 c4 f3 4d 85 f6 0f 84 03 fe [ 494.461822][ T4669] RSP: 0018:ffff888116f03a48 EFLAGS: 00010293 [ 494.468163][ T4669] RAX: ffffffff8ed332f6 RBX: ffff88804af74740 RCX: ffff8881179920c0 [ 494.476536][ T4669] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88804af75540 [ 494.486036][ T4669] RBP: ffff888116f03a88 R08: ffffea000000000f R09: 0000000000000000 [ 494.494743][ T4669] R10: ffff888237b77028 R11: ffffffff81d43c40 R12: 00000000059600ce [ 494.503204][ T4669] R13: ffff88804af74768 R14: ffff88804af75540 R15: ffff88804dc7ca98 [ 494.511506][ T4669] FS: 0000000000000000(0000) GS:ffff8881aa794000(0000) knlGS:0000000000000000 [ 494.521096][ T4669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.527817][ T3910] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.527890][ T4669] CR2: 000055f7b03ae128 CR3: 000000004e99a000 CR4: 00000000003526f0 [ 494.527999][ T4669] Call Trace: [ 494.548638][ T4669] [ 494.551866][ T4669] xfrm_net_exit+0x46/0x90 [ 494.556582][ T4669] ? __pfx_xfrm_net_exit+0x10/0x10 [ 494.562165][ T4669] ops_undo_list+0x6c5/0xb80 [ 494.567051][ T4669] cleanup_net+0xb8f/0x14b0 [ 494.571989][ T4669] ? __pfx_cleanup_net+0x10/0x10 [ 494.577190][ T4669] process_scheduled_works+0xb8e/0x1d80 [ 494.584791][ T4669] worker_thread+0xedf/0x1590 [ 494.589841][ T4669] kthread+0xd59/0xf00 [ 494.594665][ T4669] ? __pfx_worker_thread+0x10/0x10 [ 494.600117][ T4669] ? __pfx_kthread+0x10/0x10 [ 494.605166][ T4669] ret_from_fork+0x1e3/0x310 [ 494.610038][ T4669] ? __pfx_kthread+0x10/0x10 [ 494.615162][ T4669] ret_from_fork_asm+0x1a/0x30 [ 494.620248][ T4669] [ 494.623591][ T4669] ---[ end trace 0000000000000000 ]--- [ 494.632855][ T4669] ------------[ cut here ]------------ [ 494.638494][ T4669] WARNING: CPU: 1 PID: 4669 at net/xfrm/xfrm_state.c:3310 xfrm_state_fini+0x389/0x4c0 [ 494.648548][ T4669] Modules linked in: [ 494.652860][ T4669] CPU: 1 UID: 0 PID: 4669 Comm: kworker/u8:29 Tainted: G W syzkaller #0 PREEMPT(none) [ 494.665161][ T4669] Tainted: [W]=WARN [ 494.669127][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.680160][ T4669] Workqueue: netns cleanup_net [ 494.686496][ T4669] RIP: 0010:xfrm_state_fini+0x389/0x4c0 [ 494.692814][ T4669] Code: 89 f7 e8 1a 76 c4 f3 4c 8b 28 8b 02 89 45 d4 e9 25 fe ff ff 8b 3a e8 26 81 c4 f3 4d 85 ff 0f 84 86 fe ff ff e8 48 bf 21 f3 90 <0f> 0b 90 4d 8b 26 4c 89 f7 e8 e9 75 c4 f3 4c 8b 28 8b 02 89 45 d4 [ 494.713425][ T4669] RSP: 0018:ffff888116f03a48 EFLAGS: 00010293 [ 494.719772][ T4669] RAX: ffffffff8ed33388 RBX: ffff88804af74740 RCX: ffff8881179920c0 [ 494.728114][ T4669] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88804b867400 [ 494.736513][ T4669] RBP: ffff888116f03a88 R08: ffffea000000000f R09: 000000000040001a [ 494.745114][ T4669] R10: ffff88804b067440 R11: ffffffff81d43c40 R12: ffff88804b867400 [ 494.753497][ T4669] R13: 0000000000000000 R14: ffff88804af75558 R15: ffff88804dc7c9d8 [ 494.761805][ T4669] FS: 0000000000000000(0000) GS:ffff8881aa794000(0000) knlGS:0000000000000000 [ 494.771163][ T4669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.777948][ T4669] CR2: 000055f7b03ae128 CR3: 000000004e99a000 CR4: 00000000003526f0 [ 494.787354][ T4669] Call Trace: [ 494.791299][ T4669] [ 494.794415][ T4669] xfrm_net_exit+0x46/0x90 [ 494.799160][ T4669] ? __pfx_xfrm_net_exit+0x10/0x10 [ 494.804813][ T4669] ops_undo_list+0x6c5/0xb80 [ 494.809696][ T4669] cleanup_net+0xb8f/0x14b0 [ 494.814662][ T4669] ? __pfx_cleanup_net+0x10/0x10 [ 494.819852][ T4669] process_scheduled_works+0xb8e/0x1d80 [ 494.826000][ T4669] worker_thread+0xedf/0x1590 [ 494.831176][ T4669] kthread+0xd59/0xf00 [ 494.835489][ T4669] ? __pfx_worker_thread+0x10/0x10 [ 494.841089][ T4669] ? __pfx_kthread+0x10/0x10 [ 494.845938][ T4669] ret_from_fork+0x1e3/0x310 [ 494.851039][ T4669] ? __pfx_kthread+0x10/0x10 [ 494.855890][ T4669] ret_from_fork_asm+0x1a/0x30 [ 494.861276][ T4669] [ 494.864459][ T4669] ---[ end trace 0000000000000000 ]--- [ 