last executing test programs: 9m1.664614866s ago: executing program 2 (id=331): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x1, 0x10, 0x200003, 0x2, 0xfffffffd, 0x4}}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x10, 0x5, 0x2, 0x6}]}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000002fc0)={@multicast, @remote, @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x2, 0x9, 0x60, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0x3, 0x74}, @generic={0x88, 0x2}, @noop]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x7, 0x1, 0x0, 0x1, 0x1, 0x5}, 0x1, {0x3ff}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x10, 0x2, 0x0, 0x3, 0x5, 0xf9}, 0x2, {0x9, 0x800, 0x0, 0x7, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r4, 0xfffffffffffffff6, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) 8m58.860243056s ago: executing program 2 (id=337): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) socket(0x27, 0x3, 0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000280)="120000001c0000010011223344556600000101010101010101010101010101010100", 0x22) write(r3, &(0x7f00000002c0)="1b00000008001122334455660000", 0xe) 8m55.474599343s ago: executing program 2 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x3, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x9, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x4, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0xfffffff3, 0x3, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0xc70, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x3, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x20000006, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x9, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xc47a, 0x136, 0x6]}, 0x45c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(0x0) 8m53.433167114s ago: executing program 2 (id=343): syz_open_dev$vim2m(&(0x7f0000002a80), 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6418, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000700)={'fl512\x00', [0x140, 0x4, 0x6, 0xff, 0x3, 0x5, 0x8, 0x5, 0x8, 0xf, 0x4, 0x76c28e08, 0xf8, 0x100008, 0x4ce, 0x9e9b, 0x101, 0x400401, 0x9, 0xc6, 0xdd, 0x8, 0x100009, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x1000000, 0x4]}) io_setup(0x6, &(0x7f00000007c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) fcntl$notify(r1, 0x402, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000300), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000ec0)={0x80, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000400)=""/105, 0x69}, &(0x7f0000000480), 0xb}, 0x20) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, 0x0) 8m42.923638335s ago: executing program 2 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10040, 0x70) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x28100, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0xe) 8m40.678893936s ago: executing program 2 (id=366): add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x8030, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0xa, 0x0, 0x1, "bf231e4b"}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000400)=0x1) 8m23.075368323s ago: executing program 32 (id=366): add_key$keyring(0x0, &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) shmctl$SHM_LOCK(0x0, 0xb) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x8030, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0xa, 0x0, 0x1, "bf231e4b"}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000400)=0x1) 6m3.795998295s ago: executing program 1 (id=604): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6m2.217812046s ago: executing program 1 (id=607): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 6m0.098367721s ago: executing program 1 (id=611): r0 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000940), &(0x7f0000000980)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f00000009c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @desc3}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c40), &(0x7f0000000c80)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @desc1}, &(0x7f0000000dc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000e40), &(0x7f0000000e80)={'fscrypt:', @auto=[0x0, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000ec0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000fc0)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001040), &(0x7f0000001080)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f00000010c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001140), &(0x7f0000001180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f00000011c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001240), &(0x7f0000001280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f00000012c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001340), &(0x7f0000001380)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f00000013c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x20000040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f00000014c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001540), &(0x7f0000001580)={'fscrypt:', @auto=[0x30, 0x31, 0x61, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x56, 0x30, 0x36, 0x38, 0x30, 0x66]}, &(0x7f00000015c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001640), &(0x7f0000001680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000016c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001740), &(0x7f0000001780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f00000017c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 5m59.757610129s ago: executing program 1 (id=612): socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) inotify_init1(0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create(0xd851) socket$packet(0x11, 0x3, 0x300) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 5m59.109853966s ago: executing program 1 (id=617): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5m56.300405569s ago: executing program 1 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x90001) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) io_uring_enter(r5, 0x0, 0x15ef, 0x4d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) 5m38.3857207s ago: executing program 33 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x40, &(0x7f0000000440)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x90001) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) io_uring_enter(r5, 0x0, 0x15ef, 0x4d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) 21.332560638s ago: executing program 4 (id=1209): socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) sched_setaffinity(r2, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) 20.60807077s ago: executing program 3 (id=1211): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) shutdown(0xffffffffffffffff, 0x2) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = syz_create_resource$futex(0x0) clock_gettime(0x0, 0x0) futex(r4, 0x0, 0x1, 0x0, r4, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) 20.237164169s ago: executing program 3 (id=1212): fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000440)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019440)=0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000019480), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000194c0)={0x48}) 17.131549456s ago: executing program 4 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x0, &(0x7f0000000880)}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000440)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) 17.1238979s ago: executing program 3 (id=1214): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x24044010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='256\n', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000b00)='1\n', 0x2) faccessat(0xffffffffffffffff, &(0x7f000000b0c0)='./config/nullb/nullb1/zoned\x00', 0x89) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./dev\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) write(r4, &(0x7f0000000f00)="789c04c003006d0500c0d06cdbb6976ddbb66d2ff7ae8d6cdbb66ddbb6bfd1b96f80f70ff081013e38c08706f8f0001f19e0a3037c6c808f0ff089013e39c0a706f8f4009f19e0b3037c6e80cf0ff08501be38c09706f8f2005f19e0ab037c6d80af0ff08d01be39c0b706f8f600df19e0bb037c6f80ef0ff083017e38c08f06f8f1003f19e0a703fc6c809f0ff08b017e39c0af06f8f500bf19e0b703fc6e80df0ff08701fe38c09f06f8f3007f19e0af03fc6d80bf0ff08f01fe39c0bf06f8f700ff19e0bf03fc6f804306387480c306387c802306387280a306387a806306387680e304386e80e305387e80130438618013053871809304386980930538798053043865805305387580d304386d80d305387d8033043863803305387380b304386b80b305387b8073043867807305387780f304386f80f305387f800b04b860800b05b870808b04b868808b05b878804b04b864804b05b87480cb044880cb06b85c80cb07b842802b06b852802b07b84a80ab06b85a80ab07b846806b06b856806b07b84e80eb06b85e80eb07b841801b06b851801b07b849809b06b859809b07b845805b06b855805b07b84d80db06b85d80db07b843803b06b853803b07b84b80bb06b85b80bb07b847807b06b857807b07b84f80fb06b85f80fb07784080070678508007077848808706785880870778448047067854804707784c80c706785c80c70778428027067852802707784a80a7066880a705787a8067047866806705787680e704786e8083008300c300a300e3009300d300b300f3008b00cb00ab00eb009b00db00bb00fb00cf0bf0fc002f08f0c2002f0af0e2002f09f0d2002f0bf0f200af08f0ca00af0af0ea00af09f0da00af0bf0fa006f08f0c6006f0af0e6006f09f0d6006f0bf0f600ef08f0ce00ef0af0ee00ef09f0de00ef0bf0fe001f08f0c1001f0af0e1001f09f0d1001f0bf0f1009f08f0c9009f0af0e9009f09f0d9009f0bf0f9005f08f0c5005f0af0e5005f09f0d5005f0bf0f500df08f0cd00df0af0ed00df09f0dd00df0bf0fd003f08f0c3003f0af0e3003f09f0d3003f0bf0f300bf08f0cb00bf0af0eb00bf09f0db00bf0bf0fb007f08f0c7007f0af0e7007f09f0d7007f0bf0f700ff08f0cf00ff0af0ef00ff09f0df00ff0b70488043031c16e0f00047043832c051018e0e704c8063031c27c471431c2fc4f1439c20c409439c28c489439c24c449439c2cc4c9439c22c429439c2ac4a9439c26c469439c2ec4e9439c21c419439c29c499439c25c459439c2dc4d9439c23c439439c2bc4b9439c27c479439c2fc4f9435c20c405435c28c485435c24c445435c2cc4c5435c22c425435c2ac4a5435c2644425c36c4e5425c3ec415425c31c495425c39c455425c35c4d5425c3dc435425c33c4b5425c3bc475425c37c4f5425c3fc40d42dc30c48d42dc38c44d42dc34c4cd42dc3cc42d42dc32c4ad42dc3ac46d42dc36c4ed42dc3ec41d42dc31c49d42dc39c45d42dc35c4dd42dc3dc43d42dc33c4bd42dc3bc47d42dc37c4fd42dc3fc403423c30c483423c38c443423c34c4c3423c3cc423423c32c4a3423c3ac463423c36c4e3423c3ec413423c31c493423c39c453423c3544433c2dc4d3433c23c433433c2bc4b3433c27c473431c84188418861885188798849886988598875884588658855887d884d886d885d887785e88e787784188178678518817877849889786785988978778458857867855885787784d88d786785d88d78778438837867853883787784b88b786785b88b78778478877867857887787784f88f786785f88f787f840880f86f850880f87f848888f86f858888f87f844884f86f854884f87f84c88cf86f85c88cf87f842882f86f852882f87f84a88af86f85a88af87f846886f86f856886f87f84e88ef86f85e88ef87f841881f86f851881f87f849889f86f859889f87f845885f86f855885f87f84d88df86f85d88df87f843883f86f853883f87f84b88bf86f85b88bf87f847887f86f857887f87f84f88ff86f85f8843421c1ae2b01087873822c491218e0a71748863421c1be238118e1be178118e1fe104114e18e144114e1ce124114e1ae164114e1ee114114e19e154114e1de134114e1be174114e1fe10c11ce18e14c11ce1ce12c11ce1ae16c11ce1ee11c11ce19e15c11ce1de13c11ce1be17c11ce1fe102112e18e142112e1ce122112e1ae162112e1ee112112e19e152112e1de1321112e1b2112e17e1f211ae10e18a11ae14e1ca11ae12e1aa11ae16e1ea11ae11e19a11ae15e1da11ae13e1ba11ae17e1fa116e10e186116e14e1c6116e12e1a6116e16e1e6116e11e196116e15e1d6116e13e1b6116e17e1f611ee10e18e11ee14e1ce11ee12e1ae11ee16e1ee11ee11e19e11ee15e1de11ee13e1be11ee17e1fe111e10e181111e14e1c1111e12e1a1111e16e1e1111e11e191111e15e1d1111e13e1b1111e17e1f1119e10e189119e14e1c9119e12e1a9111ae169119e1ee119119e19e159119e1de139119e1be120c220c230c228c238c224c234c22cc23cc222c232c22ac23ac226c236c22ec23ec2f3223c3fc20b22bc30c28b22bc38c24b22bc34c2cb22bc3cc22b22bc32c2ab22bc3ac26b22bc36c2eb22bc3ec21b22bc31c29b22bc39c25b22bc35c2db22bc3dc23b22bc33c2bb22bc3bc27b22bc37c2fb22bc3fc207227c30c287227c38c247227c34c2c7227c3cc227227c32c2a7227c3ac267227c36c2e7227c3ec217227c31c297227c39c257227c35c2d7227c3dc237227c33c2b7227c3bc277227c37c2f7227c3fc20f22fc30c28f22fc38c24f22fc34c2cf22fc3cc22f22fc32c2af22fc3ac26f22fc36c2ef22fc3ec21f22fc31c29f22fc39c25f22fc35c2df22fc3dc23f22fc33c2bf22fc3bc27f22fc37c2ff221c12e1d0088745383cc211118e8c705484a3231c13e1d808c78971dc18c78b71fc18278871c218278a71e218278971d218278b71f218a78871ca18a78a71ea18a78971da18a78b71fa18678871c618678a71e618678971d618678b71f618e78871ce18e78a71ee18e78971de18e78b71fe18178871c118178a71e118178971d118178b71f118978871c918978a71e91897899118978d71b918978f718518578c71a518578e719518578d71b518578f718d18d78c71ad18d78e719d18d78d71bd18d78f718318378c71a318378e719318378d71b318378f718b18b78c71ab18b78e719b18b78d71bb18b78f718718778c71a718778e719718778d71b718778f718f18f78c71af18f78e719f18f78d71bf18f78ff180180f8cf1a0180f8ef190180f8df1b0180f8ff188188f8cf1a8188f8ef198188f8df1b8188f8ff184184f8cf1a4184f8ef194184f8dd1184f8bf1f418cf88f1cc18cf8af1ec18cf89f1dc180731063186314631c6312631a6316631e631163196315631d6313631b6317631f6319e17e3f9315e10e385315e14e3c5315e12e3a5315e16e3e5315e11e395315e15e3d5315e13e3b5315e17e3f531de10e38d31de14e3cd31de12e3ad31de16e3ed31de11e39d31de15e3dd31de13e3bd31de17e3fd313e10e383313e14e3c3313e12e3a3313e16e3e3313e11e393313e15e3d3313e13e3b3313e17e3f331be10e38b31be14e3cb31be12e3ab31be16e3eb31be11e39b31be15e3db31be13e3bb31be17e3fb317e10e387317e14e3c7317e12e3a7317e16e3e7317e11e397317e15e3d7317e13e3b7317e17e3f731fe10e38f31fe14e3cf31fe12e3af31fe16e3ef31fe11e39f31fe15e3df31fe13e3bf31fe17e3901887c6382cc6e1318e8871648ca3621c1de39818c7c6384e82e326385e82e327384182132638518213273849829326385982932738458253263855825327384d82d326385d82d32738438233263853823327384b82b326385b82b32738478273263857827327384f82f326385f82f327b840820b26b850820b27b848828b26b858828b27b844824b26b854824b27b84c8224b86c82cb25b87c822b24b862822b25b87282ab24b86a82ab25b87a826b24b866826b25b87682eb24b86e82eb25b87e821b24b861821b25b871829b24b869829b25b879825b24b865825b25b87582db24b86d82db25b87d823b24b863823b25b87382bb24b86b82bb25b87b827b24b867827b25b87782fb24b86f82fb25b87f82072478608207257870828724786882872578788247247864824725787482c724786c82c725787c8227247862822725787282a724786a8226785a82a72778468267267856826727784e82e72638483048304c304a304e3049304d304b304fb048b04cb04ab04eb049b04db04bb04ff0bc04cf4ff082042f4cf0a2042f4ef092042f4df0b2042f4ff08a04af4cf0aa04af4ef09a04af4df0ba04af4ff086046f4cf0a6046f4ef096046f4df0b6046f4ff08e04ef4cf0ae04ef4ef09e04ef4df0be04ef4ff081041f4cf0a1041f4ef091041f4df0b1041f4ff089049f4cf0a9049f4ef099049f4df0b9049f4ff085045f4cf0a5045f4ef095045f4df0b5045f4ff08d04df4cf0ad04df4ef09d04df4df0bd04df4ff083043f4cf0a3043f4ef093043f4df0b3043f4ff08b04bf4cf0ab04bf4ef09b04bf4df0bb04bf4ff087047f4cf0a7047f4ef097047f4df0b7047f4ff08f04ff4cf0af04ff4ef09f04ff4df0bf0487243834c161090e4f70448223131c95e0e804c7243836c171521c37c5f1521c3fc509529c30c589529c38c549529c34c5c9529c3cc529529c32c5a9529c3ac569529c36c5e9529c3ec519529c31c599529c39c559529c35c5d9529c3dc539529c33c5b9529c3bc579529c37c5f9529c3fc505525c30c585525c38c545525c34c5c5525c3cc525525c32c5a5525c3ac5655224c565535c2ec5e5535c21c515535c29c595535c25c555535c2dc5d5535c23c535535c2bc5b5535c27c575535c2fc5f553dc20c50d53dc28c58d53dc24c54d53dc2cc5cd53dc22c52d53dc2ac5ad53dc26c56d53dc2ec5ed53dc21c51d53dc29c59d53dc25c55d53dc2dc5dd53dc23c53d53dc2bc5bd53dc27c57d53dc2fc5fd533c20c503533c28c583533c24c543533c2cc5c3533c22c523533c2ac5a3533c26c563533c2ec5e3533c21c513533c29c593533c25c5535334c5d3523c3dc533523c33c5b3523c3bc573523c37c5418a418a618a518a718a498a698a598a798a458a658a558a758a4d8a6d8a5d8a7d8ae7a5787e8a17a478618a17a578718a97a478698a97a578798a57a478658a57a578758ad7a4786d8ad7a5787d8a37a478638a37a578738ab7a4786b8ab7a5787b8a77a478678a77a578778af7a4786f8af7a5787f8a0fa4f8608a0fa5f8708a8fa4f8688a8fa5f8788a4fa4f8648a4fa5f8748acfa4f86c8acfa5f87c8a2fa4f8628a2fa5f8728aafa4f86a8aafa5f87a8a6fa4f8668a6fa5f8768aefa4f86e8aefa5f87e8a1fa4f8618a1fa5f8718a9fa4f8698a9fa5f8798a5fa4f8658a5fa5f8758adfa4f86d8adfa5f87d8a3fa4f8638a3fa5f8738abfa4f86b8abfa5f87b8a7fa4f8678a7fa5f8778affa4f86f8affa53824c5a1290e4b71788a23521c99e2a81447a73826c5b1298e93e1b8198e97e1f8194e90e184194e94e1c4194e92e1a4194e96e1e4194e91e194194e95e1d4194e93e1b4194e97e1f419ce90e18c19ce94e1cc19ce92e1ac19ce96e1ec19ce91e19c19ce95e1dc19ce93e1bc19ce97e1fc192e90e182192e94e1c2192e92e1a2192e96e1e2192e91e192192e95e1d2192e9321192e9be172192e9fe10a19ae98e14a19ae9ce12a19ae9ae16a19ae9ee11a19ae99e15a19ae9de13a19ae9be17a19ae9fe106196e98e146196e9ce126196e9ae166196e9ee116196e99e156196e9de136196e9be176196e9fe10e19ee98e14e19ee9ce12e19ee9ae16e19ee9ee11e19ee99e15e19ee9de13e19ee9be17e19ee9fe101191e98e141191e9ce121191e9ae161191e9ee111191e99e151191e9de131191e9be171191e9fe109199e98e149199e9ce129199e9aa1199e96e1e9199e91e199199e95e1d9199e93e1b9190e320c320c338c328c334c324c33cc32cc332c322c33ac32ac336c326c33ec32ec333c2fc3f333bc20c30b33bc28c38b33bc24c34b33bc2cc3cb33bc22c32b33bc2ac3ab33bc26c36b33bc2ec3eb33bc21c31b33bc29c39b33bc25c35b33bc2dc3db33bc23c33b33bc2bc3bb33bc27c37b33bc2fc3fb337c20c307337c28c387337c24c347337c2cc3c7337c22c327337c2ac3a7337c26c367337c2ec3e7337c21c317337c29c397337c25c357337c2dc3d7337c23c337337c2bc3b7337c27c377337c2fc3f733fc20c30f33fc28c38f33fc24c34f33fc2cc3cf33fc22c32f33fc2ac3af33fc26c36f33fc2ec3ef33fc21c31f33fc29c39f33fc25c35f33fc2dc3df33fc23c33f33fc2bc3bf33fc27c37f33fc2fc321190ecd705886c3331c91e1c80c4765383ac331198ecd709c1cc7cd71bc1cc7cf71821c27cc71a21c27ce71921c27cd71b21c27cf718a1ca7cc71aa1ca7ce719a1ca7cd71ba1ca7cf71861c67cc71a61c67ce71961c67cd71b61c67cf718e1ce7cc71ae1ce7ce719e1ce7cd71be1ce7cf71811c17cc71a11c17ce71911c17cd71b11c17cf71891c97cc71a91c97ce71991cc971d91c97cb71f91c57c871c51c57ca71e51c57c971d51c57cb71f51cd7c871cd1cd7ca71ed1cd7c971dd1cd7cb71fd1c37c871c31c37ca71e31c37c971d31c37cb71f31cb7c871cb1cb7ca71eb1cb7c971db1cb7cb71fb1c77c871c71c77ca71e71c77c971d71c77cb71f71cf7c871cf1cf7ca71ef1cf7c971df1cf7cb71ff1c0fc8f1c01c0fcaf1e01c0fc9f1d01c0fcbf1f01c8fc8f1c81c8fcaf1e81c8fc9f1d81c8fcbf1f81c4fc8f1c41c4fcaf1e41c4fc9f1d41ccdf1b41c4fcff18c1ccfccf1ac1ccfcef19c1ccfcd7190639063986394639c6392639a6396639e639163996395639d6393639b6397639fe379399e9fe305395e98e345395e9ce325395e9ae365395e9ee315395e99e355395e9de335395e9be375395e9fe30d39de98e34d39de9ce32d39de9ae36d39de9ee31d39de99e35d39de9de33d39de9be37d39de9fe303393e98e343393e9ce323393e9ae363393e9ee313393e99e353393e9de333393e9be373393e9fe30b39be98e34b39be9ce32b39be9ae36b39be9ee31b39be99e35b39be9de33b39be9be37b39be9fe307397e98e347397e9ce327397e9ae367397e9ee317397e99e357397e9de337397e9be377397e9fe30f39fe98e34f39fe9ce32f39fe9ae36f39fe9ee31f39fe99e35f39fe9de33f39fe9be37f390ec971688ec3721c9ee3881c47e6382ac7d1398ec9716c8ee314386e81e315387e81131438618113153871819314386981931538798153143865815315387581d314386d81d315387d8133143863813315387381b314386b81b315387b8173143867817315387781f314386f81f315387f810b14b860810b15b870818b14b868818b15b878814b14b864814b15b87481cb144881cb16b85c81cb17b842812b16b852812b17b84a81ab16b85a81ab17b846816b16b856816b17b84e81eb16b85e81eb17b841811b16b851811b17b849819b16b859819b17b845815b16b855815b17b84d81db16b85d81db17b843813b16b853813b17b84b81bb16b85b81bb17b847817b16b857817b17b84f81fb16b85f81fb17784081071678508107177848818