last executing test programs: 6m44.022630654s ago: executing program 5 (id=44): creat(&(0x7f0000000000)='./file0\x00', 0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@resuid}]}, 0x1, 0x625, &(0x7f0000000800)="$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") 6m42.591130504s ago: executing program 5 (id=47): syz_read_part_table(0x5d6, &(0x7f0000000000)="$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") 6m41.074845501s ago: executing program 5 (id=50): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) 6m37.271621721s ago: executing program 5 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "261fbabdae"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) 6m36.755003958s ago: executing program 5 (id=58): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 6m36.067093341s ago: executing program 5 (id=59): mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6m20.712281833s ago: executing program 32 (id=59): mkdir(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m18.087753079s ago: executing program 33 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) syslog(0x2, 0xffffffffffffffff, 0x0) 4m33.793634249s ago: executing program 0 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xdcd, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}}, 0x1c}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x12, 0x0, 0x0, @multicast2=0xe0000001}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) 4m31.539695555s ago: executing program 0 (id=482): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r2, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) 4m30.767135206s ago: executing program 0 (id=485): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) 4m29.135341598s ago: executing program 0 (id=489): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 4m25.028632632s ago: executing program 0 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x995d8d214bfec45c) 4m23.830322268s ago: executing program 0 (id=500): syz_mount_image$fuse(0x0, 0x0, 0x234a047, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() rt_sigqueueinfo(r0, 0x2e, &(0x7f0000000300)={0x7, 0x9, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c00)={0x10, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000006c00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 4m8.591804629s ago: executing program 34 (id=500): syz_mount_image$fuse(0x0, 0x0, 0x234a047, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() rt_sigqueueinfo(r0, 0x2e, &(0x7f0000000300)={0x7, 0x9, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c00)={0x10, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000006c00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 2m28.163577795s ago: executing program 2 (id=785): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190) 2m23.847605928s ago: executing program 2 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="03"], 0x9, 0x2) 2m14.559712797s ago: executing program 2 (id=809): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x6, 0xa7e, 0x40070}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m14.190873775s ago: executing program 4 (id=810): writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffffd, 0x4}, {0x4, 0x8}}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) 2m11.475086015s ago: executing program 4 (id=812): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x24, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m10.262823281s ago: executing program 4 (id=815): socket$kcm(0xa, 0x2, 0x73) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005a7c295d801000000000000000000010000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2m10.168352817s ago: executing program 2 (id=816): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket(0x2b, 0x1, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x2a8, 0x2a8, 0x0, 0xf0, 0x3b8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0xffffff00, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {}, 0x32, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x81, @local, 0x4e20}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xffffff00, 'veth0_macvtap\x00', 'wlan0\x00', {}, {}, 0x4, 0x0, 0x40}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @remote, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {0xff}, {}, 0x33, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x2, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 2m9.541862185s ago: executing program 4 (id=817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 2m8.910979145s ago: executing program 4 (id=819): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0xfffffff7}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000100b66fd3bb83246ee6f8f789b39c1beb57bf5d9313f0d82b9b09a23077c9a88237b074f271da0f5b77904808898acf4b28a164983fb8fee15f386f5e0fb27fb2086c9d9589b0379dda221fdada80b3974f1f65750bff2f63057d81a30e070a19b718dd85d8702facc25112717cfbea6e48e382c2e8b580cfd6ab1d58452c066b2a7e37bcae862874cc48c1dd070dfbb5e415d01e4b5da573a4ce4b69f3a5"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000240)={0xfffffff8, 0x2, 0x1, 0x8, 0x5, 0x0, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) tgkill(0x0, 0x0, 0x6) r6 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000400)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\x15D\t\xab\xa4O\x9f\x12\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\xafp]\x87fg\xd8\xb2\n\x9f\xdd\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x02B\x9e\x13\xda\x1f\x8du\x10\x13\xe5\xf5\xe3\x9e\x1b\xba\xecX\x0e\xd6\xca\xc5\xd5j)A)\x14\x14\x94\xa7\x1c\x86\x82V%\xa9IWn_\xa6\x0e\x9e\xb2r\xff\xaa\x1e\xd9\x9bu1,\xa1|\x9e\xd3\xf4\xed\xbb\xef\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x83\xc4m\v\xc2\xd7`\x8c\x96\xa3^\xf7\xaf\xea\xef\x1b\xd9\x95\xaf\xc2\xd6=\x81)\xf40\xa3\x82TQ\x84\xd5\xa1P\xe0\xc9\x05\x13m\x18J\xfedv\xcc\xa4\xbb\x86\xe9\xac\xfe&\xf4\xf0\xdeq\x8fvo\x11\x86\xbc\x8c\xc3\x88\x9d\xc0\xe6\\\x87Y\xa6\x1c\x15\xb6x\x1a\x95\xb6\xe0\xc7\x91\x9c\xf97\xec\x91\t*\xc4\xd3!w\xa81\x03\x1b\x10J2sVf?@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\xdc\x1d\x92)*\x9f\x97\x1e\x1c\xbc\xd9\xa4\xb8\x9c\xf4dR\x91Ew\'f\v\x99\x95\xe0u', &(0x7f0000000140)='\xb0\xa2\xdb\xce\xe6[\\\x00\x00\x04\x1d\xc3\xc0\xe0\xa4\xbc\x1c\xf26\xad\xf8\xf0E\xaf\xe3A\xd9&\xb3\x91\ns\xd7\xd2\r\xb5\x8a2\xa90p\xab\xa3)\xdb\xc3\xa4\tBr\xf4\xd2xV>\x1e=\x85\x90\xc7\f\xf3\xa0\xe6!\xb4', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x40, 0x1d, 0x20, 0x2, 0x25dfdbfc, {0xa, 0x0, 0x0, r7, 0x2, 0x9ef68167ec96f955, 0x7}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_PROBES={0x8}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 2m6.869952765s ago: executing program 2 (id=820): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0008403}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0x400, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044800}, 0x20004015) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000004880)=@udp}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000040)=0x6) ioctl$USBDEVFS_IOCTL(r4, 0x80045515, 0x0) 2m6.712298537s ago: executing program 4 (id=821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="03"], 0x9, 0x2) 2m3.801298518s ago: executing program 2 (id=823): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_procfs(0x0, &(0x7f0000000340)='status\x00') socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000100) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r1, 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1m50.53696706s ago: executing program 35 (id=821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="03"], 0x9, 0x2) 1m49.681018598s ago: executing program 8 (id=852): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m48.07860911s ago: executing program 36 (id=823): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_procfs(0x0, &(0x7f0000000340)='status\x00') socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000100) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r1, 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1m47.065629502s ago: executing program 8 (id=858): socket$kcm(0xa, 0x2, 0x73) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005a7c295d801000000000000000000010000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.976999793s ago: executing program 8 (id=862): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0xfffffff7}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000100b66fd3bb83246ee6f8f789b39c1beb57bf5d9313f0d82b9b09a23077c9a88237b074f271da0f5b77904808898acf4b28a164983fb8fee15f386f5e0fb27fb2086c9d9589b0379dda221fdada80b3974f1f65750bff2f63057d81a30e070a19b718dd85d8702facc25112717cfbea6e48e382c2e8b580cfd6ab1d58452c066b2a7e37bcae862874cc48c1dd070dfbb5e415d01e4b5da573a4ce4b69f3a5"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f0000000240)={0xfffffff8, 0x2, 0x1, 0x8, 0x5, 0x0, 0x6}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 1m43.872883542s ago: executing program 8 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$rds(0x15, 0x5, 0x0) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000040)={r0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000101010100000000000000000a0008080c0019800800020016040000300002802c000180"], 0x50}}, 0x20040080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m41.465228072s ago: executing program 8 (id=868): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0xfffffff7}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000100b66fd3bb83246ee6f8f789b39c1beb57bf5d9313f0d82b9b09a23077c9a88237b074f271da0f5b77904808898acf4b28a164983fb8fee15f386f5e0fb27fb2086c9d9589b0379dda221fdada80b3974f1f65750bff2f63057d81a30e070a19b718dd85d8702facc25112717cfbea6e48e382c2e8b580cfd6ab1d58452c066b2a7e37bcae862874cc48c1dd070dfbb5e415d01e4b5da573a4ce4b69f3a5"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000240)={0xfffffff8, 0x2, 0x1, 0x8, 0x5, 0x0, 0x6}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) tgkill(0x0, 0x0, 0x6) r7 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\x15D\t\xab\xa4O\x9f\x12\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\xafp]\x87fg\xd8\xb2\n\x9f\xdd\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x02B\x9e\x13\xda\x1f\x8du\x10\x13\xe5\xf5\xe3\x9e\x1b\xba\xecX\x0e\xd6\xca\xc5\xd5j)A)\x14\x14\x94\xa7\x1c\x86\x82V%\xa9IWn_\xa6\x0e\x9e\xb2r\xff\xaa\x1e\xd9\x9bu1,\xa1|\x9e\xd3\xf4\xed\xbb\xef\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x83\xc4m\v\xc2\xd7`\x8c\x96\xa3^\xf7\xaf\xea\xef\x1b\xd9\x95\xaf\xc2\xd6=\x81)\xf40\xa3\x82TQ\x84\xd5\xa1P\xe0\xc9\x05\x13m\x18J\xfedv\xcc\xa4\xbb\x86\xe9\xac\xfe&\xf4\xf0\xdeq\x8fvo\x11\x86\xbc\x8c\xc3\x88\x9d\xc0\xe6\\\x87Y\xa6\x1c\x15\xb6x\x1a\x95\xb6\xe0\xc7\x91\x9c\xf97\xec\x91\t*\xc4\xd3!w\xa81\x03\x1b\x10J2sVf?@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\xdc\x1d\x92)*\x9f\x97\x1e\x1c\xbc\xd9\xa4\xb8\x9c\xf4dR\x91Ew\'f\v\x99\x95\xe0u', &(0x7f0000000140)='\xb0\xa2\xdb\xce\xe6[\\\x00\x00\x04\x1d\xc3\xc0\xe0\xa4\xbc\x1c\xf26\xad\xf8\xf0E\xaf\xe3A\xd9&\xb3\x91\ns\xd7\xd2\r\xb5\x8a2\xa90p\xab\xa3)\xdb\xc3\xa4\tBr\xf4\xd2xV>\x1e=\x85\x90\xc7\f\xf3\xa0\xe6!\xb4', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x40, 0x1d, 0x20, 0x2, 0x25dfdbfc, {0xa, 0x0, 0x0, r8, 0x2, 0x9ef68167ec96f955, 0x7}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_PROBES={0x8}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 1m38.751394799s ago: executing program 8 (id=870): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 1m23.609089657s ago: executing program 37 (id=870): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 17.370510158s ago: executing program 6 (id=1046): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0xfffffff7}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000100b66fd3bb83246ee6f8f789b39c1beb57bf5d9313f0d82b9b09a23077c9a88237b074f271da0f5b77904808898acf4b28a164983fb8fee15f386f5e0fb27fb2086c9d9589b0379dda221fdada80b3974f1f65750bff2f63057d81a30e070a19b718dd85d8702facc25112717cfbea6e48e382c2e8b580cfd6ab1d58452c066b2a7e37bcae862874cc48c1dd070dfbb5e415d01e4b5da573a4ce4b69f3a5"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000240)={0xfffffff8, 0x2, 0x1, 0x8, 0x5, 0x0, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) tgkill(0x0, 0x0, 0x6) r7 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\x15D\t\xab\xa4O\x9f\x12\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\xafp]\x87fg\xd8\xb2\n\x9f\xdd\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x02B\x9e\x13\xda\x1f\x8du\x10\x13\xe5\xf5\xe3\x9e\x1b\xba\xecX\x0e\xd6\xca\xc5\xd5j)A)\x14\x14\x94\xa7\x1c\x86\x82V%\xa9IWn_\xa6\x0e\x9e\xb2r\xff\xaa\x1e\xd9\x9bu1,\xa1|\x9e\xd3\xf4\xed\xbb\xef\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x83\xc4m\v\xc2\xd7`\x8c\x96\xa3^\xf7\xaf\xea\xef\x1b\xd9\x95\xaf\xc2\xd6=\x81)\xf40\xa3\x82TQ\x84\xd5\xa1P\xe0\xc9\x05\x13m\x18J\xfedv\xcc\xa4\xbb\x86\xe9\xac\xfe&\xf4\xf0\xdeq\x8fvo\x11\x86\xbc\x8c\xc3\x88\x9d\xc0\xe6\\\x87Y\xa6\x1c\x15\xb6x\x1a\x95\xb6\xe0\xc7\x91\x9c\xf97\xec\x91\t*\xc4\xd3!w\xa81\x03\x1b\x10J2sVf?@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\xdc\x1d\x92)*\x9f\x97\x1e\x1c\xbc\xd9\xa4\xb8\x9c\xf4dR\x91Ew\'f\v\x99\x95\xe0u', &(0x7f0000000140)='\xb0\xa2\xdb\xce\xe6[\\\x00\x00\x04\x1d\xc3\xc0\xe0\xa4\xbc\x1c\xf26\xad\xf8\xf0E\xaf\xe3A\xd9&\xb3\x91\ns\xd7\xd2\r\xb5\x8a2\xa90p\xab\xa3)\xdb\xc3\xa4\tBr\xf4\xd2xV>\x1e=\x85\x90\xc7\f\xf3\xa0\xe6!\xb4', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x40, 0x1d, 0x20, 0x2, 0x25dfdbfc, {0xa, 0x0, 0x0, r8, 0x2, 0x9ef68167ec96f955, 0x7}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_PROBES={0x8}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 15.41935962s ago: executing program 6 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000000)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa0e, &(0x7f00000000c0)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="1600000002"], 0x0) 11.831205974s ago: executing program 3 (id=1055): personality(0xfe47fef9f5ff7379) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 8.311271982s ago: executing program 1 (id=1058): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3M9vFNcdAPDvrtc2LlC79Be/WralVa1Wxdj8PPQAqJW4VKrUqqLHrW0QxUCFXQksq5iqAqmHVvwF/XGrlL8gp+QSJVEOiXIF5RpFQpEvkByiiWZ3ZrPr3bXXZu2V8ecjzfJm5s3M+87Mw2/e29kAdq1y+lGI2BcRTyJitDbbnKFc++fFytL0ZytL04VIkt9+Wqjme76yNJ1nzbfbm82MFyOKfy/EkdbDDs/fW7xRmZubvZMtmFgoZqmblWuz12ZvTZ0/f/rUyLmzU2d6EmdapueH/3r76KHLf3j86+krj//4zmtpeZNsfWMcNWPVz6GujzDQsqQc5eZz2eDH3Rd9R9jfkC6U0s9i/wpD19K7tpTV3ScxGgPVuZrR+NXf+lo4YEslSZIMtyyt/y1bThoVCrUNkuRBArwCCtHvEgD9kf+hf76SPgEsTbc+B7/anl2M6hNQGveLbKqtKVWfYMtjEYNRm7bCtyLiyvLn/06naNsPAQDQW29cjHh0qdbuyKfammJ8pyHf17OxobGI+EZEHIiIb2btl29HVPN+NyIONmyzv4tRgPKq+db2zwcjWaKxudozafvvF9nYVnP7r17ysYFsbn81/sHC1etzsyezczIeg8Pp/GTrruvdam/+8sN/dTp+uaH9l07p8fO2YFaOT0qrOuhmKguVl4079+xB9cTeb42/EKVCnoo4FBGHN7H/9Jxd/+n/j3Za3xR/GmdL/P/svPPSJgq0SvLfiJ/Urv9yVOPP+z5rwQ9lqYmFm3+emL+3+PPrjeOTk+fOTp2Z2BNzsycn8rui1bvvP/xNlmx5jGi+/knScP3zqrGlA2np9f9a2/u/PnI5lqbq47XzGz/Gw6ePOj7TbPb+Hyr8rprOx2fvVhYW7kxGDBWWW5dPfbXt3cpIU/40/vHj7ev/gYgv/pNtdyQi0pv4exHx/Yg4lpX9BxHxw4g4vkb8b1/60Z86PUKuH//WSuOf2dD1v7c4ElmiviRNXHgvonlJnhi48dbrLQf+R7kl/sHodP1PV1Pj2ZKZysKe9eJqU8C2iZc+gQAAALADHIuIfVEonsg6mvZFsXjiRMTeeg/K/MLPrt7+y62Z2jsCYzFYzHu6Rhv6QyezvuF0Pt1qqmE+XX+q2m+cJEkyks6nz+9zB/sbOux6ezvU/9THra+0AK+aDY2jdXqjDdiRVtf/p11v2fsvZADbqwffowF2KPUfdq+u6/9WvQUH9E27+n8/4kUfigJss3b1//ctSy5sS1mA7dWu/hv7h91h8/1/vgwAO53+f9iVunpJfhOJA5fXyFModbefUtev8a+XKMbavwIwFvXfNMjbNGvv8KNiRG/O2EBPz/xI0zUtts2zJ3pxrCium6e0gR9i2N5EsTI3l7/g0vfyDEfEOndv/Wa7nycWt7pg1XPzv/79zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAbXwYAAP//363OhA==") 8.310905915s ago: executing program 3 (id=1059): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0xfffffff7}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000000000000000009500000000000100b66fd3bb83246ee6f8f789b39c1beb57bf5d9313f0d82b9b09a23077c9a88237b074f271da0f5b77904808898acf4b28a164983fb8fee15f386f5e0fb27fb2086c9d9589b0379dda221fdada80b3974f1f65750bff2f63057d81a30e070a19b718dd85d8702facc25112717cfbea6e48e382c2e8b580cfd6ab1d58452c066b2a7e37bcae862874cc48c1dd070dfbb5e415d01e4b5da573a4ce4b69f3a5"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000240)={0xfffffff8, 0x2, 0x1, 0x8, 0x5, 0x0, 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) tgkill(0x0, 0x0, 0x6) r6 = fsopen(&(0x7f0000000000)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000400)='\\\']*\x00\x05\x97\xefcY^\xd2y\xbd\xabEp\x1a\xf7\xe2\xc4X\x82\xa6[\xd8\xbfg\x10Ns\x00\xbd\xe7\xe5\x80.\xb1\xa8\xdaW\"\xe4\xc6\xb7\xbcx.%\x1a\xfe^\xda\x14.\x99wGY\x90\xa3\x04_\xc0\x83\x88u\xb2\xa6\xe8\xad\x8cTO\x15D\t\xab\xa4O\x9f\x12\xd5\xbdi\x8c\xcex\x90\x02\xd3NJ\n\xd9\xafp]\x87fg\xd8\xb2\n\x9f\xdd\x00\x00\x00\x00\x16\x00\x00\x00\x00\x00\x02B\x9e\x13\xda\x1f\x8du\x10\x13\xe5\xf5\xe3\x9e\x1b\xba\xecX\x0e\xd6\xca\xc5\xd5j)A)\x14\x14\x94\xa7\x1c\x86\x82V%\xa9IWn_\xa6\x0e\x9e\xb2r\xff\xaa\x1e\xd9\x9bu1,\xa1|\x9e\xd3\xf4\xed\xbb\xef\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x83\xc4m\v\xc2\xd7`\x8c\x96\xa3^\xf7\xaf\xea\xef\x1b\xd9\x95\xaf\xc2\xd6=\x81)\xf40\xa3\x82TQ\x84\xd5\xa1P\xe0\xc9\x05\x13m\x18J\xfedv\xcc\xa4\xbb\x86\xe9\xac\xfe&\xf4\xf0\xdeq\x8fvo\x11\x86\xbc\x8c\xc3\x88\x9d\xc0\xe6\\\x87Y\xa6\x1c\x15\xb6x\x1a\x95\xb6\xe0\xc7\x91\x9c\xf97\xec\x91\t*\xc4\xd3!w\xa81\x03\x1b\x10J2sVf?@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x95\xdc\x1d\x92)*\x9f\x97\x1e\x1c\xbc\xd9\xa4\xb8\x9c\xf4dR\x91Ew\'f\v\x99\x95\xe0u', &(0x7f0000000140)='\xb0\xa2\xdb\xce\xe6[\\\x00\x00\x04\x1d\xc3\xc0\xe0\xa4\xbc\x1c\xf26\xad\xf8\xf0E\xaf\xe3A\xd9&\xb3\x91\ns\xd7\xd2\r\xb5\x8a2\xa90p\xab\xa3)\xdb\xc3\xa4\tBr\xf4\xd2xV>\x1e=\x85\x90\xc7\f\xf3\xa0\xe6!