last executing test programs: 6m59.875201291s ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r3, 0x0, 0x0) 6m58.596829394s ago: executing program 3 (id=7): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) poll(0xfffffffffffffffd, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab00000000009500000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x9660841c000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) 6m57.025553705s ago: executing program 3 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) chmod(&(0x7f0000000940)='./file0/file1\x00', 0x2) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x2a}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 6m55.035069887s ago: executing program 3 (id=16): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x18, 0xd, "fee8a2ab70fc17daaca7bd6447a4b4e00d9683dda1afb94c1956b73fd95a8e4210c80000000300000000000000000000000000e0ffd0d2b95600", "2809e8dbe10859892d0000b420a9ca1f40f05f819e0117020000f20020000000e90300100000000000000000000000000000000000003fa2a49be15510e700", "90be8b1c5512406c5f000000000000008000000900", [0x4, 0x5]}}) syz_open_dev$loop(0x0, 0x8f, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 6m54.600138308s ago: executing program 3 (id=20): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x7fffffe, 0x2a8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 6m39.385654184s ago: executing program 32 (id=20): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x7fffffe, 0x2a8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 6m18.907686065s ago: executing program 0 (id=114): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') keyctl$search(0xa, 0x0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, r0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x5422, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0xac, 0x7, 0xff}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) 6m16.772050201s ago: executing program 0 (id=119): r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) 6m15.426946196s ago: executing program 0 (id=124): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x28}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000080000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600065a2d41be00060005"], 0xe4}, 0x1, 0x0, 0x0, 0x40014}, 0x4040081) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 6m12.785538014s ago: executing program 0 (id=130): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') keyctl$search(0xa, 0x0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, r0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x5422, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0xac, 0x7, 0xff}) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000140)) 6m11.851410425s ago: executing program 4 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x400e840}, 0x20000800) 6m11.06722705s ago: executing program 0 (id=132): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c000200"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r4, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 6m10.667787202s ago: executing program 4 (id=134): socket$can_j1939(0x1d, 0x2, 0x7) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x9}) close(0xffffffffffffffff) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 6m6.147347259s ago: executing program 4 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0x3, &(0x7f0000000040)={0xdd, 0xf19c}, &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/fscaps', 0x80240, 0x31840384d1ba4a81) finit_module(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 6m6.115460136s ago: executing program 0 (id=141): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x20001e1d, 0x400, 0x0, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x800001, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 6m0.923369054s ago: executing program 4 (id=148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 5m59.752113391s ago: executing program 4 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(r0, 0x3, &(0x7f0000000040)={0xdd, 0xf19c}, &(0x7f0000000080)) 5m58.103116077s ago: executing program 4 (id=155): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) 5m50.818704683s ago: executing program 33 (id=141): r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x20001e1d, 0x400, 0x0, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x800001, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 5m42.587014087s ago: executing program 34 (id=155): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) 5m22.74289196s ago: executing program 6 (id=239): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) 5m20.790853815s ago: executing program 6 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 5m19.576935387s ago: executing program 6 (id=247): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') keyctl$search(0xa, 0x0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, r0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x5422, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0xac, 0x7, 0xff}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000140)) 5m17.696862975s ago: executing program 6 (id=252): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x1b0, 0x1b0, 0xffffffff, 0x1b0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x2f8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 5m15.9309555s ago: executing program 6 (id=256): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 5m14.870559213s ago: executing program 6 (id=258): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 4m59.597373778s ago: executing program 35 (id=258): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 5.891322252s ago: executing program 2 (id=873): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) 5.571330153s ago: executing program 2 (id=875): socket$kcm(0xa, 0x2, 0x73) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005a7c295d801000000000000000000010000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 4.532603646s ago: executing program 2 (id=878): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x0) epoll_create(0x8) 4.275662062s ago: executing program 5 (id=880): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x2094c00, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1e, 0x25a, &(0x7f0000000640)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x4, 0x800, 0x100102, 0x34, "b0bf00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 3.298095368s ago: executing program 2 (id=881): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)={0x29}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x24000088, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) 2.574463729s ago: executing program 1 (id=882): socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000"/52], 0x0) 2.531847944s ago: executing program 5 (id=883): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x22, 0x4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030532bd7000fddbdf25021f00ff", @ANYRES32=r3, @ANYBLOB="080002007f"], 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) 2.347655701s ago: executing program 1 (id=884): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e1f, 0x1, @empty, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x2a8, 0x2a8, 0x0, 0xf0, 0x3b8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0xffffff00, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {}, 0x32, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x81, @local, 0x4e20}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xffffff00, 'veth0_macvtap\x00', 'wlan0\x00', {}, {}, 0x4, 0x0, 0x40}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @remote, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {0xff}, {}, 0x33, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x2, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 2.092465384s ago: executing program 1 (id=885): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/231, 0xe7}, 0x275a}, {{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/105, 0x69}, 0x2}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.803789442s ago: executing program 1 (id=886): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$packet(0xffffffffffffffff, &(0x7f0000000540)="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", 0x704, 0x808, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.616906286s ago: executing program 2 (id=887): socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_newvlan={0x78, 0x70, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xff}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x78}}, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x8, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x2}, {0x2}, {0x5, 0x5}, {0x0, 0x5}, {0xd, 0x4}, {0x5, 0x1}, {0x6}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x3, [{0x0, 0x2, 0x7ff}, {0x8, 0x2, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x80}}]}, {0x0, [0x0, 0x61, 0x30, 0x0, 0x2e, 0x0]}}, &(0x7f00000005c0)=""/249, 0xd8, 0xf9, 0x1, 0x9}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xcf, 0x5, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.616655977s ago: executing program 5 (id=888): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x0) 1.324162501s ago: executing program 5 (id=889): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) 1.141478258s ago: executing program 5 (id=890): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x1000, @loopback}, 0x1c) 427.100101ms ago: executing program 1 (id=891): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000280)={[{@block_validity}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nombcache}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) 426.847224ms ago: executing program 5 (id=892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="03"], 0x9, 0x2) 379.782298ms ago: executing program 2 (id=893): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x200403) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000d40)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0xc001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=ANY=[], 0x8c8}, 0x1, 0x0, 0x0, 0x40880}, 0x8840) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 0s ago: executing program 1 (id=894): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') keyctl$search(0xa, 0x0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, r0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x5422, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000000)={0xac, 0x7, 0xff}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000140)) kernel console output (not intermixed with test programs): Bluetooth: hci6: command tx timeout [ 127.153243][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.463265][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.043943][ T6224] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.396138][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 128.833208][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.893169][ T5838] Bluetooth: hci6: command tx timeout [ 130.040811][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 130.340616][ T6239] loop5: detected capacity change from 0 to 512 [ 130.413768][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 130.456923][ T6239] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.84: invalid indirect mapped block 4294967295 (level 1) [ 130.473417][ T6239] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.487570][ T6239] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.84: invalid indirect mapped block 4294967295 (level 1) [ 130.497080][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 130.497114][ C1] EXT4-fs (loop5): initial error at time 1771868634: ext4_free_branches:1020: inode 11 [ 130.497168][ C1] EXT4-fs (loop5): last error at time 1771868634: ext4_free_branches:1020: inode 11 [ 130.612131][ T6239] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.633763][ T6239] EXT4-fs (loop5): 2 truncates cleaned up [ 130.668794][ T6239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.686364][ T6249] loop1: detected capacity change from 0 to 1024 [ 130.767645][ T6249] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 130.813332][ T6249] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.886749][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.943090][ T6249] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: inode #32: comm syz.1.86: iget: special inode unallocated [ 130.947247][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.973272][ T5838] Bluetooth: hci6: command tx timeout [ 131.033315][ T6164] bridge_slave_0: entered allmulticast mode [ 131.052205][ T6164] bridge_slave_0: entered promiscuous mode [ 131.054520][ T6249] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 131.063070][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 131.075468][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.078787][ C0] EXT4-fs (loop1): initial error at time 1771868634: ext4_get_journal_inode:5863: inode 32 [ 131.086159][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.095965][ C0] EXT4-fs (loop1): last error at time 1771868634: ext4_get_journal_inode:5863: inode 32 [ 131.103535][ T6164] bridge_slave_1: entered allmulticast mode [ 131.143720][ T6249] EXT4-fs (loop1): Remounting filesystem read-only [ 131.183256][ T6249] EXT4-fs (loop1): no journal found [ 131.188485][ T6249] EXT4-fs (loop1): can't get journal size [ 131.204879][ T6164] bridge_slave_1: entered promiscuous mode [ 131.296291][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.354001][ T6249] EXT4-fs (loop1): filesystem is read-only [ 131.621331][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.639536][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.645084][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 131.943826][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.954679][ T6164] team0: Port device team_slave_0 added [ 131.991151][ T6259] netlink: 44 bytes leftover after parsing attributes in process `syz.5.89'. [ 132.010223][ T6164] team0: Port device team_slave_1 added [ 132.050382][ T6259] netlink: 43 bytes leftover after parsing attributes in process `syz.5.89'. [ 132.085318][ T6259] netlink: 'syz.5.89': attribute type 5 has an invalid length. [ 132.243484][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.250026][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.263400][ T6259] netlink: 43 bytes leftover after parsing attributes in process `syz.5.89'. [ 133.049057][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.063068][ T5838] Bluetooth: hci6: command tx timeout [ 133.097334][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.124165][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.145847][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.339317][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.423093][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.483391][ T6276] tipc: Started in network mode [ 133.488392][ T6276] tipc: Node identity 00000000bb, cluster identity 4711 [ 133.525995][ T6276] tipc: Enabling of bearer rejected, failed to enable media [ 134.447737][ T6164] hsr_slave_0: entered promiscuous mode [ 134.504334][ T6164] hsr_slave_1: entered promiscuous mode [ 134.510561][ T6164] debugfs: 'hsr0' already exists in 'hsr' [ 134.544286][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.98'. [ 134.576722][ T6164] Cannot create hsr debugfs directory [ 134.611108][ T6284] netlink: 'syz.5.99': attribute type 3 has an invalid length. [ 134.703611][ T6284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.600653][ T6296] Zero length message leads to an empty skb [ 137.036418][ T6303] netlink: 'syz.5.108': attribute type 4 has an invalid length. [ 137.199862][ T6164] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.442974][ T6164] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.547650][ T6164] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.567572][ T6313] capability: warning: `syz.0.110' uses 32-bit capabilities (legacy support in use) [ 137.750217][ T6316] hub 8-0:1.0: USB hub found [ 137.967705][ T6164] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.016972][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 138.023483][ T6316] hub 8-0:1.0: 1 port detected [ 140.656667][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.756964][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.984827][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.991981][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.105642][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.112803][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.185139][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.5.118'. [ 143.271496][ T6345] loop2: detected capacity change from 0 to 2048 [ 143.695332][ T6345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.933580][ T6345] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.199105][ T31] audit: type=1800 audit(1771868647.743:3): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.120" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 144.313107][ T31] audit: type=1800 audit(1771868647.763:4): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.120" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 144.371561][ T6359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.124'. [ 144.428745][ T31] audit: type=1800 audit(1771868647.993:5): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.120" name="file2" dev="loop2" ino=19 res=0 errno=0 [ 144.598476][ T6359] netlink: 43 bytes leftover after parsing attributes in process `syz.0.124'. [ 145.767660][ T6359] netlink: 'syz.0.124': attribute type 5 has an invalid length. [ 145.794633][ T6359] netlink: 43 bytes leftover after parsing attributes in process `syz.0.124'. [ 145.851141][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.362936][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.637186][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.176482][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.764716][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.922961][ T6164] veth0_vlan: entered promiscuous mode [ 150.937662][ T6164] veth1_vlan: entered promiscuous mode [ 151.130790][ T6399] hub 8-0:1.0: USB hub found [ 151.181652][ T6164] veth0_macvtap: entered promiscuous mode [ 151.222288][ T6399] hub 8-0:1.0: 1 port detected [ 151.236121][ T6164] veth1_macvtap: entered promiscuous mode [ 151.367970][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.378022][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'. [ 153.161184][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.460846][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.480486][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.726356][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.744440][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.899996][ T74] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.476973][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.589921][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.974017][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.005808][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.150828][ T37] bridge_slave_1: left allmulticast mode [ 158.177210][ T37] bridge_slave_1: left promiscuous mode [ 158.193675][ T6433] loop2: detected capacity change from 0 to 1024 [ 158.283237][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.505605][ T6433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.559875][ T37] bridge_slave_0: left allmulticast mode [ 158.693274][ T6433] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.706280][ T37] bridge_slave_0: left promiscuous mode [ 158.712147][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.913819][ T6433] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.147: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.066631][ T6433] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 159.154404][ T6438] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 159.183181][ T6433] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.183181][ T6433] [ 159.280239][ T6443] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.147: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.392669][ T6432] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.147: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.523986][ T6432] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.147: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.706564][ T6443] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.147: lblock 3 mapped to illegal pblock 3 (length 1) [ 160.787560][ T6443] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.147: lblock 3 mapped to illegal pblock 3 (length 1) [ 161.030789][ T6432] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: block 3: comm syz.2.147: lblock 3 mapped to illegal pblock 3 (length 1) [ 161.374518][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.740872][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.906788][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.995161][ T37] bond0 (unregistering): Released all slaves [ 166.784211][ T6509] loop1: detected capacity change from 0 to 512 [ 166.914508][ T6509] EXT4-fs: Ignoring removed bh option [ 166.987433][ T6509] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 168.169032][ T6509] EXT4-fs (loop1): 1 truncate cleaned up [ 168.348512][ T6519] syz.5.173 (6519) used greatest stack depth: 19280 bytes left [ 168.397160][ T6509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.713115][ T6530] overlayfs: missing 'lowerdir' [ 171.039303][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.246191][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.263358][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.272809][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.293670][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.309397][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.323341][ T37] hsr_slave_0: left promiscuous mode [ 173.373147][ T5838] Bluetooth: hci5: command tx timeout [ 173.442423][ T37] hsr_slave_1: left promiscuous mode [ 173.469722][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.525185][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.572389][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.471364][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.604837][ T37] veth1_macvtap: left promiscuous mode [ 174.610660][ T37] veth0_macvtap: left promiscuous mode [ 174.678216][ T37] veth1_vlan: left promiscuous mode [ 174.703294][ T37] veth0_vlan: left promiscuous mode [ 175.463080][ T5838] Bluetooth: hci5: command tx timeout [ 176.230773][ T6575] hub 8-0:1.0: USB hub found [ 176.235776][ T6575] hub 8-0:1.0: 1 port detected [ 176.243613][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 177.400236][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.414297][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.473748][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.484230][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.495426][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.558745][ T5834] Bluetooth: hci5: command tx timeout [ 179.039117][ T37] team0 (unregistering): Port device team_slave_1 removed [ 179.119218][ T37] team0 (unregistering): Port device team_slave_0 removed [ 179.263321][ T6593] loop1: detected capacity change from 0 to 1024 [ 179.324106][ T6593] EXT4-fs: inline encryption not supported [ 179.465193][ T6593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.619191][ T5838] Bluetooth: hci5: command tx timeout [ 179.694218][ T5838] Bluetooth: hci7: command tx timeout [ 179.802374][ T6593] EXT4-fs (loop1): shut down requested (1) [ 180.339986][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.774213][ T5838] Bluetooth: hci7: command tx timeout [ 182.312841][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 183.812229][ T6581] chnl_net:caif_netlink_parms(): no params data found [ 183.862069][ T5838] Bluetooth: hci7: command tx timeout [ 183.868127][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.893223][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.926464][ T6533] bridge_slave_0: entered allmulticast mode [ 183.979200][ T6533] bridge_slave_0: entered promiscuous mode [ 184.032994][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.063092][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.063315][ T6533] bridge_slave_1: entered allmulticast mode [ 184.073288][ T6533] bridge_slave_1: entered promiscuous mode [ 184.723209][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.777680][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.061032][ T6533] team0: Port device team_slave_0 added [ 185.130467][ T6533] team0: Port device team_slave_1 added [ 185.891034][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.932468][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.974932][ T5838] Bluetooth: hci7: command tx timeout [ 185.997392][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.116538][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.181424][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.199767][ T6581] bridge_slave_0: entered allmulticast mode [ 186.226025][ T6581] bridge_slave_0: entered promiscuous mode [ 186.433854][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.440821][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.551063][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.113330][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.137817][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.183713][ T6581] bridge_slave_1: entered allmulticast mode [ 187.333356][ T6581] bridge_slave_1: entered promiscuous mode [ 187.980498][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.094692][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.142330][ T6533] hsr_slave_0: entered promiscuous mode [ 188.259601][ T6533] hsr_slave_1: entered promiscuous mode [ 188.311445][ T6533] debugfs: 'hsr0' already exists in 'hsr' [ 188.331900][ T6533] Cannot create hsr debugfs directory [ 189.482499][ T6684] evm: overlay not supported [ 190.569935][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.599314][ T6699] loop2: detected capacity change from 0 to 512 [ 190.641282][ T6699] EXT4-fs: Ignoring removed nobh option [ 190.693947][ T6699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.783950][ T6699] EXT4-fs (loop2): 1 truncate cleaned up [ 190.791917][ T6699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.914742][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.926584][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.009779][ T6581] team0: Port device team_slave_0 added [ 191.616581][ T6581] team0: Port device team_slave_1 added [ 193.235622][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.590826][ T6724] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 193.600569][ T6724] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 193.610823][ T6724] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 193.628040][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.642884][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.694022][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.743183][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.863301][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.717980][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.853936][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.903240][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.972980][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.063992][ T6581] hsr_slave_0: entered promiscuous mode [ 196.070631][ T6581] hsr_slave_1: entered promiscuous mode [ 196.114131][ T6581] debugfs: 'hsr0' already exists in 'hsr' [ 196.119907][ T6581] Cannot create hsr debugfs directory [ 196.921494][ T6760] loop6: detected capacity change from 0 to 1024 [ 196.969216][ T6760] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.323495][ T6760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.394658][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 197.533347][ T6760] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.559443][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.495213][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.192962][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.114739][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.465478][ T6533] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 201.866198][ T6533] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.029193][ T6533] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 203.257654][ T6533] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 203.384219][ T6811] loop5: detected capacity change from 0 to 1024 [ 203.525034][ T6811] EXT4-fs: inline encryption not supported [ 203.530893][ T6811] EXT4-fs: Ignoring removed nobh option [ 203.743195][ T6811] EXT4-fs: Ignoring removed nobh option [ 203.793105][ T6811] EXT4-fs: Ignoring removed bh option [ 204.037327][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.101584][ T6811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.780243][ T6811] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.253: Allocating blocks 385-513 which overlap fs metadata [ 204.808767][ T6581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 205.075369][ T6581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 205.323449][ T6828] EXT4-fs (loop5): pa ffff888037510000: logic 16, phys. 129, len 24 [ 205.331796][ T6828] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5464: group 0, free 0, pa_free 8 [ 205.389020][ T6839] loop1: detected capacity change from 0 to 1024 [ 205.392754][ T6581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 205.514115][ T6839] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.784323][ T6839] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.915786][ T6839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.044541][ T6581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 206.366683][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.637476][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.353459][ T37] bridge_slave_1: left allmulticast mode [ 207.359207][ T37] bridge_slave_1: left promiscuous mode [ 207.433366][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.809751][ T37] bridge_slave_0: left allmulticast mode [ 207.843321][ T37] bridge_slave_0: left promiscuous mode [ 207.858334][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.967976][ T37] bridge_slave_1: left allmulticast mode [ 208.003129][ T37] bridge_slave_1: left promiscuous mode [ 208.008968][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.397164][ T37] bridge_slave_0: left allmulticast mode [ 208.402857][ T37] bridge_slave_0: left promiscuous mode [ 208.453377][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.504119][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.748387][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.885307][ T37] bond0 (unregistering): Released all slaves [ 213.348645][ T6884] mmap: syz.5.273 (6884) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.824924][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.210274][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.400199][ T37] bond0 (unregistering): Released all slaves [ 218.181178][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.224649][ T37] tipc: Disabling bearer [ 218.231949][ T37] tipc: Left network mode [ 219.197500][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.282'. [ 220.493937][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.502856][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.513279][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.525650][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.535332][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.106931][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.294657][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.301806][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.366996][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.374210][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.440596][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.434399][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.592743][ T5834] Bluetooth: hci0: command tx timeout [ 222.605136][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.612372][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.663498][ T5834] Bluetooth: hci0: command tx timeout [ 225.342008][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.349231][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.863766][ T6967] overlayfs: missing 'lowerdir' [ 226.903143][ T5834] Bluetooth: hci0: command tx timeout [ 229.023108][ T5834] Bluetooth: hci0: command tx timeout [ 229.639480][ T6985] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.038475][ T6924] chnl_net:caif_netlink_parms(): no params data found [ 230.121343][ T31] audit: type=1326 audit(1771868733.683:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.5.298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741fd9c629 code=0x0 [ 230.491506][ T37] hsr_slave_0: left promiscuous mode [ 230.570067][ T37] hsr_slave_1: left promiscuous mode [ 230.583473][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.614746][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.622533][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.633764][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.641168][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.649633][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.673084][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.783560][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.792417][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.004672][ T37] hsr_slave_0: left promiscuous mode [ 231.032755][ T37] hsr_slave_1: left promiscuous mode [ 231.050791][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.082366][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.115728][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.148601][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.686503][ T7018] overlayfs: missing 'lowerdir' [ 232.953356][ T5838] Bluetooth: hci1: command tx timeout [ 233.275624][ T37] veth1_macvtap: left promiscuous mode [ 233.281147][ T37] veth0_macvtap: left promiscuous mode [ 233.307609][ T37] veth1_vlan: left promiscuous mode [ 233.319261][ T37] veth0_vlan: left promiscuous mode [ 233.396245][ T37] veth1_macvtap: left promiscuous mode [ 233.401887][ T37] veth0_macvtap: left promiscuous mode [ 233.449217][ T37] veth1_vlan: left promiscuous mode [ 233.463167][ T37] veth0_vlan: left promiscuous mode [ 233.642210][ T7033] atomic_op ffff888052fff998 conn xmit_atomic 0000000000000000 [ 233.665004][ T7035] syz.1.308 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 233.797304][ T7035] loop1: detected capacity change from 0 to 256 [ 233.854409][ T7035] FAT-fs (loop1): Directory bread(block 1285) failed [ 233.862269][ T7035] FAT-fs (loop1): Directory bread(block 1286) failed [ 233.908518][ T7035] FAT-fs (loop1): Directory bread(block 1287) failed [ 233.944291][ T7035] FAT-fs (loop1): Directory bread(block 1288) failed [ 233.985980][ T7035] FAT-fs (loop1): Directory bread(block 1285) failed [ 234.030038][ T7035] FAT-fs (loop1): Directory bread(block 1286) failed [ 234.051448][ T7035] FAT-fs (loop1): Directory bread(block 1287) failed [ 234.074435][ T7035] FAT-fs (loop1): Directory bread(block 1288) failed [ 234.094182][ T7035] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 235.002645][ T5838] Bluetooth: hci1: command tx timeout [ 236.767772][ T7055] overlayfs: missing 'lowerdir' [ 237.583598][ T5838] Bluetooth: hci1: command tx timeout [ 238.642420][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.653792][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.663703][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.686663][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.694599][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 238.798141][ T37] team0 (unregistering): Port device team_slave_1 removed [ 238.828721][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.321'. [ 238.918839][ T37] team0 (unregistering): Port device team_slave_0 removed [ 241.255059][ T5838] Bluetooth: hci1: command tx timeout [ 241.260703][ T5838] Bluetooth: hci5: command tx timeout [ 242.775696][ T37] team0 (unregistering): Port device team_slave_1 removed [ 242.863844][ T37] team0 (unregistering): Port device team_slave_0 removed [ 243.293262][ T5838] Bluetooth: hci5: command tx timeout [ 243.516906][ T7111] loop2: detected capacity change from 0 to 512 [ 243.603962][ T7111] EXT4-fs: Invalid want_extra_isize 56024 [ 243.782518][ T7113] tipc: Cannot configure node identity twice [ 244.694455][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.701672][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.761133][ T6924] bridge_slave_0: entered allmulticast mode [ 244.789482][ T6924] bridge_slave_0: entered promiscuous mode [ 244.953306][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.960489][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.011032][ T6924] bridge_slave_1: entered allmulticast mode [ 245.022897][ T6924] bridge_slave_1: entered promiscuous mode [ 245.268978][ T6924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.329082][ T6924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.373171][ T5838] Bluetooth: hci5: command tx timeout [ 245.817847][ T7153] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 246.660971][ T7152] lo speed is unknown, defaulting to 1000 [ 246.704709][ T6924] team0: Port device team_slave_0 added [ 246.726533][ T7152] lo speed is unknown, defaulting to 1000 [ 246.804177][ T6924] team0: Port device team_slave_1 added [ 246.809874][ T7152] lo speed is unknown, defaulting to 1000 [ 246.821410][ T7152] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 246.838243][ T7152] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 246.877422][ T7152] lo speed is unknown, defaulting to 1000 [ 246.978211][ T7152] lo speed is unknown, defaulting to 1000 [ 246.986908][ T7152] lo speed is unknown, defaulting to 1000 [ 246.994933][ T7152] lo speed is unknown, defaulting to 1000 [ 247.002858][ T7152] lo speed is unknown, defaulting to 1000 [ 247.010723][ T7152] lo speed is unknown, defaulting to 1000 [ 247.018122][ T7152] lo speed is unknown, defaulting to 1000 [ 247.025624][ T7152] lo speed is unknown, defaulting to 1000 [ 247.032953][ T7152] lo speed is unknown, defaulting to 1000 [ 247.287762][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.317381][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.356513][ T6924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.411755][ T6924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.453919][ T5838] Bluetooth: hci5: command tx timeout [ 247.455491][ T6924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.472352][ T7169] loop5: detected capacity change from 0 to 512 [ 247.526543][ T6924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.551256][ T7003] chnl_net:caif_netlink_parms(): no params data found [ 247.567565][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 247.575772][ T7169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.642733][ T7169] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.727339][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.815457][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 247.966109][ T7180] veth0_to_bond: entered promiscuous mode [ 247.989209][ T7180] veth0_to_bond: entered allmulticast mode [ 248.365290][ T6924] hsr_slave_0: entered promiscuous mode [ 248.405947][ T6924] hsr_slave_1: entered promiscuous mode [ 250.386702][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.411610][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.437091][ T7065] bridge_slave_0: entered allmulticast mode [ 250.463470][ T7065] bridge_slave_0: entered promiscuous mode [ 250.634524][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.641702][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.669960][ T7065] bridge_slave_1: entered allmulticast mode [ 250.685582][ T7065] bridge_slave_1: entered promiscuous mode [ 250.931966][ T7236] loop2: detected capacity change from 0 to 1024 [ 250.944464][ T7236] EXT4-fs: inline encryption not supported [ 251.002102][ T7236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.010834][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.038171][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.062999][ T7003] bridge_slave_0: entered allmulticast mode [ 251.125179][ T7003] bridge_slave_0: entered promiscuous mode [ 251.157792][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.158002][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.200869][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.244553][ T7003] bridge_slave_1: entered allmulticast mode [ 252.196834][ T7003] bridge_slave_1: entered promiscuous mode [ 252.367079][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.397137][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 252.429281][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.488095][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.580476][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.880973][ T7065] team0: Port device team_slave_0 added [ 252.933604][ T7003] team0: Port device team_slave_0 added [ 252.948502][ T7065] team0: Port device team_slave_1 added [ 253.009720][ T7003] team0: Port device team_slave_1 added [ 253.466341][ T31] audit: type=1326 audit(1771868757.033:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bb9c629 code=0x7ffc0000 [ 253.531647][ T31] audit: type=1326 audit(1771868757.053:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f499bb9c629 code=0x7ffc0000 [ 253.574085][ T31] audit: type=1326 audit(1771868757.053:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bb9c629 code=0x7ffc0000 [ 253.625491][ T31] audit: type=1326 audit(1771868757.053:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7267 comm="syz.2.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bb9c629 code=0x7ffc0000 [ 254.856504][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.866406][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.166842][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.173631][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.184470][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.191409][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.217579][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.230246][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.398081][ T7282] loop5: detected capacity change from 0 to 4096 [ 255.482097][ T7282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.528060][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.569328][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.629583][ T31] audit: type=1800 audit(1771868759.193:11): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.374" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 255.703098][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.793205][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.800190][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.904239][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.973426][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.331008][ T7003] hsr_slave_0: entered promiscuous mode [ 256.365527][ T7003] hsr_slave_1: entered promiscuous mode [ 256.391891][ T7003] debugfs: 'hsr0' already exists in 'hsr' [ 256.398540][ T7003] Cannot create hsr debugfs directory [ 256.612559][ T6924] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 256.669084][ T6924] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 256.732408][ T6924] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 256.761082][ T7310] loop5: detected capacity change from 0 to 512 [ 256.854159][ T7310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.870689][ T7065] hsr_slave_0: entered promiscuous mode [ 256.881474][ T7065] hsr_slave_1: entered promiscuous mode [ 256.892458][ T7310] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.389: iget: bad extended attribute block 262144 [ 256.909247][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 256.915878][ T7065] Cannot create hsr debugfs directory [ 256.935605][ T7310] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 256.936183][ T7310] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.389: couldn't read orphan inode 15 (err -117) [ 256.945390][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 256.945421][ C1] EXT4-fs (loop5): initial error at time 1771868760: ext4_orphan_get:1391: inode 15 [ 256.945475][ C1] EXT4-fs (loop5): last error at time 1771868760: ext4_orphan_get:1391: inode 15 [ 256.983472][ T7310] loop5: lost filesystem error report for type 5 error -117 [ 256.987017][ T7310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.024012][ T6924] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 257.226865][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.629940][ T7325] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 257.788642][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.123000][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.211583][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.705935][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.252830][ T6924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.385645][ T6924] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.640736][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.648205][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.034487][ T7378] sctp: [Deprecated]: syz.1.406 (pid 7378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.034487][ T7378] Use struct sctp_sack_info instead [ 261.115640][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.123089][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.157312][ T37] bridge_slave_1: left allmulticast mode [ 261.163007][ T37] bridge_slave_1: left promiscuous mode [ 261.210707][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.615150][ T37] bridge_slave_0: left allmulticast mode [ 262.464128][ T37] bridge_slave_0: left promiscuous mode [ 262.469998][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.626861][ T37] bridge_slave_1: left allmulticast mode [ 262.665831][ T37] bridge_slave_1: left promiscuous mode [ 262.708207][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.806489][ T37] bridge_slave_0: left allmulticast mode [ 262.812201][ T37] bridge_slave_0: left promiscuous mode [ 262.844228][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.989622][ T37] bridge_slave_1: left allmulticast mode [ 263.016296][ T37] bridge_slave_1: left promiscuous mode [ 263.024561][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.187519][ T37] bridge_slave_0: left allmulticast mode [ 263.218036][ T37] bridge_slave_0: left promiscuous mode [ 263.233679][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.295333][ T7407] loop5: detected capacity change from 0 to 1024 [ 263.477222][ T7407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.603729][ T7407] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.211485][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 265.893743][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.265975][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.783337][ T37] bond0 (unregistering): Released all slaves [ 267.810969][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.895121][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.946003][ T37] bond0 (unregistering): Released all slaves [ 269.003494][ T7450] loop5: detected capacity change from 0 to 1024 [ 269.089967][ T7450] EXT4-fs: inline encryption not supported [ 269.527996][ T7450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.183272][ T7457] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 270.393661][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.457161][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.504982][ T37] bond0 (unregistering): Released all slaves [ 270.714346][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.014635][ T6924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.213061][ T7464] loop1: detected capacity change from 0 to 1024 [ 271.797568][ T6924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.809400][ T7464] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 272.500954][ T7003] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 272.715379][ T7003] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 273.268605][ T7003] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 273.750212][ T7003] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 274.278910][ T7505] loop1: detected capacity change from 0 to 1024 [ 274.314425][ T7505] EXT4-fs: inline encryption not supported [ 274.578664][ T7505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.790970][ T7512] loop2: detected capacity change from 0 to 1024 [ 274.879413][ T7512] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 275.396449][ T6924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.854493][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.229710][ T37] hsr_slave_0: left promiscuous mode [ 276.264943][ T37] hsr_slave_1: left promiscuous mode [ 276.310973][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.412140][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.529020][ T7536] netlink: 116 bytes leftover after parsing attributes in process `syz.1.451'. [ 276.580156][ T37] hsr_slave_0: left promiscuous mode [ 276.636225][ T37] hsr_slave_1: left promiscuous mode [ 276.653584][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.679865][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.784388][ T37] hsr_slave_0: left promiscuous mode [ 277.853138][ T37] hsr_slave_1: left promiscuous mode [ 277.865720][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.892522][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.024123][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.057931][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.363853][ T37] veth1_macvtap: left promiscuous mode [ 278.662075][ T37] veth0_macvtap: left promiscuous mode [ 278.746322][ T37] veth1_vlan: left promiscuous mode [ 278.774203][ T37] veth0_vlan: left promiscuous mode [ 280.095135][ T37] team0 (unregistering): Port device team_slave_1 removed [ 280.188838][ T37] team0 (unregistering): Port device team_slave_0 removed [ 280.394021][ T7566] netlink: 116 bytes leftover after parsing attributes in process `syz.1.462'. [ 280.764214][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.773581][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.783406][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.813180][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.831635][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.791293][ T37] team0 (unregistering): Port device team_slave_1 removed [ 281.963950][ T37] team0 (unregistering): Port device team_slave_0 removed [ 282.953084][ T5834] Bluetooth: hci6: command tx timeout [ 285.053403][ T5834] Bluetooth: hci6: command tx timeout [ 285.888844][ T7595] netlink: 116 bytes leftover after parsing attributes in process `syz.2.472'. [ 285.909512][ T37] team0 (unregistering): Port device team_slave_1 removed [ 285.981850][ T37] team0 (unregistering): Port device team_slave_0 removed [ 286.423793][ T7597] 9p: Bad value for 'wfdno' [ 286.928275][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.454'. [ 286.993148][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'. [ 287.002138][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.454'. [ 287.143160][ T5834] Bluetooth: hci6: command tx timeout [ 287.211180][ T7065] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 287.583550][ T7603] overlayfs: missing 'lowerdir' [ 288.812741][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.454'. [ 288.834028][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.848851][ T7065] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 288.853832][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'. [ 288.884918][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.454'. [ 288.917852][ T2967] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.941925][ T2967] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.974937][ T7570] lo speed is unknown, defaulting to 1000 [ 289.001590][ T7065] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 289.039198][ T2967] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.097779][ T6009] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.184305][ T7065] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 289.215121][ T5834] Bluetooth: hci6: command tx timeout [ 289.319976][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.478'. [ 290.749551][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.759533][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.776468][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.784923][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.795754][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.415803][ T7632] lo speed is unknown, defaulting to 1000 [ 291.536598][ T7641] netlink: 44 bytes leftover after parsing attributes in process `syz.5.482'. [ 291.613426][ T7641] netlink: 59 bytes leftover after parsing attributes in process `syz.5.482'. [ 292.002407][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.456060][ T7657] overlayfs: missing 'lowerdir' [ 293.463787][ T5838] Bluetooth: hci0: command tx timeout [ 293.856641][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.883604][ T7570] chnl_net:caif_netlink_parms(): no params data found [ 294.111165][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.118405][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.185646][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.192902][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.280194][ T7671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 294.632304][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 294.670531][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.690566][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.723872][ T7570] bridge_slave_0: entered allmulticast mode [ 294.742070][ T7570] bridge_slave_0: entered promiscuous mode [ 294.762627][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.780299][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.798808][ T7570] bridge_slave_1: entered allmulticast mode [ 294.822365][ T7570] bridge_slave_1: entered promiscuous mode [ 294.954922][ T7668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.964289][ T7668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.983464][ T7668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 294.993613][ T7668] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 295.001298][ T7668] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 295.011462][ T7668] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 295.045612][ T7668] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 295.051662][ T7668] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 295.082090][ T7668] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 295.141427][ T7668] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.167706][ T7668] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 295.216281][ T7668] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 295.466339][ T7570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.537076][ T7570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.573321][ T7690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.494'. [ 295.611263][ T7690] netlink: 59 bytes leftover after parsing attributes in process `syz.2.494'. [ 295.931111][ T7570] team0: Port device team_slave_0 added [ 296.099947][ T7570] team0: Port device team_slave_1 added [ 296.423189][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.973227][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 296.979416][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.071974][ T5834] Bluetooth: hci5: command 0x0c1a tx timeout [ 297.096300][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.106939][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.114979][ T7632] bridge_slave_0: entered allmulticast mode [ 297.128943][ T7632] bridge_slave_0: entered promiscuous mode [ 297.135043][ T5838] Bluetooth: hci6: command 0x0c1a tx timeout [ 297.213287][ T5838] Bluetooth: hci0: command 0x040f tx timeout [ 297.473659][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.480871][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.585441][ T7632] bridge_slave_1: entered allmulticast mode [ 297.650415][ T7632] bridge_slave_1: entered promiscuous mode [ 298.107251][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.146143][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.250778][ T7570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.475494][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.482481][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.575020][ T7570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.573206][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 299.579485][ T5838] Bluetooth: hci6: command 0x0c1a tx timeout [ 299.586064][ T5834] Bluetooth: hci0: command 0x040f tx timeout [ 299.605773][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.615611][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.660130][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.683214][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.734968][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.744847][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.771263][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.785069][ T7570] hsr_slave_0: entered promiscuous mode [ 300.813894][ T7570] hsr_slave_1: entered promiscuous mode [ 300.857937][ T7570] debugfs: 'hsr0' already exists in 'hsr' [ 300.915332][ T7570] Cannot create hsr debugfs directory [ 300.932816][ T7632] team0: Port device team_slave_0 added [ 300.966280][ T7632] team0: Port device team_slave_1 added [ 302.472845][ T7739] overlayfs: missing 'lowerdir' [ 302.480372][ T52] Bluetooth: hci6: command 0x0c1a tx timeout [ 302.486840][ T52] Bluetooth: hci0: command 0x040f tx timeout [ 302.492983][ T52] Bluetooth: hci1: command tx timeout [ 303.052424][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.081137][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.111562][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.302991][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.332663][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.573826][ T52] Bluetooth: hci0: command 0x040f tx timeout [ 304.582232][ T5838] Bluetooth: hci1: command tx timeout [ 304.745309][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.814549][ T7730] lo speed is unknown, defaulting to 1000 [ 305.751483][ T7632] hsr_slave_0: entered promiscuous mode [ 305.794912][ T7632] hsr_slave_1: entered promiscuous mode [ 305.801555][ T7632] debugfs: 'hsr0' already exists in 'hsr' [ 305.845103][ T7632] Cannot create hsr debugfs directory [ 306.653372][ T5838] Bluetooth: hci1: command tx timeout [ 306.658934][ T52] Bluetooth: hci0: command 0x040f tx timeout [ 307.664305][ T37] bridge_slave_1: left allmulticast mode [ 307.683887][ T37] bridge_slave_1: left promiscuous mode [ 307.694404][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.840411][ T37] bridge_slave_0: left allmulticast mode [ 307.853117][ T37] bridge_slave_0: left promiscuous mode [ 307.858948][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.977482][ T37] bridge_slave_1: left allmulticast mode [ 307.995653][ T37] bridge_slave_1: left promiscuous mode [ 308.001438][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.122493][ T37] bridge_slave_0: left allmulticast mode [ 308.134677][ T37] bridge_slave_0: left promiscuous mode [ 308.140595][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.444204][ T7783] overlayfs: missing 'lowerdir' [ 309.347869][ T52] Bluetooth: hci1: command tx timeout [ 309.949081][ T7791] netlink: 44 bytes leftover after parsing attributes in process `syz.1.507'. [ 309.999854][ T7791] netlink: 59 bytes leftover after parsing attributes in process `syz.1.507'. [ 310.848776][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.999602][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.105815][ T37] bond0 (unregistering): Released all slaves [ 312.333478][ T7808] overlayfs: missing 'lowerdir' [ 313.273804][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.426011][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.515122][ T37] bond0 (unregistering): Released all slaves [ 314.783703][ T37] hsr_slave_0: left promiscuous mode [ 314.863142][ T37] hsr_slave_1: left promiscuous mode [ 314.869440][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.951253][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.041709][ T37] hsr_slave_0: left promiscuous mode [ 316.193199][ T37] hsr_slave_1: left promiscuous mode [ 316.199766][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.285434][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.499197][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.506164][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.887523][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'. [ 317.190996][ T37] team0 (unregistering): Port device team_slave_1 removed [ 317.800222][ T37] team0 (unregistering): Port device team_slave_0 removed [ 318.533903][ T7850] overlayfs: missing 'lowerdir' [ 322.320091][ T37] team0 (unregistering): Port device team_slave_1 removed [ 322.361155][ T37] team0 (unregistering): Port device team_slave_0 removed [ 322.701717][ T7730] chnl_net:caif_netlink_parms(): no params data found [ 323.209467][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.233265][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.246259][ T7730] bridge_slave_0: entered allmulticast mode [ 323.265884][ T7730] bridge_slave_0: entered promiscuous mode [ 323.303101][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.329837][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.366205][ T7730] bridge_slave_1: entered allmulticast mode [ 323.378023][ T7730] bridge_slave_1: entered promiscuous mode [ 324.147489][ T7730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.216069][ T7730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.360351][ T7570] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 324.492882][ T7570] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 324.893098][ T7896] overlayfs: missing 'lowerdir' [ 326.785296][ T7570] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 326.955495][ T7570] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 327.066062][ T7730] team0: Port device team_slave_0 added [ 327.106891][ T7730] team0: Port device team_slave_1 added [ 327.558551][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.573118][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.715070][ T7730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.124546][ T7730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.131550][ T7730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.218374][ T7730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.730455][ T7730] hsr_slave_0: entered promiscuous mode [ 328.751258][ T7730] hsr_slave_1: entered promiscuous mode [ 330.359146][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.570928][ T7632] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.173807][ T7956] overlayfs: missing 'lowerdir' [ 332.880461][ T7570] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.944923][ T7632] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 333.036194][ T7632] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 333.100046][ T7632] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 334.166024][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.173234][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.786894][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.794123][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.646737][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.416503][ T8008] overlayfs: missing 'lowerdir' [ 337.453711][ T37] bridge_slave_1: left allmulticast mode [ 337.609224][ T37] bridge_slave_1: left promiscuous mode [ 337.623510][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.764428][ T37] bridge_slave_0: left allmulticast mode [ 337.794683][ T37] bridge_slave_0: left promiscuous mode [ 337.800495][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.900348][ T8024] netlink: 182 bytes leftover after parsing attributes in process `syz.1.571'. [ 339.403328][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.633827][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.685325][ T37] bond0 (unregistering): Released all slaves [ 339.830188][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.259455][ T2948] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.266763][ T2948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.346312][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.353600][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.940730][ T37] hsr_slave_0: left promiscuous mode [ 341.568939][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.600458][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 341.614221][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 341.660303][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 341.668085][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.710075][ T37] hsr_slave_1: left promiscuous mode [ 341.724194][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.814264][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.688206][ T37] team0 (unregistering): Port device team_slave_1 removed [ 343.783189][ T5838] Bluetooth: hci5: command tx timeout [ 343.840905][ T37] team0 (unregistering): Port device team_slave_0 removed [ 344.781944][ T8049] overlayfs: missing 'lowerdir' [ 345.957169][ T5838] Bluetooth: hci5: command tx timeout [ 347.467929][ T8034] lo speed is unknown, defaulting to 1000 [ 347.618034][ T7632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.014701][ T52] Bluetooth: hci5: command tx timeout [ 348.872692][ T7730] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 349.195399][ T8068] 9p: Bad value for 'wfdno' [ 349.336801][ T7730] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 349.551252][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 349.591862][ T7730] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 349.739882][ T7730] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 349.888537][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.094672][ T52] Bluetooth: hci5: command tx timeout [ 350.529893][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.543348][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.550669][ T8034] bridge_slave_0: entered allmulticast mode [ 350.559482][ T8034] bridge_slave_0: entered promiscuous mode [ 350.569745][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.587430][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.613507][ T8034] bridge_slave_1: entered allmulticast mode [ 350.621871][ T8034] bridge_slave_1: entered promiscuous mode [ 351.241410][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.328156][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.477233][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.495556][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.504975][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.516885][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.524897][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.004871][ T8097] overlayfs: missing 'lowerdir' [ 353.752508][ T52] Bluetooth: hci6: command tx timeout [ 354.062168][ T8034] team0: Port device team_slave_0 added [ 354.074497][ T8034] team0: Port device team_slave_1 added [ 354.913596][ T8113] netlink: 44 bytes leftover after parsing attributes in process `syz.5.594'. [ 354.973436][ T8113] netlink: 51 bytes leftover after parsing attributes in process `syz.5.594'. [ 354.982342][ T8113] netlink: 51 bytes leftover after parsing attributes in process `syz.5.594'. [ 355.306559][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.324680][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.556202][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.567435][ T8098] lo speed is unknown, defaulting to 1000 [ 355.686520][ T7730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.765854][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.773107][ T52] Bluetooth: hci6: command tx timeout [ 355.818197][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.913107][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.119184][ T8034] hsr_slave_0: entered promiscuous mode [ 357.144546][ T8034] hsr_slave_1: entered promiscuous mode [ 357.162539][ T8034] debugfs: 'hsr0' already exists in 'hsr' [ 357.174760][ T8034] Cannot create hsr debugfs directory [ 357.182988][ T7730] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.588421][ T8129] overlayfs: missing 'lowerdir' [ 358.493423][ T52] Bluetooth: hci6: command tx timeout [ 359.283487][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 359.754002][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.761150][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.075571][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 360.133344][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 360.144680][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 360.163944][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 360.181895][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.608150][ T52] Bluetooth: hci6: command tx timeout [ 361.679196][ T8149] netlink: 44 bytes leftover after parsing attributes in process `syz.2.605'. [ 361.803173][ T8149] netlink: 43 bytes leftover after parsing attributes in process `syz.2.605'. [ 361.825007][ T8139] lo speed is unknown, defaulting to 1000 [ 361.870575][ T8149] netlink: 43 bytes leftover after parsing attributes in process `syz.2.605'. [ 362.265429][ T52] Bluetooth: hci0: command tx timeout [ 363.610997][ T8098] chnl_net:caif_netlink_parms(): no params data found [ 364.293706][ T8167] overlayfs: missing 'lowerdir' [ 365.233401][ T52] Bluetooth: hci0: command tx timeout [ 365.603963][ T2948] bridge_slave_1: left allmulticast mode [ 365.609807][ T2948] bridge_slave_1: left promiscuous mode [ 365.648506][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.924381][ T2948] bridge_slave_0: left allmulticast mode [ 365.933205][ T2948] bridge_slave_0: left promiscuous mode [ 365.949388][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.061629][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.615'. [ 366.822627][ T8181] netlink: 44 bytes leftover after parsing attributes in process `syz.2.617'. [ 366.897329][ T8181] netlink: 43 bytes leftover after parsing attributes in process `syz.2.617'. [ 366.973290][ T8181] netlink: 43 bytes leftover after parsing attributes in process `syz.2.617'. [ 367.293314][ T5838] Bluetooth: hci0: command tx timeout [ 367.815494][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.054791][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.161365][ T2948] bond0 (unregistering): Released all slaves [ 368.947930][ T8197] overlayfs: missing 'lowerdir' [ 369.103551][ T8098] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.110700][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.183377][ T8098] bridge_slave_0: entered allmulticast mode [ 369.212378][ T8098] bridge_slave_0: entered promiscuous mode [ 369.373204][ T5838] Bluetooth: hci0: command tx timeout [ 370.210819][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 370.230348][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.240497][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.264395][ T8098] bridge_slave_1: entered allmulticast mode [ 370.295685][ T8098] bridge_slave_1: entered promiscuous mode [ 370.517288][ T8098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.536477][ T8098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.133537][ T2948] hsr_slave_0: left promiscuous mode [ 371.163292][ T2948] hsr_slave_1: left promiscuous mode [ 371.177433][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.253862][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.593701][ T8212] netlink: 44 bytes leftover after parsing attributes in process `syz.1.628'. [ 371.673743][ T8212] netlink: 43 bytes leftover after parsing attributes in process `syz.1.628'. [ 371.723277][ T8212] netlink: 43 bytes leftover after parsing attributes in process `syz.1.628'. [ 372.688439][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 372.825849][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 375.581904][ T8098] team0: Port device team_slave_0 added [ 375.829010][ T8230] overlayfs: missing 'lowerdir' [ 376.252853][ T8098] team0: Port device team_slave_1 added [ 376.475144][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.493813][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.514996][ T8139] bridge_slave_0: entered allmulticast mode [ 376.522818][ T8139] bridge_slave_0: entered promiscuous mode [ 376.710073][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.763164][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.883165][ T8098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.913618][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.920789][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.984126][ T8139] bridge_slave_1: entered allmulticast mode [ 377.023129][ T8139] bridge_slave_1: entered promiscuous mode [ 377.145441][ T8098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.152439][ T8098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.233177][ T8098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.325308][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.376950][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.758872][ T8139] team0: Port device team_slave_0 added [ 377.874924][ T8139] team0: Port device team_slave_1 added [ 377.943640][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.949988][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.140590][ T8240] netlink: 44 bytes leftover after parsing attributes in process `syz.1.638'. [ 378.141638][ T8098] hsr_slave_0: entered promiscuous mode [ 378.196553][ T8098] hsr_slave_1: entered promiscuous mode [ 378.233278][ T8240] netlink: 43 bytes leftover after parsing attributes in process `syz.1.638'. [ 378.244000][ T8098] debugfs: 'hsr0' already exists in 'hsr' [ 378.262838][ T8098] Cannot create hsr debugfs directory [ 378.282103][ T8240] netlink: 43 bytes leftover after parsing attributes in process `syz.1.638'. [ 378.477510][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.503487][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.570035][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.115277][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.122249][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.223113][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.727799][ T8034] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 379.877613][ T8034] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 380.136048][ T8139] hsr_slave_0: entered promiscuous mode [ 380.143009][ T8139] hsr_slave_1: entered promiscuous mode [ 380.175018][ T8139] debugfs: 'hsr0' already exists in 'hsr' [ 380.223102][ T8139] Cannot create hsr debugfs directory [ 380.906275][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 381.219105][ T8034] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 381.561441][ T8034] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 381.920093][ T8257] overlayfs: missing 'lowerdir' [ 382.385267][ T5915] IPVS: starting estimator thread 0... [ 382.393624][ T8268] IPVS: sh: FWM 3 0x00000003 - no destination available [ 382.504977][ T8269] IPVS: using max 23 ests per chain, 55200 per kthread [ 382.709943][ T8277] netlink: 44 bytes leftover after parsing attributes in process `syz.5.648'. [ 382.722103][ T8277] netlink: 43 bytes leftover after parsing attributes in process `syz.5.648'. [ 382.753287][ T8277] netlink: 43 bytes leftover after parsing attributes in process `syz.5.648'. [ 385.602074][ T8295] overlayfs: missing 'lowerdir' [ 388.507046][ T8308] netlink: 44 bytes leftover after parsing attributes in process `syz.5.660'. [ 388.540347][ T8308] netlink: 43 bytes leftover after parsing attributes in process `syz.5.660'. [ 388.564131][ T8308] netlink: 43 bytes leftover after parsing attributes in process `syz.5.660'. [ 388.734983][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.017196][ T8310] netlink: 40 bytes leftover after parsing attributes in process `syz.5.661'. [ 389.332804][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.372164][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.379415][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.449444][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.456641][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.764126][ T8317] loop5: detected capacity change from 0 to 256 [ 389.874330][ T2948] bridge_slave_1: left allmulticast mode [ 389.880588][ T2948] bridge_slave_1: left promiscuous mode [ 389.900610][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.162470][ T2948] bridge_slave_0: left allmulticast mode [ 390.192129][ T2948] bridge_slave_0: left promiscuous mode [ 390.206333][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.357904][ T8319] syz.5.665 uses obsolete (PF_INET,SOCK_PACKET) [ 390.607122][ T2948] bridge_slave_1: left allmulticast mode [ 390.622649][ T2948] bridge_slave_1: left promiscuous mode [ 390.653341][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.755315][ T2948] bridge_slave_0: left allmulticast mode [ 390.760990][ T2948] bridge_slave_0: left promiscuous mode [ 390.776338][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.062184][ T8328] overlayfs: missing 'lowerdir' [ 392.614164][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.636401][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.677914][ T2948] bond0 (unregistering): Released all slaves [ 392.899764][ T8332] loop1: detected capacity change from 0 to 512 [ 392.989776][ T8332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.020492][ T8332] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.069967][ T8332] EXT4-fs error (device loop1): ext4_xattr_block_find:1879: inode #12: comm syz.1.668: corrupted xattr block 6: invalid header [ 393.116739][ T8332] EXT4-fs (loop1): Remounting filesystem read-only [ 393.226890][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.245341][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.345533][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.378956][ T2948] bond0 (unregistering): Released all slaves [ 393.445030][ T8034] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 393.464624][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.573750][ T2948] hsr_slave_0: left promiscuous mode [ 394.603226][ T2948] hsr_slave_1: left promiscuous mode [ 394.623235][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.753842][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.003266][ T2948] hsr_slave_0: left promiscuous mode [ 395.976082][ T8358] overlayfs: missing 'lowerdir' [ 396.060447][ T2948] hsr_slave_1: left promiscuous mode [ 396.068292][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.136041][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.320375][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 397.529661][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 399.095317][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 399.227494][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 401.072450][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.086317][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.095853][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.156633][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.181329][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.334282][ T8392] lo speed is unknown, defaulting to 1000 [ 402.769805][ T8392] chnl_net:caif_netlink_parms(): no params data found [ 403.305208][ T5838] Bluetooth: hci1: command tx timeout [ 