last executing test programs: 2m36.995251946s ago: executing program 4 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x6d, 0x9, 0x61, 0x7, 0x90, 0xd}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m36.579909869s ago: executing program 4 (id=348): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/17, 0x11}, 0x80000000}], 0x1, 0x40000021, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x84}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 2m36.342415171s ago: executing program 4 (id=351): socket(0x40000000015, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000000c0)={0x0, 0x7, 0x0}, 0x4040cd0) getpid() clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 2m32.946282122s ago: executing program 2 (id=356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x82, 0x100) io_setup(0x4fe, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f00000001c0)="464294ade8", 0x5, 0x9, 0x0, 0x0, r0}]) 2m32.906552692s ago: executing program 4 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m32.574624687s ago: executing program 4 (id=361): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/17, 0x11}, 0x80000000}], 0x1, 0x40000021, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @loopback, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 2m32.506304771s ago: executing program 2 (id=362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xa}, 0x94) 2m32.153750539s ago: executing program 2 (id=364): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6d3, &(0x7f00000014c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xb, 0x6, 0x10) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r8 = io_uring_setup(0x2c49, &(0x7f0000002240)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000180)=[r7], 0x1) 2m30.016920657s ago: executing program 4 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x82, 0x100) io_setup(0x4fe, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f00000001c0)="464294ade8dcf608", 0x8, 0x9, 0x0, 0x0, r0}]) 2m28.624592773s ago: executing program 32 (id=367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x82, 0x100) io_setup(0x4fe, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f00000001c0)="464294ade8dcf608", 0x8, 0x9, 0x0, 0x0, r0}]) 2m28.601808658s ago: executing program 2 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m28.36018758s ago: executing program 2 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xa}, 0x94) 2m27.734869245s ago: executing program 2 (id=379): setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x9, 0x7, {}, {0xffffffffffffffff}, 0x6, 0xee}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0xc0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000780)="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", 0x10e, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2m27.024159788s ago: executing program 33 (id=379): setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x9, 0x7, {}, {0xffffffffffffffff}, 0x6, 0xee}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0xc0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000780)="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", 0x10e, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2m24.211013309s ago: executing program 0 (id=392): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) 2m24.035667919s ago: executing program 0 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m23.74589024s ago: executing program 0 (id=396): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xfffffffffffff6ff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2m23.497429323s ago: executing program 0 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x2) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 2m23.272357319s ago: executing program 0 (id=400): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 2m22.514901446s ago: executing program 0 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m22.174086186s ago: executing program 34 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m9.091945537s ago: executing program 5 (id=686): socket(0x40000000015, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f00000000c0)={0x0, 0x7, 0x0}, 0x4040cd0) getpid() clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x480c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1m7.838373329s ago: executing program 5 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x20000004) 1m7.499182284s ago: executing program 5 (id=698): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 1m7.276321593s ago: executing program 5 (id=700): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000180), 0x200008, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 1m6.718462375s ago: executing program 5 (id=704): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) r0 = syz_open_dev$evdev(&(0x7f0000000940), 0x0, 0x100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c0a010400000000230000000a0000060900020073797a31000000000900010073797a31000000000c00038008000080040001"], 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.738860422s ago: executing program 5 (id=713): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x3805879c, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m5.023038051s ago: executing program 35 (id=713): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x3805879c, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.323300881s ago: executing program 6 (id=1169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4", 0x1f) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1) sendmmsg$alg(r1, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000000)="cda40fa93f844b47ae9a2105c36b1928", 0x10}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4800) 2.117668364s ago: executing program 7 (id=1172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e00010069703667726574617000000034000280140007"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.947375637s ago: executing program 8 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="10080400030000001c002b80", @ANYRES32, @ANYBLOB="08000880"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x8a4) 1.924705364s ago: executing program 6 (id=1175): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff02001800"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 1.814962865s ago: executing program 7 (id=1177): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000000)='1I\xdc\r\xeb\x1f\x80Vq\x10r\xa4\xeb\xe9)\x99m\x93\n\x10\xb6Q\x98\xc8x\xa2F\xf8\x96}%\xc1\xc3K\x16C\xaf{\xc5B\x15\xcc\x16R\n\x98\x11\x05\xe4\x9e\xc1\xf1sD0\xb9\x12\xa9\xe2\xa2\bDtm\xff\xa2\xc7QD4Z\xd1b\x12\xa0\x1eD]\xb6\xbb\x9e\xc3O\x14\xae\xde\x1a\xedim\xc7\x91s\x00#%\xb4v\xb1\x81$\xa4\xa2\xc8;d\xea', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.721500595s ago: executing program 8 (id=1178): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x4, 0xb, 0x6, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x210c00, &(0x7f0000001480)=ANY=[], 0x1, 0x1ab, &(0x7f00000009c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200"], 0x4, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x5, 0x1d, 0x100, &(0x7f00000000c0)="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"}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 1.691042112s ago: executing program 1 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e0001006970366772657461700000003400028014000700fe"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.637076757s ago: executing program 3 (id=1180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.55608836s ago: executing program 6 (id=1181): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(r0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) 1.498681464s ago: executing program 7 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000063c0)=""/1024, 0x400) 1.42246273s ago: executing program 1 (id=1183): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000063c0)=""/1024, 0x400) 1.342729773s ago: executing program 7 (id=1184): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000340)={0xc}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 1.280320196s ago: executing program 3 (id=1185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4", 0x1f) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000480), 0x12) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000700)=""/222, 0xde}], 0x1) sendmmsg$alg(r1, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000000)="cda40fa93f844b47ae9a2105c36b1928", 0x10}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x4800) 1.058445298s ago: executing program 7 (id=1186): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180), 0x8) 1.034708596s ago: executing program 1 (id=1187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e00010069703667726574617000000034000280140007"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 905.488789ms ago: executing program 8 (id=1188): r0 = syz_open_dev$evdev(&(0x7f0000000940), 0x0, 0x100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c0a010400000000230000000a0000060900020073797a31000000000900010073797a31000000000c00038008000080040001"], 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 846.848505ms ago: executing program 3 (id=1189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r1) socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 811.747493ms ago: executing program 1 (id=1190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 589.265528ms ago: executing program 1 (id=1191): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff0200180000080001"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 577.91201ms ago: executing program 8 (id=1192): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @fwd={0x6}]}, {0x0, [0x30, 0x5f, 0x5f, 0x61, 0x61]}}, 0x0, 0x37}, 0x28) 572.938059ms ago: executing program 3 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e0001006970366772657461700000003400028014000700fe"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 557.809618ms ago: executing program 6 (id=1194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) 346.853377ms ago: executing program 8 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 324.526817ms ago: executing program 6 (id=1196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000001c0)=@ipv6_deladdr={0x18, 0x15, 0x11, 0x72bd26, 0x25dfdbfe, {0xa, 0x8, 0xd}}, 0x18}, 0x1, 0x0, 0x0, 0x24000850}, 0x20000800) 323.160886ms ago: executing program 3 (id=1197): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000063c0)=""/1024, 0x400) 237.78372ms ago: executing program 1 (id=1198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 160.510488ms ago: executing program 7 (id=1199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x19, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40da7, 0x79269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) 60.207865ms ago: executing program 8 (id=1200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e00010069703667726574617000000034000280140007"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 24.833924ms ago: executing program 6 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 3 (id=1202): r0 = syz_open_dev$evdev(&(0x7f0000000940), 0x0, 0x100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000000c0a010400000000230000000a0000060900020073797a31000000000900010073797a31000000000c00038008000080040001"], 0x60}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ctive [ 89.711506][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.721285][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.730714][ T5856] bridge_slave_0: entered allmulticast mode [ 89.738155][ T5856] bridge_slave_0: entered promiscuous mode [ 89.754467][ T5854] Bluetooth: hci3: command tx timeout [ 89.762248][ T5859] Bluetooth: hci4: command tx timeout [ 89.819008][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.826536][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.853143][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.865532][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.873099][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.880292][ T5856] bridge_slave_1: entered allmulticast mode [ 89.887722][ T5856] bridge_slave_1: entered promiscuous mode [ 89.909878][ T5847] team0: Port device team_slave_0 added [ 89.919124][ T5857] team0: Port device team_slave_0 added [ 89.927767][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.940463][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.975198][ T5847] team0: Port device team_slave_1 added [ 89.983761][ T5857] team0: Port device team_slave_1 added [ 90.020479][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.035786][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.160863][ T5858] team0: Port device team_slave_0 added [ 90.179544][ T5851] hsr_slave_0: entered promiscuous mode [ 90.191814][ T5851] hsr_slave_1: entered promiscuous mode [ 90.215524][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.223169][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.264917][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.281518][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.293633][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.325606][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.341312][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.352841][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.394498][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.419163][ T5858] team0: Port device team_slave_1 added [ 90.446329][ T5856] team0: Port device team_slave_0 added [ 90.476375][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.484133][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.515328][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.570684][ T5856] team0: Port device team_slave_1 added [ 90.619514][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.627054][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.653399][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.681143][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.688158][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.714284][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.761929][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.769406][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.797093][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.822780][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.829768][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.879706][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.943033][ T5847] hsr_slave_0: entered promiscuous mode [ 90.949459][ T5847] hsr_slave_1: entered promiscuous mode [ 90.957221][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 90.963360][ T5847] Cannot create hsr debugfs directory [ 90.990509][ T5857] hsr_slave_0: entered promiscuous mode [ 90.998129][ T5857] hsr_slave_1: entered promiscuous mode [ 91.004632][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 91.010385][ T5857] Cannot create