494.873743][ T4669] ------------[ cut here ]------------ [ 494.879369][ T4669] WARNING: CPU: 1 PID: 4669 at net/xfrm/xfrm_state.c:3312 xfrm_state_fini+0x3ba/0x4c0 [ 494.890336][ T4669] Modules linked in: [ 494.894977][ T4669] CPU: 1 UID: 0 PID: 4669 Comm: kworker/u8:29 Tainted: G W syzkaller #0 PREEMPT(none) [ 494.906540][ T4669] Tainted: [W]=WARN [ 494.910511][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.921450][ T4669] Workqueue: netns cleanup_net [ 494.926497][ T4669] RIP: 0010:xfrm_state_fini+0x3ba/0x4c0 [ 494.932483][ T4669] Code: 89 f7 e8 e9 75 c4 f3 4c 8b 28 8b 02 89 45 d4 e9 6a fe ff ff 8b 3a e8 f5 80 c4 f3 4d 85 ff 0f 84 cb fe ff ff e8 17 bf 21 f3 90 <0f> 0b 90 4d 8b 26 4c 89 f7 e8 b8 75 c4 f3 4c 8b 28 8b 02 89 45 d4 [ 494.952911][ T4669] RSP: 0018:ffff888116f03a48 EFLAGS: 00010293 [ 494.959266][ T4669] RAX: ffffffff8ed333b9 RBX: ffff88804af74740 RCX: ffff8881179920c0 [ 494.967649][ T4669] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88804b8673c0 [ 494.976091][ T4669] RBP: ffff888116f03a88 R08: ffffea000000000f R09: 0000000000400019 [ 494.984550][ T4669] R10: ffff88804b067400 R11: ffffffff81d43c40 R12: ffff88804b8673c0 [ 494.993840][ T4669] R13: 0000000000000000 R14: ffff88804af75550 R15: ffff88804dc7c9c8 [ 495.002471][ T4669] FS: 0000000000000000(0000) GS:ffff8881aa794000(0000) knlGS:0000000000000000 [ 495.011813][ T4669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.018613][ T4669] CR2: 000055f7b03ae128 CR3: 000000004e99a000 CR4: 00000000003526f0 [ 495.027005][ T4669] Call Trace: [ 495.030455][ T4669] [ 495.033761][ T4669] xfrm_net_exit+0x46/0x90 [ 495.038477][ T4669] ? __pfx_xfrm_net_exit+0x10/0x10 [ 495.044162][ T4669] ops_undo_list+0x6c5/0xb80 [ 495.049048][ T4669] cleanup_net+0xb8f/0x14b0 [ 495.054009][ T4669] ? __pfx_cleanup_net+0x10/0x10 [ 495.059207][ T4669] process_scheduled_works+0xb8e/0x1d80 [ 495.065880][ T4669] worker_thread+0xedf/0x1590 [ 495.071085][ T4669] kthread+0xd59/0xf00 [ 495.075420][ T4669] ? __pfx_worker_thread+0x10/0x10 [ 495.080991][ T4669] ? __pfx_kthread+0x10/0x10 [ 495.085862][ T4669] ret_from_fork+0x1e3/0x310 [ 495.090932][ T4669] ? __pfx_kthread+0x10/0x10 [ 495.096813][ T4669] ret_from_fork_asm+0x1a/0x30 [ 495.102489][ T4669] [ 495.105666][ T4669] ---[ end trace 0000000000000000 ]--- [ 495.185452][ T3621] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.387313][ T8117] loop5: detected capacity change from 0 to 512 [ 497.403900][ T8117] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 497.416199][ T8117] EXT4-fs (loop5): invalid journal inode [ 497.422536][ T8117] EXT4-fs (loop5): can't get journal size [ 497.491325][ T8117] EXT4-fs (loop5): 1 truncate cleaned up [ 497.499271][ T8117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.212405][ T8126] fuse: Bad value for 'group_id' [ 498.217707][ T8126] fuse: Bad value for 'group_id' [ 498.495686][ T8126] loop7: detected capacity change from 0 to 1024 [ 498.553239][ T8126] EXT4-fs: Ignoring removed nobh option [ 498.559303][ T8126] EXT4-fs: Ignoring removed bh option [ 498.723911][ T8126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.689815][ T7866] veth0_vlan: entered promiscuous mode [ 499.731858][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.916427][ T7866] veth1_vlan: entered promiscuous mode [ 499.989060][ T8137] loop1: detected capacity change from 0 to 1024 [ 500.217860][ T7021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.389729][ T7866] veth0_macvtap: entered promiscuous mode [ 500.534339][ T7866] veth1_macvtap: entered promiscuous mode [ 500.985255][ T8137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.998037][ T8137] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.022076][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.172929][ T7866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.380265][ T4444] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.597106][ T3841] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.616976][ T3910] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.129855][ T8151] loop5: detected capacity change from 0 to 1024 [ 502.536382][ T8151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.602744][ T3910] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.780514][ T8151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.394770][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.310037][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.342867][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.391945][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.470282][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.496251][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.504166][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.686381][ T5815] Bluetooth: hci2: command tx timeout [ 508.950540][ T8177] loop5: detected capacity change from 0 to 512 [ 509.385203][ T8177] EXT4-fs: Ignoring removed nomblk_io_submit option [ 509.573920][ T8177] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 509.752696][ T5815] Bluetooth: hci2: command tx timeout [ 509.987361][ T8177] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 509.995922][ T8177] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 510.283559][ T8177] EXT4-fs (loop5): 1 truncate cleaned up [ 510.293899][ T8177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.665044][ T8177] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 4: comm syz.5.581: lblock 0 mapped to illegal pblock 4 (length 1) [ 510.817638][ T8182] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 510.883931][ T8177] EXT4-fs (loop5): Remounting filesystem read-only [ 511.413359][ T8163] chnl_net:caif_netlink_parms(): no params data found [ 511.776312][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.792761][ T5815] Bluetooth: hci2: command tx timeout [ 512.463376][ T4444] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.846746][ T4444] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.091004][ T4444] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.196998][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 513.197081][ T30] audit: type=1326 audit(1756881027.538:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.7.586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04bbb8ebe9 code=0x0 [ 513.368414][ T4444] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.972450][ T5815] Bluetooth: hci2: command tx timeout [ 514.317837][ T8208] fuse: Bad value for 'group_id' [ 514.329162][ T8208] fuse: Bad value for 'group_id' [ 514.776443][ T4444] bridge_slave_1: left allmulticast mode [ 514.782694][ T4444] bridge_slave_1: left promiscuous mode [ 514.789421][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.003398][ T8208] loop5: detected capacity change from 0 to 1024 [ 515.106071][ T8208] EXT4-fs: Ignoring removed nobh option [ 515.112206][ T8208] EXT4-fs: Ignoring removed bh option [ 515.193072][ T4444] bridge_slave_0: left allmulticast mode [ 515.198964][ T4444] bridge_slave_0: left promiscuous mode [ 515.205950][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.336467][ T8214] loop7: detected capacity change from 0 to 512 [ 515.836232][ T8214] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 515.934503][ T8214] EXT4-fs (loop7): 1 truncate cleaned up [ 515.944555][ T8214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.972435][ T8208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.070297][ T8208] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.587: Allocating blocks 385-513 which overlap fs metadata [ 516.118394][ T8208] EXT4-fs (loop5): Remounting filesystem read-only [ 516.195586][ T8219] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 516.273156][ T8214] ext4: Unknown parameter 'trans' [ 516.421724][ T8207] EXT4-fs (loop5): pa ffff8881239fe5b0: logic 16, phys. 129, len 24 [ 517.208602][ T6139] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.748494][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 517.758748][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 517.770083][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 517.805165][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 517.835604][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 518.088237][ T8227] ===================================================== [ 518.095659][ T8227] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 518.103265][ T8227] eth_type_trans+0x69d/0x9a0 [ 518.108152][ T8227] __dev_forward_skb2+0x4b1/0x950 [ 518.113518][ T8227] dev_forward_skb_nomtu+0x3b/0xe0 [ 518.118802][ T8227] __bpf_redirect+0x14d6/0x1760 [ 518.123994][ T8227] bpf_clone_redirect+0x366/0x530 [ 518.129220][ T8227] ___bpf_prog_run+0x1297/0xeba0 [ 518.134483][ T8227] __bpf_prog_run512+0xc5/0x100 [ 518.139588][ T8227] bpf_test_run+0x350/0xab0 [ 518.144543][ T8227] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 518.150211][ T8227] bpf_prog_test_run+0x5c2/0xa40 [ 518.155504][ T8227] __sys_bpf+0x89a/0xed0 [ 518.159914][ T8227] __x64_sys_bpf+0xa4/0xf0 [ 518.164707][ T8227] x64_sys_call+0x3550/0x3e20 [ 518.169611][ T8227] do_syscall_64+0xd9/0x210 [ 518.174500][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.180583][ T8227] [ 518.183184][ T8227] Uninit was created at: [ 518.187661][ T8227] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 518.193948][ T8227] kmalloc_reserve+0x13c/0x4b0 [ 518.198907][ T8227] pskb_expand_head+0x1fc/0x1610 [ 518.204237][ T8227] skb_ensure_writable+0x44e/0x510 [ 518.209545][ T8227] bpf_clone_redirect+0x1c1/0x530 [ 518.214936][ T8227] ___bpf_prog_run+0x1297/0xeba0 [ 518.220054][ T8227] __bpf_prog_run512+0xc5/0x100 [ 518.225232][ T8227] bpf_test_run+0x350/0xab0 [ 518.229931][ T8227] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 518.235745][ T8227] bpf_prog_test_run+0x5c2/0xa40 [ 518.240982][ T8227] __sys_bpf+0x89a/0xed0 [ 518.245377][ T8227] __x64_sys_bpf+0xa4/0xf0 [ 518.250017][ T8227] x64_sys_call+0x3550/0x3e20 [ 518.255072][ T8227] do_syscall_64+0xd9/0x210 [ 518.259784][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.266033][ T8227] [ 518.268488][ T8227] CPU: 1 UID: 0 PID: 8227 Comm: syz.1.591 Tainted: G W syzkaller #0 PREEMPT(none) [ 518.279609][ T8227] Tainted: [W]=WARN [ 518.283668][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.294008][ T8227] ===================================================== [ 518.301152][ T8227] Disabling lock debugging due to kernel taint [ 518.307435][ T8227] Kernel panic - not syncing: kmsan.panic set ... [ 518.313985][ T8227] CPU: 1 UID: 0 PID: 8227 Comm: syz.1.591 Tainted: G B W syzkaller #0 PREEMPT(none) [ 518.325000][ T8227] Tainted: [B]=BAD_PAGE, [W]=WARN [ 518.330128][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.340323][ T8227] Call Trace: [ 518.343712][ T8227] [ 518.346757][ T8227] __dump_stack+0x26/0x30 [ 518.351315][ T8227] dump_stack_lvl+0x53/0x270 [ 518.356216][ T8227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 518.362244][ T8227] dump_stack+0x1e/0x25 [ 518.366610][ T8227] vpanic+0x361/0xc50 [ 518.370814][ T8227] panic+0x15d/0x160 [ 518.374963][ T8227] kmsan_report+0x31c/0x320 [ 518.379664][ T8227] ? bpf_prog_test_run+0x5c2/0xa40 [ 518.384956][ T8227] ? __msan_warning+0x1b/0x30 [ 518.389935][ T8227] ? eth_type_trans+0x69d/0x9a0 [ 518.395011][ T8227] ? __dev_forward_skb2+0x4b1/0x950 [ 518.400398][ T8227] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 518.405875][ T8227] ? __bpf_redirect+0x14d6/0x1760 [ 518.411126][ T8227] ? bpf_clone_redirect+0x366/0x530 [ 518.416563][ T8227] ? ___bpf_prog_run+0x1297/0xeba0 [ 518.421869][ T8227] ? __bpf_prog_run512+0xc5/0x100 [ 518.427088][ T8227] ? bpf_test_run+0x350/0xab0 [ 518.431974][ T8227] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 518.437899][ T8227] ? bpf_prog_test_run+0x5c2/0xa40 [ 518.443214][ T8227] ? __sys_bpf+0x89a/0xed0 [ 518.447799][ T8227] ? __x64_sys_bpf+0xa4/0xf0 [ 518.452618][ T8227] ? x64_sys_call+0x3550/0x3e20 [ 518.457693][ T8227] ? do_syscall_64+0xd9/0x210 [ 518.462591][ T8227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.468869][ T8227] ? kmem_cache_alloc_node_noprof+0x31/0xf00 [ 518.475383][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.480700][ T8227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 518.486719][ T8227] ? eth_get_headlen+0x171/0x1e0 [ 518.491874][ T8227] ? filter_irq_stacks+0x49/0x190 [ 518.497088][ T8227] ? stack_depot_save_flags+0x35/0x7b0 [ 518.502789][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.508190][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.513512][ T8227] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 518.520050][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.525377][ T8227] __msan_warning+0x1b/0x30 [ 518.530066][ T8227] eth_type_trans+0x69d/0x9a0 [ 518.535260][ T8227] __dev_forward_skb2+0x4b1/0x950 [ 518.540479][ T8227] ? pskb_expand_head+0x1268/0x1610 [ 518.545920][ T8227] dev_forward_skb_nomtu+0x3b/0xe0 [ 518.551228][ T8227] __bpf_redirect+0x14d6/0x1760 [ 518.556311][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.561649][ T8227] bpf_clone_redirect+0x366/0x530 [ 518.566914][ T8227] ___bpf_prog_run+0x1297/0xeba0 [ 518.572077][ T8227] __bpf_prog_run512+0xc5/0x100 [ 518.577131][ T8227] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 518.583848][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.589158][ T8227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 518.595190][ T8227] ? __local_bh_enable_ip+0x91/0xb0 [ 518.600579][ T8227] ? filter_irq_stacks+0x49/0x190 [ 518.605791][ T8227] ? stack_depot_save_flags+0x35/0x7b0 [ 518.611486][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.616816][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.622126][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.627443][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.632747][ T8227] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 518.639280][ T8227] ? kmsan_get_metadata+0x150/0x160 [ 518.644694][ T8227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 518.650705][ T8227] ? __pfx___bpf_prog_run512+0x10/0x10 [ 518.656643][ T8227] ? __pfx___bpf_prog_run512+0x10/0x10 [ 518.662396][ T8227] bpf_test_run+0x350/0xab0 [ 518.667091][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.672399][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.677722][ T8227] ? kmsan_get_metadata+0xfb/0x160 [ 518.683127][ T8227] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 518.689303][ T8227] ? bpf_test_run+0x1b0/0xab0 [ 518.694235][ T8227] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 518.699962][ T8227] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 518.705977][ T8227] bpf_prog_test_run+0x5c2/0xa40 [ 518.711135][ T8227] __sys_bpf+0x89a/0xed0 [ 518.715593][ T8227] __x64_sys_bpf+0xa4/0xf0 [ 518.720251][ T8227] x64_sys_call+0x3550/0x3e20 [ 518.725164][ T8227] do_syscall_64+0xd9/0x210 [ 518.729895][ T8227] ? irqentry_exit+0x16/0x60 [ 518.734689][ T8227] ? clear_bhb_loop+0x40/0x90 [ 518.739571][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.745663][ T8227] RIP: 0033:0x7f9ff318ebe9 [ 518.750236][ T8227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.770046][ T8227] RSP: 002b:00007f9ff3f95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.778660][ T8227] RAX: ffffffffffffffda RBX: 00007f9ff33c5fa0 RCX: 00007f9ff318ebe9 [ 518.786783][ T8227] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 518.794902][ T8227] RBP: 00007f9ff3211e19 R08: 0000000000000000 R09: 0000000000000000 [ 518.803014][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.811125][ T8227] R13: 00007f9ff33c6038 R14: 00007f9ff33c5fa0 R15: 00007ffc7a207908 [ 518.819293][ T8227] [ 518.822634][ T8227] Kernel Offset: disabled [ 518.827037][ T8227] Rebooting in 86400 seconds..