404.292737][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.338792][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.377096][ T8392] bridge_slave_0: entered allmulticast mode [ 404.414390][ T8392] bridge_slave_0: entered promiscuous mode [ 404.454903][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.482994][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.503419][ T8392] bridge_slave_1: entered allmulticast mode [ 404.572995][ T8392] bridge_slave_1: entered promiscuous mode [ 404.586363][ T8098] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 404.937846][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.984271][ T8098] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.171539][ T8098] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.373320][ T5838] Bluetooth: hci1: command tx timeout [ 405.438473][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.808152][ T8098] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 406.184552][ T8392] team0: Port device team_slave_0 added [ 406.316720][ T8392] team0: Port device team_slave_1 added [ 406.566365][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.618396][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.674710][ T8392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.736843][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.763847][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.840945][ T8392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.148474][ T8139] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 407.344584][ T8139] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 407.453275][ T5838] Bluetooth: hci1: command tx timeout [ 407.474431][ T8139] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 407.877198][ T8139] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 407.993736][ T8392] hsr_slave_0: entered promiscuous mode [ 408.000509][ T8392] hsr_slave_1: entered promiscuous mode [ 408.512464][ T8464] overlayfs: missing 'lowerdir' [ 409.619334][ T5838] Bluetooth: hci1: command tx timeout [ 412.173726][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.303943][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.355636][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.384138][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.391274][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.418733][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.446028][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.476199][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.477012][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.490511][ T480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.514947][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.895617][ T8507] lo speed is unknown, defaulting to 1000 [ 414.673213][ T52] Bluetooth: hci5: command tx timeout [ 415.073498][ T2948] bridge_slave_1: left allmulticast mode [ 415.079199][ T2948] bridge_slave_1: left promiscuous mode [ 415.103848][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.500965][ T2948] bridge_slave_0: left allmulticast mode [ 415.509621][ T2948] bridge_slave_0: left promiscuous mode [ 415.566506][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.841621][ T8525] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 416.759492][ T52] Bluetooth: hci5: command tx timeout [ 417.826668][ T8533] overlayfs: missing 'lowerdir' [ 417.985076][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.138810][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.175436][ T2948] bond0 (unregistering): Released all slaves [ 418.833077][ T52] Bluetooth: hci5: command tx timeout [ 418.952475][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.245804][ T2948] hsr_slave_0: left promiscuous mode [ 420.398688][ T2948] hsr_slave_1: left promiscuous mode [ 420.434927][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.537030][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.624058][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 420.634099][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 420.645496][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 420.668585][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 420.703275][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 420.986883][ T5838] Bluetooth: hci5: command tx timeout [ 422.743323][ T5838] Bluetooth: hci6: command tx timeout [ 424.190760][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 424.441974][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 424.823170][ T5838] Bluetooth: hci6: command tx timeout [ 425.698151][ T8599] overlayfs: missing 'lowerdir' [ 426.956507][ T5838] Bluetooth: hci6: command tx timeout [ 427.540866][ T8569] lo speed is unknown, defaulting to 1000 [ 427.937692][ T8507] chnl_net:caif_netlink_parms(): no params data found [ 428.664791][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.672063][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.679867][ T8507] bridge_slave_0: entered allmulticast mode [ 428.703246][ T8507] bridge_slave_0: entered promiscuous mode [ 428.913539][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.920694][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.983667][ T5838] Bluetooth: hci6: command tx timeout [ 429.000078][ T8507] bridge_slave_1: entered allmulticast mode [ 429.027464][ T8507] bridge_slave_1: entered promiscuous mode [ 429.422917][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.473996][ T8392] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 430.331849][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.961537][ T8644] overlayfs: missing 'lowerdir' [ 432.897783][ T8392] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 433.055125][ T8507] team0: Port device team_slave_0 added [ 433.167111][ T8507] team0: Port device team_slave_1 added [ 433.172977][ T8392] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 433.456955][ T8392] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 433.879441][ T8569] chnl_net:caif_netlink_parms(): no params data found [ 434.314218][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.321190][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.463779][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.496205][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.517769][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.583323][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.083310][ T8507] hsr_slave_0: entered promiscuous mode [ 435.090306][ T8507] hsr_slave_1: entered promiscuous mode [ 435.097843][ T8507] debugfs: 'hsr0' already exists in 'hsr' [ 435.103899][ T8507] Cannot create hsr debugfs directory [ 435.285564][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.292749][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.317626][ T8569] bridge_slave_0: entered allmulticast mode [ 435.341520][ T8569] bridge_slave_0: entered promiscuous mode [ 435.503715][ T8677] loop2: detected capacity change from 0 to 1024 [ 435.515656][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.522988][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.586736][ T8677] EXT4-fs: Ignoring removed orlov option [ 435.666737][ T8569] bridge_slave_1: entered allmulticast mode [ 435.715517][ T8569] bridge_slave_1: entered promiscuous mode [ 435.978778][ T8677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.268242][ T5835] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 436.324392][ T8569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.454467][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 436.498210][ T8569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.523614][ T5835] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 436.533171][ T5835] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 436.572826][ T5835] usb 3-1: config 179 has no interface number 0 [ 436.601158][ T5835] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 436.635521][ T5835] usb 3-1: config 179 interface 65 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 436.668888][ T5835] usb 3-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 436.723213][ T5835] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 436.732317][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.006956][ T5915] usb 3-1: USB disconnect, device number 2 [ 437.211858][ T8569] team0: Port device team_slave_0 added [ 437.336457][ T8569] team0: Port device team_slave_1 added [ 437.944904][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.023187][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 438.709522][ T8700] loop2: detected capacity change from 0 to 8192 [ 439.143201][ T5819] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 439.151384][ T5819] FAT-fs (loop2): Filesystem has been set read-only [ 440.275234][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.281676][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.597575][ T8392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.644129][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.651153][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.750805][ T8569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.814123][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.821128][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.869431][ T8569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.174169][ T8707] overlayfs: missing 'lowerdir' [ 444.920127][ T8392] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.065454][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.072646][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.170976][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.178213][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.907667][ T8569] hsr_slave_0: entered promiscuous mode [ 445.953846][ T8569] hsr_slave_1: entered promiscuous mode [ 446.002047][ T8569] debugfs: 'hsr0' already exists in 'hsr' [ 446.011704][ T8569] Cannot create hsr debugfs directory [ 447.120250][ T8392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.940185][ T2948] bridge_slave_1: left allmulticast mode [ 447.961589][ T2948] bridge_slave_1: left promiscuous mode [ 448.013485][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.274043][ T2948] bridge_slave_0: left allmulticast mode [ 448.303086][ T2948] bridge_slave_0: left promiscuous mode [ 448.309169][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.623681][ T2948] bridge_slave_1: left allmulticast mode [ 448.653441][ T2948] bridge_slave_1: left promiscuous mode [ 448.659223][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.004893][ T2948] bridge_slave_0: left allmulticast mode [ 449.010590][ T2948] bridge_slave_0: left promiscuous mode [ 449.037384][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.020433][ T8775] overlayfs: missing 'lowerdir' [ 452.731433][ T8786] loop1: detected capacity change from 0 to 2048 [ 452.948763][ T8716] loop1: p3 p4 < > [ 452.973719][ T8716] loop1: p3 start 11362048 is beyond EOD, truncated [ 453.069257][ T8786] loop1: p3 p4 < > [ 453.083474][ T8786] loop1: p3 start 11362048 is beyond EOD, truncated [ 453.376339][ T8716] udevd[8716]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 453.428794][ T8716] udevd[8716]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 453.561460][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.684613][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.946253][ T2948] bond0 (unregistering): Released all slaves [ 455.310190][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.745061][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.847528][ T2948] bond0 (unregistering): Released all slaves [ 455.920446][ T8507] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 456.391745][ T8809] overlayfs: missing 'lowerdir' [ 457.840126][ T8507] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 457.882593][ T8816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'. [ 458.032912][ T8816] netlink: 51 bytes leftover after parsing attributes in process `syz.1.770'. [ 458.062918][ T8816] netlink: 'syz.1.770': attribute type 6 has an invalid length. [ 458.110063][ T8816] netlink: 51 bytes leftover after parsing attributes in process `syz.1.770'. [ 458.669417][ T8507] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.343250][ T8507] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.827287][ T8833] loop1: detected capacity change from 0 to 128 [ 460.076123][ T8833] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 460.196002][ T8833] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 460.776798][ T5822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.846641][ T2948] hsr_slave_0: left promiscuous mode [ 460.884360][ T2948] hsr_slave_1: left promiscuous mode [ 460.964072][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.153896][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.634006][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.643362][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.651272][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.683800][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.690898][ T2948] hsr_slave_0: left promiscuous mode [ 461.699935][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.783188][ T2948] hsr_slave_1: left promiscuous mode [ 461.789430][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.093797][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.744460][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 463.774079][ T52] Bluetooth: hci0: command tx timeout [ 463.854769][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 465.149755][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 465.251457][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 465.853185][ T52] Bluetooth: hci0: command tx timeout [ 466.503376][ T8848] lo speed is unknown, defaulting to 1000 [ 466.637866][ T8873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.781'. [ 466.720682][ T8873] netlink: 51 bytes leftover after parsing attributes in process `syz.1.781'. [ 466.803312][ T8873] netlink: 'syz.1.781': attribute type 6 has an invalid length. [ 466.833308][ T8873] netlink: 51 bytes leftover after parsing attributes in process `syz.1.781'. [ 467.235538][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.786286][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.924849][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.932025][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.933635][ T52] Bluetooth: hci0: command tx timeout [ 468.013624][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.020836][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.043940][ T8848] chnl_net:caif_netlink_parms(): no params data found [ 469.206101][ T8569] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 469.938420][ T8569] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 470.013355][ T52] Bluetooth: hci0: command tx timeout [ 470.251262][ T8569] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 470.914870][ T8569] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 471.794319][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.811728][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.819280][ T8848] bridge_slave_0: entered allmulticast mode [ 471.897048][ T8848] bridge_slave_0: entered promiscuous mode [ 472.043763][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.075977][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.096135][ T8848] bridge_slave_1: entered allmulticast mode [ 472.246085][ T8848] bridge_slave_1: entered promiscuous mode [ 472.481938][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.639673][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.880260][ T8848] team0: Port device team_slave_0 added [ 472.936866][ T8848] team0: Port device team_slave_1 added [ 473.054241][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.073853][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.084283][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.092522][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.101631][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.318168][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.795'. [ 