hsr debugfs directory [ 91.064449][ T5856] hsr_slave_0: entered promiscuous mode [ 91.070881][ T5856] hsr_slave_1: entered promiscuous mode [ 91.077936][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 91.084068][ T5856] Cannot create hsr debugfs directory [ 91.193396][ T5858] hsr_slave_0: entered promiscuous mode [ 91.199803][ T5858] hsr_slave_1: entered promiscuous mode [ 91.206344][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 91.212097][ T5858] Cannot create hsr debugfs directory [ 91.582937][ T5859] Bluetooth: hci1: command tx timeout [ 91.683377][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.697320][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.740916][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.752860][ T5859] Bluetooth: hci0: command tx timeout [ 91.766592][ T5854] Bluetooth: hci2: command tx timeout [ 91.790033][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.823593][ T5859] Bluetooth: hci4: command tx timeout [ 91.833273][ T5854] Bluetooth: hci3: command tx timeout [ 91.881296][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.902394][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.921802][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.940999][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.988539][ T9] cfg80211: failed to load regulatory.db [ 92.068503][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.082469][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.099322][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.117967][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.231919][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.270427][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.281883][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.296242][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.423487][ T5858] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.438824][ T5858] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.459307][ T5858] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.472147][ T5858] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.491551][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.541986][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.575812][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.607954][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.615405][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.648972][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.656129][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.693988][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.726949][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.752331][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.759984][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.780389][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.787589][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.870426][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.897823][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.950913][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.958151][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.977747][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.984976][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.021742][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.041772][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.111813][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.119076][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.199527][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.212482][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.219678][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.265027][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.272189][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.303420][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.310607][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.490508][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.608210][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.664517][ T5859] Bluetooth: hci1: command tx timeout [ 93.810164][ T5851] veth0_vlan: entered promiscuous mode [ 93.825127][ T5859] Bluetooth: hci2: command tx timeout [ 93.830612][ T5859] Bluetooth: hci0: command tx timeout [ 93.837770][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.902587][ T5851] veth1_vlan: entered promiscuous mode [ 93.910513][ T5859] Bluetooth: hci4: command tx timeout [ 93.917676][ T5854] Bluetooth: hci3: command tx timeout [ 94.152324][ T5847] veth0_vlan: entered promiscuous mode [ 94.184312][ T5851] veth0_macvtap: entered promiscuous mode [ 94.210912][ T5851] veth1_macvtap: entered promiscuous mode [ 94.241544][ T5847] veth1_vlan: entered promiscuous mode [ 94.258943][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.340675][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.358773][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.389251][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.414570][ T5847] veth0_macvtap: entered promiscuous mode [ 94.439792][ T5847] veth1_macvtap: entered promiscuous mode [ 94.451081][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.461439][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.490962][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.501168][ T1159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566016][ T5858] veth0_vlan: entered promiscuous mode [ 94.578549][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.619434][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.650888][ T1159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.662184][ T5858] veth1_vlan: entered promiscuous mode [ 94.678117][ T5856] veth0_vlan: entered promiscuous mode [ 94.686124][ T5857] veth0_vlan: entered promiscuous mode [ 94.692273][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.709040][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.738461][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.753176][ T5857] veth1_vlan: entered promiscuous mode [ 94.785534][ T5856] veth1_vlan: entered promiscuous mode [ 94.814148][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.822095][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.932484][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.933670][ T5858] veth0_macvtap: entered promiscuous mode [ 94.952021][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.003054][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.004653][ T5858] veth1_macvtap: entered promiscuous mode [ 95.010919][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.031959][ T5856] veth0_macvtap: entered promiscuous mode [ 95.056779][ T5857] veth0_macvtap: entered promiscuous mode [ 95.085511][ T5856] veth1_macvtap: entered promiscuous mode [ 95.106903][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.132096][ T5857] veth1_macvtap: entered promiscuous mode [ 95.146024][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.152521][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.170409][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.238263][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.274528][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.302867][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.318665][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.338385][ T5968] Zero length message leads to an empty skb [ 95.340007][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.406960][ T1140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.429494][ T1140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.469279][ T1140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.492038][ T1140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518974][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.552555][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.568341][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.621004][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.744231][ T5859] Bluetooth: hci1: command tx timeout [ 95.842768][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.865470][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.875312][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.892468][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.903683][ T5859] Bluetooth: hci0: command tx timeout [ 95.914229][ T5854] Bluetooth: hci2: command tx timeout [ 96.006653][ T5975] loop0: detected capacity change from 0 to 128 [ 96.063060][ T5854] Bluetooth: hci3: command tx timeout [ 96.068707][ T5859] Bluetooth: hci4: command tx timeout [ 96.127984][ T5975] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 96.183317][ T5975] qnx6: wrong signature (magic) in superblock #1. [ 96.189868][ T5975] qnx6: unable to read the first superblock [ 96.451039][ T5976] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 96.836060][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.853160][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.180585][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.295991][ T5981] loop0: detected capacity change from 0 to 128 [ 97.320967][ T5981] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 97.338773][ T5981] qnx6: wrong signature (magic) in superblock #1. [ 97.346707][ T5981] qnx6: unable to read the first superblock [ 97.390135][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.760636][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.038621][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.072122][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.095636][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.109244][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.137899][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.158295][ T5987] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 98.184842][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.201883][ T5987] loop0: detected capacity change from 0 to 64 [ 98.676613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.837393][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.855597][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.142022][ T5993] loop1: detected capacity change from 0 to 512 [ 99.303752][ T5995] loop4: detected capacity change from 0 to 512 [ 99.320620][ T5997] loop2: detected capacity change from 0 to 512 [ 99.527593][ T5995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.554873][ T5997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.664499][ T5997] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.676050][ T5995] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.697794][ T6009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12'. [ 99.802972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.812327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.031549][ T6012] pimreg: entered allmulticast mode [ 100.063196][ T6012] pimreg: left allmulticast mode [ 100.213116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.221361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.623438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.794488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.252867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.261136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.274085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.698333][ T6032] loop3: detected capacity change from 0 to 1764 [ 103.767963][ T6032] iso9660: Bad value for 'uid' [ 103.847491][ T6034] loop1: detected capacity change from 0 to 512 [ 103.907722][ T6034] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 103.916262][ T6034] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.923594][ T6034] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 103.934139][ T6034] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.951019][ T6034] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 103.960830][ T6034] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.14: bg 0: block 40: padding at end of block bitmap is not set [ 103.978494][ T6034] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 103.990310][ T6034] EXT4-fs (loop1): 1 truncate cleaned up [ 103.997279][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.024436][ T6032] iso9660: Bad value for 'uid' [ 104.069807][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.165367][ T6034] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 104.194702][ T6032] loop3: detected capacity change from 0 to 512 [ 104.442209][ T6032] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 104.479665][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.491464][ T6032] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.16: inode #1792: comm syz.3.16: iget: illegal inode # [ 104.535680][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.576288][ T6041] loop2: detected capacity change from 0 to 64 [ 104.729399][ T6032] EXT4-fs (loop3): Remounting filesystem read-only [ 105.014967][ T6032] EXT4-fs (loop3): no journal found [ 105.142938][ T6032] EXT4-fs (loop3): can't get journal size [ 105.198412][ T6048] loop4: detected capacity change from 0 to 512 [ 105.259149][ T6032] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 105.410580][ T6032] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 106.109001][ T6032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.561880][ T6061] loop0: detected capacity change from 0 to 512 [ 106.600817][ T6048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.719685][ T6048] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.913831][ T6061] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 106.925363][ T6061] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.949023][ T6061] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 106.961502][ T6061] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 107.056178][ T6061] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 107.164201][ T6061] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.22: bg 0: block 40: padding at end of block bitmap is not set [ 107.313506][ T6061] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 107.446911][ T6061] EXT4-fs (loop0): 1 truncate cleaned up [ 108.458167][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.473344][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.225334][ T6061] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 112.031670][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.267809][ T6083] loop3: detected capacity change from 0 to 2048 [ 113.844481][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.041195][ T6083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.273109][ T6093] loop0: detected capacity change from 0 to 1024 [ 114.283430][ T6089] loop1: detected capacity change from 0 to 64 [ 114.353667][ T6093] ======================================================= [ 114.353667][ T6093] WARNING: The mand mount option has been deprecated and [ 114.353667][ T6093] and is ignored by this