\xb4', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_delneigh={0x40, 0x1d, 0x20, 0x2, 0x25dfdbfc, {0xa, 0x0, 0x0, r7, 0x2, 0x9ef68167ec96f955, 0x7}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_PROBES={0x8}, @NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) 6.692710638s ago: executing program 1 (id=1060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x0, 0x20, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) 6.355979516s ago: executing program 7 (id=1061): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 6.257663596s ago: executing program 1 (id=1062): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 6.240251166s ago: executing program 6 (id=1063): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x7) 6.238113412s ago: executing program 3 (id=1064): syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x3014050, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)='\a', 0x1}], 0x1, &(0x7f0000000b80)=ANY=[], 0xd0}}], 0x1, 0x24044c41) 5.729623215s ago: executing program 7 (id=1065): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) 5.326580161s ago: executing program 7 (id=1066): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '-Z\x00', 0x14, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4.97254478s ago: executing program 1 (id=1067): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8921, &(0x7f0000000900)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000005c0)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) mremap(&(0x7f000013b000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00009af000/0x2000)=nil) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x4, 0x6, 0x0, 0x100, 0x6, 0x110022}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) poll(0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@delalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@grpid}, {@dioread_nolock}, {}, {@debug}, {@sysvgroups}]}, 0x1, 0x601, &(0x7f0000000880)="$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") madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 4.74238005s ago: executing program 7 (id=1068): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mprotect(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x16) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_setup(0x6756, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001}, &(0x7f0000000c00), &(0x7f0000000040)) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x3c}}, 0x0) 4.740765689s ago: executing program 3 (id=1069): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x80b43) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="2efb0b0cfccf", 0x0, 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 4.688402706s ago: executing program 9 (id=849): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket(0x2b, 0x1, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x2a8, 0x2a8, 0x0, 0xf0, 0x3b8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0xffffff00, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {}, 0x32, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x81, @local, 0x4e20}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xffffff00, 'veth0_macvtap\x00', 'wlan0\x00', {}, {}, 0x4, 0x0, 0x40}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @remote, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {0xff}, {}, 0x33, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x2, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 3.327196725s ago: executing program 6 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000000)=0x30) 3.237069822s ago: executing program 1 (id=1071): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="03"], 0x9, 0x2) 2.947311555s ago: executing program 7 (id=1072): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b000) readv(r5, &(0x7f0000007c00)=[{&(0x7f0000006c00)=""/4096, 0x1b}], 0x1) dup(r4) 2.851820124s ago: executing program 9 (id=1073): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') keyctl$search(0xa, 0x0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, r0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x5422, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0xac, 0x7, 0xff}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000140)) 2.635588866s ago: executing program 6 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x44005}, 0x20000000) 1.542894293s ago: executing program 7 (id=1075): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x200403) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000d40)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0xc001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=ANY=[], 0x8c8}, 0x1, 0x0, 0x0, 0x40880}, 0x8840) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 1.100141588s ago: executing program 3 (id=1076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) 172.718433ms ago: executing program 6 (id=1077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0x0, 0x4677, 0xe, 0x0, 0x1ff}, &(0x7f00000001c0)=0x14) 31.661836ms ago: executing program 3 (id=1078): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000280)={[{@block_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nombcache}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) 0s ago: executing program 1 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) kernel console output (not intermixed with test programs): iscuous mode [ 97.846814][ T5825] veth0_vlan: entered promiscuous mode [ 97.897877][ T5825] veth1_vlan: entered promiscuous mode [ 98.029344][ T5824] veth0_macvtap: entered promiscuous mode [ 98.071675][ T5824] veth1_macvtap: entered promiscuous mode [ 98.106830][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.159938][ T5825] veth0_macvtap: entered promiscuous mode [ 98.210802][ T5825] veth1_macvtap: entered promiscuous mode [ 98.252792][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.271063][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.325477][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.338803][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.364371][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.377011][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.398694][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.417481][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.426465][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.454181][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.506774][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.516754][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.540428][ T5827] veth0_vlan: entered promiscuous mode [ 98.567776][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.593996][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.666634][ T5827] veth1_vlan: entered promiscuous mode [ 98.701593][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.817451][ T5822] veth0_vlan: entered promiscuous mode [ 98.876477][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.895085][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.912769][ T5822] veth1_vlan: entered promiscuous mode [ 98.942708][ T5827] veth0_macvtap: entered promiscuous mode [ 98.979049][ T5827] veth1_macvtap: entered promiscuous mode [ 98.993268][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.014608][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.032319][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.067599][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.167179][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.172021][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.189252][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.196964][ T5822] veth0_macvtap: entered promiscuous mode [ 99.204921][ T5822] veth1_macvtap: entered promiscuous mode [ 99.230362][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.252320][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.305267][ T5843] Bluetooth: hci0: command tx timeout [ 99.305280][ T5840] Bluetooth: hci4: command tx timeout [ 99.343143][ T5833] veth0_vlan: entered promiscuous mode [ 99.380002][ T5843] Bluetooth: hci5: command tx timeout [ 99.380027][ T5840] Bluetooth: hci2: command tx timeout [ 99.387056][ T5843] Bluetooth: hci1: command tx timeout [ 99.392582][ T5840] Bluetooth: hci3: command tx timeout [ 99.404975][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.418875][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.494430][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.521545][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.555271][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.566914][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.014011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.123662][ T5969] overlayfs: missing 'lowerdir' [ 100.422064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.431779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.933736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 101.413101][ T5833] veth1_vlan: entered promiscuous mode [ 101.420094][ T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.430427][ T74] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.439304][ T74] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.964993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.446115][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.461480][ T5966] loop3: detected capacity change from 0 to 4096 [ 102.658488][ T5823] veth0_vlan: entered promiscuous mode [ 102.721960][ T5823] veth1_vlan: entered promiscuous mode [ 102.832424][ T5833] veth0_macvtap: entered promiscuous mode [ 103.759023][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.776821][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.795634][ T5833] veth1_macvtap: entered promiscuous mode [ 103.879571][ T5823] veth0_macvtap: entered promiscuous mode [ 103.969739][ T5823] veth1_macvtap: entered promiscuous mode [ 104.432616][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.463646][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.474055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.503922][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.511782][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.522682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.573765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.581995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.655297][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.721978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.254000][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.310259][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.316214][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.316255][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.326888][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.326961][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.327008][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.327063][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.360612][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.405752][ T1036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.405834][ T1036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.405880][ T1036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.405925][ T1036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.723290][ T5989] ======================================================= [ 105.723290][ T5989] WARNING: The mand mount option has been deprecated and [ 105.723290][ T5989] and is ignored by this kernel. Remove the mand [ 105.723290][ T5989] option from the mount to silence this warning. [ 105.723290][ T5989] ======================================================= [ 106.162586][ T5992] loop2: detected capacity change from 0 to 512 [ 106.363858][ T5992] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.3: iget: bad extra_isize 90 (inode size 256) [ 106.398542][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.435743][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.455004][ T5992] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.463978][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 106.479807][ C0] EXT4-fs (loop2): initial error at time 1771868583: ext4_xattr_inode_iget:441: inode 11 [ 106.489670][ C0] EXT4-fs (loop2): last error at time 1771868583: ext4_xattr_inode_iget:441: inode 11 [ 106.550521][ T5992] EXT4-fs (loop2): Remounting filesystem read-only [ 106.567576][ T5992] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.583715][ T5992] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 106.603694][ T5992] EXT4-fs (loop2): 1 orphan inode deleted [ 106.611924][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.630476][ T5992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.681761][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.693727][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.253475][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.284659][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.292653][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.313129][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.569229][ T6005] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure [ 114.414347][ T6020] overlayfs: missing 'lowerdir' [ 114.581249][ T6028] loop5: detected capacity change from 0 to 1024 [ 114.623750][ T6028] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 114.712963][ T6028] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 114.842031][ T6028] jbd2_journal_init_inode: Cannot locate journal superblock [ 114.913872][ T6028] EXT4-fs (loop5): Could not load journal inode [ 115.940046][ T6042] loop4: detected capacity change from 0 to 512 [ 115.998435][ T6042] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.445714][ T6042] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1312: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 116.483560][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 116.490095][ C1] EXT4-fs (loop4): initial error at time 1771868593: ext4_mb_generate_buddy:1312 [ 116.499281][ C1] EXT4-fs (loop4): last error at time 1771868593: ext4_mb_generate_buddy:1312 [ 116.544217][ T6042] Quota error (device loop4): write_blk: dquota write failed [ 116.551797][ T6042] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 116.729020][ T6042] Quota error (device loop4): write_blk: dquota write failed [ 116.765448][ T6042] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 116.875685][ T6042] EXT4-fs error (device loop4): ext4_acquire_dquot:6999: comm syz.4.22: Failed to acquire dquot type 1 [ 116.953958][ T6042] loop4: lost filesystem error report for type 5 error -28 [ 116.960809][ T6042] EXT4-fs (loop4): 1 truncate cleaned up [ 117.020525][ T6055] loop5: detected capacity change from 0 to 2048 [ 117.055830][ T6042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.710930][ T6055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.050273][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.725507][ T6071] loop4: detected capacity change from 0 to 256 [ 119.733721][ T6051] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 119.903716][ T6074] loop1: detected capacity change from 0 to 256 [ 120.522000][ T6074] exfat: Deprecated parameter 'utf8' [ 120.833327][ T6071] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 120.900805][ T6074] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 121.677525][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.248170][ T6085] loop1: detected capacity change from 0 to 128 [ 125.027504][ T6093] syz.5.35 (6093) used greatest stack depth: 19216 bytes left [ 125.812551][ T6103] Zero length message leads to an empty skb [ 126.344145][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 126.833604][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 126.845854][ T10] usb 2-1: config 1 has no interface number 0 [ 126.852914][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.916994][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 127.401489][ T6107] loop3: detected capacity change from 0 to 4096 [ 127.453962][ T10] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 127.493587][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 127.584278][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 127.630150][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.685073][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.693133][ T10] usb 2-1: Product: syz [ 127.793684][ T10] usb 2-1: Manufacturer: syz [ 127.808535][ T10] usb 2-1: SerialNumber: syz [ 127.908962][ T6107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.930657][ T6106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.387471][ T6106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.424983][ T6106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.646182][ T6106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.216197][ T6106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.223492][ T6106] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.271560][ T6120] loop5: detected capacity change from 0 to 1024 [ 129.406665][ T10] cdc_ncm 2-1:1.1: bind() failure [ 129.429621][ T6120] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 129.533836][ T6120] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.566022][ T6120] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #32: comm syz.5.44: iget: special inode unallocated [ 129.603879][ T5914] usb 2-1: USB disconnect, device number 2 [ 129.660977][ T6120] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 129.672817][ T6120] EXT4-fs (loop5): Remounting filesystem read-only [ 