716785881871778448147167854814717784c81c716785c81c71778428127167852812717784a81a7166881a715787a8167147866816715787681e714786e8183028302c302a302e3029302d302b302f3028b02cb02ab02eb029b02db02bb02fb02cf2bf0fc022f28f0c2022f2af0e2022f29f0d2022f2bf0f202af28f0ca02af2af0ea02af29f0da02af2bf0fa026f28f0c6026f2af0e6026f29f0d6026f2bf0f602ef28f0ce02ef2af0ee02ef29f0de02ef2bf0fe021f28f0c1021f2af0e1021f29f0d1021f2bf0f1029f28f0c9029f2af0e9029f29f0d9029f2bf0f9025f28f0c5025f2af0e5025f29f0d5025f2bf0f502df28f0cd02df2af0ed02df29f0dd02df2bf0fd023f28f0c3023f2af0e3023f29f0d3023f2bf0f302bf28f0cb02bf2af0eb02bf29f0db02bf2bf0fb027f28f0c7027f2af0e7027f29f0d7027f2bf0f702ff28f0cf02ff2af0ef02ff29f0df02ff2b704881430b1c56e0f002471438b2c051058e2e704c81630b1ca7c4714b1cafc4f14b9ca0c4094b9ca8c4894b9ca4c4494b9cacc4c94b9ca2c4294b9caac4a94b9ca6c4694b9caec4e94b9ca1c4194b9ca9c4994b9ca5c4594b9cadc4d94b9ca3c4394b9cabc4b94b9ca7c4794b9cafc4f94b5ca0c4054b5ca8c4854b5ca4c4454b5cacc4c54b5ca2c4254b5caac4a54b5ca6444a5cb6c4e54a5cbec4154a5cb1c4954a5cb9c4554a5cb5c4d54a5cbdc4354a5cb3c4b54a5cbbc4754a5cb7c4f54a5cbfc40d4adcb0c48d4adcb8c44d4adcb4c4cd4adcbcc42d4adcb2c4ad4adcbac46d4adcb6c4ed4adcbec41d4adcb1c49d4adcb9c45d4adcb5c4dd4adcbdc43d4adcb3c4bd4adcbbc47d4adcb7c4fd4adcbfc4034a3cb0c4834a3cb8c4434a3cb4c4c34a3cbcc4234a3cb2c4a34a3cbac4634a3cb6c4e34a3cbec4134a3cb1c4934a3cb9c4534a3cb5444b3cadc4d34b3ca3c4334b3cabc4b34b3ca7c4734b1c94189418961895189798949896989598975894589658955897d894d896d895d897785e89e797784189179678518917977849899796785989979778458957967855895797784d89d796785d89d79778438937967853893797784b89b796785b89b79778478977967857897797784f89f796785f89f797f840890f96f850890f97f848898f96f858898f97f844894f96f854894f97f84c89cf96f85c89cf97f842892f96f852892f97f84a89af96f85a89af97f846896f96f856896f97f84e89ef96f85e89ef97f841891f96f851891f97f849899f96f859899f97f845895f96f855895f97f84d89df96f85d89df97f843893f96f853893f97f84b89bf96f85b89bf97f847897f96f857897f97f84f89ff96f85f89434a1c5ae2b012879738a2c491258e2a717489634a1c5be238158e5be178158e5fe104154e58e144154e5ce124154e5ae164154e5ee114154e59e154154e5de134154e5be174154e5fe10c15ce58e14c15ce5ce12c15ce5ae16c15ce5ee11c15ce59e15c15ce5de13c15ce5be17c15ce5fe102152e58e142152e5ce122152e5ae162152e5ee112152e59e152152e5de1321552e1b2152e57e1f215ae50e18a15ae54e1ca15ae52e1aa15ae56e1ea15ae51e19a15ae55e1da15ae53e1ba15ae57e1fa156e50e186156e54e1c6156e52e1a6156e56e1e6156e51e196156e55e1d6156e53e1b6156e57e1f615ee50e18e15ee54e1ce15ee52e1ae15ee56e1ee15ee51e19e15ee55e1de15ee53e1be15ee57e1fe151e50e181151e54e1c1151e52e1a1151e56e1e1151e51e191151e55e1d1151e53e1b1151e57e1f1159e50e189159e54e1c9159e52e1a9155ae169159e5ee119159e59e159159e5de139159e5be1a0c2a0c2b0c2a8c2b8c2a4c2b4c2acc2bcc2a2c2b2c2aac2bac2a6c2b6c2aec2bec2f32a3cbfc20b2abcb0c28b2abcb8c24b2abcb4c2cb2abcbcc22b2abcb2c2ab2abcbac26b2abcb6c2eb2abcbec21b2abcb1c29b2abcb9c25b2abcb5c2db2abcbdc23b2abcb3c2bb2abcbbc27b2abcb7c2fb2abcbfc2072a7cb0c2872a7cb8c2472a7cb4c2c72a7cbcc2272a7cb2c2a72a7cbac2672a7cb6c2e72a7cbec2172a7cb1c2972a7cb9c2572a7cb5c2d72a7cbdc2372a7cb3c2b72a7cbbc2772a7cb7c2f72a7cbfc20f2afcb0c28f2afcb8c24f2afcb4c2cf2afcbcc22f2afcb2c2af2afcbac26f2afcb6c2ef2afcbec21f2afcb1c29f2afcb9c25f2afcb5c2df2afcbdc23f2afcb3c2bf2afcbbc27f2afcb7c2ff2a1c52e1d00a875538bcc211158eac705485a32b1c53e1d80ac7a971dc1ac7ab71fc1a27a871c21a27aa71e21a27a971d21a27ab71f21aa7a871ca1aa7aa71ea1aa7a971da1aa7ab71fa1a67a871c61a67aa71e61a67a971d61a67ab71f61ae7a871ce1ae7aa71ee1ae7a971de1ae7ab71fe1a17a871c11a17aa71e11a17a971d11a17ab71f11a97a871c91a97aa71e91a97a9911a97ad71b91a97af71851a57ac71a51a57ae71951a57ad71b51a57af718d1ad7ac71ad1ad7ae719d1ad7ad71bd1ad7af71831a37ac71a31a37ae71931a37ad71b31a37af718b1ab7ac71ab1ab7ae719b1ab7ad71bb1ab7af71871a77ac71a71a77ae71971a77ad71b71a77af718f1af7ac71af1af7ae719f1af7ad71bf1af7aff1801a0facf1a01a0faef1901a0fadf1b01a0faff1881a8facf1a81a8faef1981a8fadf1b81a8faff1841a4facf1a41a4faef1941a4fadd11a4fabf1f41acfa8f1cc1acfaaf1ec1acfa9f1dc1a0735063586354635c6352635a6356635e635163596355635d6353635b6357635f6359e57e3f9355e50e385355e54e3c5355e52e3a5355e56e3e5355e51e395355e55e3d5355e53e3b5355e57e3f535de50e38d35de54e3cd35de52e3ad35de56e3ed35de51e39d35de55e3dd35de53e3bd35de57e3fd353e50e383353e54e3c3353e52e3a3353e56e3e3353e51e393353e55e3d3353e53e3b3353e57e3f335be50e38b35be54e3cb35be52e3ab35be56e3eb35be51e39b35be55e3db35be53e3bb35be57e3fb357e50e387357e54e3c7357e52e3a7357e56e3e7357e51e397357e55e3d7357e53e3b7357e57e3f735fe50e38f35fe54e3cf35fe52e3af35fe56e3ef35fe51e39f35fe55e3df35fe53e3bf35fe57e3901a87d638acc6e1358ea871648da36a1c5de3981ac7d6384e83e336385e83e337384183133638518313373849839336385983933738458353363855835337384d83d336385d83d33738438333363853833337384b83b336385b83b33738478373363857837337384f83f336385f83f337b840830b36b850830b37b848838b36b858838b37b844834b36b854834b37b84c8334b86c83cb35b87c832b34b862832b35b87283ab34b86a83ab35b87a836b34b866836b35b87683eb34b86e83eb35b87e831b34b861831b35b871839b34b869839b35b879835b34b865835b35b87583db34b86d83db35b87d833b34b863833b35b87383bb34b86b83bb35b87b837b34b867837b35b87783fb34b86f83fb35b87f83073478608307357870838734786883873578788347347864834735787483c734786c83c735787c8327347862832735787283a734786a", 0x1f89) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x0, &(0x7f0000000180), 0x0}, 0x94) 13.478393436s ago: executing program 4 (id=1215): socket$packet(0x11, 0xa, 0x300) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x527c, &(0x7f0000000300)={0x0, 0x78b6, 0x400, 0x3, 0x2b3}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYBLOB="c1ce36541ae632f72e869ed958f41d0cd963affe55f37ddaed2d99cad4bcde5f448934a4dd2dd9c0696b76947c2d07f60bee543f72f20dcab6db2237a25e671474e0c1b5ada3dbef7eb6983dbd25b49014110b3c213b37782daa06fc891be573d92db16a6fa4f75be622df2a67048f17959eaba05105d9bde0e4a933b7fbe3707d3fc90e6a1ec788f81996bd252585c53b44addd84f9732606a43115f19480eb07741b000000000000", @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="20b1229acac877a58ef8dab4fb7a", @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x55e, &(0x7f0000001080)="$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") socket$inet6(0xa, 0x2, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x88) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2], 0x20) 13.477912092s ago: executing program 0 (id=1216): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000000280)=[@request_freeze={0x400c6313, 0x5, 0x1}], 0x22e, 0x0, &(0x7f0000000540)}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) close_range(r5, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 12.290007329s ago: executing program 0 (id=1218): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x80000}) shutdown(0xffffffffffffffff, 0x2) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = syz_create_resource$futex(0x0) clock_gettime(0x0, 0x0) futex(r4, 0x0, 0x1, 0x0, r4, 0x1) uname(0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000540)=0x1) 12.102140438s ago: executing program 3 (id=1220): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, &(0x7f00000000c0)='size=4G\x00') socket(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) mq_open(0x0, 0x42, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x143102) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000340)='cramfs\x00', 0x0) mkdir(0x0, 0x80) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x401, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0xfd, 0x2d9, &(0x7f0000002600)="$eJzs3c9qE18UwPHTtGmTlDZZ/PiBgvSgG90MbXyCIC2IAaU2RV0IUzvRkDEpmRiJiNWVW3e+Q3HpTrC+QDfu3IubIggu7EI6kkzGTOO0NrVp0vb7gTK3c++Ze+cP4cyQudm89ephMe8YebMqkZhKTERkSyQlEfHEZbVVaqwZklEJei6Xxn+4rnv7zrVMNjs7rzqXWbicVtXJqfePn745/6E6vvh28t2YbKTubn5Lf974f+PM5vaCv/Vy9YXoUrlcNZdsS5cLTtFQvWFbpmNpoeRYlaqa7fq8XV5ZqatZWp5IrFQsx1GzVNeiVddqWauVupr3zUJJDcPQiYScNsN7VcbDVubW5ufNTFedRLocFI5S6FmuVDLmcGhlbu0oBgUAAAZLZ/4faaT0O/L/Rs7v2S3///7p3M1u8/8HBUcLjpbKO/L7P/P/iJD/904z/98OTRpxMkQbNwAZMxF660b+DwAAAAAAAAAAAAAAAAAAAADAcbDluknXdZP+0v8bE5GYbMe8Vm6y3+NEb+x9/kX8/wMhQ30cLg5Z4MW9mIj9spar5bylV5/JS0FssWQ6KvKzeT20eOW5q9nZaW1Kybq92opvviQ45sf7UuHxM168BuJXa7moJIL9pyUp/4XHpzvioyJSy43KxQuBeEOS8vGelMWW5eZ13Y5/NqN65Xq2o/94sx0AAAAAACeBob+ldt7/erNJGob604Z01Hsr288HJPmX5wMq66PSjh+RsyP9228AAAAAAE4Tp/6kaNq2VTl4YWrxn8IHoBCX7qMO5dAds4LR+jrYno1d123+YMw+t/w6LrJLVUR2rep14auIDMABP+xr7Msj7wTup3E/P5UAAAAA9EI76e/3SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL32O3mY3/4gc48Fuhvuz14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg+FXAAAA///xbBZn") r1 = openat(0xffffffffffffff9c, &(0x7f0000002940)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000002980)={@id={0x2, 0x0, @c}}) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='hpfs\x00', 0x20920d1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002500)={'ip6gre0\x00', 0x0}) socket(0xb, 0x800, 0x0) 11.129010513s ago: executing program 0 (id=1221): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7fffdffff000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, 0x0, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x381}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) r9 = msgget$private(0x0, 0x2) msgsnd(r9, 0x0, 0x0, 0x800) 10.871483153s ago: executing program 3 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f000000bc00)=""/102392, 0x18ff8) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x2004c884) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r4, &(0x7f0000000540), 0x800001d, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000024d40)=0x100000001, 0x4) 10.763612912s ago: executing program 5 (id=1224): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000019480), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000194c0)={0x48}) 9.348940993s ago: executing program 3 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(0xffffffffffffffff, 0x80705864, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendmsg$nl_netfilter(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x10) write$binfmt_elf64(r4, 0x0, 0x540) shutdown(r3, 0x1) 9.21149163s ago: executing program 0 (id=1226): syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 9.189944717s ago: executing program 5 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000004400010029bd70000400000002000000040048809c00018008007700", @ANYRES32=0x0, @ANYBLOB="900022808900d98078003c807100200029ff9b3009a4ab5b7d5986cd2ba2c85b6ed1896451f8ef9a87626ab2c28a09b36184b6efeb4dfc2a4be3b2be8914a0390a9aac1a6d0999e48272818f5df67453c214c6de31379c14c3265826decab2050b6a7e2865c6dc16562b4a6afb54f0bb7a21b122e0c713c08af2511e3600000004000a007d08006700", @ANYRES32=r0, @ANYBLOB="000400"], 0xb4}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) 7.401425121s ago: executing program 4 (id=1228): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r1 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) execveat$binfmt(r0, r1, 0x0, 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$proc_mixer(r2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f00000001c0)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.219290351s ago: executing program 0 (id=1229): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f0000000080)="d84f7398", 0x4) sendto$inet6(r3, &(0x7f0000000540)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643", 0x531, 0x0, &(0x7f0000000b00)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4084010) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x40684a5}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000003500)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 6.351993386s ago: executing program 5 (id=1230): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(0x0, 0x2, 0x842) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x80) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 4.454921267s ago: executing program 4 (id=1231): prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001840)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001880)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000018c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001900), 0x0, 0x0) read$msr(r3, &(0x7f0000008100)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000001bc0), 0x42300, 0x0) prlimit64(0x0, 0x7, &(0x7f0000001c00), 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000001c40)=0x800001c) sched_setaffinity(r2, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) 2.4318972s ago: executing program 4 (id=1232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x800, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) tee(r1, r0, 0x1, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004180)='smaps_rollup\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x87, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x4d, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x4d, 0x0, @opaque="a81fb3389d88eb8f3fae7d777ea548afb3252628f4ccae0b3cf61c7df92a25c9175dd33983d7f7e3b4001753d0f4180d995a9c05a31b632af3b0ba4828eb7d4c5853794357"}}}}}}, 0x0) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) io_uring_enter(r6, 0x2219, 0x1adf, 0x16, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x18, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10010, r6, 0xbf860000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x42) 2.13440522s ago: executing program 5 (id=1233): clock_gettime(0x7, 0x0) io_setup(0x6, 0x0) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000100), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000806bbbbbbbbbbbbaa8159aaaaaaaa2986dd6d002008001011ff20010000000000000000000000000000ff0200000000000000000000000000014f194e200010907882080001167bb59e"], 0x4a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 633.690534ms ago: executing program 5 (id=1234): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x80000}) shutdown(0xffffffffffffffff, 0x2) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r5 = syz_create_resource$futex(0x0) clock_gettime(0x0, 0x0) futex(r5, 0x0, 0x1, 0x0, r5, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) 370.85665ms ago: executing program 5 (id=1235): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x80000, 0x8, 0x1}, 0x18) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_read_part_table(0x106a, &(0x7f0000002d00)="$eJzs0LtNxjAUBeDzg/MCwRxsQM0y1FkAIlZgCOZiB2owykMo6ZHSfF/j4+vrhxxO9XG3jlMyjEm6w+r7X2r35askl/4yxz5lyPSW1GWan7pael4ev57yWb+32nOyNDVJhjk8dH3S3OZ6d/Z8UXm9b5OxliS1Hh9ccrPtTvnXnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8/wGAAD//39wHQk=") ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) symlinkat(&(0x7f0000000440)='./sys\x00', 0xffffffffffffff9c, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000001500)={0x10000000, 0x1c6a8b68, 0x6}) write(0xffffffffffffffff, &(0x7f00000016c0)='usbip', 0x5) openat(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001780)='./config\x00', &(0x7f00000017c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001880)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0x17e) mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000001980)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000019c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001b40)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) symlinkat(&(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c40)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') 0s ago: executing program 0 (id=1236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) getpgid(0x0) write(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) kernel console output (not intermixed with test programs): nvalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.649871][ T7730] loop5: detected capacity change from 0 to 8 [ 281.702953][ T7730] SQUASHFS error: zlib decompression failed, data probably corrupt [ 281.702990][ T7730] SQUASHFS error: Failed to read block 0x9b: -5 [ 281.703005][ T7730] SQUASHFS error: Unable to read metadata cache entry [99] [ 281.703020][ T7730] SQUASHFS error: Unable to read inode 0x127 [ 282.197686][ T7732] loop5: detected capacity change from 0 to 4096 [ 282.225336][ T7732] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 282.628673][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 282.662814][ T7732] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 284.257871][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 286.461575][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.641487][ T7467] team0: Port device team_slave_0 added [ 286.647324][ T7467] team0: Port device team_slave_1 added [ 286.719032][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.719052][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.719082][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.728833][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.728849][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.728878][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.267041][ T7467] hsr_slave_0: entered promiscuous mode [ 288.275118][ T7467] hsr_slave_1: entered promiscuous mode [ 289.441965][ T7767] loop1: detected capacity change from 0 to 512 [ 289.641308][ T7767] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 290.178289][ T7767] EXT4-fs (loop1): 1 truncate cleaned up [ 290.233545][ T7767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.979399][ T31] audit: type=1800 audit(1792152235.087:133): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.459" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 291.038016][ T7786] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.459: invalid indirect mapped block 4294967295 (level 1) [ 291.057211][ T7786] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.459: invalid indirect mapped block 65535 (level 2) [ 291.286272][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.379986][ T5907] IPVS: stop unused estimator thread 0... [ 291.668178][ T7788] loop5: detected capacity change from 0 to 4096 [ 291.681670][ T7788] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 292.550440][ T7788] ntfs3(loop5): ino=19, mi_enum_attr [ 292.550689][ T7788] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 292.620637][ T7788] ntfs3(loop5): ino=18, mi_enum_attr [ 292.642365][ T7788] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 292.698496][ T7467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.719922][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.721193][ T7467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.761165][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.770973][ T7467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 292.821950][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.824919][ T7467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 292.879033][ T7467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 294.278172][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.363099][ T7467] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.397814][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.397909][ T5907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.449146][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 294.451374][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.451478][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.121111][ T7838] comedi comedi3: board detection