kernel. Remove the mand [ 114.353667][ T6093] option from the mount to silence this warning. [ 114.353667][ T6093] ======================================================= [ 115.383913][ T6093] EXT4-fs: Ignoring removed nobh option [ 115.435543][ T6093] EXT4-fs: Ignoring removed oldalloc option [ 115.443055][ T6093] EXT4-fs: Ignoring removed orlov option [ 115.624585][ T6093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.709850][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.916334][ T6106] loop4: detected capacity change from 0 to 512 [ 117.806737][ T6106] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 117.846370][ T6106] EXT4-fs (loop4): orphan cleanup on readonly fs [ 117.853798][ T6106] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 117.866610][ T6106] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.931579][ T6106] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 117.950616][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.981899][ T6106] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.30: bg 0: block 40: padding at end of block bitmap is not set [ 118.046726][ T6106] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 118.116036][ T6106] EXT4-fs (loop4): 1 truncate cleaned up [ 118.123895][ T6106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.234193][ T6105] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 118.896786][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.058038][ T6135] netlink: 64 bytes leftover after parsing attributes in process `syz.2.42'. [ 120.081949][ T6137] fuse: Unknown parameter '0x0000000000000003' [ 120.186561][ T6109] loop3: detected capacity change from 0 to 32768 [ 120.253351][ T6109] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.31 (6109) [ 120.442178][ T6109] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.512252][ T6109] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 120.524336][ T6109] BTRFS info (device loop3): using free-space-tree [ 121.015328][ T6109] BTRFS error (device loop3): open_ctree failed: -4 [ 122.614921][ T6164] loop2: detected capacity change from 0 to 262144 [ 122.790680][ T6164] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.49 (6164) [ 122.823652][ T6164] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 122.833896][ T6164] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 122.844105][ T6164] BTRFS info (device loop2): using free-space-tree [ 124.207756][ T6164] BTRFS info (device loop2): balance: start -d -mprofiles=data -ssoft,profiles=,usage=0,drange=0..4,vrange=0..2697691498605969688,limit=0,limit=0..0 [ 124.225431][ T6164] BTRFS info (device loop2): relocating block group 13631488 flags data [ 124.343576][ T6164] BTRFS info (device loop2): found 1 extents, stage: move data extents [ 124.381712][ T6164] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 124.578570][ T6164] BTRFS info (device loop2): balance: ended with status: 0 [ 125.200336][ T5856] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 125.214600][ T6211] fuse: Unknown parameter '0x0000000000000003' [ 125.253977][ T6213] netlink: 64 bytes leftover after parsing attributes in process `syz.0.56'. [ 125.460879][ T6218] loop3: detected capacity change from 0 to 512 [ 126.144285][ T6218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.212841][ T6218] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.401436][ T6231] pimreg: entered allmulticast mode [ 126.414316][ T6231] pimreg: left allmulticast mode [ 126.747910][ T6230] loop1: detected capacity change from 0 to 512 [ 126.898425][ T6230] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 127.006493][ T6235] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 127.023213][ T6230] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.62: inode #1792: comm syz.1.62: iget: illegal inode # [ 127.063894][ T6235] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 127.085220][ T6239] loop0: detected capacity change from 0 to 512 [ 127.122324][ T6230] EXT4-fs (loop1): Remounting filesystem read-only [ 127.130538][ T6230] EXT4-fs (loop1): no journal found [ 127.136587][ T6230] EXT4-fs (loop1): can't get journal size [ 127.159751][ T6230] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 127.190097][ T6230] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 127.232084][ T6239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.234669][ T6230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.514341][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.530226][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.986984][ T6251] loop1: detected capacity change from 0 to 512 [ 128.401329][ T6251] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 128.409876][ T6251] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.434757][ T6251] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 128.445552][ T6251] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 128.469970][ T6251] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 128.488700][ T6251] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.68: bg 0: block 40: padding at end of block bitmap is not set [ 128.527579][ T6251] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 128.539631][ T6251] EXT4-fs (loop1): 1 truncate cleaned up [ 128.549408][ T6251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.664650][ T6261] fuse: Unknown parameter 'fd0x0000000000000003' [ 129.156008][ T6263] netlink: 64 bytes leftover after parsing attributes in process `syz.4.71'. [ 129.173711][ T6251] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 129.340582][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.410583][ T6279] loop1: detected capacity change from 0 to 64 [ 131.227987][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.246845][ T6292] fuse: Unknown parameter 'fd0x0000000000000003' [ 131.636442][ T6298] loop1: detected capacity change from 0 to 512 [ 131.988057][ T6298] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 131.999441][ T6298] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.016566][ T6298] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 132.028762][ T6298] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.124423][ T6298] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 132.224857][ T6298] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.84: bg 0: block 40: padding at end of block bitmap is not set [ 132.330084][ T6298] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 132.422049][ T6298] EXT4-fs (loop1): 1 truncate cleaned up [ 132.445653][ T6298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.582970][ T6298] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 132.880218][ T6307] netlink: 64 bytes leftover after parsing attributes in process `syz.3.87'. [ 132.932193][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.997797][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.008144][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.091312][ T6326] fuse: Unknown parameter 'fd0x0000000000000003' [ 134.180296][ T6328] loop2: detected capacity change from 0 to 64 [ 134.986705][ T6336] loop3: detected capacity change from 0 to 2048 [ 135.026013][ T6336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.338751][ T6345] loop0: detected capacity change from 0 to 512 [ 135.453289][ T6345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.767035][ T6352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.102'. [ 135.954871][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.993138][ T92] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.096343][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.221650][ T6362] loop0: detected capacity change from 0 to 512 [ 136.223761][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 136.261626][ T92] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 136.261739][ T6364] loop3: detected capacity change from 0 to 512 [ 136.291805][ T92] usb 3-1: config 0 has no interface number 0 [ 136.308982][ T6362] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 136.317427][ T92] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.322020][ T92] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 136.349167][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.350763][ T6364] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 136.357625][ T92] usb 3-1: Product: syz [ 136.371057][ T92] usb 3-1: Manufacturer: syz [ 136.375806][ T92] usb 3-1: SerialNumber: syz [ 136.386311][ T6362] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.105: inode #1792: comm syz.0.105: iget: illegal inode # [ 136.400290][ T6364] EXT4-fs (loop3): 1 truncate cleaned up [ 136.404480][ T92] usb 3-1: config 0 descriptor?? [ 136.421729][ T92] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 136.424519][ T6364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.433325][ T92] em28xx 3-1:0.132: Video interface 132 found: [ 136.451993][ T6362] EXT4-fs (loop0): Remounting filesystem read-only [ 136.459184][ T6362] EXT4-fs (loop0): no journal found [ 136.469691][ T6362] EXT4-fs (loop0): can't get journal size [ 136.479926][ T6362] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 136.492818][ T6362] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 136.511484][ T6362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.570773][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.876815][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.338532][ T6373] loop0: detected capacity change from 0 to 64 [ 137.403948][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.445257][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.531240][ T92] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 138.150107][ T6380] loop3: detected capacity change from 0 to 64 [ 138.839811][ T6382] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 138.934171][ T6382] kvm: Disabled LAPIC found during irq injection [ 139.023331][ T92] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 139.071885][ T92] em28xx 3-1:0.132: board has no eeprom [ 139.205905][ T92] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 139.261705][ T92] em28xx 3-1:0.132: analog set to bulk mode. [ 139.310434][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 139.389586][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 139.477323][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 139.507776][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 139.561787][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 139.612481][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 139.655539][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 139.742283][ T6406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.958933][ T6413] loop0: detected capacity change from 0 to 512 [ 139.974264][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 139.997776][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 140.019943][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 140.051930][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 140.067918][ T6413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.962839][ T6413] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.030289][ T6426] loop3: detected capacity change from 0 to 512 [ 141.039582][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 141.059294][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 141.079776][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 141.096217][ T6426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.177496][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 141.195673][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 141.211836][ T9] em28xx 3-1:0.132: Config register raw data: 0xfffffffb [ 141.230765][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 141.238181][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 141.246631][ T6426] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.284004][ T9] usb 3-1: Decoder not found [ 141.289353][ T9] em28xx 3-1:0.132: failed to create media graph [ 141.304357][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 141.355066][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 141.371838][ T6426] pimreg: entered allmulticast mode [ 141.381639][ T6426] pimreg: left allmulticast mode [ 141.601169][ T6436] pimreg: entered allmulticast mode [ 141.606839][ T6437] pimreg: left allmulticast mode [ 141.925307][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.305913][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 142.549711][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 142.579036][ T9] usb 2-1: config 0 has no interface number 0 [ 142.594103][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.688033][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 142.707465][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.739737][ T9] usb 2-1: Product: syz [ 142.756336][ T9] usb 2-1: Manufacturer: syz [ 142.774959][ T9] usb 2-1: SerialNumber: syz [ 142.795550][ T9] usb 2-1: config 0 descriptor?? [ 142.821892][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 142.885467][ T9] em28xx 2-1:0.132: Video interface 132 found: [ 143.100287][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.181634][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.281446][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.384820][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.435715][ T9] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 143.485122][ T6446] tipc: Started in network mode [ 143.490314][ T6446] tipc: Node identity 22e2167223ee, cluster identity 4711 [ 143.546806][ T6446] tipc: Enabled bearer , priority 0 [ 143.584304][ T6453] syzkaller0: entered promiscuous mode [ 143.642210][ T6453] syzkaller0: entered allmulticast mode [ 143.660027][ T6454] loop2: detected capacity change from 0 to 2048 [ 143.692302][ T6446] syzkaller0: mtu less than device minimum [ 143.718316][ T6454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.764099][ T6446] tipc: Resetting bearer [ 143.833465][ T6446] tipc: Disabling bearer [ 144.108731][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.625322][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 144.818509][ T9] em28xx 2-1:0.132: board has no eeprom [ 145.002842][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 145.039966][ T9] em28xx 2-1:0.132: analog set to bulk mode. [ 145.080539][ T10] em28xx 2-1:0.132: Registering V4L2 extension [ 145.224437][ T6478] loop4: detected capacity change from 0 to 64 [ 145.711931][ T6477] loop2: detected capacity change from 0 to 64 [ 145.802935][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 145.820425][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 145.858951][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 145.866604][ T6483] loop3: detected capacity change from 0 to 512 [ 145.908290][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 145.982578][ T6483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.053005][ T6483] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.158809][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 146.214697][ T6483] pimreg: entered allmulticast mode [ 146.227773][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 146.247793][ T6483] pimreg: left allmulticast mode [ 146.306919][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 146.369297][ T6499] loop4: detected capacity change from 0 to 512 [ 146.385182][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 146.447779][ T6499] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 146.516580][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.525671][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.538983][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 146.549451][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 146.558808][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 146.568813][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 146.588331][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 146.611146][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.616449][ T10] em28xx 2-1:0.132: Config register raw data: 0xfffffffb [ 146.652742][ T10] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 146.660592][ T6499] EXT4-fs (loop4): 1 truncate cleaned up [ 146.666360][ T10] em28xx 2-1:0.132: No AC97 audio processor [ 146.673286][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.695777][ T6499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.698207][ T10] usb 2-1: Decoder not found [ 147.706253][ T10] em28xx 2-1:0.132: failed to create media graph [ 147.712693][ T10] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 147.724413][ T10] em28xx 2-1:0.132: Remote control support is not available for this card. [ 148.412776][ T6507] loop0: detected capacity change from 0 to 262144 [ 148.742276][ T6510] loop1: detected capacity change from 0 to 1024 [ 148.757851][ T6507] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.149 (6507) [ 148.918184][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.932200][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.977962][ T6507] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 148.988391][ T6507] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 148.997741][ T6507] BTRFS info (device loop0): using free-space-tree [ 149.280652][ T6532] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 149.293369][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 149.312042][ T6532] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 149.792355][ T6510] hfsplus: failed to load catalog file [ 150.152261][ T6540] loop2: detected capacity change from 0 to 64 [ 150.201568][ T5847] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 150.756606][ T6553] loop2: detected capacity change from 0 to 512 [ 150.884917][ T6553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.930004][ T6553] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.969452][ T6555] loop1: detected capacity change from 0 to 512 [ 151.221098][ T6563] pimreg: entered allmulticast mode [ 151.236362][ T6563] pimreg: left allmulticast mode [ 151.982590][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.019166][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.047500][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.085162][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.124505][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.909770][ T6590] loop2: detected capacity change from 0 to 128 [ 152.918660][ T6590] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 152.931038][ T6590] qnx6: wrong signature (magic) in superblock #1. [ 152.937596][ T6590] qnx6: unable to read the first superblock [ 153.011364][ T6594] loop4: detected capacity change from 0 to 512 [ 153.109293][ T6597] loop1: detected capacity change from 0 to 512 [ 153.116246][ T6598] loop3: detected capacity change from 0 to 512 [ 153.160781][ T6597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.183601][ T6598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.213083][ T6597] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.392922][ T6602] pimreg: entered allmulticast mode [ 153.409009][ T6602] pimreg: left allmulticast mode [ 153.548254][ T6598] evm: overlay not supported [ 154.342284][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.415020][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.636320][ T6617] loop4: detected capacity change from 0 to 512 [ 154.703069][ T6617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.835464][ T6626] loop0: detected capacity change from 0 to 64 [ 155.440577][ T6628] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 155.479118][ T6617] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 155.553465][ T6617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 155.769537][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.459874][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 156.504352][ T6666] loop3: detected capacity change from 0 to 64 [ 157.382323][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 157.797999][ T6704] loop3: detected capacity change from 0 to 64 [ 158.751883][ T6720] batadv_slave_0: entered promiscuous mode [ 158.779930][ T6716] batadv_slave_0: left promiscuous mode [ 158.977633][ T6727] loop0: detected capacity change from 0 to 512 [ 159.121874][ T6727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.150553][ T6727] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.255553][ T6727] pimreg: entered allmulticast mode [ 159.269041][ T6727] pimreg: left allmulticast mode [ 159.551334][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.195713][ T6765] tipc: Started in network mode [ 161.207391][ T6765] tipc: Node identity fa5e4cfda9c1, cluster identity 4711 [ 161.332529][ T6765] tipc: Enabled bearer , priority 0 [ 161.344427][ T6765] syzkaller0: entered promiscuous mode [ 161.352003][ T6765] syzkaller0: entered allmulticast mode [ 161.416863][ T6765] syzkaller0: mtu less than device minimum [ 161.439453][ T6771] loop1: detected capacity change from 0 to 512 [ 161.487186][ T6765] tipc: Resetting bearer [ 161.600708][ T6771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.635717][ T6771] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.641261][ T6765] tipc: Disabling bearer [ 161.731799][ T6771] pimreg: entered allmulticast mode [ 161.738106][ T6771] pimreg: left allmulticast mode [ 162.021524][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.354521][ T6822] fuse: Bad value for 'fd' [ 163.467136][ T6825] loop3: detected capacity change from 0 to 512 [ 163.533613][ T6825] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 163.577559][ T6825] EXT4-fs (loop3): 1 truncate cleaned up [ 163.650173][ T6825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.570832][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.631239][ T6862] loop3: detected capacity change from 0 to 2048 [ 165.736270][ T6862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.873797][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.784698][ T6898] fuse: Bad value for 'fd' [ 167.097563][ T6904] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 167.128521][ T6905] loop4: detected capacity change from 0 to 2048 [ 167.185499][ T6905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.280424][ T5857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.770589][ T6933] loop0: detected capacity change from 0 to 512 [ 167.838957][ T6934] tipc: Enabled bearer , priority 0 [ 167.855337][ T6933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.861323][ T6934] syzkaller0: entered promiscuous mode [ 167.877054][ T6934] syzkaller0: entered allmulticast mode [ 167.893280][ T6934] tipc: Resetting bearer [ 167.921777][ T6934] tipc: Disabling bearer [ 167.968080][ T6938] syzkaller0: entered promiscuous mode [ 167.982861][ T6938] syzkaller0: entered allmulticast mode [ 167.996810][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.353237][ T6952] loop3: detected capacity change from 0 to 64 [ 168.937618][ T6956] loop0: detected capacity change from 0 to 512 [ 169.020606][ T6956] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 169.053313][ T6956] EXT4-fs (loop0): 1 truncate cleaned up [ 169.074758][ T6956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.308663][ T6967] loop1: detected capacity change from 0 to 512 [ 169.358494][ T6967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.664588][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.022896][ T6996] loop1: detected capacity change from 0 to 2048 [ 171.159534][ T6996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.181793][ T7001] loop3: detected capacity change from 0 to 512 [ 171.258254][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.317664][ T7001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.401693][ T7009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 171.433473][ T7001] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.519214][ T7001] pimreg: entered allmulticast mode [ 171.527224][ T7001] pimreg: left allmulticast mode [ 171.818610][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.029331][ T7027] loop2: detected capacity change from 0 to 2048 [ 172.064203][ T7027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.959938][ T6831] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 174.255965][ T7024] loop3: detected capacity change from 0 to 262144 [ 174.288272][ T7024] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.349 (7024) [ 174.330323][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.351672][ T7024] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 174.362018][ T7024] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 174.371342][ T7024] BTRFS info (device loop3): using free-space-tree [ 174.459146][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.282865][ T7058] loop0: detected capacity change from 0 to 512 [ 175.306586][ T5851] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 175.392361][ T7058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.676116][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.741560][ T7070] loop1: detected capacity change from 0 to 512 [ 175.854583][ T7070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.992531][ T7070] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.031843][ T7078] loop3: detected capacity change from 0 to 2048 [ 176.065082][ T7078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.117694][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.144994][ T7083] pimreg: entered allmulticast mode [ 178.145202][ T7084] pimreg: left allmulticast mode [ 179.008396][ T7091] loop2: detected capacity change from 0 to 1024 [ 179.136286][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.289083][ T7086] hfsplus: xattr searching failed [ 179.375028][ T65] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.568509][ T65] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.728299][ T7100] loop1: detected capacity change from 0 to 512 [ 179.804504][ T65] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.821271][ T7100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.055082][ T65] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.099938][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.430170][ T43] usb 3-1: USB disconnect, device number 2 [ 180.475331][ T43] em28xx 3-1:0.132: Disconnecting em28xx [ 180.481178][ T43] em28xx 3-1:0.132: Closing input extension [ 180.546116][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.561083][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.570540][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.579793][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.588104][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.672731][ T7121] loop1: detected capacity change from 0 to 512 [ 180.797314][ T7121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.878972][ T7121] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.970773][ T65] bridge_slave_1: left allmulticast mode [ 180.990091][ T65] bridge_slave_1: left promiscuous mode [ 181.014032][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.071437][ T65] bridge_slave_0: left allmulticast mode [ 181.103443][ T65] bridge_slave_0: left promiscuous mode [ 181.111338][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.789340][ T7150] loop3: detected capacity change from 0 to 512 [ 181.884486][ T7150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.917777][ T7150] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.073863][ T7159] loop0: detected capacity change from 0 to 64 [ 182.623131][ T5859] Bluetooth: hci2: command tx timeout [ 183.555804][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.607039][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.616389][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.630232][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.643026][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.034777][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.049507][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.062365][ T65] bond0 (unregistering): Released all slaves [ 184.239704][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.254821][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.309097][ T65] tipc: Left network mode [ 184.496079][ T7183] overlayfs: missing 'lowerdir' [ 184.710944][ T5859] Bluetooth: hci2: command tx timeout [ 185.662793][ T5859] Bluetooth: hci3: command tx timeout [ 185.764433][ T65] hsr_slave_0: left promiscuous mode [ 185.788501][ T7217] loop3: detected capacity change from 0 to 512 [ 185.806915][ T65] hsr_slave_1: left promiscuous mode [ 185.828004][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.850002][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.915250][ T7217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.966017][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.002202][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.018831][ T7217] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.152767][ T65] veth1_macvtap: left promiscuous mode [ 186.162567][ T65] veth0_macvtap: left promiscuous mode [ 186.179396][ T65] veth1_vlan: left promiscuous mode [ 186.191121][ T65] veth0_vlan: left promiscuous mode [ 186.715387][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.727598][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.741610][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.752272][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.761467][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.793146][ T5854] Bluetooth: hci2: command tx timeout [ 186.981185][ T7229] overlayfs: missing 'lowerdir' [ 187.261948][ T65] team0 (unregistering): Port device team_slave_1 removed [ 187.331163][ T65] team0 (unregistering): Port device team_slave_0 removed [ 187.791169][ T5854] Bluetooth: hci3: command tx timeout [ 188.061650][ T7118] chnl_net:caif_netlink_parms(): no params data found [ 189.089221][ T5854] Bluetooth: hci2: command