129.682020][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 129.682079][ C0] EXT4-fs (loop5): initial error at time 1771868606: ext4_get_journal_inode:5863: inode 32 [ 129.682137][ C0] EXT4-fs (loop5): last error at time 1771868606: ext4_get_journal_inode:5863: inode 32 [ 129.799483][ T6120] EXT4-fs (loop5): no journal found [ 129.877338][ T6120] EXT4-fs (loop5): can't get journal size [ 129.951864][ T6120] EXT4-fs (loop5): filesystem is read-only [ 130.010102][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.021907][ T6120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 130.088002][ T6120] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.831119][ T6125] loop5: detected capacity change from 0 to 2048 [ 131.365119][ T6125] loop5: p2 p3 < > p4 < p5 > [ 131.450993][ T6125] loop5: partition table partially beyond EOD, truncated [ 131.462244][ T6125] loop5: p2 start 53543428 is beyond EOD, truncated [ 131.476234][ T6125] loop5: p3 start 4284289 is beyond EOD, truncated [ 131.504584][ T6125] loop5: p5 start 53543428 is beyond EOD, truncated [ 132.152124][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 132.180920][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.193595][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.723806][ T6139] loop3: detected capacity change from 0 to 256 [ 132.741246][ T6139] exfat: Deprecated parameter 'utf8' [ 133.382641][ T6139] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 136.801023][ T6155] loop2: detected capacity change from 0 to 512 [ 138.232117][ T6155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 138.353773][ T6155] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.589198][ T6166] loop3: detected capacity change from 0 to 1024 [ 139.935853][ T6166] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 140.003204][ T6166] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 140.028032][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 140.200241][ T6166] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #32: comm syz.3.60: iget: special inode unallocated [ 140.299056][ T6166] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 140.299384][ T6166] EXT4-fs (loop3): Remounting filesystem read-only [ 140.308873][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 140.308908][ C0] EXT4-fs (loop3): initial error at time 1771868617: ext4_get_journal_inode:5863: inode 32 [ 140.308964][ C0] EXT4-fs (loop3): last error at time 1771868617: ext4_get_journal_inode:5863: inode 32 [ 140.484527][ T6166] EXT4-fs (loop3): no journal found [ 140.489772][ T6166] EXT4-fs (loop3): can't get journal size [ 140.684482][ T6166] EXT4-fs (loop3): filesystem is read-only [ 140.758765][ T6166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.135326][ T6166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.613681][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.917805][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 145.096602][ T10] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 145.116885][ T10] usb 2-1: config 4 has no interface number 0 [ 145.123072][ T10] usb 2-1: config 4 interface 9 has no altsetting 0 [ 145.220995][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 145.303664][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.311733][ T10] usb 2-1: Product: syz [ 145.390488][ T10] usb 2-1: Manufacturer: syz [ 145.402732][ T10] usb 2-1: SerialNumber: syz [ 145.633742][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 145.695947][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.705553][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.716064][ T10] usb 2-1: USB disconnect, device number 3 [ 145.725137][ T48] usb 2-1: Failed to submit usb control message: -71 [ 145.732095][ T48] usb 2-1: unable to send the bmi data to the device: -71 [ 145.833017][ T48] usb 2-1: unable to get target info from device [ 145.858150][ T48] usb 2-1: could not get target info (-71) [ 145.902172][ T48] usb 2-1: could not probe fw (-71) [ 149.723383][ T6219] evm: overlay not supported [ 150.119460][ T6218] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 150.494021][ T6226] overlayfs: missing 'lowerdir' [ 150.528352][ T6224] loop2: detected capacity change from 0 to 1024 [ 150.714529][ T6224] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 150.894444][ T6224] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 151.069233][ T6224] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.79: iget: special inode unallocated [ 151.162775][ T6224] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 151.166741][ T6224] EXT4-fs (loop2): Remounting filesystem read-only [ 151.175964][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 151.175993][ C0] EXT4-fs (loop2): initial error at time 1771868628: ext4_get_journal_inode:5863: inode 32 [ 151.176050][ C0] EXT4-fs (loop2): last error at time 1771868628: ext4_get_journal_inode:5863: inode 32 [ 151.348283][ T6224] EXT4-fs (loop2): no journal found [ 151.383032][ T6224] EXT4-fs (loop2): can't get journal size [ 151.426590][ T6224] EXT4-fs (loop2): filesystem is read-only [ 151.576292][ T6224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.763097][ T6224] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.763159][ T6242] loop1: detected capacity change from 0 to 1024 [ 151.848089][ T6242] EXT4-fs: Ignoring removed orlov option [ 151.941549][ T6242] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 152.051120][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.500283][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.094458][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.106562][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.127334][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.147246][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.173899][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.032109][ T6267] netlink: 56 bytes leftover after parsing attributes in process `syz.1.96'. [ 155.065467][ T6267] netlink: 'syz.1.96': attribute type 1 has an invalid length. [ 155.073280][ T6267] netlink: 'syz.1.96': attribute type 2 has an invalid length. [ 155.149335][ T6267] netlink: 104 bytes leftover after parsing attributes in process `syz.1.96'. [ 155.289756][ T6255] chnl_net:caif_netlink_parms(): no params data found [ 155.310101][ T5840] Bluetooth: hci6: command tx timeout [ 156.096726][ T6278] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 156.849703][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.876120][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.883351][ T6255] bridge_slave_0: entered allmulticast mode [ 156.959397][ T6255] bridge_slave_0: entered promiscuous mode [ 157.269360][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.311999][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.367806][ T6255] bridge_slave_1: entered allmulticast mode [ 157.373804][ T5840] Bluetooth: hci6: command tx timeout [ 157.483821][ T6255] bridge_slave_1: entered promiscuous mode [ 159.773774][ T5840] Bluetooth: hci6: command tx timeout [ 160.465607][ T6313] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 160.802744][ T1160] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.873692][ T5840] Bluetooth: hci6: command tx timeout [ 161.997175][ T6255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.094192][ T6255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.646179][ T1160] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.836582][ T6255] team0: Port device team_slave_0 added [ 163.766615][ T6255] team0: Port device team_slave_1 added [ 165.343975][ T6366] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 165.496445][ T1160] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.827460][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.894185][ T6375] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.714943][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.903675][ T6255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.962863][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.005245][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.101544][ T6255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.899012][ T1160] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.279553][ T6392] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.762386][ T6255] hsr_slave_0: entered promiscuous mode [ 169.834948][ T6255] hsr_slave_1: entered promiscuous mode [ 169.864469][ T6255] debugfs: 'hsr0' already exists in 'hsr' [ 169.883900][ T6255] Cannot create hsr debugfs directory [ 169.896520][ T6404] tipc: Started in network mode [ 169.901601][ T6404] tipc: Node identity ac14140f, cluster identity 4711 [ 169.909054][ T6404] tipc: New replicast peer: 255.255.255.255 [ 169.915824][ T6404] tipc: Enabled bearer , priority 10 [ 171.040518][ T5907] tipc: Node number set to 2886997007 [ 171.108578][ T1160] bridge_slave_1: left allmulticast mode [ 171.123888][ T1160] bridge_slave_1: left promiscuous mode [ 171.149538][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.500424][ T1160] bridge_slave_0: left allmulticast mode [ 172.036299][ T6436] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 172.383682][ T1160] bridge_slave_0: left promiscuous mode [ 172.389575][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.267748][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.320754][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.366621][ T1160] bond0 (unregistering): Released all slaves [ 174.664608][ T6470] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 174.957585][ T6255] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.069556][ T6255] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.092052][ T6488] netlink: 44 bytes leftover after parsing attributes in process `syz.0.180'. [ 175.111401][ T6488] netlink: 43 bytes leftover after parsing attributes in process `syz.0.180'. [ 175.130015][ T6485] loop4: detected capacity change from 0 to 1024 [ 175.161699][ T6488] netlink: 'syz.0.180': attribute type 5 has an invalid length. [ 175.190051][ T6488] netlink: 43 bytes leftover after parsing attributes in process `syz.0.180'. [ 175.212384][ T6255] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.251308][ T6485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 175.304449][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.178'. [ 175.341013][ T6485] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.461480][ T6485] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.585075][ T6485] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 175.630705][ T6485] EXT4-fs (loop4): This should not happen!! Data will be lost [ 175.630705][ T6485] [ 175.676313][ T6484] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.758387][ T6504] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.789956][ T6255] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.826313][ T6484] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 175.918628][ T6504] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.014007][ T6484] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.042498][ T6517] loop2: detected capacity change from 0 to 1024 [ 176.086377][ T6504] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.120388][ T6517] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 176.159500][ T6485] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.172602][ T6517] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 176.232823][ T6517] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.186: iget: special inode unallocated [ 176.335590][ T6495] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 176.461624][ T6484] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: block 3: comm syz.4.179: lblock 3 mapped to illegal pblock 3 (length 1) [ 176.817573][ T6517] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 176.821137][ T6517] EXT4-fs (loop2): Remounting filesystem read-only [ 176.830360][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 176.830391][ C0] EXT4-fs (loop2): initial error at time 1771868653: ext4_get_journal_inode:5863: inode 32 [ 176.830448][ C0] EXT4-fs (loop2): last error at time 1771868653: ext4_get_journal_inode:5863: inode 32 [ 176.878176][ T6517] EXT4-fs (loop2): no journal found [ 176.893749][ T6517] EXT4-fs (loop2): can't get journal size [ 176.951756][ T6517] EXT4-fs (loop2): filesystem is read-only [ 176.996801][ T6517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 177.245475][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 177.591538][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.723651][ T1160] hsr_slave_0: left promiscuous mode [ 177.754346][ T1160] hsr_slave_1: left promiscuous mode [ 177.776143][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.813841][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.867237][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.897725][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.970797][ T6535] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 178.146525][ T1160] veth1_macvtap: left promiscuous mode [ 178.176390][ T1160] veth0_macvtap: left promiscuous mode [ 178.220040][ T1160] veth1_vlan: left promiscuous mode [ 178.247064][ T1160] veth0_vlan: left promiscuous mode [ 178.481711][ T30] audit: type=1326 audit(1771868655.417:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8df9c629 code=0x7ffc0000 [ 178.588368][ T30] audit: type=1326 audit(1771868655.417:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8df9c629 code=0x7ffc0000 [ 178.846992][ T30] audit: type=1326 audit(1771868655.417:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4a8df9c629 code=0x7ffc0000 [ 178.869897][ T30] audit: type=1326 audit(1771868655.417:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8df9c629 code=0x7ffc0000 [ 179.029454][ T30] audit: type=1326 audit(1771868655.417:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a8df9c629 code=0x7ffc0000 [ 179.121883][ T6567] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.222610][ T6569] loop1: detected capacity change from 0 to 1024 [ 179.239828][ T6569] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 179.264727][ T6569] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 179.299679][ T6569] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #32: comm syz.1.205: iget: special inode unallocated [ 179.337316][ T6569] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 179.337623][ T6569] EXT4-fs (loop1): Remounting filesystem read-only [ 179.346959][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 179.346982][ C1] EXT4-fs (loop1): initial error at time 1771868656: ext4_get_journal_inode:5863: inode 32 [ 179.347023][ C1] EXT4-fs (loop1): last error at time 1771868656: ext4_get_journal_inode:5863: inode 32 [ 179.404359][ T6569] EXT4-fs (loop1): no journal found [ 179.418789][ T6569] EXT4-fs (loop1): can't get journal size [ 179.436404][ T6569] EXT4-fs (loop1): filesystem is read-only [ 179.493864][ T6569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 179.630266][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.289065][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 180.351128][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 180.468393][ T6584] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 180.677547][ T6592] netlink: 212 bytes leftover after parsing attributes in process `syz.1.211'. [ 180.890782][ T6575] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.393244][ T6255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.414288][ T6255] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.496406][ T6255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.529475][ T6255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.552472][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.559664][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.574260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.581408][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.210918][ T6640] loop3: detected capacity change from 0 to 512 [ 183.380867][ T6640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.495014][ T6255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.503747][ T6640] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.835963][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.788471][ T6676] mmap: syz.2.224 (6676) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.729424][ T6255] veth0_vlan: entered promiscuous mode [ 185.787062][ T6255] veth1_vlan: entered promiscuous mode [ 185.981183][ T6255] veth0_macvtap: entered promiscuous mode [ 186.999597][ T6255] veth1_macvtap: entered promiscuous mode [ 187.678073][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.721706][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.786970][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.799450][ T6698] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 187.931212][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.941687][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.971698][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.012558][ T6707] loop3: detected capacity change from 0 to 1024 [ 188.116366][ T6707] EXT4-fs: Ignoring removed orlov option [ 188.185581][ T6707] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 188.286789][ T6707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.502856][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.978301][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.133348][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.172475][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.181696][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.361748][ T6760] capability: warning: `syz.6.259' uses 32-bit capabilities (legacy support in use) [ 191.374681][ T6748] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 192.227124][ T6770] loop3: detected capacity change from 0 to 1764 [ 192.248584][ T6770] iso9660: Unknown parameter '' [ 192.358357][ T6772] loop1: detected capacity change from 0 to 1024 [ 192.412119][ T6772] EXT4-fs: Ignoring removed orlov option [ 192.634762][ T6772] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 192.947242][ T6772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.556442][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.754281][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.760751][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.415912][ T6811] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 196.999585][ T6858] loop3: detected capacity change from 0 to 1024 [ 197.047691][ T6858] EXT4-fs: inline encryption not supported [ 197.113333][ T30] audit: type=1326 audit(1771868674.057:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019139c629 code=0x7ffc0000 [ 197.248455][ T6858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.315633][ T30] audit: type=1326 audit(1771868674.107:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019139c629 code=0x7ffc0000 [ 197.454165][ T6858] EXT4-fs (loop3): shut down requested (1) [ 197.483590][ T30] audit: type=1326 audit(1771868674.127:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019139c629 code=0x7ffc0000 [ 197.818631][ T30] audit: type=1326 audit(1771868674.127:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f019139dec7 code=0x7ffc0000 [ 197.850080][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.965525][ T30] audit: type=1326 audit(1771868674.137:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f019135cece code=0x7ffc0000 [ 198.214718][ T30] audit: type=1326 audit(1771868674.137:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f019135cece code=0x7ffc0000 [ 198.237261][ T30] audit: type=1326 audit(1771868674.137:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f019135cece code=0x7ffc0000 [ 198.276149][ T6870] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 198.393941][ T30] audit: type=1326 audit(1771868674.137:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f019135cece code=0x7ffc0000 [ 198.433889][ T30] audit: type=1326 audit(1771868674.167:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019139c629 code=0x7ffc0000 [ 198.467920][ T30] audit: type=1326 audit(1771868674.167:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.1.