failed [ 302.871445][ T7863] Cannot find del_set index 4 as target [ 303.993216][ T7883] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 304.010391][ T31] audit: type=1800 audit(1792152248.337:134): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.478" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 304.338735][ T7883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.423220][ T7890] gretap1: entered promiscuous mode [ 304.454673][ T7890] bond2: (slave gretap1): making interface the new active one [ 304.484330][ T7890] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 304.629487][ T7892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.660067][ T7892] bond2: (slave bond3): Enslaving as an active interface with a down link [ 304.863431][ T31] audit: type=1326 audit(1792152249.187:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.3.481" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef7bb9e559 code=0x0 [ 305.538870][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 305.656721][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.699470][ T7915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.815239][ T5627] Bluetooth: hci5: unexpected event for opcode 0x041c [ 306.189691][ T7930] loop4: detected capacity change from 0 to 512 [ 306.193974][ T7930] ext3: Unknown parameter 'fscontext' [ 308.010780][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.023831][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.024502][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.029001][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.031337][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.484908][ T7960] syz.1.492 (7960): /proc/7954/oom_adj is deprecated, please use /proc/7954/oom_score_adj instead. [ 309.796996][ T7972] trusted_key: encrypted_key: insufficient parameters specified [ 310.652523][ T5622] Bluetooth: hci4: command tx timeout [ 311.541293][ T7988] loop5: detected capacity change from 0 to 8 [ 311.608809][ T7990] ecryptfs: Unknown parameter '³(' [ 313.428257][ T5622] Bluetooth: hci4: command tx timeout [ 313.558242][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 313.588984][ T7986] ip_tables: iptables: counters copy to user failed while replacing table [ 316.941227][ T5627] Bluetooth: hci4: command tx timeout [ 316.942751][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.942808][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.293957][ T7945] rxe_eth0 speed is unknown, defaulting to 1000 [ 317.443286][ T8032] loop0: detected capacity change from 0 to 512 [ 317.498395][ T8032] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 317.712010][ T5767] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 318.994018][ T5627] Bluetooth: hci4: command tx timeout [ 321.557927][ T65] bridge_slave_1: left allmulticast mode [ 321.557959][ T65] bridge_slave_1: left promiscuous mode [ 321.558674][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.569123][ T65] bridge_slave_0: left allmulticast mode [ 323.569155][ T65] bridge_slave_0: left promiscuous mode [ 323.569375][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.492479][ T25] libceph: connect (1)[c::]:6789 error -101 [ 329.493204][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 329.521568][ T8084] ceph: No mds server is up or the cluster is laggy [ 329.524425][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.618805][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.636987][ T65] bond0 (unregistering): Released all slaves [ 333.873342][ T65] hsr_slave_0: left promiscuous mode [ 333.891439][ T65] hsr_slave_1: left promiscuous mode [ 333.901041][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.915297][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.938968][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.5.528'. [ 333.945622][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.5.528'. [ 336.216555][ T8151] loop1: detected capacity change from 0 to 512 [ 336.453048][ T8151] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 336.453120][ T8151] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 336.453168][ T8151] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.937425][ T8151] EXT4-fs error (device loop1): ext4_init_orphan_info:619: comm syz.1.530: orphan file block 0: bad magic [ 336.937460][ T8151] loop1: lost filesystem error report for type 5 error -117 [ 336.941651][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 336.941673][ C1] EXT4-fs (loop1): initial error at time 1792152281: ext4_init_orphan_info:619 [ 336.941699][ C1] EXT4-fs (loop1): last error at time 1792152281: ext4_init_orphan_info:619 [ 336.945253][ T8151] EXT4-fs (loop1): mount failed [ 337.297858][ T5343] Process accounting resumed [ 338.608011][ T8175] loop5: detected capacity change from 0 to 1024 [ 338.623665][ T8175] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 338.625052][ T8175] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 338.663439][ T8175] EXT4-fs (loop5): invalid journal inode [ 338.663538][ T8175] EXT4-fs (loop5): can't get journal size [ 338.728218][ T8175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.631060][ T65] team0 (unregistering): Port device team_slave_1 removed [ 340.941050][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.189498][ T65] team0 (unregistering): Port device team_slave_0 removed [ 342.486627][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 342.637121][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.542'. [ 343.643075][ T8197] loop4: detected capacity change from 0 to 32768 [ 343.997072][ T8197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.543 (8197) [ 344.032384][ T8197] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 344.032417][ T8197] BTRFS info (device loop4): using sha256 checksum algorithm [ 344.209192][ T8197] BTRFS info (device loop4): enabling ssd optimizations [ 344.209224][ T8197] BTRFS info (device loop4): turning on sync discard [ 344.209243][ T8197] BTRFS info (device loop4): enabling free space tree [ 344.209264][ T8197] BTRFS info (device loop4): use zlib compression, level 3 [ 344.622543][ T31] audit: type=1800 audit(1792152288.887:136): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.543" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 346.560823][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.560937][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.561053][ T7945] bridge_slave_0: entered allmulticast mode [ 346.610333][ T7945] bridge_slave_0: entered promiscuous mode [ 346.626036][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.626306][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.626437][ T7945] bridge_slave_1: entered allmulticast mode [ 346.646779][ T7945] bridge_slave_1: entered promiscuous mode [ 346.683720][ T5613] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 348.749032][ T7945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.112834][ T7945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.272009][ T8261] loop1: detected capacity change from 0 to 4096 [ 349.335507][ T8266] loop5: detected capacity change from 0 to 1024 [ 349.767250][ T8268] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.888162][ T7945] team0: Port device team_slave_0 added [ 350.913299][ T7945] team0: Port device team_slave_1 added [ 353.221083][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.560'. [ 353.867714][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.867745][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.867773][ T7945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.930256][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.930277][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.930306][ T7945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.999412][ T8302] overlayfs: failed to clone upperpath [ 357.224661][ T7945] hsr_slave_0: entered promiscuous mode [ 357.238642][ T7945] hsr_slave_1: entered promiscuous mode [ 361.251201][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 364.541952][ T8336] netlink: 40 bytes leftover after parsing attributes in process `syz.5.561'. [ 364.571232][ T31] audit: type=1326 audit(1792152308.897:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.5.561" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b6319e559 code=0x0 [ 365.016977][ T7945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.044929][ T7945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.046554][ T7945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.089389][ T7945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.094224][ T7945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.147383][ T8353] xt_hashlimit: size too large, truncated to 1048576 [ 365.150069][ T7945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 365.172443][ T7945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.205789][ T7945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.636408][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.282125][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.299915][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.315751][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.319213][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.319869][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.587104][ T8397] netlink: 14 bytes leftover after parsing attributes in process `syz.0.573'. [ 374.480285][ T8397] batman_adv: batadv0: Removing interface: dummy0 [ 375.171807][ T5627] Bluetooth: hci6: command tx timeout [ 376.251229][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.588'. [ 376.923879][ T8445] futex_wake_op: syz.3.590 tries to shift op by 144; fix this program [ 377.222230][ T5627] Bluetooth: hci6: command tx timeout [ 377.878965][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.879030][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.054409][ T31] audit: type=1326 audit(1792152322.387:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.054472][ T31] audit: type=1326 audit(1792152322.387:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.087368][ T31] audit: type=1326 audit(1792152322.387:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.140862][ T31] audit: type=1326 audit(1792152322.477:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.155149][ T31] audit: type=1326 audit(1792152322.477:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.159877][ T31] audit: type=1326 audit(1792152322.477:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.824140][ T31] audit: type=1326 audit(1792152323.147:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.824188][ T31] audit: type=1326 audit(1792152323.147:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.824225][ T31] audit: type=1326 audit(1792152322.477:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 378.824261][ T31] audit: type=1326 audit(1792152323.147:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8448 comm="syz.0.592" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb78739e559 code=0x7ffc0000 [ 379.294022][ T6909] IPVS: starting estimator thread 0... [ 379.311781][ T5627] Bluetooth: hci6: command tx timeout [ 379.403303][ T8457] IPVS: using max 32 ests per chain, 76800 per kthread [ 380.513313][ T8395] rxe_eth0 speed is unknown, defaulting to 1000 [ 380.539033][ T8472] loop0: detected capacity change from 0 to 2048 [ 380.549103][ T8475] loop5: detected capacity change from 0 to 128 [ 380.681153][ T8475] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.683279][ T8475] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.759038][ T8472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.680615][ T5627] Bluetooth: hci6: command tx timeout [ 381.689460][ T8479] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 381.908161][ T5612] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.942772][ T8487] udevd[8487]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 382.005176][ T8491] loop4: detected capacity change from 0 to 128 [ 382.224874][ T8492] udevd[8492]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 382.365426][ T8492] udevd[8492]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 383.071153][ T8469] udevd[8469]: inotify_add_watch(7, /dev/loop5, 10) failed: No such file or directory [ 384.172114][ T6918] bridge_slave_1: left allmulticast mode [ 384.172145][ T6918] bridge_slave_1: left promiscuous mode [ 384.172360][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.729476][ T6918] bridge_slave_0: left allmulticast mode [ 384.729606][ T6918] bridge_slave_0: left promiscuous mode [ 384.730376][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.264132][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.603'. [ 387.223640][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.322696][ T8529] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 388.570389][ T5627] Bluetooth: hci3: unexpected event 0x2f length: 509 > 255 [ 388.593635][ T8543] jffs2: notice: (8543) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 389.196656][ T6918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.213230][ T6918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.256054][ T6918] bond0 (unregistering): Released all slaves [ 389.402396][ T8529] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 390.194010][ T8562] loop4: detected capacity change from 0 to 4096 [ 392.708045][ T8578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'. [ 394.040413][ T8582] batman_adv: batadv0: Adding interface: dummy0 [ 394.040433][ T8582] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.040467][ T8582] batman_adv: batadv0: Interface activated: dummy0 [ 394.073647][ T8586] batadv0: mtu less than device minimum [ 394.075207][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.076718][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.078234][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.079748][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.081260][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.082805][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.084316][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.085830][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 394.087343][ T8586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 398.189322][ T8601] gretap1: entered promiscuous mode [ 398.380843][ T6918] hsr_slave_0: left promiscuous mode [ 398.411484][ T6918] hsr_slave_1: left promiscuous mode [ 398.418137][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.493420][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.973016][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'. [ 400.050388][ T6918] team0 (unregistering): Port device team_slave_1 removed [ 400.236122][ T6918] team0 (unregistering): Port device team_slave_0 removed [ 401.606350][ T8644] FAULT_INJECTION: forcing a failure. [ 401.606350][ T8644] name failslab, interval 1, probability 0, space 0, times 0 [ 401.606393][ T8644] CPU: 0 UID: 0 PID: 8644 Comm: syz.5.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.606426][ T8644] Tainted: [L]=SOFTLOCKUP [ 401.606436][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.606451][ T8644] Call Trace: [ 401.606461][ T8644] [ 401.606472][ T8644] dump_stack_lvl+0xe8/0x150 [ 401.606516][ T8644] should_fail_ex+0x410/0x560 [ 401.606558][ T8644] should_failslab+0xa8/0x100 [ 401.606594][ T8644] ? pidfs_register_pid_gfp+0xab/0x1c0 [ 401.606635][ T8644] kmem_cache_alloc_noprof+0xa1/0x600 [ 401.606666][ T8644] ? pidfs_register_pid_gfp+0xab/0x1c0 [ 401.606713][ T8644] pidfs_register_pid_gfp+0xab/0x1c0 [ 401.606757][ T8644] unix_stream_connect+0x277/0x1060 [ 401.606792][ T8644] ? __sock_create+0x86f/0x9d0 [ 401.606846][ T8644] p9_fd_create_unix+0x289/0x4f0 [ 401.606879][ T8644] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 401.606924][ T8644] ? __kmalloc_cache_noprof+0x321/0x600 [ 401.606955][ T8644] ? __kmalloc_cache_noprof+0x14d/0x600 [ 401.606995][ T8644] p9_client_create+0x3e5/0xc60 [ 401.607038][ T8644] ? __pfx_p9_client_create+0x10/0x10 [ 401.607086][ T8644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.607129][ T8644] v9fs_session_init+0x46/0xd40 [ 401.607158][ T8644] ? __kmalloc_cache_noprof+0x14d/0x600 [ 401.607187][ T8644] ? v9fs_get_tree+0xaa/0xac0 [ 401.607219][ T8644] ? v9fs_get_tree+0xaa/0xac0 [ 401.607260][ T8644] v9fs_get_tree+0xbd/0xac0 [ 401.607292][ T8644] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 401.607327][ T8644] ? __pfx_v9fs_get_tree+0x10/0x10 [ 401.607367][ T8644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.607404][ T8644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.607439][ T8644] vfs_get_tree+0x92/0x2a0 [ 401.607472][ T8644] do_new_mount+0x325/0xb00 [ 401.607511][ T8644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.607547][ T8644] ? __pfx_do_new_mount+0x10/0x10 [ 401.607587][ T8644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.607616][ T8644] ? ns_capable+0x89/0xe0 [ 401.607653][ T8644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.607683][ T8644] ? path_mount+0x647/0x1050 [ 401.607724][ T8644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.607753][ T8644] ? user_path_at+0xd4/0x160 [ 401.607784][ T8644] __se_sys_mount+0x31d/0x420 [ 401.607836][ T8644] ? __pfx___se_sys_mount+0x10/0x10 [ 401.607883][ T8644] ? srso_alias_return_thunk+0x5/0xfbef5 [ 401.607912][ T8644] ? __x64_sys_mount+0x20/0xc0 [ 401.607954][ T8644] do_syscall_64+0x166/0x520 [ 401.607983][ T8644] ? trace_irq_disable+0x3b/0x140 [ 401.608012][ T8644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.608044][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.608069][ T8644] RIP: 0033:0x7f0b6319e559 [ 401.608092][ T8644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.608112][ T8644] RSP: 002b:00007f0b640fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 401.608139][ T8644] RAX: ffffffffffffffda RBX: 00007f0b63425fa0 RCX: 00007f0b6319e559 [ 401.608158][ T8644] RDX: 0000200000000700 RSI: 00002000000006c0 RDI: 0000200000000680 [ 401.608176][ T8644] RBP: 00007f0b632358b0 R08: 0000200000000740 R09: 0000000000000000 [ 401.608193][ T8644] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 401.608209][ T8644] R13: 00007f0b63426038 R14: 00007f0b63425fa0 R15: 00007ffef2467d68 [ 401.608249][ T8644] [ 401.610661][ T8644] 9pnet_fd: p9_fd_create_unix (8644): problem connecting socket: ./proc/thread-self/fail-nth: -12 [ 406.717163][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.717296][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.717505][ T8395] bridge_slave_0: entered allmulticast mode [ 406.753602][ T8395] bridge_slave_0: entered promiscuous mode [ 406.784771][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.786474][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.786614][ T8395] bridge_slave_1: entered allmulticast mode [ 406.804583][ T8395] bridge_slave_1: entered promiscuous mode [ 406.861141][ T8692] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 408.352110][ T8695] FAULT_INJECTION: forcing a failure. [ 408.352110][ T8695] name