tx timeout [ 189.089495][ T5859] Bluetooth: hci0: command tx timeout [ 189.367571][ T7241] loop1: detected capacity change from 0 to 262144 [ 189.396397][ T7241] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.412 (7241) [ 189.454057][ T7241] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 189.464348][ T7241] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 189.473718][ T7241] BTRFS info (device loop1): using free-space-tree [ 189.578624][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.823512][ T5859] Bluetooth: hci3: command tx timeout [ 190.417883][ T7269] overlayfs: missing 'lowerdir' [ 190.421934][ T7263] BTRFS info (device loop1): balance: start -d -mprofiles=data -ssoft,profiles=,usage=0,drange=0..4,vrange=0..2697691498605969688,limit=0,limit=0..0 [ 190.497940][ T7263] BTRFS info (device loop1): relocating block group 13631488 flags data [ 190.560833][ T7263] BTRFS info (device loop1): balance: canceled [ 190.867300][ T5858] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 190.932561][ T7274] loop3: detected capacity change from 0 to 2048 [ 190.970092][ T7274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.084976][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.130093][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 191.183244][ T5859] Bluetooth: hci0: command tx timeout [ 191.213691][ T7118] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.220911][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.236192][ T7118] bridge_slave_0: entered allmulticast mode [ 191.264488][ T7118] bridge_slave_0: entered promiscuous mode [ 191.289302][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.332808][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.362739][ T7118] bridge_slave_1: entered allmulticast mode [ 191.389622][ T7118] bridge_slave_1: entered promiscuous mode [ 191.769723][ T7288] loop3: detected capacity change from 0 to 512 [ 191.840321][ T7288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.894318][ T7288] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.904861][ T5859] Bluetooth: hci3: command tx timeout [ 191.914229][ T7118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.961102][ T7118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.219143][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.219264][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.219536][ T7168] bridge_slave_0: entered allmulticast mode [ 192.254595][ T7168] bridge_slave_0: entered promiscuous mode [ 192.303690][ T7118] team0: Port device team_slave_0 added [ 192.319799][ T7118] team0: Port device team_slave_1 added [ 192.379523][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.411299][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.449928][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.462888][ T7168] bridge_slave_1: entered allmulticast mode [ 192.484969][ T7168] bridge_slave_1: entered promiscuous mode [ 192.658100][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.907558][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.950148][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.972750][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.042720][ T7118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.070420][ T7118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.104727][ T7118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.172650][ T7118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.263088][ T5859] Bluetooth: hci0: command tx timeout [ 193.264903][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.309955][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.551247][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.186781][ T7168] team0: Port device team_slave_0 added [ 194.218081][ T7168] team0: Port device team_slave_1 added [ 194.252195][ T7118] hsr_slave_0: entered promiscuous mode [ 194.264970][ T7118] hsr_slave_1: entered promiscuous mode [ 194.271506][ T7118] debugfs: 'hsr0' already exists in 'hsr' [ 194.313585][ T7118] Cannot create hsr debugfs directory [ 194.392370][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.398946][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.472340][ T7338] loop1: detected capacity change from 0 to 512 [ 194.494000][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 194.539961][ T7338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.575449][ T7338] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.609098][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.656318][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.815671][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.844484][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.857519][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.864754][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.891189][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.910410][ T7226] chnl_net:caif_netlink_parms(): no params data found [ 194.968874][ T7348] loop3: detected capacity change from 0 to 128 [ 194.992372][ T7348] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 195.007835][ T7345] pimreg: entered allmulticast mode [ 195.068503][ T7348] qnx6: wrong signature (magic) in superblock #1. [ 195.068537][ T7348] qnx6: unable to read the first superblock [ 195.115106][ T7347] pimreg: left allmulticast mode [ 195.343494][ T5859] Bluetooth: hci0: command tx timeout [ 195.401427][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.768464][ T7168] hsr_slave_0: entered promiscuous mode [ 195.832926][ T7168] hsr_slave_1: entered promiscuous mode [ 195.839594][ T7168] debugfs: 'hsr0' already exists in 'hsr' [ 195.868686][ T7168] Cannot create hsr debugfs directory [ 196.466235][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.582192][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.641436][ T7226] bridge_slave_0: entered allmulticast mode [ 196.651659][ T7226] bridge_slave_0: entered promiscuous mode [ 196.661037][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.692170][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.739099][ T7226] bridge_slave_1: entered allmulticast mode [ 196.794626][ T7226] bridge_slave_1: entered promiscuous mode [ 196.909192][ T7379] loop3: detected capacity change from 0 to 2048 [ 196.950797][ T7379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.064467][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.102300][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 197.391875][ T7392] loop1: detected capacity change from 0 to 2048 [ 197.424426][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.444664][ T7392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.531485][ T7226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.545614][ T7226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.360304][ T7402] loop3: detected capacity change from 0 to 64 [ 198.468276][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.537698][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.010886][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.195557][ T7226] team0: Port device team_slave_0 added [ 199.681822][ T7226] team0: Port device team_slave_1 added [ 199.749422][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 199.775650][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.982507][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.990034][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.018463][ T7226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.118774][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.134853][ T7420] loop3: detected capacity change from 0 to 2048 [ 200.160264][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.195098][ T7226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.259966][ T7420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.432085][ T7118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.540218][ T7226] hsr_slave_0: entered promiscuous mode [ 201.290277][ T7226] hsr_slave_1: entered promiscuous mode [ 201.291561][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.296963][ T7226] debugfs: 'hsr0' already exists in 'hsr' [ 201.311533][ T7226] Cannot create hsr debugfs directory [ 201.388781][ T7118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.484471][ T7118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.654062][ T7442] netlink: 52 bytes leftover after parsing attributes in process `syz.1.460'. [ 201.687593][ T7118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.872995][ T7450] loop1: detected capacity change from 0 to 512 [ 201.958743][ T7450] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 202.044940][ T7450] EXT4-fs (loop1): 1 truncate cleaned up [ 202.052533][ T7450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.144381][ T65] bridge_slave_1: left allmulticast mode [ 202.150107][ T65] bridge_slave_1: left promiscuous mode [ 202.185743][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.249272][ T7467] loop3: detected capacity change from 0 to 2048 [ 202.325183][ T7467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.280801][ T65] bridge_slave_0: left allmulticast mode [ 203.288869][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.302651][ T65] bridge_slave_0: left promiscuous mode [ 203.308490][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.662803][ T65] bridge_slave_1: left allmulticast mode [ 203.665217][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.668499][ T65] bridge_slave_1: left promiscuous mode [ 203.684220][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.725575][ T65] bridge_slave_0: left allmulticast mode [ 203.731289][ T65] bridge_slave_0: left promiscuous mode [ 203.768671][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.886271][ T7483] loop3: detected capacity change from 0 to 64 [ 206.223992][ T7493] loop1: detected capacity change from 0 to 2048 [ 206.365862][ T7493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.153033][ T7501] loop3: detected capacity change from 0 to 262144 [ 208.169733][ T7501] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.472 (7501) [ 208.198139][ T7501] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 208.208381][ T7501] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 208.217707][ T7501] BTRFS info (device loop3): using free-space-tree [ 208.281948][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.493353][ T7518] loop1: detected capacity change from 0 to 2048 [ 208.568033][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.299002][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.310785][ T7501] BTRFS info (device loop3): balance: start -d -mprofiles=data -ssoft,profiles=,usage=0,drange=0..4,vrange=0..2697691498605969688,limit=0,limit=0..0 [ 210.328679][ T7501] BTRFS info (device loop3): relocating block group 13631488 flags data [ 210.428792][ T7501] BTRFS info (device loop3): found 1 extents, stage: move data extents [ 210.469163][ T7501] BTRFS info (device loop3): balance: canceled [ 210.554474][ T5851] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 210.615366][ T7526] loop1: detected capacity change from 0 to 512 [ 210.688543][ T7526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.822887][ T7526] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.833540][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 211.889098][ T7539] loop3: detected capacity change from 0 to 512 [ 211.929065][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.989716][ T7539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.010811][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.031043][ T7539] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.054435][ T65] bond0 (unregistering): Released all slaves [ 212.067997][ T5852] Bluetooth: hci4: command 0x0406 tx timeout [ 212.094922][ T7539] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.477: corrupted xattr block 32: invalid header [ 212.154224][ T7539] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 212.264740][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.884234][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.930684][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.952118][ T65] bond0 (unregistering): Released all slaves [ 213.149922][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.258768][ T7168] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 213.346180][ T7168] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 213.414229][ T7549] loop1: detected capacity change from 0 to 2048 [ 213.420717][ T7168] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.456742][ T7168] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.472326][ T7549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.494726][ T7549] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.827244][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.428916][ T7118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.628545][ T65] hsr_slave_0: left promiscuous mode [ 214.659948][ T65] hsr_slave_1: left promiscuous mode [ 214.676306][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.701567][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.727946][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.747767][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.809036][ T65] hsr_slave_0: left promiscuous mode [ 214.828832][ T65] hsr_slave_1: left promiscuous mode [ 214.848548][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.881567][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.907020][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.937835][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.099783][ T65] veth1_macvtap: left promiscuous mode [ 215.123220][ T65] veth0_macvtap: left promiscuous mode [ 215.142027][ T65] veth1_vlan: left promiscuous mode [ 215.156227][ T65] veth0_vlan: left promiscuous mode [ 215.179596][ T65] veth1_macvtap: left promiscuous mode [ 215.192302][ T65] veth0_macvtap: left promiscuous mode [ 215.222634][ T65] veth1_vlan: left promiscuous mode [ 215.243117][ T65] veth0_vlan: left promiscuous mode [ 215.853797][ T7558] loop3: detected capacity change from 0 to 262144 [ 215.863602][ T7558] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.482 (7558) [ 215.902673][ T7558] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 215.912944][ T7558] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 215.922203][ T7558] BTRFS info (device loop3): using free-space-tree [ 216.020097][ T7585] loop1: detected capacity change from 0 to 2048 [ 216.110573][ T7585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.201540][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.611183][ T7604] BTRFS info (device loop3): balance: start -d -mprofiles=data -ssoft,profiles=,usage=0,drange=0..4,vrange=0..2697691498605969688,limit=0,limit=0..0 [ 217.654496][ T7604] BTRFS info (device loop3): relocating block group 13631488 flags data [ 217.717228][ T7604] BTRFS info (device loop3): balance: canceled [ 217.809956][ T5851] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 218.422229][ T7617] loop3: detected capacity change from 0 to 64 [ 218.524294][ T7618] loop1: detected capacity change from 0 to 128 [ 219.089405][ T7618] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 219.102748][ T7618] qnx6: wrong signature (magic) in superblock #1. [ 219.109226][ T7618] qnx6: unable to read the first superblock [ 220.066336][ T65] team0 (unregistering): Port device team_slave_1 removed [ 220.233927][ T65] team0 (unregistering): Port device team_slave_0 removed [ 220.492483][ T7637] loop1: detected capacity change from 0 to 1024 [ 220.556693][ T7637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.660963][ T7637] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 220.891504][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.126891][ T7651] loop1: detected capacity change from 0 to 512 [ 221.146839][ T7651] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 221.160885][ T7651] EXT4-fs (loop1): orphan cleanup on readonly fs [ 221.169417][ T7651] Quota error (device loop1): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 221.185127][ T7651] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 221.206706][ T7651] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 221.218417][ T7651] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.502: bg 0: block 40: padding at end of block bitmap is not set [ 221.239075][ T7651] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 221.252351][ T7651] EXT4-fs (loop1): 1 truncate cleaned up [ 221.274432][ T7651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.313070][ T7651] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 221.986158][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.213646][ T7660] fuse: Bad value for 'group_id' [ 222.232885][ T7660] fuse: Bad value for 'group_id' [ 222.376695][ T7664] 9pnet_fd: Insufficient options for proto=fd [ 222.904558][ T7680] fuse: Bad value for 'group_id' [ 222.909718][ T7680] fuse: Bad value for 'group_id' [ 223.232839][ T65] team0 (unregistering): Port device team_slave_1 removed [ 223.287280][ T65] team0 (unregistering): Port device team_slave_0 removed [ 223.429398][ T7684] loop3: detected capacity change from 0 to 128 [ 223.453769][ T7684] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 223.467755][ T7684] qnx6: wrong signature (magic) in superblock #1. [ 223.498539][ T7684] qnx6: unable to read the first superblock [ 224.214681][ T7686] 9pnet_fd: Insufficient options for proto=fd [ 224.478644][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.496679][ T7226] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 224.510437][ T7226] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 224.554885][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.562174][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.582463][ T7226] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 224.636768][ T7226] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 224.670549][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.670675][ T6078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.861774][ T7701] loop3: detected capacity change from 0 to 512 [ 224.906731][ T7701] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 224.958328][ T7701] EXT4-fs (loop3): 1 truncate cleaned up [ 224.984793][ T7703] tipc: Started in network mode [ 224.989734][ T7703] tipc: Node identity 96496d7819c6, cluster identity 4711 [ 225.011645][ T7701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.027470][ T7703] tipc: Enabled bearer , priority 0 [ 225.077038][ T7706] tipc: Disabling bearer [ 225.108770][ T7168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.784907][ T7711] fuse: Bad value for 'group_id' [ 225.789917][ T7711] fuse: Bad value for 'group_id' [ 225.999971][ T7168] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.023690][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.070875][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.078094][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.154499][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.161702][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.253492][ T7722] 9pnet_fd: Insufficient options for proto=fd [ 226.440910][ T7226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.708586][ T7226] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.771315][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.778566][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.898168][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.905400][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.940875][ T7743] loop3: detected capacity change from 0 to 64 [ 227.147395][ T7118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.278046][ T7226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.448354][ T7168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.886981][ T7765] loop3: detected capacity change from 0 to 1024 [ 227.960504][ T7765] hfsplus: xattr searching failed [ 228.291872][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.506088][ T7118] veth0_vlan: entered promiscuous mode [ 228.541454][ T7118] veth1_vlan: entered promiscuous mode [ 228.699196][ T7118] veth0_macvtap: entered promiscuous mode [ 228.757001][ T7118] veth1_macvtap: entered promiscuous mode [ 228.913960][ T7797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.022403][ T7799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.162383][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.219955][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.329242][ T7168] veth0_vlan: entered promiscuous mode [ 229.365859][ T1005] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.389870][ T1005] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.419412][ T1005] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.431671][ T1005] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.488205][ T7168] veth1_vlan: entered promiscuous mode [ 229.550551][ T7814] loop3: detected capacity change from 0 to 1024 [ 229.638371][ T7814] hfsplus: xattr searching failed [ 229.678810][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.750772][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.885792][ T7226] veth0_vlan: entered promiscuous mode [ 229.929073][ T7226] veth1_vlan: entered promiscuous mode [ 229.964048][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.985913][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.016003][ T7168] veth0_macvtap: entered promiscuous mode [ 230.057828][ T7168] veth1_macvtap: entered promiscuous mode [ 230.108834][ T7226] veth0_macvtap: entered promiscuous mode [ 230.136556][ T7226] veth1_macvtap: entered promiscuous mode [ 230.221078][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.265234][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.289824][ T7168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.334907][ T1159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.398270][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.461078][ T1159] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.520325][ T1159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.573972][ T1159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.194126][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 231.236040][ T1140] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.282158][ T1140] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.516034][ T1140] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.559271][ T1140] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.813934][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.855328][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.965347][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.008928][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.065444][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.092416][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.184106][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.226696][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.231641][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.7.571'. [ 234.530614][ T7905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.957742][ T7916] loop5: detected capacity change from 0 to 512 [ 235.221891][ T7916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.338587][ T7916] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.711906][ T7888] loop3: detected capacity change from 0 to 262144 [ 235.729552][ T7888] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.564 (7888) [ 235.801866][ T7931] pimreg: entered allmulticast mode [ 235.816926][ T7931] pimreg: left allmulticast mode [ 235.919359][ T7888] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 235.946391][ T7888] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 235.962760][ T7888] BTRFS info (device loop3): using free-space-tree [ 236.458110][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 236.458640][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 236.469158][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 236.479736][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 236.489073][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 236.499000][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 236.511071][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 236.521847][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 236.532383][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 236.542568][ T7888] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 236.575594][ T7888] BTRFS error (device loop3): open_ctree failed: -12 [ 236.752311][ T7954] loop7: detected capacity change from 0 to 512 [ 237.053549][ T7954] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 237.128680][ T7118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.143284][ T7954] EXT4-fs (loop7): orphan cleanup on readonly fs [ 237.160116][ T7954] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 237.211938][ T7954] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 237.254225][ T7954] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 237.307121][ T7954] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.579: bg 0: block 40: padding at end of block bitmap is not set [ 237.382247][ T7954] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 237.442912][ T7954] EXT4-fs (loop7): 1 truncate cleaned up [ 237.492878][ T7954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.636410][ T7936] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 237.925205][ T7226] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.569476][ T8006] loop6: detected capacity change from 0 to 64 [ 239.504430][ T8008] loop1: detected capacity change from 0 to 2048 [ 242.458588][ T8008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.702245][ T8027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.030203][ T5858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.085422][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 243.094793][ T8029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.196328][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 244.806052][ T8082] loop6: detected capacity change from 0 to 512 [ 244.878255][ T8082] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 244.933621][ T8088] netlink: 196 bytes leftover after parsing attributes in process `syz.1.623'. [ 244.962891][ T8082] EXT4-fs (loop6): 1 truncate cleaned up [ 244.970425][ T8082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.723246][ T8094] loop3: detected capacity change from 0 to 2048 [ 246.351683][ T8094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.277466][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.582786][ T8030] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 248.219588][ T8120] loop1: detected capacity change from 0 to 8192 [ 249.505199][ T8142] overlayfs: failed to resolve './bus': -2 [ 249.532475][ T8140] loop3: detected capacity change from 0 to 2048 [ 249.634847][ T8140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.708709][ T8140] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.808886][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.888639][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.461819][ T8165] loop6: detected capacity change from 0 to 512 [ 250.763774][ T8165] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 250.776230][ T8165] EXT4-fs (loop6): orphan cleanup on readonly fs [ 250.809259][ T8165] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 250.820259][ T8165] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 250.846311][ T8165] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 250.873365][ T8165] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.641: bg 0: block 40: padding at end of block bitmap is not set [ 250.930132][ T8165] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 250.949230][ T8165] EXT4-fs (loop6): 1 truncate cleaned up [ 251.077930][ T8165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.128614][ T8165] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 252.430198][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.737462][ T8188] loop6: detected capacity change from 0 to 512 [ 252.932138][ T8188] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 252.999622][ T8197] netlink: 36 bytes leftover after parsing attributes in process `syz.3.654'. [ 253.020486][ T8188] EXT4-fs (loop6): 1 truncate cleaned up [ 253.072277][ T8188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.764942][ T8185] loop7: detected capacity change from 0 to 262144 [ 254.842079][ T8185] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.650 (8185) [ 254.870133][ T8185] BTRFS info (device loop7): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 254.883413][ T8185] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 254.892909][ T8185] BTRFS info (device loop7): using free-space-tree [ 255.502796][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 255.503314][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 255.513396][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 255.523358][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 255.532477][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 255.541647][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 255.550871][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 255.563252][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 255.572228][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 255.582328][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 255.592656][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 255.605133][ T8185] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 255.617403][ T8185] BTRFS error (device loop7): open_ctree failed: -12 [ 255.832103][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.838605][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.090167][ T8245] netlink: 36 bytes