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019139c629 code=0x7ffc0000 [ 201.097957][ T6915] overlayfs: missing 'lowerdir' [ 204.816139][ T6944] No such timeout policy "syz1" [ 207.357085][ T6957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.327'. [ 211.827803][ T6985] No such timeout policy "syz1" [ 214.977487][ T7009] loop2: detected capacity change from 0 to 1024 [ 215.015054][ T7009] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.071915][ T7009] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.205250][ T7009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.755954][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.824154][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.835050][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.843282][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.858708][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.868135][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.178060][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 216.186895][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 216.189251][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 216.193296][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 218.363928][ T5843] Bluetooth: hci5: command tx timeout [ 218.403845][ T7040] No such timeout policy "syz1" [ 219.961883][ T7026] chnl_net:caif_netlink_parms(): no params data found [ 220.048429][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 220.424055][ T5847] Bluetooth: hci5: command tx timeout [ 220.466424][ T7093] tipc: Failed to remove unknown binding: 66,0,0/0:3782268012/3782268014 [ 220.475556][ T7093] tipc: Failed to remove unknown binding: 66,0,0/0:3782268012/3782268013 [ 220.487579][ T7093] tipc: Failed to remove unknown binding: 66,0,0/0:3782268012/3782268014 [ 220.496331][ T7093] tipc: Failed to remove unknown binding: 66,0,0/0:3782268012/3782268013 [ 220.999431][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.673848][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.693832][ T7026] bridge_slave_0: entered allmulticast mode [ 221.767419][ T7026] bridge_slave_0: entered promiscuous mode [ 221.796543][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.836337][ T7026] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.907586][ T7026] bridge_slave_1: entered allmulticast mode [ 221.973458][ T7026] bridge_slave_1: entered promiscuous mode [ 222.113294][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 222.404072][ T7026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.495273][ T5847] Bluetooth: hci5: command tx timeout [ 223.604130][ T7135] loop3: detected capacity change from 0 to 1024 [ 223.994640][ T7135] EXT4-fs: Ignoring removed orlov option [ 224.042029][ T3442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.058444][ T7135] EXT4-fs: Ignoring removed nobh option [ 224.329201][ T7135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.093572][ T5847] Bluetooth: hci5: command tx timeout [ 227.231787][ T7026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.912140][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.139412][ T3442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.066905][ T7026] team0: Port device team_slave_0 added [ 229.097620][ T7026] team0: Port device team_slave_1 added [ 229.436942][ T3442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.452663][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 229.583020][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.647202][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.686693][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.022292][ T7026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.905326][ T7026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.912310][ T7026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.143601][ T7026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.465198][ T7184] fido_id[7184]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 232.716619][ T7200] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.773108][ T3442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.375037][ T7026] hsr_slave_0: entered promiscuous mode [ 233.399968][ T7026] hsr_slave_1: entered promiscuous mode [ 233.413328][ T7026] debugfs: 'hsr0' already exists in 'hsr' [ 233.434719][ T7026] Cannot create hsr debugfs directory [ 234.772928][ T3442] bridge_slave_1: left allmulticast mode [ 234.981181][ T3442] bridge_slave_1: left promiscuous mode [ 234.992558][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.207493][ T7244] loop4: detected capacity change from 0 to 1024 [ 235.352014][ T7244] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 235.901109][ T3442] bridge_slave_0: left allmulticast mode [ 235.934214][ T3442] bridge_slave_0: left promiscuous mode [ 235.940098][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.706415][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.809793][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.871279][ T3442] bond0 (unregistering): Released all slaves [ 238.040024][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 238.410194][ T7026] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 238.539650][ T7026] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 238.903981][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 239.225673][ T7286] loop2: detected capacity change from 0 to 1024 [ 239.845317][ T7286] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 240.240267][ T5936] usb 5-1: device descriptor read/64, error -71 [ 240.385278][ T7026] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 240.520292][ T7026] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 240.583657][ T5936] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.816911][ T5936] usb 5-1: device descriptor read/64, error -71 [ 240.948880][ T5936] usb usb5-port1: attempt power cycle [ 241.614249][ T5936] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 241.736722][ T5936] usb 5-1: device descriptor read/8, error -71 [ 242.663724][ T3442] hsr_slave_0: left promiscuous mode [ 242.716761][ T3442] hsr_slave_1: left promiscuous mode [ 242.754823][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.789267][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.216998][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.247834][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.359616][ T3442] veth1_macvtap: left promiscuous mode [ 243.381738][ T3442] veth0_macvtap: left promiscuous mode [ 243.401667][ T3442] veth1_vlan: left promiscuous mode [ 243.414988][ T3442] veth0_vlan: left promiscuous mode [ 244.828424][ T7341] loop3: detected capacity change from 0 to 1024 [ 245.436084][ T7341] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 247.964201][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 248.316105][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 249.275165][ T7345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.448'. [ 250.134977][ T7026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.198386][ T7365] netlink: 52 bytes leftover after parsing attributes in process `syz.0.454'. [ 250.245137][ T7026] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.263847][ T7365] netlink: 56 bytes leftover after parsing attributes in process `syz.0.454'. [ 250.269533][ T7362] loop3: detected capacity change from 0 to 1024 [ 250.369204][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.376397][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.516053][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.523399][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.542358][ T7362] EXT4-fs: inline encryption not supported [ 251.010399][ T7026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.093620][ T7026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.496543][ T7362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.794869][ T7382] loop4: detected capacity change from 0 to 1024 [ 251.802981][ T7382] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 252.736163][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.004437][ T7404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.464'. [ 253.071541][ T7026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.966184][ T7431] xfrm0: entered promiscuous mode [ 255.070371][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.117555][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.607758][ T7026] veth0_vlan: entered promiscuous mode [ 257.677885][ T7026] veth1_vlan: entered promiscuous mode [ 258.978991][ T7026] veth0_macvtap: entered promiscuous mode [ 259.188018][ T7026] veth1_macvtap: entered promiscuous mode [ 259.559117][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.946800][ T7026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.122963][ T7476] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 260.928501][ T7475] lo speed is unknown, defaulting to 1000 [ 260.934506][ T7475] lo speed is unknown, defaulting to 1000 [ 260.942555][ T7475] lo speed is unknown, defaulting to 1000 [ 260.953810][ T7475] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.967842][ T7475] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 261.006178][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.076836][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.135239][ T7475] lo speed is unknown, defaulting to 1000 [ 261.143474][ T7475] lo speed is unknown, defaulting to 1000 [ 261.163845][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.192611][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.234360][ T7475] lo speed is unknown, defaulting to 1000 [ 261.242287][ T7475] lo speed is unknown, defaulting to 1000 [ 261.254235][ T7475] lo speed is unknown, defaulting to 1000 [ 261.283200][ T7475] lo speed is unknown, defaulting to 1000 [ 263.651829][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.686536][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.991351][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.016680][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.866928][ T7524] loop6: detected capacity change from 0 to 1024 [ 266.968182][ T7524] EXT4-fs (loop6): blocks per group (131072) and clusters per group (8192) inconsistent [ 267.974288][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.493'. [ 269.268310][ T7552] netlink: 44 bytes leftover after parsing attributes in process `syz.4.497'. [ 269.383501][ T7552] netlink: 43 bytes leftover after parsing attributes in process `syz.4.497'. [ 269.392943][ T7552] netlink: 'syz.4.497': attribute type 5 has an invalid length. [ 269.546054][ T7552] netlink: 43 bytes leftover after parsing attributes in process `syz.4.497'. [ 272.103797][ T7566] loop2: detected capacity change from 0 to 4096 [ 272.994389][ T7578] loop4: detected capacity change from 0 to 1024 [ 273.004315][ T7578] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 273.796575][ T7566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.735431][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.543630][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 280.254357][ T7621] netlink: 44 bytes leftover after parsing attributes in process `syz.4.517'. [ 280.485876][ T7621] netlink: 43 bytes leftover after parsing attributes in process `syz.4.517'. [ 280.793654][ T7621] netlink: 'syz.4.517': attribute type 5 has an invalid length. [ 280.813866][ T7621] netlink: 43 bytes leftover after parsing attributes in process `syz.4.517'. [ 282.316977][ T7634] syz.7.522 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 282.803449][ T7638] loop2: detected capacity change from 0 to 1024 [ 282.916433][ T7638] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 283.517760][ T7636] loop7: detected capacity change from 0 to 256 [ 283.804694][ T7636] FAT-fs (loop7): Directory bread(block 1285) failed [ 283.811605][ T7636] FAT-fs (loop7): Directory bread(block 1286) failed [ 283.938677][ T7636] FAT-fs (loop7): Directory bread(block 1287) failed [ 284.088506][ T7636] FAT-fs (loop7): Directory bread(block 1288) failed [ 284.204099][ T7634] FAT-fs (loop7): Directory bread(block 1285) failed [ 284.211084][ T7634] FAT-fs (loop7): Directory bread(block 1286) failed [ 284.223656][ T7634] FAT-fs (loop7): Directory bread(block 1287) failed [ 284.231934][ T7634] FAT-fs (loop7): Directory bread(block 1288) failed [ 284.313792][ T7634] FAT-fs (loop7): FAT read failed (blocknr 1281) [ 285.291044][ T7656] loop6: detected capacity change from 0 to 1024 [ 285.514536][ T7656] EXT4-fs: inline encryption not supported [ 287.554991][ T7656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.603756][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.623790][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.648803][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.688152][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.704506][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.071705][ T7670] lo speed is unknown, defaulting to 1000 [ 288.546707][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.608579][ T7681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.534'. [ 289.467054][ T7670] chnl_net:caif_netlink_parms(): no params data found [ 289.773633][ T5840] Bluetooth: hci4: command tx timeout [ 289.962396][ T7697] loop4: detected capacity change from 0 to 1024 [ 290.598252][ T7697] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 291.849373][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.856546][ T5840] Bluetooth: hci4: command tx timeout [ 291.862164][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.869425][ T7670] bridge_slave_0: entered allmulticast mode [ 291.877606][ T7670] bridge_slave_0: entered promiscuous mode [ 291.891909][ T7670] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.899256][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.906855][ T7670] bridge_slave_1: entered allmulticast mode [ 293.001147][ T7670] bridge_slave_1: entered promiscuous mode [ 293.606266][ T7670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.649064][ T7670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.940540][ T5840] Bluetooth: hci4: command tx timeout [ 294.138435][ T7670] team0: Port device team_slave_0 added [ 294.187082][ T7670] team0: Port device team_slave_1 added [ 294.400587][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.473873][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.633596][ T7670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.706052][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.713030][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.003650][ T7670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.023708][ T5840] Bluetooth: hci4: command tx timeout [ 296.305852][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 296.439606][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 296.532271][ T7670] hsr_slave_0: entered promiscuous mode [ 296.610416][ T7670] hsr_slave_1: entered promiscuous mode [ 296.656391][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 