failslab, interval 1, probability 0, space 0, times 0 [ 408.352151][ T8695] CPU: 1 UID: 60928 PID: 8695 Comm: syz.4.647 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.352185][ T8695] Tainted: [L]=SOFTLOCKUP [ 408.352194][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 408.352209][ T8695] Call Trace: [ 408.352219][ T8695] [ 408.352230][ T8695] dump_stack_lvl+0xe8/0x150 [ 408.352273][ T8695] should_fail_ex+0x410/0x560 [ 408.352316][ T8695] should_failslab+0xa8/0x100 [ 408.352356][ T8695] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 408.352389][ T8695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.352420][ T8695] ? register_pidns_sysctls+0x43/0x1e0 [ 408.352448][ T8695] ? register_pidns_sysctls+0x43/0x1e0 [ 408.352485][ T8695] kmemdup_noprof+0x2b/0x70 [ 408.352520][ T8695] register_pidns_sysctls+0x43/0x1e0 [ 408.352553][ T8695] copy_pid_ns+0x51e/0x900 [ 408.352593][ T8695] ? __pfx_copy_pid_ns+0x10/0x10 [ 408.352622][ T8695] ? rcu_is_watching+0x16/0xb0 [ 408.352656][ T8695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.352688][ T8695] ? __pfx_copy_mnt_ns+0x10/0x10 [ 408.352735][ T8695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.352765][ T8695] ? copy_ipcs+0x2a9/0x6c0 [ 408.352797][ T8695] ? srso_alias_return_thunk+0x5/0xfbef5 [ 408.352832][ T8695] ? copy_utsname+0x184/0x620 [ 408.352861][ T8695] create_new_namespaces+0x2ad/0x6b0 [ 408.352902][ T8695] ? security_capable+0x7e/0x2c0 [ 408.352949][ T8695] unshare_nsproxy_namespaces+0x149/0x190 [ 408.352990][ T8695] ksys_unshare+0x5d8/0x970 [ 408.353037][ T8695] ? __pfx_ksys_unshare+0x10/0x10 [ 408.353076][ T8695] ? rcu_is_watching+0x16/0xb0 [ 408.353124][ T8695] __x64_sys_unshare+0x38/0x50 [ 408.353163][ T8695] do_syscall_64+0x166/0x520 [ 408.353193][ T8695] ? trace_irq_disable+0x3b/0x140 [ 408.353222][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.353255][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.353281][ T8695] RIP: 0033:0x7f032499e559 [ 408.353304][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.353324][ T8695] RSP: 002b:00007f03258f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 408.353347][ T8695] RAX: ffffffffffffffda RBX: 00007f0324c26180 RCX: 00007f032499e559 [ 408.353363][ T8695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 408.353379][ T8695] RBP: 00007f0324a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 408.353395][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.353410][ T8695] R13: 00007f0324c26218 R14: 00007f0324c26180 R15: 00007ffe35ff7a28 [ 408.353451][ T8695] [ 410.598467][ T8692] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 410.652253][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.656655][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.740029][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.740662][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.741353][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.995851][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 411.000924][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.795162][ T8395] team0: Port device team_slave_0 added [ 411.833603][ T8395] team0: Port device team_slave_1 added [ 412.697850][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.697871][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.697941][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.746309][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.746328][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.746364][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.356960][ T31] kauditd_printk_skb: 107 callbacks suppressed [ 413.356982][ T31] audit: type=1800 audit(1792152357.687:255): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.655" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 413.542053][ T5627] Bluetooth: hci4: command tx timeout [ 413.564033][ T8395] hsr_slave_0: entered promiscuous mode [ 413.570801][ T8395] hsr_slave_1: entered promiscuous mode [ 415.034904][ T5618] syz_tun (unregistering): left allmulticast mode [ 415.034934][ T5618] syz_tun (unregistering): left promiscuous mode [ 415.035107][ T5618] bridge0: port 4(syz_tun) entered disabled state [ 415.598769][ T8764] loop0: detected capacity change from 0 to 512 [ 415.624772][ T8764] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 415.625126][ T5627] Bluetooth: hci4: command tx timeout [ 415.670299][ T8764] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.661: bad orphan inode 13 [ 415.670333][ T8764] loop0: lost filesystem error report for type 5 error -117 [ 415.671609][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 415.671631][ C0] EXT4-fs (loop0): last error at time 1792152359: ext4_orphan_get:1429 [ 415.674881][ T8764] ext4_test_bit(bit=12, block=18) = 1 [ 415.674900][ T8764] is_bad_inode(inode)=0 [ 415.674910][ T8764] NEXT_ORPHAN(inode)=0 [ 415.674919][ T8764] max_ino=32 [ 415.674929][ T8764] i_nlink=1 [ 415.682801][ T8764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 416.922428][ T8770] loop4: detected capacity change from 0 to 2048 [ 416.930935][ T8768] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 417.037909][ T8770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.755602][ T5627] Bluetooth: hci4: command tx timeout [ 419.782180][ T5627] Bluetooth: hci4: command tx timeout [ 420.440026][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 420.825621][ T8705] rxe_eth0 speed is unknown, defaulting to 1000 [ 423.189860][ T8818] Bluetooth: ISO socket layer initialized [ 423.194011][ T8818] FAULT_INJECTION: forcing a failure. [ 423.194011][ T8818] name failslab, interval 1, probability 0, space 0, times 0 [ 423.194049][ T8818] CPU: 1 UID: 0 PID: 8818 Comm: syz.0.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.194082][ T8818] Tainted: [L]=SOFTLOCKUP [ 423.194091][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 423.194106][ T8818] Call Trace: [ 423.194116][ T8818] [ 423.194126][ T8818] dump_stack_lvl+0xe8/0x150 [ 423.194169][ T8818] should_fail_ex+0x410/0x560 [ 423.194210][ T8818] ? alloc_slab_obj_exts+0x5c/0x180 [ 423.194237][ T8818] should_failslab+0xa8/0x100 [ 423.194275][ T8818] ? alloc_slab_obj_exts+0x5c/0x180 [ 423.194300][ T8818] __kmalloc_flags_noprof+0x128/0x7a0 [ 423.194335][ T8818] ? alloc_slab_obj_exts+0x5c/0x180 [ 423.194370][ T8818] alloc_slab_obj_exts+0x5c/0x180 [ 423.194400][ T8818] __memcg_slab_post_alloc_hook+0x60b/0xd90 [ 423.194458][ T8818] __kmalloc_noprof+0x3d4/0x720 [ 423.194488][ T8818] ? __kmalloc_noprof+0x1ab/0x720 [ 423.194515][ T8818] ? __register_sysctl_table+0x6f/0x1370 [ 423.194547][ T8818] ? __register_sysctl_table+0x6f/0x1370 [ 423.194588][ T8818] __register_sysctl_table+0x6f/0x1370 [ 423.194624][ T8818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.194655][ T8818] ? __asan_memcpy+0x40/0x70 [ 423.194689][ T8818] register_pidns_sysctls+0xff/0x1e0 [ 423.194723][ T8818] copy_pid_ns+0x51e/0x900 [ 423.194763][ T8818] ? __pfx_copy_pid_ns+0x10/0x10 [ 423.194791][ T8818] ? rcu_is_watching+0x16/0xb0 [ 423.194825][ T8818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.194858][ T8818] ? __pfx_copy_mnt_ns+0x10/0x10 [ 423.194911][ T8818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.194940][ T8818] ? copy_ipcs+0x2a9/0x6c0 [ 423.194973][ T8818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 423.195003][ T8818] ? copy_utsname+0x184/0x620 [ 423.195032][ T8818] create_new_namespaces+0x2ad/0x6b0 [ 423.195073][ T8818] ? security_capable+0x7e/0x2c0 [ 423.195119][ T8818] unshare_nsproxy_namespaces+0x149/0x190 [ 423.195161][ T8818] ksys_unshare+0x5d8/0x970 [ 423.195208][ T8818] ? __pfx_ksys_unshare+0x10/0x10 [ 423.195247][ T8818] ? rcu_is_watching+0x16/0xb0 [ 423.195295][ T8818] __x64_sys_unshare+0x38/0x50 [ 423.195334][ T8818] do_syscall_64+0x166/0x520 [ 423.195364][ T8818] ? trace_irq_disable+0x3b/0x140 [ 423.195393][ T8818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.195426][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.195452][ T8818] RIP: 0033:0x7fb78739e559 [ 423.195474][ T8818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.195494][ T8818] RSP: 002b:00007fb7881eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 423.195521][ T8818] RAX: ffffffffffffffda RBX: 00007fb787626180 RCX: 00007fb78739e559 [ 423.195540][ T8818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 423.195555][ T8818] RBP: 00007fb7874358b0 R08: 0000000000000000 R09: 0000000000000000 [ 423.195571][ T8818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.195587][ T8818] R13: 00007fb787626218 R14: 00007fb787626180 R15: 00007ffd6e13e668 [ 423.195627][ T8818] [ 423.923367][ T5627] Bluetooth: hci5: unexpected event for opcode 0x2003 [ 425.718626][ T31] audit: type=1326 audit(1792152370.037:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.718688][ T31] audit: type=1326 audit(1792152370.037:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.718736][ T31] audit: type=1326 audit(1792152370.037:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.718785][ T31] audit: type=1326 audit(1792152370.037:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.718833][ T31] audit: type=1326 audit(1792152370.037:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.718882][ T31] audit: type=1326 audit(1792152370.037:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.718931][ T31] audit: type=1326 audit(1792152370.037:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.718979][ T31] audit: type=1326 audit(1792152370.047:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.719028][ T31] audit: type=1326 audit(1792152370.047:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.719078][ T31] audit: type=1326 audit(1792152370.047:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8828 comm="syz.4.675" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 425.807874][ T8834] loop4: detected capacity change from 0 to 256 [ 428.005413][ T50] dummy0: left allmulticast mode [ 428.006177][ T50] dummy0: left promiscuous mode [ 428.006402][ T50] bridge0: port 3(dummy0) entered disabled state [ 428.485662][ T8851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.680'. [ 428.503091][ T50] bridge_slave_1: left allmulticast mode [ 428.503117][ T50] bridge_slave_1: left promiscuous mode [ 428.511686][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.559423][ T50] bridge_slave_0: left allmulticast mode [ 428.559443][ T50] bridge_slave_0: left promiscuous mode [ 428.559589][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.717694][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.739952][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.751818][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.756325][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.758875][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.944615][ T50] pimreg: left allmulticast mode [ 429.156976][ T8861] netlink: 'syz.4.682': attribute type 30 has an invalid length. [ 430.410454][ T8875] netlink: 'syz.5.664': attribute type 1 has an invalid length. [ 430.476630][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.477657][ T8878] netlink: 'syz.3.683': attribute type 1 has an invalid length. [ 430.480396][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.481338][ T50] bond0 (unregistering): Released all slaves [ 430.549785][ T8879] gretap1: entered promiscuous mode [ 430.739343][ T8875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.803336][ T8878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.822762][ T5622] Bluetooth: hci2: command tx timeout [ 432.511265][ T8890] loop4: detected capacity change from 0 to 8 [ 433.798104][ T5622] Bluetooth: hci2: command tx timeout [ 435.766789][ T8908] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop0": -EINTR [ 435.770226][ T1972] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 1 [ 435.919517][ T5622] Bluetooth: hci2: command tx timeout [ 436.441879][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 436.671753][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 436.689506][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 436.705538][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 436.705750][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.033350][ T10] usb 1-1: config 0 descriptor?? [ 437.315448][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.692'. [ 437.943935][ T5622] Bluetooth: hci2: command tx timeout [ 439.213060][ T8853] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.332215][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.332282][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.391511][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 439.391758][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 439.435776][ T50] hsr_slave_0: left promiscuous mode [ 439.452887][ T50] hsr_slave_1: left promiscuous mode [ 439.453644][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.495220][ T8940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.694'. [ 439.503380][ T10] usb 1-1: USB disconnect, device number 4 [ 439.527006][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.086881][ T8945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 442.160715][ T8956] x_tables: unsorted underflow at hook 2 [ 442.929884][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.688'. [ 443.435785][ T50] team0 (unregistering): Port device team_slave_1 removed [ 443.595964][ T50] team0 (unregistering): Port device team_slave_0 removed [ 445.333864][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.703'. [ 446.962086][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 446.962118][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.962153][ T5622] Tainted: [L]=SOFTLOCKUP [ 446.962163][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 446.962179][ T5622] Workqueue: hci3 hci_rx_work [ 446.962220][ T5622] Call Trace: [ 446.962230][ T5622] [ 446.962241][ T5622] dump_stack_lvl+0xe8/0x150 [ 446.962282][ T5622] sysfs_create_dir_ns+0x271/0x2a0 [ 446.962316][ T5622] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 446.962349][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.962380][ T5622] ? do_raw_spin_unlock+0xf5/0x200 [ 446.962426][ T5622] kobject_add_internal+0x622/0xcd0 [ 446.962472][ T5622] kobject_add+0x163/0x240 [ 446.962505][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.962534][ T5622] ? preempt_schedule_thunk+0x16/0x40 [ 446.962568][ T5622] ? __pfx_kobject_add+0x10/0x10 [ 446.962600][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.962632][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.962667][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.962696][ T5622] ? get_device_parent+0x366/0x3a0 [ 446.962738][ T5622] device_add+0x3fa/0xb80 [ 446.962776][ T5622] hci_conn_add_sysfs+0xd5/0x210 [ 446.962817][ T5622] le_conn_complete_evt+0xfe3/0x16d0 [ 446.962856][ T5622] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 446.962887][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.962928][ T5622] ? __mutex_unlock_slowpath+0x731/0x900 [ 446.962964][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.962993][ T5622] ? skb_pull_data+0xf0/0x200 [ 446.963031][ T5622] hci_le_enh_conn_complete_evt+0x189/0x490 [ 446.963062][ T5622] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 446.963098][ T5622] hci_event_packet+0x67a/0xf10 [ 446.963145][ T5622] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 446.963171][ T5622] ? __pfx_hci_event_packet+0x10/0x10 [ 446.963217][ T5622] ? replace_chunk+0x940/0xb80 [ 446.963245][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.963274][ T5622] ? hci_send_to_monitor+0xe2/0x590 [ 446.963311][ T5622] hci_rx_work+0x3ee/0x1020 [ 446.963358][ T5622] ? process_scheduled_works+0x97a/0x1630 [ 446.963395][ T5622] process_scheduled_works+0xc3d/0x1630 [ 446.963431][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.963499][ T5622] ? __pfx_process_scheduled_works+0x10/0x10 [ 446.963542][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.963571][ T5622] ? assign_work+0x3cf/0x5d0 [ 446.963613][ T5622] worker_thread+0xa47/0xfb0 [ 446.963682][ T5622] kthread+0x38b/0x480 [ 446.963710][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 446.963743][ T5622] ? __pfx_kthread+0x10/0x10 [ 446.963772][ T5622] ret_from_fork+0x514/0xb70 [ 446.963803][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 446.963828][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 446.963857][ T5622] ? __switch_to+0xc89/0x1420 [ 446.963898][ T5622] ? __pfx_kthread+0x10/0x10 [ 446.963930][ T5622] ret_from_fork_asm+0x1a/0x30 [ 446.963976][ T5622] [ 446.964105][ T5622] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 446.964147][ T5622] Bluetooth: hci3: failed to register connection device [ 447.854184][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 448.149558][ T8998] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 448.300740][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.052700][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 449.861754][ T50] IPVS: stop unused estimator thread 0... [ 450.269539][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.271234][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.271372][ T8705] bridge_slave_0: entered allmulticast mode [ 450.302655][ T8705] bridge_slave_0: entered promiscuous mode [ 450.377493][ T9034] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 450.377833][ T9034] SET target dimension over the limit! [ 450.939027][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.939187][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.939330][ T8705] bridge_slave_1: entered allmulticast mode [ 450.967500][ T8705] bridge_slave_1: entered promiscuous mode [ 451.224898][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.243350][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.352662][ T9045] netlink: 20 bytes leftover after parsing attributes in process `syz.5.716'. [ 452.632103][ T8705] team0: Port device team_slave_0 added [ 452.715128][ T9057] tmpfs: Using encoding : utf8-12.1.0 [ 453.385331][ T8705] team0: Port device team_slave_1 added [ 455.268095][ T9074] mmap: syz.5.721 (9074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 456.189993][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 456.204616][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.204632][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.204662][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.179571][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.179593][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.179625][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.919537][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.920819][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.921034][ T8853] bridge_slave_0: entered allmulticast mode [ 457.989361][ T8853] bridge_slave_0: entered promiscuous mode [ 458.111378][ T9100] loop4: detected capacity change from 0 to 2048 [ 458.112582][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.112695][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.112838][ T8853] bridge_slave_1: entered allmulticast mode [ 458.117818][ T8853] bridge_slave_1: entered promiscuous mode [ 458.944408][ T9100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.944530][ T9100] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.988682][ T8705] hsr_slave_0: entered promiscuous mode [ 459.005250][ T8705] hsr_slave_1: entered promiscuous mode [ 459.007411][ T8705] debugfs: 'hsr0' already exists in 'hsr' [ 459.007432][ T8705] Cannot create hsr debugfs directory [ 459.016284][ T8853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.208547][ T8853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.608254][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.583313][ T8853] team0: Port device team_slave_0 added [ 464.591223][ T8853] team0: Port device team_slave_1 added [ 465.287124][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.287395][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.287985][ T8853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.413669][ T8853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.413689][ T8853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.413720][ T8853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.244178][ T9164] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 466.336669][ T50] bridge_slave_1: left allmulticast mode [ 466.336699][ T50] bridge_slave_1: left promiscuous mode [ 466.336921][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.363959][ T50] bridge_slave_0: left allmulticast mode [ 466.363991][ T50] bridge_slave_0: left promiscuous mode [ 466.364230][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.071221][ T9177] net_ratelimit: 11 callbacks suppressed [ 468.071245][ T9177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.024846][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.052446][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.077634][ T50] bond0 (unregistering): Released all slaves [ 470.103586][ T9190] netlink: 14 bytes leftover after parsing attributes in process `syz.0.747'. [ 470.170577][ T9164] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 470.218364][ T9165] gretap1: entered promiscuous mode [ 470.405188][ T9168] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 470.408685][ T9186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.091601][ T9187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 471.094789][ T9187] macvlan2: entered allmulticast mode [ 471.094809][ T9187] bond0: entered allmulticast mode [ 471.097131][ T9187] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 471.098604][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 471.266638][ T9189] ip6gretap1: entered allmulticast mode [ 471.285054][ T9189] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 471.296108][ T6917] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 471.337826][ T8853] hsr_slave_0: entered promiscuous mode [ 471.348048][ T8853] hsr_slave_1: entered promiscuous mode [ 471.357873][ T8853] debugfs: 'hsr0' already exists in 'hsr' [ 471.357897][ T8853] Cannot create hsr debugfs directory [ 471.408406][ T6918] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 472.361504][ T9207] loop0: detected capacity change from 0 to 1024 [ 472.398066][ T9207] hfsplus: failed to load extents file [ 473.454430][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 473.506545][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 473.508665][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 473.528646][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 473.531830][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 475.045052][ T50] hsr_slave_0: left promiscuous mode [ 475.073592][ T50] hsr_slave_1: left promiscuous mode [ 475.095774][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.123212][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.364737][ T9244] jffs2: notice: (9244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 475.452102][ T9250] netlink: 68 bytes leftover after parsing attributes in process `syz.5.745'. [ 475.939197][ T5627] Bluetooth: hci6: command tx timeout [ 476.611296][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.757'. [ 477.941639][ T5627] Bluetooth: hci6: command tx timeout [ 478.339940][ T9263] netlink: 'syz.5.759': attribute type 1 has an invalid length. [ 478.485513][ T9268] loop0: detected capacity change from 0 to 512 [ 478.683747][ T9272] loop4: detected capacity change from 0 to 512 [ 478.776242][ T50] team0 (unregistering): Port device team_slave_1 removed [ 479.130613][ T50] team0 (unregistering): Port device team_slave_0 removed [ 479.372753][ T9278] overlayfs: workdir and upperdir must be separate subtrees [ 481.354819][ T5627] Bluetooth: hci6: command tx timeout [ 483.346008][ T9263] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 483.382358][ T5627] Bluetooth: hci6: command tx timeout [ 483.402066][ T9264] gretap1: entered promiscuous mode [ 483.644980][ T9267] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 483.654301][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 484.777507][ T9330] loop4: detected capacity change from 0 to 512 [ 484.797469][ T9330] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 486.652156][ T9358] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 488.117846][ T50] bridge_slave_1: left allmulticast mode [ 488.117878][ T50] bridge_slave_1: left promiscuous mode [ 488.118108][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.155004][ T50] bridge_slave_0: left allmulticast mode [ 488.155027][ T50] bridge_slave_0: left promiscuous mode [ 488.155214][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.623347][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.697634][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.742012][ T50] bond0 (unregistering): Released all slaves [ 489.160554][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.169717][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.173812][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.175148][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.175879][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.699024][ T9217] rxe_eth0 speed is unknown, defaulting to 1000 [ 490.213748][ T9399] sd 0:0:1:0: PR command failed: 1026 [ 490.214023][ T9399] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 490.214319][ T9399] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 491.321697][ T5627] Bluetooth: hci4: command tx timeout [ 491.497231][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.785'. [ 492.851114][ T50] hsr_slave_0: left promiscuous mode [ 492.863096][ T50] hsr_slave_1: left promiscuous mode [ 493.381647][ T5627] Bluetooth: hci4: command tx timeout [ 493.661935][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.705894][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.539486][ T9433] loop0: detected capacity change from 0 to 40427 [ 494.567870][ T9433] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 494.567896][ T9433] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 494.569598][ T9433] F2FS-fs (loop0): invalid crc value [ 494.676338][ T9433] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 494.695780][ T9433] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 494.695801][ T9433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 495.732953][ T5627] Bluetooth: hci4: command tx timeout [ 497.739163][ T50] team0 (unregistering): Port device team_slave_1 removed [ 497.781660][ T5627] Bluetooth: hci4: command tx timeout [ 497.784310][ T50] team0 (unregistering): Port device team_slave_0 removed [ 498.004867][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.798'. [ 498.409916][ T9446] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 498.548225][ T5621] syz-executor: attempt to access beyond end of device [ 498.548225][ T5621] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 498.560722][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 498.560760][ T5621] Tainted: [L]=SOFTLOCKUP [ 498.560770][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 498.560785][ T5621] Call Trace: [ 498.560796][ T5621] [ 498.560806][ T5621] dump_stack_lvl+0xe8/0x150 [ 498.560850][ T5621] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 498.560898][ T5621] f2fs_write_end_bio+0x1211/0x16e0 [ 498.560934][ T5621] ? blkg_put+0x22/0x240 [ 498.560992][ T5621] __submit_merged_bio+0x258/0x6a0 [ 498.561017][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561046][ T5621] ? rcu_is_watching+0x16/0xb0 [ 498.561094][ T5621] __submit_merged_write_cond+0x3c9/0x4e0 [ 498.561147][ T5621] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 498.561205][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561244][ T5621] f2fs_write_data_pages+0x2a27/0x36f0 [ 498.561273][ T5621] ? check_noncircular+0xdb/0x150 [ 498.561305][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561377][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 498.561405][ T5621] ? is_bpf_text_address+0x26/0x2b0 [ 498.561454][ T5621] ? arch_stack_walk+0xfb/0x150 [ 498.561522][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561550][ T5621] ? add_lock_to_list+0xc7/0x100 [ 498.561586][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561614][ T5621] ? __lock_acquire+0x1511/0x2de0 [ 498.561675][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561703][ T5621] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.561747][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561781][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561809][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 498.561848][ T5621] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 498.561881][ T5621] do_writepages+0x338/0x560 [ 498.561914][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561946][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.561980][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.562008][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 498.562051][ T5621] filemap_fdatawrite+0x1e9/0x2f0 [ 498.562094][ T5621] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 498.562170][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.562202][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.562236][ T5621] ? do_raw_spin_unlock+0xf5/0x200 [ 498.562280][ T5621] f2fs_sync_dirty_inodes+0x30e/0x830 [ 498.562331][ T5621] f2fs_write_checkpoint+0xa3d/0x2710 [ 498.562363][ T5621] ? __lock_acquire+0x747/0x2de0 [ 498.562428][ T5621] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 498.562460][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.562554][ T5621] kill_f2fs_super+0x2dd/0x700 [ 498.562597][ T5621] ? __pfx_kill_f2fs_super+0x10/0x10 [ 498.562643][ T5621] ? call_rcu+0x64d/0x8b0 [ 498.562675][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.562704][ T5621] ? lockdep_hardirqs_on+0x7b/0x110 [ 498.562733][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.562778][ T5621] deactivate_locked_super+0xbe/0x110 [ 498.562821][ T5621] cleanup_mnt+0x204/0x2a0 [ 498.562856][ T5621] task_work_run+0x1d9/0x270 [ 498.562889][ T5621] ? __pfx_task_work_run+0x10/0x10 [ 498.562930][ T5621] exit_to_user_mode_loop+0x204/0x770 [ 498.562959][ T5621] ? srso_alias_return_thunk+0x5/0xfbef5 [ 498.562988][ T5621] ? rcu_is_watching+0x16/0xb0 [ 498.563026][ T5621] do_syscall_64+0x328/0x520 [ 498.563054][ T5621] ? trace_irq_disable+0x3b/0x140 [ 498.563086][ T5621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.563119][ T5621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.563145][ T5621] RIP: 0033:0x7fb78739f797 [ 498.563168][ T5621] Code: a2 c7 05 5c 6f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 498.563188][ T5621] RSP: 002b:00007ffd6e13d8d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 498.563215][ T5621] RAX: 0000000000000000 RBX: 00007fb787434cf3 RCX: 00007fb78739f797 [ 498.563233][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6e13d990 [ 498.563249][ T5621] RBP: 00007ffd6e13d990 R08: 00007ffd6e13e990 R09: 00000000ffffffff [ 498.563267][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6e13ea20 [ 498.563283][ T5621] R13: 00007fb787434cf3 R14: 000000000007906c R15: 00007ffd6e13ea60 [ 498.563323][ T5621] [ 498.569698][ T5621] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 500.743996][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.744062][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.474206][ T9381] rxe_eth0 speed is unknown, defaulting to 1000 [ 504.124696][ T9502] loop4: detected capacity change from 0 to 512 [ 504.136291][ T9502] EXT4-fs: Ignoring removed nobh option [ 504.189626][ T5907] bridge_slave_1: left allmulticast mode [ 504.189657][ T5907] bridge_slave_1: left promiscuous mode [ 504.189932][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.213523][ T9502] EXT4-fs error (device loop4) in ext4_process_orphan:346: Out of memory [ 504.213550][ T9502] loop4: lost filesystem error report for type 5 error -12 [ 504.221566][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 504.221589][ C1] EXT4-fs (loop4): initial error at time 1792152448: ext4_process_orphan:346 [ 504.221616][ C1] EXT4-fs (loop4): last error at time 1792152448: ext4_process_orphan:346 [ 504.225299][ T5907] bridge_slave_0: left allmulticast mode [ 504.225324][ T5907] bridge_slave_0: left promiscuous mode [ 504.225563][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.292862][ T9502] EXT4-fs (loop4): 2 truncates cleaned up [ 504.313138][ T9502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.238073][ T9501] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.796: bg 0: block 5: invalid block bitmap [ 505.265056][ T9501] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 505.265097][ T9501] EXT4-fs (loop4): This should not happen!! Data will be lost [ 505.265097][ T9501] [ 505.265115][ T9501] EXT4-fs (loop4): Total free blocks count 0 [ 505.265131][ T9501] EXT4-fs (loop4): Free/Dirty block details [ 505.265180][ T9501] EXT4-fs (loop4): free_blocks=0 [ 505.265219][ T9501] EXT4-fs (loop4): dirty_blocks=33 [ 505.265235][ T9501] EXT4-fs (loop4): Block reservation details [ 505.265250][ T9501] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 505.507173][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.728005][ T9518] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 505.735402][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.782342][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 505.805546][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.834577][ T5907] bond0 (unregistering): Released all slaves [ 506.255262][ T9518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.431248][ T9522] bond3 (unregistering): Released all slaves [ 511.310202][ T9555] syz.4.817 (9555): drop_caches: 2 [ 512.087851][ T5907] hsr_slave_0: left promiscuous mode [ 512.104241][ T5907] hsr_slave_1: left promiscuous mode [ 512.105232][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.109398][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.060955][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 516.304567][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 518.589735][ T9617] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 521.717608][ T9617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.140617][ T9620] gretap1: entered promiscuous mode [ 522.183171][ T9620] bond2: (slave gretap1): making interface the new active one [ 522.214902][ T9620] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 522.215720][ T9626] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 522.568466][ T9639] loop0: detected capacity change from 0 to 32768 [ 522.634581][ T9639] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 522.760507][ T9639] XFS (loop0): Ending clean mount [ 522.773731][ T9639] XFS (loop0): Quotacheck needed: Please wait. [ 522.995378][ T9217] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.995496][ T9217] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.995629][ T9217] bridge_slave_0: entered allmulticast mode [ 522.997621][ T9217] bridge_slave_0: entered promiscuous mode [ 523.000188][ T9217] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.000296][ T9217] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.000423][ T9217] bridge_slave_1: entered allmulticast mode [ 523.042940][ T9217] bridge_slave_1: entered promiscuous mode [ 523.099446][ T9639] XFS (loop0): Quotacheck: Done. [ 523.152806][ T9656] loop4: detected capacity change from 0 to 4096 [ 523.357332][ T9661] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 523.830307][ T31] kauditd_printk_skb: 121 callbacks suppressed [ 523.830330][ T31] audit: type=1800 audit(1792152468.157:387): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.836" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 524.816432][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 524.899993][ T9217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.952657][ T9217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.074727][ T9217] team0: Port device team_slave_0 added [ 526.297202][ T9217] team0: Port device team_slave_1 added [ 527.249056][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 529.998018][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.998035][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.998058][ T9217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.999696][ T9217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.999709][ T9217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.999731][ T9217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.051188][ T9705] netlink: 'syz.5.848': attribute type 1 has an invalid length. [ 530.335000][ T9705] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.563609][ T9704] gretap1: entered promiscuous mode [ 531.397540][ T9704] bond3: (slave gretap1): making interface the new active one [ 531.470359][ T9704] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 532.492913][ T9718] syz.4.851 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 532.525048][ T9706] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 532.684947][ T9381] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.685064][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.685233][ T9381] bridge_slave_0: entered allmulticast mode [ 532.696294][ T9381] bridge_slave_0: entered promiscuous mode [ 532.719381][ T9381] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.719513][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.719664][ T9381] bridge_slave_1: entered allmulticast mode [ 532.936941][ T9381] bridge_slave_1: entered promiscuous mode [ 533.936683][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.941448][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.948649][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.956608][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.962939][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.994696][ T9381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.998008][ T9381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.148803][ T9718] loop4: detected capacity