473.656450][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.717469][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.845930][ T8848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.888642][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.911065][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.147661][ T8848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.133228][ T5838] Bluetooth: hci1: command tx timeout [ 476.073995][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 476.564280][ T8943] lo speed is unknown, defaulting to 1000 [ 476.583341][ T8569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.032783][ T8569] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.092238][ T8848] hsr_slave_0: entered promiscuous mode [ 477.135687][ T8848] hsr_slave_1: entered promiscuous mode [ 477.142326][ T8848] debugfs: 'hsr0' already exists in 'hsr' [ 477.223579][ T5838] Bluetooth: hci1: command tx timeout [ 477.229154][ T8848] Cannot create hsr debugfs directory [ 477.859897][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.867156][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.052909][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.060435][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.293232][ T5838] Bluetooth: hci1: command tx timeout [ 481.374300][ T5838] Bluetooth: hci1: command tx timeout [ 481.834036][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 481.845847][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 481.912125][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 481.920241][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 481.932194][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.131521][ T8943] chnl_net:caif_netlink_parms(): no params data found [ 484.015157][ T5838] Bluetooth: hci5: command tx timeout [ 486.094205][ T5838] Bluetooth: hci5: command tx timeout [ 487.555037][ T9038] lo speed is unknown, defaulting to 1000 [ 488.173549][ T5838] Bluetooth: hci5: command tx timeout [ 489.604405][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.604529][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.604731][ T8943] bridge_slave_0: entered allmulticast mode [ 489.606757][ T8943] bridge_slave_0: entered promiscuous mode [ 489.896911][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.897011][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.897169][ T8943] bridge_slave_1: entered allmulticast mode [ 489.904690][ T8943] bridge_slave_1: entered promiscuous mode [ 490.273350][ T5838] Bluetooth: hci5: command tx timeout [ 490.339107][ T9108] loop2: detected capacity change from 0 to 512 [ 490.464172][ T9038] chnl_net:caif_netlink_parms(): no params data found [ 490.480246][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.530788][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.545617][ T9108] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 490.545666][ T9108] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 490.585039][ T9108] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 490.585162][ T9108] System zones: 0-2, 18-18, 34-35 [ 490.588019][ T9108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 490.592497][ T9108] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.888337][ T2948] bridge_slave_1: left allmulticast mode [ 490.888411][ T2948] bridge_slave_1: left promiscuous mode [ 490.888645][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.006521][ T2948] bridge_slave_0: left allmulticast mode [ 491.006559][ T2948] bridge_slave_0: left promiscuous mode [ 491.006804][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.160059][ T2948] bridge_slave_1: left allmulticast mode [ 491.160105][ T2948] bridge_slave_1: left promiscuous mode [ 491.160339][ T2948] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.237030][ T2948] bridge_slave_0: left allmulticast mode [ 491.237071][ T2948] bridge_slave_0: left promiscuous mode [ 491.237305][ T2948] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.073986][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.243338][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.435011][ T2948] bond0 (unregistering): Released all slaves [ 494.880101][ T9149] loop1: detected capacity change from 0 to 32768 [ 495.026980][ T2948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.128058][ T8957] loop1: p9 p11 p16 [ 495.250053][ T2948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.353591][ T9149] loop1: p9 p11 p16 [ 495.395322][ T2948] bond0 (unregistering): Released all slaves [ 495.903625][ T8943] team0: Port device team_slave_0 added [ 496.041858][ T8943] team0: Port device team_slave_1 added [ 496.684205][ T9038] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.708684][ T9038] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.741549][ T9038] bridge_slave_0: entered allmulticast mode [ 496.782452][ T9038] bridge_slave_0: entered promiscuous mode [ 496.828443][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.854877][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.993848][ T8943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.134070][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.141281][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.227591][ T8957] udevd[8957]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 497.233349][ T8716] udevd[8716]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 497.263309][ T9038] bridge_slave_1: entered allmulticast mode [ 497.278589][ T8736] udevd[8736]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 497.297916][ T9038] bridge_slave_1: entered promiscuous mode [ 497.402369][ T8957] udevd[8957]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 497.447981][ T8736] udevd[8736]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 497.462465][ T8716] udevd[8716]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 497.679506][ T2948] hsr_slave_0: left promiscuous mode [ 497.713934][ T2948] hsr_slave_1: left promiscuous mode [ 497.742974][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.775128][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.919948][ T2948] hsr_slave_0: left promiscuous mode [ 497.921783][ T2948] hsr_slave_1: left promiscuous mode [ 497.922495][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.923404][ T2948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.684046][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 499.783890][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 500.588963][ T9186] netlink: 44 bytes leftover after parsing attributes in process `syz.5.844'. [ 500.625395][ T9186] netlink: 43 bytes leftover after parsing attributes in process `syz.5.844'. [ 500.647888][ T9186] netlink: 43 bytes leftover after parsing attributes in process `syz.5.844'. [ 500.648959][ T2948] team0 (unregistering): Port device team_slave_1 removed [ 500.746341][ T2948] team0 (unregistering): Port device team_slave_0 removed [ 500.847223][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.883197][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.382186][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.423225][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.483130][ T8943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.532093][ T8848] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 503.582614][ T9172] netlink: 'syz.2.842': attribute type 7 has an invalid length. [ 503.617276][ T9172] netlink: 'syz.2.842': attribute type 8 has an invalid length. [ 503.718796][ T9038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.875391][ T8848] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 504.018015][ T8848] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 504.060755][ T9038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.230397][ T8943] hsr_slave_0: entered promiscuous mode [ 504.256156][ T8943] hsr_slave_1: entered promiscuous mode [ 504.273388][ T9196] loop2: detected capacity change from 0 to 512 [ 504.311231][ T9175] lo speed is unknown, defaulting to 1000 [ 504.317290][ T8848] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 504.373516][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 504.645368][ T9196] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.848: couldn't read orphan inode 26 (err -116) [ 504.731468][ T9038] team0: Port device team_slave_0 added [ 504.748554][ T9196] loop2: lost filesystem error report for type 5 error -116 [ 504.756880][ T9038] team0: Port device team_slave_1 added [ 504.760358][ T9196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.810270][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.817442][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.873174][ T9038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.941344][ T9196] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.029626][ T9196] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.190662][ T9038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.220508][ T9038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.313178][ T9038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.927583][ T9038] hsr_slave_0: entered promiscuous mode [ 505.945460][ T9038] hsr_slave_1: entered promiscuous mode [ 505.963429][ T9038] debugfs: 'hsr0' already exists in 'hsr' [ 505.969214][ T9038] Cannot create hsr debugfs directory [ 506.372828][ T9225] loop2: detected capacity change from 0 to 1024 [ 506.411278][ T9225] EXT4-fs: inline encryption not supported [ 506.581882][ T9225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.655287][ T9225] EXT4-fs error (device loop2): mb_free_blocks:2044: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 506.676725][ T9225] EXT4-fs (loop2): Remounting filesystem read-only [ 506.770850][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.288413][ T9241] loop5: detected capacity change from 0 to 1024 [ 507.304588][ T9241] EXT4-fs: Ignoring removed orlov option [ 507.401640][ T9241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.467094][ T31] audit: type=1800 audit(1771869011.033:12): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.853" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 507.549752][ T31] audit: type=1804 audit(1771869011.093:13): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.853" name="/newroot/242/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 507.749322][ T9247] EXT4-fs error (device loop5): mb_free_blocks:2044: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 507.772658][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.112587][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.386182][ T8848] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.868603][ T9256] loop2: detected capacity change from 0 to 1024 [ 509.036399][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.043655][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.103017][ T9256] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 509.384457][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.391645][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.851703][ T8848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.109437][ T37] bridge_slave_1: left allmulticast mode [ 510.126881][ T37] bridge_slave_1: left promiscuous mode [ 510.153992][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.218011][ T37] bridge_slave_0: left allmulticast mode [ 510.229412][ T37] bridge_slave_0: left promiscuous mode [ 510.254708][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.646532][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.679074][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.701399][ T37] bond0 (unregistering): Released all slaves [ 510.762896][ T9277] loop2: detected capacity change from 0 to 512 [ 510.912056][ T37] hsr_slave_0: left promiscuous mode [ 510.948735][ T37] hsr_slave_1: left promiscuous mode [ 510.965486][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.975915][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.325131][ T37] team0 (unregistering): Port device team_slave_1 removed [ 511.603673][ T37] team0 (unregistering): Port device team_slave_0 removed [ 511.825270][ T9289] loop2: detected capacity change from 0 to 1024 [ 511.893211][ T9289] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 513.474955][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.761932][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.874'. [ 514.914207][ T9038] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 514.944751][ T9038] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 515.060542][ T9323] loop5: detected capacity change from 0 to 512 [ 515.165631][ T9038] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 515.563280][ T9038] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 515.685989][ T9334] loop1: detected capacity change from 0 to 1024 [ 516.013169][ T9334] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 516.740427][ T8943] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 516.785028][ T8943] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 516.835422][ T8848] veth0_vlan: entered promiscuous mode [ 516.841778][ T8943] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 516.895730][ T8943] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 516.940182][ T9341] lo speed is unknown, defaulting to 1000 [ 516.959937][ T8848] veth1_vlan: entered promiscuous mode [ 517.257049][ T9038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.299055][ T8848] veth0_macvtap: entered promiscuous mode [ 517.322924][ T8848] veth1_macvtap: entered promiscuous mode [ 517.331307][ T9341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.883'. [ 517.392592][ T9038] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.582766][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.639924][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.736309][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.743875][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.745887][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.888'. [ 517.751620][ T31] audit: type=1804 audit(1771869021.303:14): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.886" name="/newroot/287/file0" dev="tmpfs" ino=1529 res=1 errno=0 [ 517.783913][ T9362] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 517.791197][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.800266][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.804742][ T9362] ref_ctr increment failed for inode: 0x5f9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880797ebd40 [ 517.884416][ T9038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 517.903730][ T9038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.984633][ T9358] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 518.003726][ T9358] ref_ctr decrement failed for inode: 0x5f9 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880797ebd40 [ 518.071087][ T9358] uprobe: syz.1.886:9358 failed to unregister, leaking uprobe [ 518.089100][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.103453][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.122004][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.901310][ T9371] loop1: detected capacity change from 0 to 1024 [ 518.908938][ T9371] EXT4-fs: Ignoring removed orlov option [ 518.915179][ T9371] EXT4-fs: Ignoring removed nobh option [ 519.002615][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.040782][ T9371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.056204][ T9377] loop2: detected capacity change from 0 to 128 [ 519.080296][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.130524][ T9377] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.177532][ T9377] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 519.286632][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.291933][ T5822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.390325][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.397551][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.483398][ T9383] [ 519.485278][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.485749][ T9383] ====================================================== [ 