296.664601][ T7670] debugfs: 'hsr0' already exists in 'hsr' [ 296.671358][ T7670] Cannot create hsr debugfs directory [ 296.948141][ T7747] loop7: detected capacity change from 0 to 1024 [ 297.046692][ T7747] EXT4-fs: Ignoring removed orlov option [ 297.184333][ T7747] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.283997][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 297.292821][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'. [ 297.452476][ T74] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.490306][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'. [ 297.529888][ T74] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.577273][ T5914] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 297.772451][ T74] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.803617][ T5914] usb 8-1: Using ep0 maxpacket: 8 [ 297.820593][ T74] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.172504][ T7760] overlayfs: missing 'lowerdir' [ 299.627419][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 299.634008][ T5914] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 299.648339][ T5914] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 299.783823][ T5914] usb 8-1: config 179 has no interface number 0 [ 299.813052][ T5914] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 300.074187][ T5914] usb 8-1: config 179 interface 65 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 300.574782][ T5914] usb 8-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 300.718837][ T5914] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 300.756086][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.775407][ T7026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.932862][ T5914] usb 8-1: can't set config #179, error -71 [ 300.965637][ T5914] usb 8-1: USB disconnect, device number 2 [ 301.737148][ T7670] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 301.875413][ T7670] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.957899][ T7670] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 302.036005][ T7670] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 302.508781][ T7794] loop6: detected capacity change from 0 to 1024 [ 302.720500][ T7794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 302.811006][ T7670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.851374][ T7794] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.977420][ T7670] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.244436][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.251585][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.280268][ T7799] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 303.296986][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.304163][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.466458][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 306.041494][ T7834] overlayfs: missing 'lowerdir' [ 308.277955][ T7843] loop6: detected capacity change from 0 to 1024 [ 308.325281][ T7843] EXT4-fs: Ignoring removed orlov option [ 308.418640][ T7843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.863636][ T5832] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 308.928863][ T7670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.063910][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 309.071934][ T5832] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 309.109990][ T5832] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 309.162856][ T5832] usb 7-1: config 179 has no interface number 0 [ 309.179397][ T5832] usb 7-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 309.224684][ T5832] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 309.265019][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.556886][ T5835] usb 7-1: USB disconnect, device number 2 [ 309.625818][ T7864] loop7: detected capacity change from 0 to 1024 [ 309.667776][ T7864] EXT4-fs: inline encryption not supported [ 309.768086][ T7864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.038176][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 310.074014][ T7026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.268392][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.380788][ T7670] veth0_vlan: entered promiscuous mode [ 310.416641][ T7867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.475671][ T7867] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 310.480471][ T7670] veth1_vlan: entered promiscuous mode [ 310.604667][ T7867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.610671][ T7867] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 310.718653][ T7867] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 310.736478][ T7867] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 310.988540][ T7670] veth0_macvtap: entered promiscuous mode [ 311.813308][ T7867] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 311.821145][ T7670] veth1_macvtap: entered promiscuous mode [ 311.840620][ T7867] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 311.863868][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 311.870713][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.984751][ T7867] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 311.995058][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.062496][ T7867] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 312.424860][ T7898] overlayfs: missing 'lowerdir' [ 313.841758][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 313.848405][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 313.863601][ T5847] Bluetooth: hci5: command 0x0c1a tx timeout [ 313.947131][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 314.084205][ T7867] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 314.094104][ T1036] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.103624][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 314.633648][ T1036] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.680931][ T1036] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.706402][ T7867] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.699536][ T1036] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.043661][ T5847] Bluetooth: hci5: command 0x0c1a tx timeout [ 316.050423][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 316.050452][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 316.445436][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.487047][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.500725][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.500833][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.559074][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.623622][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.654322][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 317.212788][ T7920] loop2: detected capacity change from 0 to 1024 [ 317.224857][ T7920] EXT4-fs: Ignoring removed orlov option [ 317.279296][ T7920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.300910][ T7921] loop6: detected capacity change from 0 to 1024 [ 317.310908][ T7921] EXT4-fs: inline encryption not supported [ 317.392125][ T7921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.430039][ T7921] EXT4-fs (loop6): shut down requested (1) [ 317.624915][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 317.633134][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.580526][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 318.663238][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 318.735637][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 318.997131][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 319.220926][ T10] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 319.263623][ T10] usb 3-1: config 179 has no interface number 0 [ 319.290157][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 319.368935][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 319.424475][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.487854][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 321.903638][ T5914] usb 3-1: USB disconnect, device number 2 [ 321.987025][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.055962][ T7948] loop6: detected capacity change from 0 to 128 [ 322.153648][ T7948] FAT-fs (loop6): bogus number of reserved sectors [ 322.174642][ T7948] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 322.191667][ T7947] lo speed is unknown, defaulting to 1000 [ 322.203633][ T7948] FAT-fs (loop6): Can't find a valid FAT filesystem [ 326.380699][ T7977] loop3: detected capacity change from 0 to 1024 [ 326.427462][ T7977] EXT4-fs: inline encryption not supported [ 326.564540][ T7981] loop4: detected capacity change from 0 to 164 [ 326.587533][ T7977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.668921][ T7977] EXT4-fs (loop3): shut down requested (1) [ 326.680386][ T7981] Unable to read rock-ridge attributes [ 326.913461][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.192936][ T7996] loop4: detected capacity change from 0 to 1024 [ 327.354577][ T7996] EXT4-fs: Ignoring removed orlov option [ 328.546502][ T8004] loop3: detected capacity change from 0 to 1024 [ 328.682948][ T8004] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 329.196735][ T7996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.673622][ T5832] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 329.903647][ T5832] usb 5-1: Using ep0 maxpacket: 8 [ 329.939278][ T5832] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 329.971529][ T5832] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 330.018982][ T8024] loop7: detected capacity change from 0 to 1024 [ 330.033638][ T5832] usb 5-1: config 179 has no interface number 0 [ 330.038291][ T8024] EXT4-fs: inline encryption not supported [ 330.083808][ T5832] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 330.133687][ T5832] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 330.150073][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.160672][ T8024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.334409][ T8024] EXT4-fs (loop7): shut down requested (1) [ 330.530599][ T24] usb 5-1: USB disconnect, device number 6 [ 330.544375][ T7026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.905540][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.716227][ T8049] loop2: detected capacity change from 0 to 1024 [ 333.359326][ T8049] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 333.835628][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz.4.626'. [ 333.883700][ T8051] netlink: 43 bytes leftover after parsing attributes in process `syz.4.626'. [ 333.923628][ T8051] netlink: 'syz.4.626': attribute type 5 has an invalid length. [ 333.931294][ T8051] netlink: 43 bytes leftover after parsing attributes in process `syz.4.626'. [ 336.144258][ T8095] loop2: detected capacity change from 0 to 1024 [ 336.503870][ T8095] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 337.400576][ T8090] 9p: Bad value for 'wfdno' [ 339.996781][ T8133] loop7: detected capacity change from 0 to 1024 [ 340.343273][ T8133] EXT4-fs (loop7): blocks per group (131072) and clusters per group (8192) inconsistent [ 343.693025][ T8173] loop4: detected capacity change from 0 to 1024 [ 344.391727][ T8173] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 345.805922][ T8191] netlink: 44 bytes leftover after parsing attributes in process `syz.7.682'. [ 345.854006][ T8191] netlink: 43 bytes leftover after parsing attributes in process `syz.7.682'. [ 345.862926][ T8191] netlink: 'syz.7.682': attribute type 5 has an invalid length. [ 345.965519][ T8191] netlink: 43 bytes leftover after parsing attributes in process `syz.7.682'. [ 347.036865][ T8209] loop7: detected capacity change from 0 to 1024 [ 347.155187][ T8209] EXT4-fs (loop7): blocks per group (131072) and clusters per group (8192) inconsistent [ 351.110195][ T8247] loop7: detected capacity change from 0 to 1024 [ 351.696559][ T8247] EXT4-fs (loop7): blocks per group (131072) and clusters per group (8192) inconsistent [ 355.767410][ T8285] loop7: detected capacity change from 0 to 1024 [ 356.403139][ T8285] EXT4-fs (loop7): blocks per group (131072) and clusters per group (8192) inconsistent [ 362.307072][ T8320] loop3: detected capacity change from 0 to 1024 [ 362.935134][ T8320] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 367.524733][ T8363] loop3: detected capacity change from 0 to 1024 [ 368.168303][ T8363] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 369.646359][ T7824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.205643][ T7824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.276621][ T7824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.032737][ T8416] loop3: detected capacity change from 0 to 1024 [ 376.626173][ T8416] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 377.055431][ T7824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.751912][ T8417] overlayfs: missing 'lowerdir' [ 377.973296][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.983639][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.558596][ T7824] bridge_slave_1: left allmulticast mode [ 380.575743][ T7824] bridge_slave_1: left promiscuous mode [ 380.608057][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.776321][ T7824] bridge_slave_0: left allmulticast mode [ 380.819113][ T7824] bridge_slave_0: left promiscuous mode [ 380.853421][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.213916][ T8487] overlayfs: missing 'lowerdir' [ 388.017876][ T7824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.437582][ T7824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.644255][ T7824] bond0 (unregistering): Released all slaves [ 390.401966][ T7824] tipc: Disabling bearer [ 390.446993][ T7824] tipc: Left network mode [ 391.216618][ T8522] loop3: detected capacity change from 0 to 1024 [ 391.805312][ T8522] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 395.023808][ T8555] overlayfs: missing 'lowerdir' [ 400.535881][ T8583] loop6: detected capacity change from 0 to 1024 [ 401.200708][ T8583] EXT4-fs (loop6): blocks per group (131072) and clusters per group (8192) inconsistent [ 401.304255][ T8578] IPVS: sh: FWM 3 0x00000003 - no destination available [ 401.406979][ T10] IPVS: starting estimator thread 0... [ 401.518562][ T8584] IPVS: using max 22 ests per chain, 52800 per kthread [ 402.197071][ T7824] hsr_slave_0: left promiscuous mode [ 402.407526][ T7824] hsr_slave_1: left promiscuous mode [ 402.423250][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.452463][ T8595] loop7: detected capacity change from 0 to 256 [ 402.461529][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.565056][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.604918][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.084046][ T7824] veth1_macvtap: left promiscuous mode [ 403.115174][ T7824] veth0_macvtap: left promiscuous mode [ 403.142894][ T7824] veth1_vlan: left promiscuous mode [ 403.182262][ T7824] veth0_vlan: left promiscuous mode [ 404.813844][ T8614] overlayfs: missing 'lowerdir' [ 410.930818][ T7824] team0 (unregistering): Port device team_slave_1 removed [ 411.247336][ T7824] team0 (unregistering): Port device team_slave_0 removed [ 411.760635][ T8635] loop3: detected capacity change from 0 to 1024 [ 411.912683][ T8635] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 413.635787][ T5914] lo speed is unknown, defaulting to 1000 [ 413.641754][ T5914] syz0: Port: 1 Link DOWN [ 417.930153][ T8682] geneve2: entered promiscuous mode [ 418.077714][ T7822] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 418.180871][ T7822] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 418.289748][ T7822] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 418.365241][ T7822] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 418.778102][ T8690] netlink: 64 bytes leftover after parsing attributes in process `syz.8.840'. [ 424.788245][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.803835][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.812610][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.821033][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.830426][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.163507][ T8745] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 426.350940][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 426.388622][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 426.400373][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 426.409017][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 426.416891][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 426.893761][ T5844] Bluetooth: hci2: command tx timeout [ 427.129854][ T8765] loop3: detected capacity change from 0 to 256 [ 427.533212][ T8734] chnl_net:caif_netlink_parms(): no params data found [ 428.118061][ T8774] syz.3.861 uses obsolete (PF_INET,SOCK_PACKET) [ 428.294106][ T8766] overlayfs: missing 'lowerdir' [ 428.493903][ T5844] Bluetooth: hci7: command tx timeout [ 428.610711][ T8778] loop7: detected capacity change from 0 to 1024 [ 428.668018][ T8778] EXT4-fs: Ignoring removed orlov option [ 428.986437][ T5844] Bluetooth: hci2: command tx timeout [ 429.360887][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.365883][ T8778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.373213][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.500986][ T8734] bridge_slave_0: entered allmulticast mode [ 429.545362][ T8734] bridge_slave_0: entered promiscuous mode [ 429.565143][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.603690][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.633775][ T8734] bridge_slave_1: entered allmulticast mode [ 429.683226][ T8734] bridge_slave_1: entered promiscuous mode [ 429.881599][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.001400][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.507925][ T8734] team0: Port device team_slave_0 added [ 430.516931][ T8734] team0: Port device team_slave_1 added [ 430.553506][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.565207][ T8791] netlink: 40 bytes leftover after parsing attributes in process `syz.8.865'. [ 430.593965][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.603390][ T51] Bluetooth: hci7: command tx timeout [ 430.790251][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.813718][ T5990] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 431.081646][ T51] Bluetooth: hci2: command tx timeout [ 431.123610][ T5990] usb 8-1: Using ep0 maxpacket: 8 [ 431.316076][ T5990] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 431.353627][ T5990] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 431.413703][ T5990] usb 8-1: config 179 has no interface number 0 [ 431.420076][ T5990] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 431.513725][ T5990] usb 8-1: config 179 interface 65 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 431.584565][ T5990] usb 8-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 431.703339][ T5990] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 431.790535][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.364273][ T8809] overlayfs: missing 'lowerdir' [ 433.579361][ T51] Bluetooth: hci7: command 0x040f tx timeout [ 433.579385][ T5840] Bluetooth: hci2: command tx timeout [ 434.275702][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 434.284100][ T5990] usb 8-1: can't set config #179, error -32 [ 434.386063][ T5990] usb 8-1: USB disconnect, device number 3 [ 434.619090][ T7026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.691653][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.755663][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.842359][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.619548][ T51] Bluetooth: hci7: command 0x040f tx timeout [ 437.595210][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.643616][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.700926][ T51] Bluetooth: hci7: command 0x040f tx timeout [ 437.743024][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.877'. [ 438.173861][ T8734] hsr_slave_0: entered promiscuous mode [ 438.204942][ T8734] hsr_slave_1: entered promiscuous mode [ 438.232638][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 438.826489][ T8847] overlayfs: missing 'lowerdir' [ 440.200250][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.215726][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.765954][ T8852] loop6: detected capacity change from 0 to 1024 [ 440.773480][ T8852] EXT4-fs: Ignoring removed orlov option [ 440.930745][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.973585][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.096342][ T8852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.383662][ T5990] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 441.603636][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 441.684820][ T5990] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 441.693120][ T5990] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 441.753803][ T5990] usb 7-1: config 179 has no interface number 0 [ 441.780197][ T5990] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 441.793239][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.853650][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.864021][ T5990] usb 7-1: config 179 interface 65 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 441.920454][ T5990] usb 7-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 441.953842][ T5990] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 441.963017][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.406447][ T5936] usb 7-1: USB disconnect, device number 3 [ 442.709708][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.773740][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.416349][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.427416][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.466702][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.494408][ T8752] bridge_slave_0: entered allmulticast mode [ 443.502623][ T8752] bridge_slave_0: entered promiscuous mode [ 443.701404][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.734862][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.766622][ T8752] bridge_slave_1: entered allmulticast mode [ 443.818234][ T8752] bridge_slave_1: entered promiscuous mode [ 445.187659][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.436850][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.666530][ T8752] team0: Port device team_slave_0 added [ 446.673891][ T12] bridge_slave_1: left allmulticast mode [ 446.679618][ T12] bridge_slave_1: left promiscuous mode [ 446.703982][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.006554][ T12] bridge_slave_0: left allmulticast mode [ 447.012266][ T12] bridge_slave_0: left promiscuous mode [ 447.057039][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.528879][ T8917] overlayfs: missing 'lowerdir' [ 449.283981][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.894'. [ 449.974135][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.003830][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.033768][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.060765][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.073833][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.153770][ T8934] loop6: detected capacity change from 0 to 1024 [ 450.205281][ T8934] EXT4-fs: Ignoring removed orlov option [ 450.305140][ T8934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.492396][ T8936] 9p: Bad value for 'wfdno' [ 450.722823][ T5990] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 450.933813][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 450.973615][ T5990] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 451.013592][ T5990] usb 7-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 451.087909][ T5990] usb 7-1: config 179 has no interface number 0 [ 451.108141][ T5990] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 451.138438][ T5990] usb 7-1: config 179 interface 65 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 451.182960][ T5990] usb 7-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 451.213660][ T5990] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 451.266318][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.314197][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.415381][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.460525][ T12] bond0 (unregistering): Released all slaves [ 451.529315][ T5936] usb 7-1: USB disconnect, device number 4 [ 451.614407][ T8752] team0: Port device team_slave_1 added [ 452.261121][ T51] Bluetooth: hci0: command tx timeout [ 452.777934][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.786975][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.853146][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.904851][ T8734] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 452.958426][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.971845][ T8734] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 453.049962][ T8734] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 453.144669][ T8734] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 453.240382][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.274969][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.333658][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.837408][ T8752] hsr_slave_0: entered promiscuous mode [ 453.885609][ T8752] hsr_slave_1: entered promiscuous mode [ 453.892089][ T8752] debugfs: 'hsr0' already exists in 'hsr' [ 453.917619][ T8752] Cannot create hsr debugfs directory [ 453.981698][ T8976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.908'. [ 454.271629][ T8980] loop7: detected capacity change from 0 to 256 [ 454.343136][ T51] Bluetooth: hci0: command tx timeout [ 454.381591][ T8980] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.397362][ T8978] 9p: Bad value for 'wfdno' [ 455.093147][ T12] hsr_slave_0: left promiscuous mode [ 455.146648][ T12] hsr_slave_1: left promiscuous mode [ 455.215854][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.233601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.344135][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.473657][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.413693][ T51] Bluetooth: hci0: command tx timeout [ 456.607122][ T12] veth1_macvtap: left promiscuous mode [ 456.612661][ T12] veth0_macvtap: left promiscuous mode [ 456.639047][ T12] veth1_vlan: left promiscuous mode [ 456.668078][ T12] veth0_vlan: left promiscuous mode [ 457.160654][ T9008] loop3: detected capacity change from 0 to 4096 [ 457.305656][ T9008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.481993][ T9008] tipc: Can't bind to reserved service type 2 [ 457.885209][ T12] team0 (unregistering): Port device team_slave_1 removed [ 457.920747][ T12] team0 (unregistering): Port device team_slave_0 removed [ 458.495556][ T51] Bluetooth: hci0: command tx timeout [ 458.637057][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.919'. [ 458.943462][ T9034] 9p: Bad value for 'wfdno' [ 458.985427][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 459.162458][ T12] IPVS: stop unused estimator thread 0... [ 460.522297][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.543306][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.883948][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.894904][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.914358][ T8928] bridge_slave_0: entered allmulticast mode [ 460.931618][ T8928] bridge_slave_0: entered promiscuous mode [ 460.981844][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.013106][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.042909][ T8928] bridge_slave_1: entered allmulticast mode [ 461.061680][ T8928] bridge_slave_1: entered promiscuous mode [ 461.082870][ T8734] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.248665][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 461.277766][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.474867][ T9079] 9p: Bad value for 'wfdno' [ 461.662301][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.740809][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.769294][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.807517][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.814831][ T7819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.875361][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.882554][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.130169][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.559579][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.665031][ T8928] team0: Port device team_slave_0 added [ 462.700483][ T8928] team0: Port device team_slave_1 added [ 462.799062][ T8752] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 462.892505][ T8734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.913808][ T8734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.106614][ T8752] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 463.144208][ T8752] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 463.190091][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.204959][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.285963][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.333391][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.363754][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.431464][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.480897][ T8752] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.026907][ T8928] hsr_slave_0: entered promiscuous mode [ 464.051626][ T8928] hsr_slave_1: entered promiscuous mode [ 464.077340][ T8928] debugfs: 'hsr0' already exists in 'hsr' [ 464.083185][ T8928] Cannot create hsr debugfs directory [ 464.229200][ T12] bridge_slave_1: left allmulticast mode [ 464.237723][ T12] bridge_slave_1: left promiscuous mode [ 464.251697][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.574007][ T12] bridge_slave_0: left allmulticast mode [ 464.591793][ T12] bridge_slave_0: left promiscuous mode [ 464.603215][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.770405][ T9136] overlayfs: missing 'lowerdir' [ 465.278766][ T9140] 9p: Bad value for 'wfdno' [ 467.947149][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.174035][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.271012][ T12] bond0 (unregistering): Released all slaves [ 468.742362][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.029400][ T9165] loop3: detected capacity change from 0 to 1024 [ 469.134753][ T9165] EXT4-fs: Ignoring removed orlov option [ 469.405899][ T9165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.559485][ T9170] 9p: Bad value for 'wfdno' [ 469.815339][ T12] hsr_slave_0: left promiscuous mode [ 469.854987][ T8673] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 469.887525][ T12] hsr_slave_1: left promiscuous mode [ 469.903840][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.941728][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.044769][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.098147][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.113688][ T8673] usb 4-1: Using ep0 maxpacket: 8 [ 470.204208][ T8673] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 470.212513][ T8673] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 470.244776][ T12] veth1_macvtap: left promiscuous mode [ 470.264043][ T12] veth0_macvtap: left promiscuous mode [ 470.288772][ T8673] usb 4-1: config 179 has no interface number 0 [ 470.299865][ T12] veth1_vlan: left promiscuous mode [ 470.321121][ T8673] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 470.341668][ T12] veth0_vlan: left promiscuous mode [ 470.358456][ T8673] usb 4-1: config 179 interface 65 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 471.318689][ T9187] overlayfs: missing 'lowerdir' [ 472.266263][ T8673] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 472.293694][ T8673] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 472.302774][ T8673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.272196][ T8673] usb 4-1: can't set config #179, error -71 [ 473.367949][ T8673] usb 4-1: USB disconnect, device number 2 [ 474.515835][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.104788][ T9200] loop3: detected capacity change from 0 to 1024 [ 475.335853][ T9200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 475.483835][ T9200] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.554619][ T12] team0 (unregistering): Port device team_slave_1 removed [ 475.614449][ T12] team0 (unregistering): Port device team_slave_0 removed [ 475.747135][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 476.232180][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.455840][ T9211] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 477.657722][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.755022][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.762190][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.865028][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.872225][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.514820][ T9233] netlink: 44 bytes leftover after parsing attributes in process `syz.7.969'. [ 478.533720][ T9233] netlink: 59 bytes leftover after parsing attributes in process `syz.7.969'. [ 478.556607][ T9234] 9p: Bad value for 'wfdno' [ 479.998245][ T9244] loop7: detected capacity change from 0 to 1024 [ 480.105652][ T9244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 480.188926][ T9244] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.418463][ T8734] veth0_vlan: entered promiscuous mode [ 480.461059][ T8734] veth1_vlan: entered promiscuous mode [ 480.552475][ T7026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 480.642550][ T8734] veth0_macvtap: entered promiscuous mode [ 480.727758][ T8734] veth1_macvtap: entered promiscuous mode [ 481.000307][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.811582][ T9260] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 482.014331][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.081298][ T1036] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.169555][ T1036] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.269084][ T1036] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.323704][ T1036] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.338057][ T8928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 482.410435][ T8928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 482.560678][ T8928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 482.608207][ T8928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 482.959616][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.673939][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.810910][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.067713][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.085457][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.092936][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.108346][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.117630][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.214092][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.221276][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.349224][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.356366][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.796542][ T9307] loop3: detected capacity change from 0 to 2048 [ 484.890282][ T8928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 485.435565][ T6203] loop3: p3 p4 < > [ 485.439675][ T6203] loop3: p3 start 11362048 is beyond EOD, truncated [ 485.507812][ T8928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.524576][ T9307] loop3: p3 p4 < > [ 485.562095][ T9307] loop3: p3 start 11362048 is beyond EOD, truncated [ 485.827092][ T6203] udevd[6203]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 485.959020][ T6203] udevd[6203]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 486.062416][ T9316] loop3: detected capacity change from 0 to 1024 [ 486.183674][ T51] Bluetooth: hci1: command tx timeout [ 486.191259][ T9316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 486.239369][ T9316] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.304706][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 486.328203][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 486.339166][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 486.364263][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 486.373168][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 487.395107][ T9327] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 487.705072][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 488.030191][ T6203] udevd[6203]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 488.148587][ T1036] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.259061][ T5844] Bluetooth: hci1: command tx timeout [ 488.435211][ T5844] Bluetooth: hci2: command tx timeout [ 489.695068][ T1036] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.934194][ T9298] chnl_net:caif_netlink_parms(): no params data found [ 490.063881][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'. [ 490.299996][ T1036] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.333674][ T5844] Bluetooth: hci1: command tx timeout [ 490.504245][ T5844] Bluetooth: hci2: command tx timeout [ 490.523093][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.558653][ T9361] loop7: detected capacity change from 0 to 1024 [ 490.857701][ T9361] EXT4-fs: inline encryption not supported [ 490.905587][ T1036] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.060701][ T9361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.462926][ T9378] loop6: detected capacity change from 0 to 1024 [ 491.489000][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.516080][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.523401][ T9298] bridge_slave_0: entered allmulticast mode [ 491.564843][ T9365] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 491.571166][ T9298] bridge_slave_0: entered promiscuous mode [ 491.581256][ T9378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 491.611496][ T8928] veth0_vlan: entered promiscuous mode [ 491.645972][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.653316][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.673659][ T9298] bridge_slave_1: entered allmulticast mode [ 491.681909][ T9298] bridge_slave_1: entered promiscuous mode [ 491.683111][ T9378] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.698916][ T8928] veth1_vlan: entered promiscuous mode [ 491.736145][ T8928] veth0_macvtap: entered promiscuous mode [ 491.987341][ T8928] veth1_macvtap: entered promiscuous mode [ 492.025707][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 492.085742][ T7026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.118139][ T9298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.205775][ T9298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.414990][ T5844] Bluetooth: hci1: command tx timeout [ 492.573659][ T5844] Bluetooth: hci2: command tx timeout [ 492.624949][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.771943][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.983395][ T9298] team0: Port device team_slave_0 added [ 493.138087][ T9298] team0: Port device team_slave_1 added [ 493.262122][ T9320] chnl_net:caif_netlink_parms(): no params data found [ 493.398039][ T1036] bridge_slave_1: left allmulticast mode [ 493.423682][ T1036] bridge_slave_1: left promiscuous mode [ 493.444979][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 493.445007][ T30] audit: type=1326 audit(1771868970.377:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 493.477655][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.524925][ T1036] bridge_slave_0: left allmulticast mode [ 493.530662][ T1036] bridge_slave_0: left promiscuous mode [ 493.551375][ T30] audit: type=1326 audit(1771868970.427:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 493.579419][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.649386][ T30] audit: type=1326 audit(1771868970.427:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 493.759698][ T30] audit: type=1326 audit(1771868970.497:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 493.853841][ T30] audit: type=1326 audit(1771868970.497:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 494.152096][ T30] audit: type=1326 audit(1771868970.497:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 494.255219][ T30] audit: type=1326 audit(1771868970.497:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 494.727596][ T5844] Bluetooth: hci2: command tx timeout [ 494.799686][ T30] audit: type=1326 audit(1771868970.497:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 494.822188][ T30] audit: type=1326 audit(1771868970.497:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 494.845911][ T30] audit: type=1326 audit(1771868970.497:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.7.1000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7132b9c629 code=0x7ffc0000 [ 495.504320][ T9422] loop3: detected capacity change from 0 to 1024 [ 495.629002][ T9422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 495.650468][ T9422] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.964962][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 495.974516][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.036592][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.140642][ T1036] bond0 (unregistering): Released all slaves [ 496.313642][ T7818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.367986][ T7818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.793090][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.843707][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.962330][ T9298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.027127][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.053588][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.163671][ T9298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.223918][ T7818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.520211][ T1036] hsr_slave_0: left promiscuous mode [ 497.559789][ T1036] hsr_slave_1: left promiscuous mode [ 497.602026][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.634889][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.700726][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.730174][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.804644][ T1036] veth1_macvtap: left promiscuous mode [ 497.810171][ T1036] veth0_macvtap: left promiscuous mode [ 497.849312][ T1036] veth1_vlan: left promiscuous mode [ 497.861958][ T1036] veth0_vlan: left promiscuous mode [ 498.677925][ T9467] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 500.245981][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 500.319660][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 500.819864][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.838393][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.281040][ T7818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.525932][ T9298] hsr_slave_0: entered promiscuous mode [ 501.533404][ T9298] hsr_slave_1: entered promiscuous mode [ 501.605517][ T9482] loop3: detected capacity change from 0 to 1024 [ 501.786358][ T9482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 501.803680][ T9482] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.935551][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.942975][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.983935][ T9320] bridge_slave_0: entered allmulticast mode [ 502.024897][ T9320] bridge_slave_0: entered promiscuous mode [ 502.076966][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 502.147837][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.183683][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.190968][ T9320] bridge_slave_1: entered allmulticast mode [ 502.262879][ T9320] bridge_slave_1: entered promiscuous mode [ 502.902913][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.987106][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.043953][ T7818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.051826][ T7818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.491325][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.552215][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.608037][ T9320] team0: Port device team_slave_0 added [ 503.685437][ T9320] team0: Port device team_slave_1 added [ 504.104174][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.111159][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.214345][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.309622][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.353609][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.475769][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.179514][ T9536] loop3: detected capacity change from 0 to 1024 [ 506.317281][ T9536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 506.353714][ T9536] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.807863][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 507.478956][ T9320] hsr_slave_0: entered promiscuous mode [ 507.508125][ T9320] hsr_slave_1: entered promiscuous mode [ 507.551567][ T9320] debugfs: 'hsr0' already exists in 'hsr' [ 507.583603][ T9320] Cannot create hsr debugfs directory [ 507.790892][ T9554] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 509.152891][ T9560] loop3: detected capacity change from 0 to 512 [ 509.926925][ T9298] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 510.355787][ T1036] bridge_slave_1: left allmulticast mode [ 510.361474][ T1036] bridge_slave_1: left promiscuous mode [ 510.374194][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.541313][ T1036] bridge_slave_0: left allmulticast mode [ 510.554365][ T1036] bridge_slave_0: left promiscuous mode [ 510.560169][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.563363][ T9595] loop7: detected capacity change from 0 to 1024 [ 512.650604][ T9595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 512.844117][ T9595] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.914429][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.126475][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.190309][ T1036] bond0 (unregistering): Released all slaves [ 513.271044][ T9298] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 513.339232][ T9298] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 513.457696][ T7026] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 513.545569][ T1036] hsr_slave_0: left promiscuous mode [ 513.563927][ T1036] hsr_slave_1: left promiscuous mode [ 513.596421][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.684315][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.615296][ T9609] loop6: detected capacity change from 0 to 1024 [ 515.218470][ T9609] EXT4-fs (loop6): blocks per group (131072) and clusters per group (8192) inconsistent [ 516.952017][ T9615] overlayfs: missing 'lowerdir' [ 517.779383][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 517.842188][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 518.535000][ T9298] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 519.728047][ T9639] loop1: detected capacity change from 0 to 2048 [ 519.828874][ T9644] loop3: detected capacity change from 0 to 1024 [ 519.906516][ T9644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 520.024920][ T9644] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.176838][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.343915][ T9639] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 520.352157][ T9639] System zones: 0-7 [ 520.370609][ T9298] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.501262][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 520.606215][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.606738][ T9639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.613373][ T7820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.656104][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.663259][ T7820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.786301][ T9639] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.1052: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 521.068585][ T9320] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 521.078659][ T9639] EXT4-fs (loop1): Remounting filesystem read-only [ 521.198687][ T9320] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 521.365001][ T9320] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 521.402123][ T9664] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 521.452872][ T9320] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 521.588748][ T8928] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.973455][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.507780][ T9683] loop1: detected capacity change from 0 to 1024 [ 522.635145][ T9683] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 523.197745][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.242803][ T9298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.342302][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.349621][ T7820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.506015][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.513192][ T7820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.706023][ T9320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.155157][ T9697] loop1: detected capacity change from 0 to 512 [ 525.227945][ T9697] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 525.293434][ T9697] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 525.644570][ T9700] overlayfs: missing 'lowerdir' [ 525.701739][ T9697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4781: comm syz.1.1058: Invalid inode table block 1 in block_group 0 [ 525.803619][ T9697] loop1: lost filesystem error report for type 5 error -117 [ 525.807610][ T9697] EXT4-fs (loop1): Remounting filesystem read-only [ 525.815019][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 525.815051][ C0] EXT4-fs (loop1): initial error at time 1771869002: __ext4_get_inode_loc:4781 [ 525.815083][ C0] EXT4-fs (loop1): last error at time 1771869002: __ext4_get_inode_loc:4781 [ 525.934524][ T9697] EXT4-fs (loop1): get root inode failed [ 525.940202][ T9697] EXT4-fs (loop1): mount failed [ 526.140629][ T9298] veth0_vlan: entered promiscuous mode [ 526.191806][ T9709] loop6: detected capacity change from 0 to 1764 [ 526.225252][ T9298] veth1_vlan: entered promiscuous mode [ 526.373019][ T9298] veth0_macvtap: entered promiscuous mode [ 526.454767][ T9298] veth1_macvtap: entered promiscuous mode [ 526.581210][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.670683][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.756617][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.911580][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.952157][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.033858][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.076167][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.314597][ T9730] loop3: detected capacity change from 0 to 1024 [ 527.437964][ T7821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.478056][ T7821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.546217][ T9730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 527.679314][ T9730] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.788426][ T7821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.855718][ T7821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.696351][ T9754] loop1: detected capacity change from 0 to 1024 [ 529.322673][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 529.364387][ T9754] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 530.053448][ T9320] veth0_vlan: entered promiscuous mode [ 530.142272][ T9320] veth1_vlan: entered promiscuous mode [ 531.426532][ T9320] veth0_macvtap: entered promiscuous mode [ 531.561378][ T9320] veth1_macvtap: entered promiscuous mode [ 531.682086][ T9782] loop7: detected capacity change from 0 to 128 [ 531.692097][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.768671][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.818227][ T9782] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 531.955928][ T9782] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 531.970261][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.105007][ T3442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.368079][ T9793] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 532.545286][ T3442] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.643429][ T3442] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.064820][ T9782] [ 533.067176][ T9782] ====================================================== [ 533.074175][ T9782] WARNING: possible circular locking dependency detected [ 533.081175][ T9782] syzkaller #0 Not tainted [ 533.085572][ T9782] ------------------------------------------------------ [ 533.092566][ T9782] syz.7.1075/9782 is trying to acquire lock: [ 533.098525][ T9782] ffff88807c042610 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 533.106547][ T9782] [ 533.106547][ T9782] but task is already holding lock: [ 533.113891][ T9782] ffff888022ff6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 533.124091][ T9782] [ 533.124091][ T9782] which lock already depends on the new lock. [ 533.124091][ T9782] [ 533.134475][ T9782] [ 533.134475][ T9782] the existing dependency chain (in reverse order) is: [ 533.143468][ T9782] [ 533.143468][ T9782] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 533.151931][ T9782] ext4_writepages+0x21d/0x790 [ 533.157221][ T9782] do_writepages+0x278/0x600 [ 533.162349][ T9782] __writeback_single_inode+0x164/0x13c0 [ 533.168500][ T9782] writeback_single_inode+0x4d3/0xf30 [ 533.174393][ T9782] write_inode_now+0x174/0x1f0 [ 533.179675][ T9782] iput.part.0+0x7f3/0xf50 [ 533.184608][ T9782] iput+0x35/0x40 [ 533.188930][ T9782] ext4_xattr_block_set+0x6f7/0x3660 [ 533.194765][ T9782] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 533.201245][ T9782] __ext4_expand_extra_isize+0x346/0x480 [ 533.207434][ T9782] __ext4_mark_inode_dirty+0x693/0x8b0 [ 533.213424][ T9782] ext4_evict_inode+0x860/0x17c0 [ 533.218892][ T9782] evict+0x3c2/0xad0 [ 533.223303][ T9782] iput.part.0+0x605/0xf50 [ 533.228238][ T9782] iput+0x35/0x40 [ 533.232389][ T9782] ext4_orphan_cleanup+0x71e/0x11e0 [ 533.238110][ T9782] ext4_fill_super+0x9009/0xb470 [ 533.243577][ T9782] get_tree_bdev_flags+0x38c/0x620 [ 533.249212][ T9782] vfs_get_tree+0x92/0x320 [ 533.254141][ T9782] path_mount+0x7d0/0x23d0 [ 533.259090][ T9782] __x64_sys_mount+0x293/0x310 [ 533.264392][ T9782] do_syscall_64+0x106/0xf80 [ 533.269508][ T9782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.275916][ T9782] [ 533.275916][ T9782] -> #0 (sb_internal){.