change from 0 to 1024 [ 534.184428][ T9718] hfsplus: creator requires a 4 character value [ 534.397510][ T9381] team0: Port device team_slave_0 added [ 534.433900][ T9381] team0: Port device team_slave_1 added [ 534.861707][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.861729][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.861760][ T9381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.920199][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.920219][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.920251][ T9381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.482386][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 536.131600][ T5622] Bluetooth: hci2: command tx timeout [ 536.347516][ T5622] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 536.663760][ T9381] hsr_slave_0: entered promiscuous mode [ 536.664970][ T9381] hsr_slave_1: entered promiscuous mode [ 538.262629][ T5622] Bluetooth: hci2: command tx timeout [ 539.815451][ T6908] bridge_slave_1: left allmulticast mode [ 539.815476][ T6908] bridge_slave_1: left promiscuous mode [ 539.815660][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.913459][ T9784] xt_hashlimit: max too large, truncated to 1048576 [ 540.341918][ T5622] Bluetooth: hci2: command tx timeout [ 540.685875][ T6908] bridge_slave_0: left allmulticast mode [ 540.685909][ T6908] bridge_slave_0: left promiscuous mode [ 540.686131][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.722611][ T9788] netlink: 'syz.4.864': attribute type 1 has an invalid length. [ 542.157667][ T6908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.203754][ T6908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.231482][ T6908] bond0 (unregistering): Released all slaves [ 542.339345][ T9788] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 542.356802][ T9790] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 542.422327][ T5622] Bluetooth: hci2: command tx timeout [ 544.909337][ T9729] rxe_eth0 speed is unknown, defaulting to 1000 [ 545.318835][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 548.552649][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.347656][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.585465][ T6908] team0 (unregistering): Port device team_slave_1 removed [ 549.682059][ T6908] team0 (unregistering): Port device team_slave_0 removed [ 552.420157][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 553.267848][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 553.280362][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 553.282418][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 553.300191][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 553.311187][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.399147][ T5627] Bluetooth: hci6: command tx timeout [ 557.636937][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 558.451696][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.898'. [ 558.901961][ T5627] Bluetooth: hci6: command tx timeout [ 560.145601][ T9978] netlink: 20 bytes leftover after parsing attributes in process `syz.5.901'. [ 560.489899][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.498173][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.498319][ T9729] bridge_slave_0: entered allmulticast mode [ 560.542685][ T9729] bridge_slave_0: entered promiscuous mode [ 560.545999][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.546112][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.546282][ T9729] bridge_slave_1: entered allmulticast mode [ 560.573357][ T9729] bridge_slave_1: entered promiscuous mode [ 560.856760][ T9989] loop4: detected capacity change from 0 to 2048 [ 560.988040][ T5627] Bluetooth: hci6: command tx timeout [ 561.447264][ T9989] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 561.461037][ T9989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 561.696319][ T9729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.780158][ T9729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.188925][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.189023][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.901044][ T9901] rxe_eth0 speed is unknown, defaulting to 1000 [ 563.081840][ T5627] Bluetooth: hci6: command tx timeout [ 563.118246][ T9729] team0: Port device team_slave_0 added [ 563.137852][ T9729] team0: Port device team_slave_1 added [ 564.108685][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.108706][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.108749][ T9729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.164091][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.164112][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.164145][ T9729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.749785][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 565.591689][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 567.128284][ T9729] hsr_slave_0: entered promiscuous mode [ 567.129335][ T9729] hsr_slave_1: entered promiscuous mode [ 567.130110][ T9729] debugfs: 'hsr0' already exists in 'hsr' [ 567.130131][ T9729] Cannot create hsr debugfs directory [ 573.289968][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'. [ 573.427340][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.923'. [ 576.704624][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.925'. [ 578.278366][ T9301] bridge_slave_1: left allmulticast mode [ 578.278399][ T9301] bridge_slave_1: left promiscuous mode [ 578.278630][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.308276][ T9301] bridge_slave_0: left allmulticast mode [ 578.308308][ T9301] bridge_slave_0: left promiscuous mode [ 578.316465][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.452276][ T9301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.476067][ T9301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.480736][ T9301] bond0 (unregistering): Released all slaves [ 582.293814][T10172] overlayfs: failed to clone upperpath [ 584.574135][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.937'. [ 584.636493][ T9301] hsr_slave_0: left promiscuous mode [ 584.637665][ T9301] hsr_slave_1: left promiscuous mode [ 584.639127][ T9301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.747455][ T9301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.029787][ T9301] team0 (unregistering): Port device team_slave_1 removed [ 586.090588][ T9301] team0 (unregistering): Port device team_slave_0 removed [ 589.090739][T10214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.948'. [ 589.186671][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 589.320385][ T9729] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 589.389789][ T9729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.393035][ T9729] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 589.447448][ T9729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.451317][ T9729] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 589.475396][ T9729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.500785][ T9729] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 589.562035][ T9729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.024581][ T9901] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.024702][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.024867][ T9901] bridge_slave_0: entered allmulticast mode [ 590.069791][ T9901] bridge_slave_0: entered promiscuous mode [ 590.091374][ T9901] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.095092][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.095951][ T9901] bridge_slave_1: entered allmulticast mode [ 590.171809][ T9901] bridge_slave_1: entered promiscuous mode [ 590.532914][ T9901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.576274][ T9901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.803655][ T9901] team0: Port device team_slave_0 added [ 590.815884][ T9901] team0: Port device team_slave_1 added [ 591.925868][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.925890][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.925921][ T9901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.031657][ T9901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.031678][ T9901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.031710][ T9901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.466595][ T9901] hsr_slave_0: entered promiscuous mode [ 592.471731][ T9901] hsr_slave_1: entered promiscuous mode [ 593.129723][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'. [ 593.412337][T10279] futex_wake_op: syz.5.958 tries to shift op by 144; fix this program [ 594.352324][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.370727][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.389959][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.399453][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.401218][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.111063][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.963'. [ 596.524286][ T5622] Bluetooth: hci4: command tx timeout [ 598.950188][ T5622] Bluetooth: hci4: command tx timeout [ 600.981633][ T5622] Bluetooth: hci4: command tx timeout [ 601.239078][T10282] rxe_eth0 speed is unknown, defaulting to 1000 [ 601.966504][ T9901] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 601.993974][ T9901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.997896][ T9901] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 602.026189][ T9901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.030460][ T9901] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 602.066796][ T9901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.176905][ T9901] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 602.284433][ T9901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 602.567241][ T6908] bridge_slave_1: left allmulticast mode [ 602.567271][ T6908] bridge_slave_1: left promiscuous mode [ 602.567487][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.607487][ T6908] bridge_slave_0: left allmulticast mode [ 602.607518][ T6908] bridge_slave_0: left promiscuous mode [ 602.607736][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.061915][ T5622] Bluetooth: hci4: command tx timeout [ 603.147931][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 606.548397][ T6908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.570987][ T6908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.583903][ T6908] bond0 (unregistering): Released all slaves [ 606.984328][T10409] loop4: detected capacity change from 0 to 512 [ 606.994721][T10409] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 607.968631][ T6919] Bluetooth: hci2: Frame reassembly failed (-84) [ 608.021312][ T6919] Bluetooth: hci2: Frame reassembly failed (-84) [ 608.107420][T10409] EXT4-fs (loop4): 1 truncate cleaned up [ 608.125797][T10409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.290834][ T9901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.310711][ T9901] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.355148][ T9901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 608.355185][ T9901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.582843][ T5627] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 609.179949][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.180061][ T6919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.200089][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.200196][ T6919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.000527][ T5622] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 611.226384][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.425525][ T6908] hsr_slave_0: left promiscuous mode [ 613.445284][ T6908] hsr_slave_1: left promiscuous mode [ 613.446208][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.481156][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.550895][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.553616][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.562554][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.580746][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.593642][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 615.783154][ T5622] Bluetooth: hci2: command tx timeout [ 616.325000][ T6908] team0 (unregistering): Port device team_slave_1 removed [ 617.534473][ T6908] team0 (unregistering): Port device team_slave_0 removed [ 617.862311][ T5622] Bluetooth: hci2: command tx timeout [ 619.772986][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 619.944970][ T5622] Bluetooth: hci2: command tx timeout [ 620.708462][T10282] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.708557][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.708696][T10282] bridge_slave_0: entered allmulticast mode [ 620.721228][T10282] bridge_slave_0: entered promiscuous mode [ 620.732178][T10282] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.732432][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.732573][T10282] bridge_slave_1: entered allmulticast mode [ 620.739132][T10282] bridge_slave_1: entered promiscuous mode [ 621.562256][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 621.656838][T10282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.687088][T10282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.021650][ T5622] Bluetooth: hci2: command tx timeout [ 622.854958][T10282] team0: Port device team_slave_0 added [ 622.874803][T10282] team0: Port device team_slave_1 added [ 622.956640][T10282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.956662][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.956693][T10282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.037131][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 624.849709][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.849778][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.951772][T10552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1010'. [ 626.340503][T10563] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 626.382567][T10282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.382590][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.382623][T10282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.484269][T10470] rxe_eth0 speed is unknown, defaulting to 1000 [ 626.572626][T10563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 626.826041][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1017'. [ 628.201194][T10282] hsr_slave_0: entered promiscuous mode [ 628.226996][T10282] hsr_slave_1: entered promiscuous mode [ 628.238281][T10282] debugfs: 'hsr0' already exists in 'hsr' [ 628.238492][T10282] Cannot create hsr debugfs directory [ 632.920759][T10628] loop0: detected capacity change from 0 to 512 [ 632.945084][T10628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.977945][T10628] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 633.014859][T10628] EXT4-fs (loop0): 1 truncate cleaned up [ 633.060727][T10628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.217005][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.834049][T10669] loop4: detected capacity change from 0 to 8 [ 637.151941][T10667] SQUASHFS error: Failed to read block 0x4de: -5 [ 637.152249][T10667] SQUASHFS error: Failed to read block 0x4de: -5 [ 637.152482][ T31] audit: type=1800 audit(1792152581.487:388): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1036" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 637.220824][T10659] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 637.220857][T10659] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 637.625772][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1038'. [ 637.903473][ T6908] bridge_slave_1: left allmulticast mode [ 637.903504][ T6908] bridge_slave_1: left promiscuous mode [ 637.903757][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.954169][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'. [ 637.966457][ T6908] bridge_slave_0: left allmulticast mode [ 637.966482][ T6908] bridge_slave_0: left promiscuous mode [ 637.966717][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.796116][T10703] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 641.457040][ T6908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.480045][ T6908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.483415][ T6908] bond0 (unregistering): Released all slaves [ 641.505805][T10712] loop4: detected capacity change from 0 to 512 [ 641.517250][T10712] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 641.543804][T10712] EXT4-fs (loop4): 1 truncate cleaned up [ 641.554012][ T6912] rpcbind: server 127.0.0.1 not responding, timed out [ 641.570364][T10712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.436794][T10723] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1048: invalid indirect mapped block 4294967295 (level 1) [ 642.440792][T10723] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1048: invalid indirect mapped block 65535 (level 2) [ 642.523343][ T31] audit: type=1800 audit(1792152586.427:389): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1048" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 642.804061][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.051575][T10748] xt_CT: No such helper "snmp" [ 645.495918][ T6908] hsr_slave_0: left promiscuous mode [ 645.499497][ T6908] hsr_slave_1: left promiscuous mode [ 645.500423][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.725267][ T6908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.782999][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 646.969827][T10770] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 647.239262][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 649.824971][T10790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1062'. [ 651.355037][ T6908] team0 (unregistering): Port device team_slave_1 removed [ 651.384525][ T6908] team0 (unregistering): Port device team_slave_0 removed [ 651.862117][T10770] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 651.945652][T10774] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 652.094309][T10470] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.094404][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.094539][T10470] bridge_slave_0: entered allmulticast mode [ 652.139523][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1069'. [ 652.152167][T10470] bridge_slave_0: entered promiscuous mode [ 652.176703][T10470] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.176792][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.205906][T10470] bridge_slave_1: entered allmulticast mode [ 652.227338][T10470] bridge_slave_1: entered promiscuous mode [ 652.455084][T10470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.459559][T10470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.633726][T10470] team0: Port device team_slave_0 added [ 652.835142][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 652.858337][T10470] team0: Port device team_slave_1 added [ 652.874144][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 