519.492829][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.499754][ T9383] WARNING: possible circular locking dependency detected [ 519.499783][ T9383] syzkaller #0 Not tainted [ 519.499803][ T9383] ------------------------------------------------------ [ 519.499817][ T9383] syz.2.893/9383 is trying to acquire lock: [ 519.531228][ T9383] ffff8880a97e4610 (sb_internal){++++}-{0:0}, at: evict+0x3c2/0xad0 [ 519.539274][ T9383] [ 519.539274][ T9383] but task is already holding lock: [ 519.546627][ T9383] ffff888025da6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 519.556847][ T9383] [ 519.556847][ T9383] which lock already depends on the new lock. [ 519.556847][ T9383] [ 519.567329][ T9383] [ 519.567329][ T9383] the existing dependency chain (in reverse order) is: [ 519.576337][ T9383] [ 519.576337][ T9383] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 519.584793][ T9383] ext4_writepages+0x21d/0x790 [ 519.590090][ T9383] do_writepages+0x278/0x600 [ 519.595220][ T9383] __writeback_single_inode+0x164/0x13c0 [ 519.601386][ T9383] writeback_single_inode+0x4d3/0xf30 [ 519.607290][ T9383] write_inode_now+0x174/0x1f0 [ 519.612587][ T9383] iput.part.0+0x7f3/0xf50 [ 519.617535][ T9383] iput+0x35/0x40 [ 519.621698][ T9383] ext4_xattr_block_set+0x6f7/0x3660 [ 519.627536][ T9383] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 519.633980][ T9383] __ext4_expand_extra_isize+0x346/0x480 [ 519.640156][ T9383] __ext4_mark_inode_dirty+0x693/0x8b0 [ 519.646148][ T9383] ext4_evict_inode+0x860/0x17c0 [ 519.651616][ T9383] evict+0x3c2/0xad0 [ 519.656032][ T9383] iput.part.0+0x605/0xf50 [ 519.660980][ T9383] iput+0x35/0x40 [ 519.665134][ T9383] ext4_orphan_cleanup+0x71e/0x11e0 [ 519.670875][ T9383] ext4_fill_super+0x9009/0xb470 [ 519.676349][ T9383] get_tree_bdev_flags+0x38c/0x620 [ 519.681995][ T9383] vfs_get_tree+0x92/0x320 [ 519.687193][ T9383] path_mount+0x7d0/0x23d0 [ 519.692327][ T9383] __x64_sys_mount+0x293/0x310 [ 519.697635][ T9383] do_syscall_64+0x106/0xf80 [ 519.702866][ T9383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.709289][ T9383] [ 519.709289][ T9383] -> #0 (sb_internal){++++}-{0:0}: [ 519.716606][ T9383] __lock_acquire+0x14b8/0x2630 [ 519.722021][ T9383] lock_acquire+0x1cf/0x380 [ 519.727067][ T9383] ext4_evict_inode+0xd3c/0x17c0 [ 519.732534][ T9383] evict+0x3c2/0xad0 [ 519.736948][ T9383] iput.part.0+0x605/0xf50 [ 519.741887][ T9383] iput+0x35/0x40 [ 519.746041][ T9383] ext4_ext_migrate+0xd61/0x2000 [ 519.751504][ T9383] __ext4_ioctl+0xd7e/0x42a0 [ 519.756637][ T9383] __x64_sys_ioctl+0x18e/0x210 [ 519.761944][ T9383] do_syscall_64+0x106/0xf80 [ 519.767244][ T9383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.773675][ T9383] [ 519.773675][ T9383] other info that might help us debug this: [ 519.773675][ T9383] [ 519.783979][ T9383] Possible unsafe locking scenario: [ 519.783979][ T9383] [ 519.791419][ T9383] CPU0 CPU1 [ 519.796771][ T9383] ---- ---- [ 519.802131][ T9383] lock(&sbi->s_writepages_rwsem); [ 519.807422][ T9383] lock(sb_internal); [ 519.814026][ T9383] lock(&sbi->s_writepages_rwsem); [ 519.822358][ T9383] rlock(sb_internal); [ 519.826516][ T9383] [ 519.826516][ T9383] *** DEADLOCK *** [ 519.826516][ T9383] [ 519.834646][ T9383] 3 locks held by syz.2.893/9383: [ 519.839664][ T9383] #0: ffff8880a97e4420 (sb_writers#4){++++}-{0:0}, at: __ext4_ioctl+0xd4e/0x42a0 [ 519.848962][ T9383] #1: ffff888083234708 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: __ext4_ioctl+0xd76/0x42a0 [ 519.859554][ T9383] #2: ffff888025da6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 519.870213][ T9383] [ 519.870213][ T9383] stack backtrace: [ 519.876268][ T9383] CPU: 1 UID: 0 PID: 9383 Comm: syz.2.893 Not tainted syzkaller #0 PREEMPT(full) [ 519.876309][ T9383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.876330][ T9383] Call Trace: [ 519.876341][ T9383] [ 519.876353][ T9383] dump_stack_lvl+0x100/0x190 [ 519.876406][ T9383] print_circular_bug.cold+0x178/0x1c7 [ 519.876466][ T9383] check_noncircular+0x146/0x160 [ 519.876522][ T9383] __lock_acquire+0x14b8/0x2630 [ 519.876584][ T9383] lock_acquire+0x1cf/0x380 [ 519.876634][ T9383] ? evict+0x3c2/0xad0 [ 519.876666][ T9383] ? __pfx___might_resched+0x10/0x10 [ 519.876716][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.876763][ T9383] ext4_evict_inode+0xd3c/0x17c0 [ 519.876806][ T9383] ? evict+0x3c2/0xad0 [ 519.876834][ T9383] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 519.876876][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.876922][ T9383] ? __pfx_ext4_evict_inode+0x10/0x10 [ 519.876961][ T9383] ? evict+0x37e/0xad0 [ 519.876989][ T9383] ? evict+0x37e/0xad0 [ 519.877016][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.877063][ T9383] ? __pfx_ext4_evict_inode+0x10/0x10 [ 519.877103][ T9383] evict+0x3c2/0xad0 [ 519.877135][ T9383] ? __pfx_evict+0x10/0x10 [ 519.877164][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.877212][ T9383] ? iput.part.0+0x5fd/0xf50 [ 519.877241][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.877290][ T9383] iput.part.0+0x605/0xf50 [ 519.877321][ T9383] ? __pfx_ext4_drop_inode+0x10/0x10 [ 519.877361][ T9383] iput+0x35/0x40 [ 519.877390][ T9383] ext4_ext_migrate+0xd61/0x2000 [ 519.877427][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.877476][ T9383] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 519.877514][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.877556][ T9383] ? down_write+0x146/0x1f0 [ 519.877601][ T9383] ? __pfx_down_write+0x10/0x10 [ 519.877646][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.877688][ T9383] ? rcu_read_lock_any_held+0x6a/0xa0 [ 519.877732][ T9383] __ext4_ioctl+0xd7e/0x42a0 [ 519.877780][ T9383] ? tomoyo_path_number_perm+0x188/0x580 [ 519.877836][ T9383] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 519.877890][ T9383] ? __pfx___ext4_ioctl+0x10/0x10 [ 519.877938][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.877980][ T9383] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 519.878029][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.878071][ T9383] ? do_vfs_ioctl+0x226/0x13e0 [ 519.878108][ T9383] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 519.878152][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.878194][ T9383] ? find_held_lock+0x2b/0x80 [ 519.878233][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.878276][ T9383] ? hook_file_ioctl_common+0x146/0x410 [ 519.878333][ T9383] ? srso_alias_return_thunk+0x5/0xfbef5 [ 519.878375][ T9383] ? __fget_files+0x21f/0x3d0 [ 519.878425][ T9383] ? __pfx_ext4_ioctl+0x10/0x10 [ 519.878471][ T9383] __x64_sys_ioctl+0x18e/0x210 [ 519.878509][ T9383] do_syscall_64+0x106/0xf80 [ 519.878547][ T9383] ? irqentry_exit+0x138/0x670 [ 519.878588][ T9383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.878623][ T9383] RIP: 0033:0x7f499bb9c629 [ 519.878649][ T9383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.878684][ T9383] RSP: 002b:00007f499ca5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.878715][ T9383] RAX: ffffffffffffffda RBX: 00007f499be16090 RCX: 00007f499bb9c629 [ 519.878739][ T9383] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000008 [ 519.878760][ T9383] RBP: 00007f499bc32b39 R08: 0000000000000000 R09: 0000000000000000 [ 519.878786][ T9383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.878807][ T9383] R13: 00007f499be16128 R14: 00007f499be16090 R15: 00007ffc501a69c8 [ 519.878843][ T9383] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 520.468255][ T9377] lo speed is unknown, defaulting to 1000 [ 521.324381][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.363232][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.456390][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.468293][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.532974][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.546134][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.736272][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.753918][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.925922][ T50] bridge_slave_1: left allmulticast mode [ 521.931597][ T50] bridge_slave_1: left promiscuous mode [ 521.953227][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.961768][ T50] bridge_slave_0: left allmulticast mode [ 521.983113][ T50] bridge_slave_0: left promiscuous mode [ 521.988833][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.167410][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.178364][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.188094][ T50] bond0 (unregistering): Released all slaves [ 522.260253][ T50] tipc: Left network mode [ 522.442855][ T50] hsr_slave_0: left promiscuous mode [ 522.465713][ T50] hsr_slave_1: left promiscuous mode [ 522.471513][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.494108][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.513835][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.521223][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.548122][ T50] veth1_macvtap: left promiscuous mode [ 522.563174][ T50] veth0_macvtap: left promiscuous mode [ 522.568744][ T50] veth1_vlan: left promiscuous mode [ 522.583619][ T50] veth0_vlan: left promiscuous mode [ 522.755987][ T9377] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.779909][ T50] team0 (unregistering): Port device team_slave_1 removed [ 522.797555][ T50] team0 (unregistering): Port device team_slave_0 removed [ 523.235765][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.290877][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.348640][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.399038][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.506735][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.559065][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.612166][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.659793][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.760179][ T50] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.818847][ T50] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.871692][ T50] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.918602][ T50] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.497380][ T50] bridge_slave_1: left allmulticast mode [ 524.503736][ T50] bridge_slave_1: left promiscuous mode [ 524.509546][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.519517][ T50] bridge_slave_0: left allmulticast mode [ 524.525334][ T50] bridge_slave_0: left promiscuous mode [ 524.531036][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.541174][ T50] bridge_slave_1: left allmulticast mode [ 524.546995][ T50] bridge_slave_1: left promiscuous mode [ 524.552684][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.565924][ T50] bridge_slave_0: left allmulticast mode [ 524.572225][ T50] bridge_slave_0: left promiscuous mode [ 524.578624][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.589027][ T50] bridge_slave_1: left allmulticast mode [ 524.594809][ T50] bridge_slave_1: left promiscuous mode [ 524.600490][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.610714][ T50] bridge_slave_0: left allmulticast mode [ 524.616654][ T50] bridge_slave_0: left promiscuous mode [ 524.622433][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.633333][ T50] bridge_slave_1: left allmulticast mode [ 524.639005][ T50] bridge_slave_1: left promiscuous mode [ 524.645182][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.656817][ T50] bridge_slave_0: left allmulticast mode [ 524.662451][ T50] bridge_slave_0: left promiscuous mode [ 524.671528][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.685126][ T50] bridge_slave_1: left allmulticast mode [ 524.690758][ T50] bridge_slave_1: left promiscuous mode [ 524.697618][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.706531][ T50] bridge_slave_0: left allmulticast mode [ 524.712181][ T50] bridge_slave_0: left promiscuous mode [ 524.718328][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.947414][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.957526][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.967752][ T50] bond0 (unregistering): Released all slaves [ 525.052930][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.063551][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.073253][ T50] bond0 (unregistering): Released all slaves [ 525.125785][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.136846][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.146827][ T50] bond0 (unregistering): Released all slaves [ 525.196733][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.206870][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.218159][ T50] bond0 (unregistering): Released all slaves [ 525.291114][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.302201][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.312032][ T50] bond0 (unregistering): Released all slaves [ 525.668829][ T50] hsr_slave_0: left promiscuous mode [ 525.674868][ T50] hsr_slave_1: left promiscuous mode [ 525.681017][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.690643][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.698616][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.709320][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.720057][ T50] hsr_slave_0: left promiscuous mode [ 525.725939][ T50] hsr_slave_1: left promiscuous mode [ 525.731712][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.745679][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.753389][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.760765][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.774552][ T50] hsr_slave_0: left promiscuous mode [ 525.780366][ T50] hsr_slave_1: left promiscuous mode [ 525.787935][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.795733][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.806202][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.815332][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.826329][ T50] hsr_slave_0: left promiscuous mode [ 525.832172][ T50] hsr_slave_1: left promiscuous mode [ 525.838333][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.846063][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.858345][ T50] hsr_slave_0: left promiscuous mode [ 525.874305][ T50] hsr_slave_1: left promiscuous mode [ 525.880489][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.888189][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.911712][ T50] veth1_macvtap: left promiscuous mode [ 525.917391][ T50] veth0_macvtap: left promiscuous mode [ 525.922904][ T50] veth1_vlan: left promiscuous mode [ 525.928261][ T50] veth0_vlan: left promiscuous mode [ 525.935935][ T50] veth1_macvtap: left promiscuous mode [ 525.941394][ T50] veth0_macvtap: left promiscuous mode [ 525.947068][ T50] veth1_vlan: left promiscuous mode [ 525.952294][ T50] veth0_vlan: left promiscuous mode [ 525.960154][ T50] veth1_macvtap: left promiscuous mode [ 525.966361][ T50] veth0_macvtap: left promiscuous mode [ 525.971884][ T50] veth1_vlan: left promiscuous mode [ 525.977168][ T50] veth0_vlan: left promiscuous mode [ 526.222310][ T50] team0 (unregistering): Port device team_slave_1 removed [ 526.238216][ T50] team0 (unregistering): Port device team_slave_0 removed [ 526.363961][ T50] team0 (unregistering): Port device team_slave_1 removed [ 526.375500][ T50] team0 (unregistering): Port device team_slave_0 removed [ 526.498960][ T50] team0 (unregistering): Port device team_slave_1 removed [ 526.510468][ T50] team0 (unregistering): Port device team_slave_0 removed [ 526.622363][ T50] team0 (unregistering): Port device team_slave_1 removed [ 526.637884][ T50] team0 (unregistering): Port device team_slave_0 removed [ 526.754105][ T50] team0 (unregistering): Port device team_slave_1 removed [ 526.768041][ T50] team0 (unregistering): Port device team_slave_0 removed [ 526.827422][ T5915] lo speed is unknown, defaulting to 1000 [ 526.833403][ T5915] infiniband syz0: ib_query_port failed (-19) [ 528.084680][ T50] IPVS: stop unused estimator thread 0... [ 528.091825][ T50] IPVS: stop unused estimator thread 0...