+.+}-{0:0}: [ 533.283219][ T9782] __lock_acquire+0x14b8/0x2630 [ 533.288606][ T9782] lock_acquire+0x1cf/0x380 [ 533.293639][ T9782] ext4_evict_inode+0xd3c/0x17c0 [ 533.299096][ T9782] evict+0x3c2/0xad0 [ 533.303501][ T9782] iput.part.0+0x605/0xf50 [ 533.308437][ T9782] iput+0x35/0x40 [ 533.312583][ T9782] ext4_ext_migrate+0xd61/0x2000 [ 533.318040][ T9782] __ext4_ioctl+0xd7e/0x42a0 [ 533.323166][ T9782] __x64_sys_ioctl+0x18e/0x210 [ 533.328473][ T9782] do_syscall_64+0x106/0xf80 [ 533.333586][ T9782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.339994][ T9782] [ 533.339994][ T9782] other info that might help us debug this: [ 533.339994][ T9782] [ 533.350202][ T9782] Possible unsafe locking scenario: [ 533.350202][ T9782] [ 533.357635][ T9782] CPU0 CPU1 [ 533.362982][ T9782] ---- ---- [ 533.368334][ T9782] lock(&sbi->s_writepages_rwsem); [ 533.373562][ T9782] lock(sb_internal); [ 533.380166][ T9782] lock(&sbi->s_writepages_rwsem); [ 533.387877][ T9782] rlock(sb_internal); [ 533.392031][ T9782] [ 533.392031][ T9782] *** DEADLOCK *** [ 533.392031][ T9782] [ 533.400152][ T9782] 3 locks held by syz.7.1075/9782: [ 533.405254][ T9782] #0: ffff88807c042420 (sb_writers#4){.+.+}-{0:0}, at: __ext4_ioctl+0xd4e/0x42a0 [ 533.414533][ T9782] #1: ffff88806b5cbd70 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: __ext4_ioctl+0xd76/0x42a0 [ 533.425132][ T9782] #2: ffff888022ff6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 533.435768][ T9782] [ 533.435768][ T9782] stack backtrace: [ 533.441648][ T9782] CPU: 1 UID: 0 PID: 9782 Comm: syz.7.1075 Not tainted syzkaller #0 PREEMPT(full) [ 533.441683][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.441700][ T9782] Call Trace: [ 533.441709][ T9782] [ 533.441720][ T9782] dump_stack_lvl+0x100/0x190 [ 533.441763][ T9782] print_circular_bug.cold+0x178/0x1c7 [ 533.441819][ T9782] check_noncircular+0x146/0x160 [ 533.441867][ T9782] __lock_acquire+0x14b8/0x2630 [ 533.441918][ T9782] lock_acquire+0x1cf/0x380 [ 533.441959][ T9782] ? evict+0x3c2/0xad0 [ 533.441985][ T9782] ? __pfx___might_resched+0x10/0x10 [ 533.442014][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442054][ T9782] ext4_evict_inode+0xd3c/0x17c0 [ 533.442086][ T9782] ? evict+0x3c2/0xad0 [ 533.442110][ T9782] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 533.442144][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442183][ T9782] ? __pfx_ext4_evict_inode+0x10/0x10 [ 533.442215][ T9782] ? evict+0x37e/0xad0 [ 533.442238][ T9782] ? evict+0x37e/0xad0 [ 533.442261][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442300][ T9782] ? __pfx_ext4_evict_inode+0x10/0x10 [ 533.442334][ T9782] evict+0x3c2/0xad0 [ 533.442361][ T9782] ? __pfx_evict+0x10/0x10 [ 533.442386][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442427][ T9782] ? iput.part.0+0x5fd/0xf50 [ 533.442452][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442493][ T9782] iput.part.0+0x605/0xf50 [ 533.442518][ T9782] ? __pfx_ext4_drop_inode+0x10/0x10 [ 533.442551][ T9782] iput+0x35/0x40 [ 533.442575][ T9782] ext4_ext_migrate+0xd61/0x2000 [ 533.442606][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442647][ T9782] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 533.442679][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442714][ T9782] ? down_write+0x146/0x1f0 [ 533.442751][ T9782] ? __pfx_down_write+0x10/0x10 [ 533.442794][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.442830][ T9782] ? rcu_read_lock_any_held+0x6a/0xa0 [ 533.442867][ T9782] __ext4_ioctl+0xd7e/0x42a0 [ 533.442902][ T9782] ? tomoyo_path_number_perm+0x188/0x580 [ 533.442948][ T9782] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 533.442993][ T9782] ? __pfx___ext4_ioctl+0x10/0x10 [ 533.443033][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.443068][ T9782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 533.443107][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.443142][ T9782] ? do_vfs_ioctl+0x226/0x13e0 [ 533.443173][ T9782] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 533.443209][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.443245][ T9782] ? find_held_lock+0x2b/0x80 [ 533.443277][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.443313][ T9782] ? hook_file_ioctl_common+0x146/0x410 [ 533.443361][ T9782] ? srso_alias_return_thunk+0x5/0xfbef5 [ 533.443397][ T9782] ? __fget_files+0x21f/0x3d0 [ 533.443438][ T9782] ? __pfx_ext4_ioctl+0x10/0x10 [ 533.443475][ T9782] __x64_sys_ioctl+0x18e/0x210 [ 533.443507][ T9782] do_syscall_64+0x106/0xf80 [ 533.443546][ T9782] ? irqentry_exit+0x138/0x670 [ 533.443595][ T9782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.443630][ T9782] RIP: 0033:0x7f7132b9c629 [ 533.443652][ T9782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.443681][ T9782] RSP: 002b:00007f7133a78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.443708][ T9782] RAX: ffffffffffffffda RBX: 00007f7132e15fa0 RCX: 00007f7132b9c629 [ 533.443728][ T9782] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000008 [ 533.443746][ T9782] RBP: 00007f7132c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 533.443765][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.443787][ T9782] R13: 00007f7132e16038 R14: 00007f7132e15fa0 R15: 00007ffe3be047e8 [ 533.443818][ T9782] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 534.449710][ T9805] loop3: detected capacity change from 0 to 1024 [ 534.514834][ T9805] EXT4-fs: Ignoring removed orlov option [ 534.520545][ T9805] EXT4-fs: Ignoring removed nobh option [ 534.738573][ T9805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.251333][ T9805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.399678][ T9796] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 536.587972][ T3442] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.760362][ T3442] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.859400][ T3442] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.939971][ T3442] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.078538][ T3442] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.118118][ T3442] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.171056][ T3442] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.221985][ T3442] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.371293][ T3442] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.430737][ T3442] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.486865][ T3442] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.531310][ T3442] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.639172][ T3442] bridge_slave_1: left allmulticast mode [ 537.645073][ T3442] bridge_slave_1: left promiscuous mode [ 537.650819][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.660183][ T3442] bridge_slave_0: left allmulticast mode [ 537.666445][ T3442] bridge_slave_0: left promiscuous mode [ 537.673163][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.683215][ T3442] bridge_slave_1: left allmulticast mode [ 537.688972][ T3442] bridge_slave_1: left promiscuous mode [ 537.695077][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.703986][ T3442] bridge_slave_0: left allmulticast mode [ 537.709770][ T3442] bridge_slave_0: left promiscuous mode [ 537.716488][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.725984][ T3442] bridge_slave_1: left allmulticast mode [ 537.731653][ T3442] bridge_slave_1: left promiscuous mode [ 537.737504][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.746959][ T3442] bridge_slave_0: left allmulticast mode [ 537.752609][ T3442] bridge_slave_0: left promiscuous mode [ 537.758550][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.891824][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.902140][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.912004][ T3442] bond0 (unregistering): Released all slaves [ 538.014067][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.024927][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.035146][ T3442] bond0 (unregistering): Released all slaves [ 538.126459][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.137175][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.147748][ T3442] bond0 (unregistering): Released all slaves [ 538.549743][ T3442] hsr_slave_0: left promiscuous mode [ 538.555498][ T3442] hsr_slave_1: left promiscuous mode [ 538.561203][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.568612][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.579377][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.586994][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.598888][ T3442] hsr_slave_0: left promiscuous mode [ 538.604584][ T3442] hsr_slave_1: left promiscuous mode [ 538.610413][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.618080][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.625769][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.633359][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.643578][ T3442] hsr_slave_0: left promiscuous mode [ 538.649372][ T3442] hsr_slave_1: left promiscuous mode [ 538.656001][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.663374][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.671187][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.679592][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.697453][ T3442] veth1_macvtap: left promiscuous mode [ 538.702927][ T3442] veth0_macvtap: left promiscuous mode [ 538.708646][ T3442] veth1_vlan: left promiscuous mode [ 538.713971][ T3442] veth0_vlan: left promiscuous mode [ 538.720021][ T3442] veth1_macvtap: left promiscuous mode [ 538.725532][ T3442] veth0_macvtap: left promiscuous mode [ 538.731100][ T3442] veth1_vlan: left promiscuous mode [ 538.736734][ T3442] veth0_vlan: left promiscuous mode [ 538.742625][ T3442] veth1_macvtap: left promiscuous mode [ 538.748246][ T3442] veth0_macvtap: left promiscuous mode [ 538.753826][ T3442] veth1_vlan: left promiscuous mode [ 538.759046][ T3442] veth0_vlan: left promiscuous mode [ 538.981556][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 538.993343][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 539.143170][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 539.158495][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 539.304920][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 539.317780][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 540.058249][ T3442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.091687][ T3442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.145099][ T3442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.200854][ T3442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.307417][ T3442] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.369884][ T3442] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.419342][ T3442] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.482136][ T3442] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.603032][ T3442] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.615276][ T3442] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.649668][ T3442] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.663708][ T3442] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.698865][ T3442] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.709516][ T3442] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.765747][ T3442] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.776097][ T3442] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.887027][ T3442] bridge_slave_1: left allmulticast mode [ 540.892720][ T3442] bridge_slave_1: left promiscuous mode [ 540.899767][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.908582][ T3442] bridge_slave_0: left allmulticast mode [ 540.914532][ T3442] bridge_slave_0: left promiscuous mode [ 540.920302][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.930457][ T3442] bridge_slave_1: left allmulticast mode [ 540.936333][ T3442] bridge_slave_1: left promiscuous mode [ 540.942066][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.954258][ T3442] bridge_slave_0: left allmulticast mode [ 540.959981][ T3442] bridge_slave_0: left promiscuous mode [ 540.967047][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.977289][ T3442] bridge_slave_1: left allmulticast mode [ 540.983016][ T3442] bridge_slave_1: left promiscuous mode [ 540.989196][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.999537][ T3442] bridge_slave_0: left allmulticast mode [ 541.006181][ T3442] bridge_slave_0: left promiscuous mode [ 541.011917][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.213263][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.226320][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.237129][ T3442] bond0 (unregistering): Released all slaves [ 541.339033][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.350447][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.363062][ T3442] bond0 (unregistering): Released all slaves [ 541.439709][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.452381][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.464633][ T3442] bond0 (unregistering): Released all slaves [ 541.872170][ T3442] hsr_slave_0: left promiscuous mode [ 541.878371][ T3442] hsr_slave_1: left promiscuous mode [ 541.884619][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.892010][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.901893][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.912429][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.923359][ T3442] hsr_slave_0: left promiscuous mode [ 541.929277][ T3442] hsr_slave_1: left promiscuous mode [ 541.935082][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.942449][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.950501][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.958494][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.968831][ T3442] hsr_slave_0: left promiscuous mode [ 541.974833][ T3442] hsr_slave_1: left promiscuous mode [ 541.980510][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.988078][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.995734][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.003110][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.020811][ T3442] veth1_macvtap: left promiscuous mode [ 542.027392][ T3442] veth0_macvtap: left promiscuous mode [ 542.032900][ T3442] veth1_vlan: left promiscuous mode [ 542.038265][ T3442] veth0_vlan: left promiscuous mode [ 542.044516][ T3442] veth1_macvtap: left promiscuous mode [ 542.050009][ T3442] veth0_macvtap: left promiscuous mode [ 542.055624][ T3442] veth1_vlan: left promiscuous mode [ 542.060878][ T3442] veth0_vlan: left promiscuous mode [ 542.067581][ T3442] veth1_macvtap: left promiscuous mode [ 542.073209][ T3442] veth0_macvtap: left promiscuous mode [ 542.078848][ T3442] veth1_vlan: left promiscuous mode [ 542.084151][ T3442] veth0_vlan: left promiscuous mode [ 542.311462][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 542.323084][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 542.460919][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 542.476144][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 542.604244][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 542.615854][ T3442] team0 (unregistering): Port device team_slave_0 removed