652.878926][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 652.880996][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 652.904793][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 654.140394][T10470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.140411][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.140434][T10470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.264215][T10470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.264232][T10470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.264255][T10470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.996497][ T5627] Bluetooth: hci6: command tx timeout [ 656.417399][T10470] hsr_slave_0: entered promiscuous mode [ 656.660562][T10470] hsr_slave_1: entered promiscuous mode [ 656.990124][T10868] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 657.061833][ T5627] Bluetooth: hci6: command tx timeout [ 657.240798][T10868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 657.452002][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1081'. [ 657.723187][T10871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 657.748702][T10871] bond3: (slave bond4): Enslaving as an active interface with a down link [ 659.167995][ T5627] Bluetooth: hci6: command tx timeout [ 660.101896][T10817] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.309391][T10910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 661.651539][ T5627] Bluetooth: hci6: command tx timeout [ 663.544992][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'. [ 664.258457][T10943] loop4: detected capacity change from 0 to 2048 [ 664.301439][T10943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 667.101989][ T6919] bridge_slave_1: left allmulticast mode [ 667.102019][ T6919] bridge_slave_1: left promiscuous mode [ 667.102222][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.110629][ T6919] bridge_slave_0: left allmulticast mode [ 667.111156][ T6919] bridge_slave_0: left promiscuous mode [ 667.111362][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.752932][ T6919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.799874][ T6919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.970824][ T6919] bond0 (unregistering): Released all slaves [ 671.338232][T10980] sch_tbf: burst 274 is lower than device lo mtu (9486) ! [ 673.124792][ T6919] hsr_slave_0: left promiscuous mode [ 673.127212][ T6919] hsr_slave_1: left promiscuous mode [ 673.144151][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.162919][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.584007][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 674.174805][ T6919] team0 (unregistering): Port device team_slave_1 removed [ 674.304660][ T6919] team0 (unregistering): Port device team_slave_0 removed [ 674.616737][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 674.620916][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 674.621869][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 674.626319][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 674.626978][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 675.277937][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 677.501586][ T5627] Bluetooth: hci2: command tx timeout [ 679.815350][ T5622] Bluetooth: hci2: command tx timeout [ 679.838151][T11055] netlink: zone id is out of range [ 679.838168][T11055] netlink: zone id is out of range [ 679.838178][T11055] netlink: zone id is out of range [ 679.838188][T11055] netlink: zone id is out of range [ 679.838197][T11055] netlink: zone id is out of range [ 679.838207][T11055] netlink: zone id is out of range [ 679.838216][T11055] netlink: zone id is out of range [ 679.838225][T11055] netlink: zone id is out of range [ 679.838235][T11055] netlink: zone id is out of range [ 679.838244][T11055] netlink: zone id is out of range [ 679.954398][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.954588][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.954720][T10817] bridge_slave_0: entered allmulticast mode [ 679.956662][T10817] bridge_slave_0: entered promiscuous mode [ 679.985744][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.985856][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.985986][T10817] bridge_slave_1: entered allmulticast mode [ 679.988814][T10817] bridge_slave_1: entered promiscuous mode [ 680.083342][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.087351][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.161184][T10817] team0: Port device team_slave_0 added [ 680.183310][T10817] team0: Port device team_slave_1 added [ 680.237975][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.237996][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.238035][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.240018][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.240033][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.240064][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.572292][T10817] hsr_slave_0: entered promiscuous mode [ 680.575018][T10817] hsr_slave_1: entered promiscuous mode [ 680.576091][T10817] debugfs: 'hsr0' already exists in 'hsr' [ 680.576108][T10817] Cannot create hsr debugfs directory [ 681.843059][T11087] fuse: fd is not a fuse device [ 681.861710][ T5622] Bluetooth: hci2: command tx timeout [ 683.956226][ T5622] Bluetooth: hci2: command tx timeout [ 683.956788][T11020] rxe_eth0 speed is unknown, defaulting to 1000 [ 686.044191][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.044259][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.729358][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1136'. [ 687.800853][T11130] bond4: entered allmulticast mode [ 687.801361][T11130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 687.861124][T11134] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 687.868431][T11134] macvlan2: entered allmulticast mode [ 687.868453][T11134] bond0: entered allmulticast mode [ 687.868470][T11134] bond_slave_0: entered allmulticast mode [ 687.868490][T11134] bond_slave_1: entered allmulticast mode [ 687.869795][T11134] bond_slave_0: entered promiscuous mode [ 687.869840][T11134] bond_slave_1: entered promiscuous mode [ 687.874653][T11134] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 687.987277][T11134] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1137'. [ 688.007160][T11130] ip6gretap1: entered allmulticast mode [ 688.007843][T11130] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 688.049387][T11134] bond_slave_0: left promiscuous mode [ 688.049428][T11134] bond_slave_1: left promiscuous mode [ 688.077175][T11134] bond0 (unregistering): left allmulticast mode [ 688.077202][T11134] bond_slave_0: left allmulticast mode [ 688.077223][T11134] bond_slave_1: left allmulticast mode [ 688.136561][T11134] bond4: (slave macvlan2): Removing an active aggregator [ 688.136596][T11134] net_ratelimit: 2 callbacks suppressed [ 688.136611][T11134] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 688.154166][T11134] bond4: (slave macvlan2): Releasing backup interface [ 688.154192][T11134] bond4: (slave macvlan2): the permanent HWaddr of slave - 02:9a:f4:80:e3:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 688.188402][T11134] macvlan2 (unregistering): left allmulticast mode [ 688.202177][ T6912] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 688.282081][T11134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.364042][T11134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.385427][T11134] bond0 (unregistering): Released all slaves [ 691.010816][T11167] loop4: detected capacity change from 0 to 2048 [ 691.039268][ T6919] bridge_slave_1: left allmulticast mode [ 691.039299][ T6919] bridge_slave_1: left promiscuous mode [ 691.039518][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.199090][T11167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.297851][ T6919] bridge_slave_0: left allmulticast mode [ 691.297886][ T6919] bridge_slave_0: left promiscuous mode [ 691.298138][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.184063][T11174] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 692.876799][ T6919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.904399][ T6919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.907189][ T6919] bond0 (unregistering): Released all slaves [ 693.893384][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.848671][T10817] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 696.943492][T10817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.947643][T10817] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 696.992354][T10817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.994514][T10817] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 697.049463][T10817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 697.266543][ T6919] hsr_slave_0: left promiscuous mode [ 697.268746][ T6919] hsr_slave_1: left promiscuous mode [ 697.269639][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.270361][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.448757][T11219] netlink: zone id is out of range [ 697.448776][T11219] netlink: zone id is out of range [ 697.448786][T11219] netlink: zone id is out of range [ 697.448795][T11219] netlink: zone id is out of range [ 697.448805][T11219] netlink: zone id is out of range [ 697.448814][T11219] netlink: zone id is out of range [ 697.448824][T11219] netlink: zone id is out of range [ 697.448834][T11219] netlink: zone id is out of range [ 697.448844][T11219] netlink: zone id is out of range [ 697.448854][T11219] netlink: zone id is out of range [ 697.958580][ T6919] team0 (unregistering): Port device team_slave_1 removed [ 698.029302][ T6919] team0 (unregistering): Port device team_slave_0 removed [ 701.695858][T10817] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 701.857702][T10817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.082115][T11285] gfs2: error -5 reading superblock [ 704.927432][T11292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1171'. [ 705.468506][T11298] loop4: detected capacity change from 0 to 256 [ 705.499750][ T31] audit: type=1326 audit(1792152649.757:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.499810][ T31] audit: type=1326 audit(1792152649.757:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.499860][ T31] audit: type=1326 audit(1792152649.757:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.499911][ T31] audit: type=1326 audit(1792152649.757:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.499962][ T31] audit: type=1326 audit(1792152649.757:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.500011][ T31] audit: type=1326 audit(1792152649.757:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.500068][ T31] audit: type=1326 audit(1792152649.757:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.500116][ T31] audit: type=1326 audit(1792152649.757:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.500164][ T31] audit: type=1326 audit(1792152649.767:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 705.500211][ T31] audit: type=1326 audit(1792152649.767:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.4.1172" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032499e559 code=0x7ffc0000 [ 706.193228][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.302815][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.346865][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.346974][ T6561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.389580][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.389692][ T6561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.138372][T11020] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.139988][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.140156][T11020] bridge_slave_0: entered allmulticast mode [ 707.142401][T11020] bridge_slave_0: entered promiscuous mode [ 707.147015][T11020] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.147125][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.147255][T11020] bridge_slave_1: entered allmulticast mode [ 707.149271][T11020] bridge_slave_1: entered promiscuous mode [ 707.201596][ T5767] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 707.222676][T11020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.250658][T11020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.335112][T11020] team0: Port device team_slave_0 added [ 707.346056][ T5767] usb 5-1: Using ep0 maxpacket: 16 [ 707.347234][ T5767] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 707.351926][ T5767] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 707.351952][ T5767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.351973][ T5767] usb 5-1: config 0 has no interface number 0 [ 707.352016][ T5767] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 707.352075][ T5767] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 707.352101][ T5767] usb 5-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.360018][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.360047][ T5767] usb 5-1: Product: syz [ 707.360064][ T5767] usb 5-1: Manufacturer: syz [ 707.360081][ T5767] usb 5-1: SerialNumber: syz [ 707.375562][ T5767] usb 5-1: config 0 descriptor?? [ 707.470420][T11020] team0: Port device team_slave_1 added [ 707.477855][ T5767] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 707.490216][T11292] program syz.0.1171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 707.491063][ T5767] nokiaca42v2 ttyUSB0: required endpoint is missing [ 707.606847][ T5622] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 707.646585][T11314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.647001][T11314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.691177][ T9] usb 5-1: USB disconnect, device number 5 [ 707.705177][ T9] cypress_m8 5-1:0.35: device disconnected [ 707.710830][T11020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.710847][T11020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.710879][T11020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.734820][T11020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.734841][T11020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.734872][T11020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.994555][T11020] hsr_slave_0: entered promiscuous mode [ 707.997108][T11020] hsr_slave_1: entered promiscuous mode [ 709.426520][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 713.385622][T11385] loop4: detected capacity change from 0 to 512 [ 713.406377][T11385] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 713.437115][T11385] EXT4-fs (loop4): 1 truncate cleaned up [ 713.452730][T11385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.834631][ T5622] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 716.028944][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.315854][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 716.328892][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 716.331043][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 716.351985][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 716.352657][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 716.442689][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 716.823278][T11411] net_ratelimit: 2 callbacks suppressed [ 716.823303][T11411] netlink: zone id is out of range [ 716.823313][T11411] netlink: zone id is out of range [ 716.823323][T11411] netlink: zone id is out of range [ 716.823333][T11411] netlink: zone id is out of range [ 716.823343][T11411] netlink: zone id is out of range [ 716.823352][T11411] netlink: zone id is out of range [ 716.823362][T11411] netlink: zone id is out of range [ 716.823371][T11411] netlink: zone id is out of range [ 716.823381][T11411] netlink: zone id is out of range [ 716.823391][T11411] netlink: zone id is out of range [ 718.018675][T11442] syz.4.1196(11442): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 718.085027][T11442] 9p: Bad value for 'wfdno' [ 718.421890][ T5627] Bluetooth: hci4: command tx timeout [ 721.017703][ T5627] Bluetooth: hci4: command tx timeout [ 721.442473][T11020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 721.605355][T11020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.740566][T11467] 9p: Could not find request transport: r£3dma:port=0x0000000000004e24»BÒ=mHf§ÖÌù€L•fõÞ!BÓöìWMܘ€£í²½œ‹ÆãVÑÝñ«³ùmÙ©ÆzÅ–¾ [ 722.386525][T11020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 722.420198][T11020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.581196][T11020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 722.599806][T11020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.638725][T11020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 722.667471][T11020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.923120][ T5622] Bluetooth: hci4: command tx timeout [ 724.287726][T11474] syz.0.1203 (11474): drop_caches: 2 [ 725.031854][T11406] rxe_eth0 speed is unknown, defaulting to 1000 [ 725.947773][ T5622] Bluetooth: hci4: command tx timeout [ 726.000679][T11020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.136663][T11020] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.208101][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.208221][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.358129][T11494] fuse: fd is not a fuse device [ 728.016242][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.016355][ T6914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.108753][ T9298] bridge_slave_1: left allmulticast mode [ 732.108785][ T9298] bridge_slave_1: left promiscuous mode [ 732.108998][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.134044][ T9298] bridge_slave_0: left allmulticast mode [ 732.134079][ T9298] bridge_slave_0: left promiscuous mode [ 732.134348][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.727869][T11526] net_ratelimit: 2 callbacks suppressed [ 732.727891][T11526] netlink: zone id is out of range [ 732.727902][T11526] netlink: zone id is out of range [ 732.727915][T11526] netlink: zone id is out of range [ 732.727924][T11526] netlink: zone id is out of range [ 732.727934][T11526] netlink: zone id is out of range [ 732.727944][T11526] netlink: zone id is out of range [ 732.727953][T11526] netlink: zone id is out of range [ 732.727963][T11526] netlink: zone id is out of range [ 732.727973][T11526] netlink: zone id is out of range [ 732.727982][T11526] netlink: zone id is out of range [ 732.814257][ T9298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.840158][ T9298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.849265][ T9298] bond0 (unregistering): Released all slaves [ 736.537648][ T9298] hsr_slave_0: left promiscuous mode [ 736.545695][ T9298] hsr_slave_1: left promiscuous mode [ 736.546688][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.557544][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.909031][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 736.916404][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.920289][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 737.095174][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 737.109486][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 739.445848][ T5627] Bluetooth: hci2: command tx timeout [ 739.606748][T11596] loop4: detected capacity change from 0 to 164 [ 739.611330][T11595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.487968][T11600] net_ratelimit: 2 callbacks suppressed [ 741.487987][T11600] netlink: zone id is out of range [ 741.487994][T11600] netlink: zone id is out of range [ 741.488002][T11600] netlink: zone id is out of range [ 741.488010][T11600] netlink: zone id is out of range [ 741.488017][T11600] netlink: zone id is out of range [ 741.488024][T11600] netlink: zone id is out of range [ 741.488031][T11600] netlink: zone id is out of range [ 741.488039][T11600] netlink: zone id is out of range [ 741.488046][T11600] netlink: zone id is out of range [ 741.488054][T11600] netlink: zone id is out of range [ 741.678539][ T5627] Bluetooth: hci2: command tx timeout [ 741.679266][ T9298] team0 (unregistering): Port device team_slave_1 removed [ 742.070319][T11608] loop4: detected capacity change from 0 to 1024 [ 742.111350][T11608] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 742.454910][T11608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.794902][T11608] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 742.900786][ T9298] team0 (unregistering): Port device team_slave_0 removed [ 743.787904][ T5627] Bluetooth: hci2: command tx timeout [ 744.469964][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.206487][ T5627] Bluetooth: hci2: command tx timeout [ 746.505265][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.505329][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.645793][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 746.650208][T11406] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.650392][T11406] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.650543][T11406] bridge_slave_0: entered allmulticast mode [ 746.656359][T11406] bridge_slave_0: entered promiscuous mode [ 746.668571][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.668683][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.668817][T11406] bridge_slave_1: entered allmulticast mode [ 746.680450][T11406] bridge_slave_1: entered promiscuous mode [ 746.920969][T11406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.932717][T11406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.286391][T11406] team0: Port device team_slave_0 added [ 747.290001][T11406] team0: Port device team_slave_1 added [ 748.032377][T11406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.032400][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.032430][T11406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.116308][T11406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.116330][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.116362][T11406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.492168][T11406] hsr_slave_0: entered promiscuous mode [ 748.498066][T11406] hsr_slave_1: entered promiscuous mode [ 748.503673][T11406] debugfs: 'hsr0' already exists in 'hsr' [ 748.503695][T11406] Cannot create hsr debugfs directory [ 748.649354][T11645] net_ratelimit: 2 callbacks suppressed [ 748.649377][T11645] ip_tables: iptables: counters copy to user failed while replacing table [ 748.668651][T11645] ip_tables: iptables: counters copy to user failed while replacing table [ 748.788479][T11567] rxe_eth0 speed is unknown, defaulting to 1000 [ 749.507215][T11656] [ 749.509579][T11656] ====================================================== [ 749.516585][T11656] WARNING: possible circular locking dependency detected [ 749.523683][T11656] syzkaller #0 Tainted: G L [ 749.529653][T11656] ------------------------------------------------------ [ 749.536660][T11656] syz.5.1235/11656 is trying to acquire lock: [ 749.542808][T11656] ffffffff90c14b28 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 749.554080][T11656] [ 749.554080][T11656] but task is already holding lock: [ 749.561434][T11656] ffff888037986280 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 749.571912][T11656] [ 749.571912][T11656] which lock already depends on the new lock. [ 749.571912][T11656] [ 749.582342][T11656] [ 749.582342][T11656] the existing dependency chain (in reverse order) is: [ 749.591339][T11656] [ 749.591339][T11656] -> #3 (&sb->s_type->i_mutex_key#35){++++}-{4:4}: [ 749.600039][T11656] down_write+0x96/0x200 [ 749.604804][T11656] configfs_depend_item_unlocked+0x153/0x420 [ 749.611303][T11656] usbg_make_tpg+0x1e0/0x550 [ 749.616416][T11656] target_fabric_make_tpg+0xa8/0x6d0 [ 749.622303][T11656] configfs_mkdir+0x4f6/0x9e0 [ 749.627498][T11656] vfs_mkdir+0x40c/0x620 [ 749.632251][T11656] filename_mkdirat+0x285/0x510 [ 749.637616][T11656] __se_sys_mkdirat+0x35/0x150 [ 749.642890][T11656] do_syscall_64+0x166/0x520 [ 749.647990][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.654389][T11656] [ 749.654389][T11656] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 749.662289][T11656] __mutex_lock+0x19d/0x1550 [ 749.667393][T11656] tcm_alloc_inst+0x65/0x1a0 [ 749.672495][T11656] usb_get_function_instance+0xe3/0x2f0 [ 749.678558][T11656] function_make+0x127/0x360 [ 749.683662][T11656] configfs_mkdir+0x4f6/0x9e0 [ 749.688854][T11656] vfs_mkdir+0x40c/0x620 [ 749.693615][T11656] filename_mkdirat+0x285/0x510 [ 749.698981][T11656] __se_sys_mkdirat+0x35/0x150 [ 749.704257][T11656] do_syscall_64+0x166/0x520 [ 749.709359][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.715764][T11656] [ 749.715764][T11656] -> #1 (func_lock){+.+.}-{4:4}: [ 749.722886][T11656] __mutex_lock+0x19d/0x1550 [ 749.728010][T11656] usb_get_function_instance+0x2e/0x2f0 [ 749.734070][T11656] function_make+0x127/0x360 [ 749.739214][T11656] configfs_mkdir+0x4f6/0x9e0 [ 749.744424][T11656] vfs_mkdir+0x40c/0x620 [ 749.749179][T11656] filename_mkdirat+0x285/0x510 [ 749.754542][T11656] __se_sys_mkdirat+0x35/0x150 [ 749.759833][T11656] do_syscall_64+0x166/0x520 [ 749.764936][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.771343][T11656] [ 749.771343][T11656] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 749.779594][T11656] __lock_acquire+0x164c/0x2de0 [ 749.784958][T11656] lock_acquire+0x115/0x350 [ 749.789972][T11656] __mutex_lock+0x19d/0x1550 [ 749.795083][T11656] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 749.801746][T11656] configfs_symlink+0x74e/0x11d0 [ 749.807206][T11656] vfs_symlink+0x18b/0x330 [ 749.812141][T11656] filename_symlinkat+0x1cd/0x410 [ 749.817684][T11656] __se_sys_symlinkat+0x4e/0x2b0 [ 749.823144][T11656] do_syscall_64+0x166/0x520 [ 749.828246][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.834648][T11656] [ 749.834648][T11656] other info that might help us debug this: [ 749.834648][T11656] [ 749.844856][T11656] Chain exists of: [ 749.844856][T11656] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#35 [ 749.844856][T11656] [ 749.859813][T11656] Possible unsafe locking scenario: [ 749.859813][T11656] [ 749.867288][T11656] CPU0 CPU1 [ 749.872634][T11656] ---- ---- [ 749.877983][T11656] lock(&sb->s_type->i_mutex_key#35); [ 749.883438][T11656] lock(tpg_instances_lock); [ 749.890622][T11656] lock(&sb->s_type->i_mutex_key#35); [ 749.898598][T11656] lock(gadget_subsys.su_mutex); [ 749.903612][T11656] [ 749.903612][T11656] *** DEADLOCK *** [ 749.903612][T11656] [ 749.911741][T11656] locks held by syz.5.1235/11656: 2, last CPU#1: [ 749.918061][T11656] #0: ffff88801ebf6460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 749.927314][T11656] #1: ffff888037986280 (&sb->s_type->i_mutex_key#35){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 749.938235][T11656] [ 749.938235][T11656] stack backtrace: [ 749.944113][T11656] CPU: 1 UID: 0 PID: 11656 Comm: syz.5.1235 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.955036][T11656] Tainted: [L]=SOFTLOCKUP [ 749.959341][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 749.969379][T11656] Call Trace: [ 749.972646][T11656] [ 749.975562][T11656] dump_stack_lvl+0xe8/0x150 [ 749.980153][T11656] print_circular_bug+0x2e2/0x300 [ 749.985181][T11656] check_noncircular+0x12f/0x150 [ 749.990126][T11656] __lock_acquire+0x164c/0x2de0 [ 749.994972][T11656] ? __pfx_stack_trace_save+0x10/0x10 [ 750.000333][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.005961][T11656] ? stack_depot_save_flags+0x33/0x7f0 [ 750.011424][T11656] ? __lock_acquire+0x650/0x2de0 [ 750.016361][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.022005][T11656] lock_acquire+0x115/0x350 [ 750.026529][T11656] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 750.032866][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.038501][T11656] __mutex_lock+0x19d/0x1550 [ 750.043086][T11656] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 750.049412][T11656] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 750.055729][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.061358][T11656] ? __pfx___mutex_lock+0x10/0x10 [ 750.066374][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.072008][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.077633][T11656] ? make_vfsuid+0x49/0xa0 [ 750.082051][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.087678][T11656] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 750.093822][T11656] ? inode_permission+0x2bc/0x5f0 [ 750.098846][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.104472][T11656] configfs_symlink+0x74e/0x11d0 [ 750.109409][T11656] ? lookup_one_qstr_excl+0x1d4/0x360 [ 750.114768][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.120394][T11656] ? make_vfsuid+0x49/0xa0 [ 750.124806][T11656] ? generic_permission+0x2bf/0x670 [ 750.130007][T11656] ? __pfx_configfs_symlink+0x10/0x10 [ 750.135385][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.141008][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.146631][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.152262][T11656] vfs_symlink+0x18b/0x330 [ 750.156677][T11656] ? security_path_symlink+0xfd/0x360 [ 750.162037][T11656] filename_symlinkat+0x1cd/0x410 [ 750.167062][T11656] ? __pfx_filename_symlinkat+0x10/0x10 [ 750.172606][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.178227][T11656] ? do_getname+0x151/0x250 [ 750.182753][T11656] __se_sys_symlinkat+0x4e/0x2b0 [ 750.187717][T11656] do_syscall_64+0x166/0x520 [ 750.192307][T11656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.198363][T11656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 750.203994][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.209874][T11656] RIP: 0033:0x7f0b6319e559 [ 750.214276][T11656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.233874][T11656] RSP: 002b:00007f0b640d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 750.242279][T11656] RAX: ffffffffffffffda RBX: 00007f0b63426090 RCX: 00007f0b6319e559 [ 750.250245][T11656] RDX: 00002000000019c0 RSI: ffffffffffffff9c RDI: 0000200000001980 [ 750.258199][T11656] RBP: 00007f0b632358b0 R08: 0000000000000000 R09: 0000000000000000 [ 750.266156][T11656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.274156][T11656] R13: 00007f0b63426128 R14: 00007f0b63426090 R15: 00007ffef2467d68 [ 750.282126][T11656] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 751.539613][ T9298] bridge_slave_1: left allmulticast mode [ 751.540245][ T9298] bridge_slave_1: left promiscuous mode [ 751.540397][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.568509][ T9298] bridge_slave_0: left allmulticast mode [ 751.568530][ T9298] bridge_slave_0: left promiscuous mode [ 751.568679][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.861493][ T9298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.863637][ T9298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.865587][ T9298] bond0 (unregistering): Released all slaves [ 752.085100][T11659] syz_tun (unregistering): left allmulticast mode [ 752.248394][ T9298] hsr_slave_0: left promiscuous mode [ 752.249450][ T9298] hsr_slave_1: left promiscuous mode [ 752.250002][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.271532][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.375871][ T9298] team0 (unregistering): Port device team_slave_1 removed [ 752.399592][ T9298] team0 (unregistering): Port device team_slave_0 removed [ 752.731167][ T9298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.776498][ T9298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.828920][ T9298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.878037][ T9298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.962077][ T9298] bridge_slave_1: left allmulticast mode [ 752.963423][ T9298] bridge_slave_1: left promiscuous mode [ 752.963600][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.968272][ T9298] bridge_slave_0: left allmulticast mode [ 752.968291][ T9298] bridge_slave_0: left promiscuous mode [ 752.968428][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.012600][ T9298] bridge_slave_1: left allmulticast mode [ 753.012623][ T9298] bridge_slave_1: left promiscuous mode [ 753.012759][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.014141][ T9298] bridge_slave_0: left allmulticast mode [ 753.014160][ T9298] bridge_slave_0: left promiscuous mode [ 753.014293][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.105694][ T9298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.107700][ T9298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.108773][ T9298] bond0 (unregistering): Released all slaves [ 753.139372][ T9298] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 753.139577][ T9298] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 753.139883][ T9298] ip6gretap1 (unregistering): left allmulticast mode [ 753.176386][ T9298] bond2 (unregistering): (slave gretap1): Releasing active interface [ 753.192735][ T9298] bond1 (unregistering): Released all slaves [ 753.197216][ T9298] bond2 (unregistering): Released all slaves [ 753.201910][ T9298] bond3 (unregistering): Released all slaves [ 753.208015][ T9298] bond4 (unregistering): Released all slaves [ 753.220940][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 753.278655][ T9298] tipc: Left network mode [ 753.616604][ T9298] hsr_slave_0: left promiscuous mode [ 753.620994][ T9298] hsr_slave_1: left promiscuous mode [ 753.623465][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.633028][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.650045][ T9298] hsr_slave_0: left promiscuous mode [ 753.650505][ T9298] hsr_slave_1: left promiscuous mode [ 753.651068][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.651088][ T9298] batadv0: mtu less than device minimum [ 753.651922][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.652740][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.653533][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.654335][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.655138][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.655935][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.656736][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.657534][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.658310][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.659105][ T9298] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 753.696538][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.700915][ T9298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.741569][ T9298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.743018][ T9298] batman_adv: batadv0: Interface deactivated: dummy0 [ 753.743035][ T9298] batman_adv: batadv0: Removing interface: dummy0 [ 753.763494][ T9298] veth1_macvtap: left promiscuous mode [ 753.763524][ T9298] veth0_macvtap: left promiscuous mode [ 753.763595][ T9298] veth1_vlan: left promiscuous mode [ 753.763644][ T9298] veth0_vlan: left promiscuous mode [ 753.901099][ T9298] team0 (unregistering): Port device team_slave_1 removed [ 753.911308][ T9298] team0 (unregistering): Port device team_slave_0 removed [ 754.019024][ T9298] team0 (unregistering): Port device team_slave_1 removed [ 754.028934][ T9298] team0 (unregistering): Port device team_slave_0 removed [ 754.083210][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 754.376550][ T9298] IPVS: stop unused estimator thread 0... [ 754.429642][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 754.704379][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 754.984192][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 756.758017][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.826159][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.873273][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.946234][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.027711][ T13] bridge_slave_1: left allmulticast mode [ 757.027738][ T13] bridge_slave_1: left promiscuous mode [ 757.027883][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.029397][ T13] bridge_slave_0: left allmulticast mode [ 757.029418][ T13] bridge_slave_0: left promiscuous mode [ 757.029554][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.045334][ T13] dvmrp6: left allmulticast mode [ 757.055498][ T13] bond_slave_0: left promiscuous mode [ 757.055524][ T13] bond_slave_1: left promiscuous mode [ 757.111126][ T13] bond2 (unregistering): (slave gretap1): Releasing active interface [ 757.111154][ T13] bond2 (unregistering): (slave gretap1): the permanent HWaddr of slave - ee:6c:ee:fa:ef:21 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 757.149176][ T13] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 757.161049][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.171298][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.174098][ T13] bond0 (unregistering): Released all slaves [ 757.177323][ T13] bond1 (unregistering): Released all slaves [ 757.192482][ T13] bond2 (unregistering): (slave bond3): Releasing active interface [ 757.192905][ T13] bond2 (unregistering): Released all slaves [ 757.197425][ T13] bond3 (unregistering): Released all slaves [ 757.474307][ T13] hsr_slave_0: left promiscuous mode [ 757.474916][ T13] hsr_slave_1: left promiscuous mode [ 757.475478][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.475497][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.476084][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.476101][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.479525][ T13] veth1_macvtap: left promiscuous mode [ 757.479554][ T13] veth0_macvtap: left promiscuous mode [ 757.479627][ T13] veth1_vlan: left promiscuous mode [ 757.479675][ T13] veth0_vlan: left promiscuous mode [ 757.648285][ T13] team0 (unregistering): Port device team_slave_1 removed [ 757.659305][ T13] team0 (unregistering): Port device team_slave_0 removed [ 757.908960][ T13] IPVS: stop unused estimator thread 0... [ 758.070425][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 758.345853][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10