leftover after parsing attributes in process `syz.7.666'. [ 256.586439][ T8250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.887829][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.011303][ T8269] bridge1: entered allmulticast mode [ 258.471606][ T8281] netlink: 36 bytes leftover after parsing attributes in process `syz.6.678'. [ 260.471069][ T8323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 260.929052][ T8340] vlan2: entered promiscuous mode [ 260.963003][ T8340] macvtap0: entered promiscuous mode [ 261.226194][ T8347] overlayfs: missing 'lowerdir' [ 262.045971][ T8368] pimreg: entered allmulticast mode [ 262.065460][ T8365] pimreg: left allmulticast mode [ 262.620608][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.712'. [ 262.777039][ T1005] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.025260][ T1005] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.170928][ T1005] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.360374][ T1005] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.518051][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 263.968706][ T1005] bridge_slave_1: left allmulticast mode [ 263.989053][ T1005] bridge_slave_1: left promiscuous mode [ 264.008687][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.071205][ T1005] bridge_slave_0: left allmulticast mode [ 264.112661][ T1005] bridge_slave_0: left promiscuous mode [ 264.164942][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.467086][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.486378][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.495715][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.516695][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.529893][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.964228][ T8444] loop6: detected capacity change from 0 to 2048 [ 266.156345][ T8444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.227343][ T8444] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.440545][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.453067][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.502351][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.596398][ T1005] bond0 (unregistering): Released all slaves [ 266.712862][ T5854] Bluetooth: hci2: command tx timeout [ 266.774799][ T8429] loop3: detected capacity change from 0 to 262144 [ 266.790032][ T8429] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.731 (8429) [ 266.832189][ T8429] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 266.845769][ T8429] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 266.855174][ T8429] BTRFS info (device loop3): using free-space-tree [ 266.864302][ T8434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.686648][ T5851] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 268.522656][ T1005] hsr_slave_0: left promiscuous mode [ 268.581240][ T1005] hsr_slave_1: left promiscuous mode [ 268.626565][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.652308][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.725803][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.751102][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.783832][ T5854] Bluetooth: hci2: command tx timeout [ 268.847463][ T1005] veth1_macvtap: left promiscuous mode [ 268.867133][ T1005] veth0_macvtap: left promiscuous mode [ 268.874101][ T1005] veth1_vlan: left promiscuous mode [ 268.886403][ T1005] veth0_vlan: left promiscuous mode [ 270.629080][ T8516] loop6: detected capacity change from 0 to 64 [ 270.862960][ T5854] Bluetooth: hci2: command tx timeout [ 272.375974][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 272.943021][ T5854] Bluetooth: hci2: command tx timeout [ 273.041976][ T8522] loop6: detected capacity change from 0 to 262144 [ 273.066935][ T8522] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.760 (8522) [ 273.105868][ T8522] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 273.116113][ T8522] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 273.125445][ T8522] BTRFS info (device loop6): using free-space-tree [ 273.210485][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 273.632059][ T8540] BTRFS info (device loop6): balance: start -d -mprofiles=data -ssoft,profiles=,usage=0,drange=0..4,vrange=0..2697691498605969688,limit=0,limit=0..0 [ 273.651756][ T8540] BTRFS info (device loop6): relocating block group 13631488 flags data [ 273.772874][ T8540] BTRFS info (device loop6): found 1 extents, stage: move data extents [ 273.841420][ T8540] BTRFS info (device loop6): balance: canceled [ 273.909505][ T7168] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 274.104602][ T8542] loop6: detected capacity change from 0 to 512 [ 274.159112][ T8542] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 274.218067][ T8542] EXT4-fs (loop6): 1 truncate cleaned up [ 274.227537][ T8542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.997318][ T8494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.078435][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.264437][ T8550] overlayfs: failed to clone upperpath [ 275.379929][ T8550] overlayfs: failed to clone upperpath [ 275.785981][ T8572] fuse: Bad value for 'fd' [ 275.801759][ T8422] chnl_net:caif_netlink_parms(): no params data found [ 276.020676][ T8577] loop6: detected capacity change from 0 to 512 [ 276.109919][ T8577] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 276.177084][ T8577] EXT4-fs (loop6): 1 truncate cleaned up [ 276.207678][ T8582] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.208650][ T8577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.232767][ T8582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.781860][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.866561][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.922374][ T8422] bridge_slave_0: entered allmulticast mode [ 277.001285][ T8422] bridge_slave_0: entered promiscuous mode [ 277.044470][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.051678][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.059524][ T8422] bridge_slave_1: entered allmulticast mode [ 277.060367][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.085516][ T8422] bridge_slave_1: entered promiscuous mode [ 277.375299][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.507693][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.689692][ T8422] team0: Port device team_slave_0 added [ 277.720192][ T8422] team0: Port device team_slave_1 added [ 277.912417][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.935840][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.971188][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.050498][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.062125][ T8634] netlink: 80 bytes leftover after parsing attributes in process `syz.3.793'. [ 278.102636][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.172900][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.931621][ T8646] program syz.3.795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.969117][ T8422] hsr_slave_0: entered promiscuous mode [ 278.976116][ T8422] hsr_slave_1: entered promiscuous mode [ 278.982711][ T8422] debugfs: 'hsr0' already exists in 'hsr' [ 278.988491][ T8422] Cannot create hsr debugfs directory [ 280.298086][ T8422] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 280.981505][ T8422] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 281.046559][ T8422] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 281.168053][ T8422] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 281.299568][ T8650] loop1: detected capacity change from 0 to 262144 [ 281.320722][ T8650] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.797 (8650) [ 281.341466][ T8650] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 281.351754][ T8650] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 281.365458][ T8650] BTRFS info (device loop1): using free-space-tree [ 281.644843][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.707804][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.730787][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.738016][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.830744][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.837999][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.252399][ T5858] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 282.864654][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.027013][ T8764] overlayfs: missing 'lowerdir' [ 284.308425][ T8774] 9pnet_fd: Insufficient options for proto=fd [ 284.507542][ T8778] fuse: Bad value for 'fd' [ 285.543539][ T8786] loop3: detected capacity change from 0 to 64 [ 286.152595][ T8782] loop6: detected capacity change from 0 to 262144 [ 286.183075][ T8782] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.831 (8782) [ 286.203435][ T8782] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 286.213838][ T8782] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 286.223227][ T8782] BTRFS info (device loop6): using free-space-tree [ 286.546184][ T8422] veth0_vlan: entered promiscuous mode [ 286.891075][ T8422] veth1_vlan: entered promiscuous mode [ 287.176099][ T8422] veth0_macvtap: entered promiscuous mode [ 287.278102][ T8422] veth1_macvtap: entered promiscuous mode [ 287.390841][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.445438][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.530177][ T1140] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.594700][ T1140] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.609820][ T7168] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 287.664709][ T1140] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.707171][ T1140] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.223940][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.272580][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.439125][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.489070][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.474152][ T8869] 9pnet_fd: Insufficient options for proto=fd [ 289.553264][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.853'. [ 290.822428][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.868'. [ 290.857359][ T8913] 9pnet_fd: Insufficient options for proto=fd [ 291.686130][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 293.794285][ T8933] loop3: detected capacity change from 0 to 262144 [ 293.802605][ T8933] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.878 (8933) [ 293.820257][ T8933] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 293.830524][ T8933] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 293.839844][ T8933] BTRFS info (device loop3): using free-space-tree [ 295.025997][ T8933] BTRFS info (device loop3): balance: start -d -mprofiles=data -ssoft,profiles=,usage=0,drange=0..24,vrange=0..2697691498605969688,limit=0,limit=0..0 [ 295.042069][ T8933] BTRFS info (device loop3): relocating block group 13631488 flags data [ 295.101164][ T8933] BTRFS info (device loop3): found 1 extents, stage: move data extents [ 295.132461][ T8933] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 295.163082][ T8933] BTRFS info (device loop3): balance: ended with status: 0 [ 295.391328][ T5851] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 297.134579][ T5922] kernel write not supported for file bpf-prog (pid: 5922 comm: kworker/1:5) [ 297.738309][ T9068] overlayfs: missing 'lowerdir' [ 298.258367][ T9076] 9pnet_fd: Insufficient options for proto=fd [ 299.009728][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.921'. [ 299.843262][ T9098] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 299.882803][ T9098] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 302.458589][ T9128] loop1: detected capacity change from 0 to 262144 [ 302.501061][ T9128] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.936 (9128) [ 302.521427][ T9128] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 302.535354][ T9128] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 302.544908][ T9128] BTRFS info (device loop1): using free-space-tree [ 302.608976][ T9144] vlan2: entered promiscuous mode [ 303.643527][ T9167] BTRFS info (device loop1): balance: start -d -mprofiles=data -ssoft,profiles=,usage=0,drange=0..24,vrange=0..2697691498605969688,limit=0,limit=0..0 [ 303.666025][ T9171] overlayfs: failed to clone upperpath [ 303.763046][ T9167] BTRFS info (device loop1): relocating block group 13631488 flags data [ 303.854169][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 303.897130][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 303.943762][ T9167] BTRFS info (device loop1): balance: canceled [ 304.165678][ T5858] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 304.553363][ T9194] overlayfs: missing 'lowerdir' [ 304.650277][ T9197] fuse: Bad value for 'user_id' [ 304.666913][ T9197] fuse: Bad value for 'user_id' [ 305.229996][ T9213] syzkaller0: entered promiscuous mode [ 305.265235][ T9213] syzkaller0: entered allmulticast mode [ 305.602427][ T9227] overlayfs: missing 'lowerdir' [ 305.926270][ T9243] netlink: 52 bytes leftover after parsing attributes in process `syz.3.972'. [ 306.459589][ T9258] overlayfs: missing 'lowerdir' [ 306.895612][ T9277] bond0: entered promiscuous mode [ 306.900718][ T9277] bond_slave_0: entered promiscuous mode [ 306.922853][ T9277] bond_slave_1: entered promiscuous mode [ 306.944953][ T9277] bond0: entered allmulticast mode [ 306.952866][ T9277] bond_slave_0: entered allmulticast mode [ 306.963408][ T9279] netlink: 52 bytes leftover after parsing attributes in process `syz.7.988'. [ 306.996594][ T9281] fuse: Bad value for 'fd' [ 307.012686][ T9277] bond_slave_1: entered allmulticast mode [ 307.361771][ T9296] overlayfs: missing 'workdir' [ 308.031639][ T9317] bond0: entered promiscuous mode [ 308.049666][ T9317] bond_slave_0: entered promiscuous mode [ 308.075083][ T9317] bond_slave_1: entered promiscuous mode [ 308.081593][ T9318] fuse: Bad value for 'fd' [ 308.102404][ T9317] bond0: entered allmulticast mode [ 308.134279][ T9317] bond_slave_0: entered allmulticast mode [ 308.154848][ T9317] bond_slave_1: entered allmulticast mode [ 309.109686][ T5167] Bluetooth: hci0: command 0x0406 tx timeout [ 309.109702][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 310.626355][ T9388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.999869][ T9404] fuse: Unknown parameter 'fd0x0000000000000003' [ 312.840244][ T9441] loop3: detected capacity change from 0 to 128 [ 312.922400][ T9441] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 312.951352][ T9441] qnx6: wrong signature (magic) in superblock #1. [ 312.958116][ T9441] qnx6: unable to read the first superblock [ 314.134402][ T9466] overlayfs: failed to resolve './cgroup': -2 [ 314.665130][ T9484] overlayfs: failed to clone upperpath [ 314.824226][ T9491] loop3: detected capacity change from 0 to 512 [ 314.878170][ T9491] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 314.941820][ T9491] EXT4-fs (loop3): 1 truncate cleaned up [ 314.957529][ T9491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.025131][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.145487][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1073'. [ 316.431303][ T9525] bond0: entered promiscuous mode [ 316.439832][ T9525] bond_slave_0: entered promiscuous mode [ 316.472865][ T9525] bond_slave_1: entered promiscuous mode [ 316.478872][ T9525] bond0: entered allmulticast mode [ 316.514745][ T9525] bond_slave_0: entered allmulticast mode [ 316.562629][ T9525] bond_slave_1: entered allmulticast mode [ 317.228343][ T9546] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 317.274488][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.281157][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.305622][ T9548] fuse: Bad value for 'fd' [ 317.568542][ T9553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.958263][ T9571] loop1: detected capacity change from 0 to 64 [ 318.948469][ T9587] loop8: detected capacity change from 0 to 128 [ 319.493383][ T9583] loop6: detected capacity change from 0 to 512 [ 319.502643][ T9587] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 319.548320][ T9587] qnx6: wrong signature (magic) in superblock #1. [ 319.556322][ T9587] qnx6: unable to read the first superblock [ 319.793505][ T9583] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.985540][ T9594] loop3: detected capacity change from 0 to 1024 [ 320.067561][ T9594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.364960][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1104'. [ 320.390454][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.394736][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.751405][ T9616] loop6: detected capacity change from 0 to 512 [ 320.915220][ T9616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.972825][ T9621] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1111'. [ 321.341620][ T9634] 9pnet_fd: Insufficient options for proto=fd [ 321.521002][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.762391][ T9649] loop6: detected capacity change from 0 to 512 [ 321.954699][ T9649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.402326][ T9668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1126'. [ 322.446665][ T7168] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.593469][ T9672] fuse: Bad value for 'fd' [ 322.947696][ T9687] loop8: detected capacity change from 0 to 512 [ 323.025658][ T9687] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.097256][ T9687] overlayfs: missing 'lowerdir' [ 323.218042][ T8422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.034891][ T9732] 9pnet_fd: Insufficient options for proto=fd [ 324.136250][ T9735] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1150'. [ 324.832315][ T9758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.172966][ T9767] 9pnet_fd: Insufficient options for proto=fd [ 325.490617][ T9773] syzkaller0: entered promiscuous mode [ 325.502196][ T9773] syzkaller0: entered allmulticast mode [ 325.730111][ T9778] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1165'. [ 325.853278][ T9784] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1167'. [ 325.973906][ T9786] overlayfs: failed to clone upperpath [ 326.371427][ T9803] 9pnet_fd: Insufficient options for proto=fd [ 326.502231][ T9809] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1175'. [ 326.644963][ T9815] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1179'. [ 326.719003][ T9816] loop8: detected capacity change from 0 to 512 [ 326.776060][ T9819] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'. [ 326.793282][ T9822] overlayfs: failed to resolve './bus': -2 [ 326.844559][ T9816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.884485][ T9816] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.959271][ T9816] pimreg: entered allmulticast mode [ 326.965839][ T9816] pimreg: left allmulticast mode [ 326.995596][ T9828] overlayfs: failed to resolve './bus': -2 [ 327.327042][ T8422] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.517212][ T9845] 9pnet_fd: Insufficient options for proto=fd [ 327.790971][ T9858] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1191'. [ 327.802904][ T9859] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1193'. [ 327.975009][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1195'. [ 328.081470][ T9866] overlayfs: failed to resolve './bus': -2 [ 328.143049][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 328.161868][ T31] Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 [ 328.222697][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.231769][ T31] task:kworker/1:1 state:D stack:23368 pid:43 tgid:43 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 328.316175][ T31] Workqueue: usb_hub_wq hub_event [ 328.321338][ T31] Call Trace: [ 328.338756][ T31] [ 328.341752][ T31] __schedule+0x16f5/0x4d00 [ 328.363892][ T9879] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1200'. [ 328.381020][ T31] ? schedule+0x165/0x360 [ 328.388843][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.401136][ T31] ? __pfx___schedule+0x10/0x10 [ 328.421191][ T31] ? schedule+0x91/0x360 [ 328.430211][ T31] schedule+0x165/0x360 [ 328.437308][ T31] schedule_timeout+0x9a/0x270 [ 328.446388][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 328.458490][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.473820][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.481151][ T31] ? wait_for_completion+0x267/0x5d0 [ 328.488683][ T31] wait_for_completion+0x2bf/0x5d0 [ 328.506792][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 328.512809][ T31] i2c_del_adapter+0x581/0x6e0 [ 328.517818][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 328.523386][ T31] ? em28xx_release_resources+0xde/0x240 [ 328.529991][ T31] ? kfree+0x18e/0x440 [ 328.536568][ T31] em28xx_i2c_unregister+0x4b/0x60 [ 328.541921][ T31] em28xx_release_resources+0x14c/0x240 [ 328.558234][ T31] em28xx_usb_disconnect+0x19f/0x2f0 [ 328.566805][ T31] usb_unbind_interface+0x26e/0x910 [ 328.572155][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 328.578306][ T31] device_release_driver_internal+0x4d9/0x800 [ 328.584576][ T31] bus_remove_device+0x34d/0x410 [ 328.589758][ T31] device_del+0x511/0x8e0 [ 328.596257][ T31] ? kfree+0x18e/0x440 [ 328.607221][ T31] ? __pfx_device_del+0x10/0x10 [ 328.612352][ T31] ? kobject_put+0x446/0x480 [ 328.620187][ T31] usb_disable_device+0x3e9/0x8a0 [ 328.629848][ T31] usb_disconnect+0x330/0x950 [ 328.634787][ T31] hub_event+0x1cdb/0x4a00 [ 328.639562][ T31] ? __lock_acquire+0xab9/0xd20 [ 328.644809][ T31] ? do_raw_spin_lock+0x121/0x290 [ 328.650125][ T31] ? register_lock_class+0x51/0x320 [ 328.657545][ T31] ? __pfx_hub_event+0x10/0x10 [ 328.662809][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.672330][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.682091][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.688052][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 328.697935][ T31] process_scheduled_works+0xae1/0x17b0 [ 328.705865][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.712034][ T31] worker_thread+0x8a0/0xda0 [ 328.720736][ T31] kthread+0x70e/0x8a0 [ 328.728403][ T31] ? __pfx_worker_thread+0x10/0x10 [ 328.737695][ T31] ? __pfx_kthread+0x10/0x10 [ 328.742711][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.748189][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.753972][ T31] ? __pfx_kthread+0x10/0x10 [ 328.758810][ T31] ret_from_fork+0x3f9/0x770 [ 328.763749][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 328.771291][ T31] ? __switch_to_asm+0x39/0x70 [ 328.776451][ T31] ? __switch_to_asm+0x33/0x70 [ 328.781445][ T31] ? __pfx_kthread+0x10/0x10 [ 328.786240][ T31] ret_from_fork_asm+0x1a/0x30 [ 328.791346][ T31] [ 328.796587][ T31] [ 328.796587][ T31] Showing all locks held in the system: [ 328.805196][ T31] 1 lock held by khungtaskd/31: [ 328.810286][ T31] #0: ffffffff8e13eca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 328.821168][ T31] 6 locks held by kworker/1:1/43: [ 328.826349][ T31] #0: ffff888143e8dd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 328.839109][ T31] #1: ffffc90000b37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 328.851351][ T31] #2: ffff888145378198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 328.860416][ T31] #3: ffff88807c631198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 328.870099][ T31] #4: ffff888023cb2160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 328.891892][ T31] #5: ffff8880318a9ba8 (&dev->lock#4){+.+.}-{4:4}, at: em28xx_release_resources+0x75/0x240 [ 328.902406][ T31] 1 lock held by dhcpcd/5512: [ 328.911026][ T31] 2 locks held by getty/5616: [ 328.916044][ T31] #0: ffff88802ff830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 328.930056][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 328.941546][ T31] 4 locks held by syz.6.1201/9876: [ 328.948091][ T31] #0: ffff888059ddee08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 328.958934][ T31] #1: ffffffff8f589230 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 328.970734][ T31] #2: ffff88805900acd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640 [ 328.988792][ T31] #3: ffffffff8e1447f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 329.001277][ T31] 2 locks held by syz.3.1202/9882: [ 329.010688][ T31] #0: ffff888028a730d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 329.021854][ T31] #1: ffffffff8e1447f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 329.037963][ T31] 2 locks held by syz.3.1202/9884: [ 329.045474][ T31] #0: ffffffff9a006198 (nfnl_subsys_nftables){+.+.}-{4:4}, at: nfnetlink_rcv+0x5ef/0x2520 [ 329.066292][ T31] #1: ffff888028a730d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 329.085733][ T31] 1 lock held by sed/9892: [ 329.090346][ T31] [ 329.198966][ T31] ============================================= [ 329.198966][ T31] [ 329.213306][ T31] NMI backtrace for cpu 1 [ 329.213334][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 329.213358][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.213371][ T31] Call Trace: [ 329.213380][ T31] [ 329.213388][ T31] dump_stack_lvl+0x189/0x250 [ 329.213416][ T31] ? __wake_up_klogd+0xd9/0x110 [ 329.213446][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.213470][ T31] ? __pfx__printk+0x10/0x10 [ 329.213511][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 329.213537][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 329.213556][ T31] ? _printk+0xcf/0x120 [ 329.213589][ T31] ? __pfx__printk+0x10/0x10 [ 329.213619][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 329.213654][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 329.213679][ T31] watchdog+0xfee/0x1030 [ 329.213711][ T31] ? watchdog+0x1de/0x1030 [ 329.213747][ T31] kthread+0x70e/0x8a0 [ 329.213777][ T31] ? __pfx_watchdog+0x10/0x10 [ 329.213804][ T31] ? __pfx_kthread+0x10/0x10 [ 329.213832][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.213856][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.213880][ T31] ? __pfx_kthread+0x10/0x10 [ 329.213907][ T31] ret_from_fork+0x3f9/0x770 [ 329.213930][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.213957][ T31] ? __switch_to_asm+0x39/0x70 [ 329.213981][ T31] ? __switch_to_asm+0x33/0x70 [ 329.214005][ T31] ? __pfx_kthread+0x10/0x10 [ 329.214032][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.214075][ T31] [ 329.214083][ T31] Sending NMI from CPU 1 to CPUs 0: [ 329.372751][ C0] NMI backtrace for cpu 0 [ 329.372768][ C0] CPU: 0 UID: 0 PID: 9894 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 329.372797][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.372808][ C0] RIP: 0010:lock_acquire+0x162/0x360 [ 329.372828][ C0] Code: 05 53 be 05 11 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b 7e 05 11 48 3b 44 [ 329.372843][ C0] RSP: 0018:ffffc900000075d8 EFLAGS: 00000046 [ 329.372859][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 16643a4d7c197600 [ 329.372876][ C0] RDX: 0000000000000000 RSI: ffffffff8db7dab1 RDI: ffffffff8be35240 [ 329.372888][ C0] RBP: ffffffff8172aea5 R08: 0000000000000000 R09: ffffffff8172aea5 [ 329.372900][ C0] R10: ffffc90000007798 R11: ffffffff81ac8930 R12: 0000000000000002 [ 329.372912][ C0] R13: ffffffff8e13eca0 R14: 0000000000000000 R15: 0000000000000046 [ 329.372923][ C0] FS: 0000000000000000(0000) GS:ffff888125bed000(0000) knlGS:0000000000000000 [ 329.372937][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.372948][ C0] CR2: 00007f9aa18d5286 CR3: 00000000604b0000 CR4: 00000000003526f0 [ 329.372964][ C0] Call Trace: [ 329.372970][ C0] [ 329.372981][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.373000][ C0] ? kasan_save_stack+0x3e/0x60 [ 329.373019][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.373037][ C0] unwind_next_frame+0xc2/0x2390 [ 329.373054][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.373075][ C0] ? unwind_next_frame+0xa5/0x2390 [ 329.373093][ C0] ? stack_trace_save+0x9c/0xe0 [ 329.373116][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 329.373138][ C0] arch_stack_walk+0x11c/0x150 [ 329.373161][ C0] ? kasan_save_stack+0x3e/0x60 [ 329.373181][ C0] stack_trace_save+0x9c/0xe0 [ 329.373202][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 329.373221][ C0] ? do_raw_spin_lock+0x121/0x290 [ 329.373249][ C0] kasan_save_stack+0x3e/0x60 [ 329.373266][ C0] ? kasan_save_stack+0x3e/0x60 [ 329.373314][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 329.373350][ C0] insert_work+0x3d/0x330 [ 329.373367][ C0] __queue_work+0xcd2/0xfb0 [ 329.373386][ C0] ? __queue_work+0x102/0xfb0 [ 329.373406][ C0] call_timer_fn+0x17b/0x5f0 [ 329.373420][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 329.373437][ C0] ? call_timer_fn+0xbe/0x5f0 [ 329.373451][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 329.373471][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 329.373492][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 329.373511][ C0] __run_timer_base+0x646/0x860 [ 329.373534][ C0] ? ktime_get+0x3e/0x1f0 [ 329.373565][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 329.373587][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 329.373617][ C0] run_timer_softirq+0xb7/0x180 [ 329.373641][ C0] handle_softirqs+0x283/0x870 [ 329.373659][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 329.373678][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 329.373697][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 329.373721][ C0] __irq_exit_rcu+0xca/0x1f0 [ 329.373737][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 329.373758][ C0] irq_exit_rcu+0x9/0x30 [ 329.373773][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 329.373793][ C0] [ 329.373798][ C0] [ 329.373805][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 329.373822][ C0] RIP: 0010:preempt_count_sub+0x55/0x170 [ 329.373838][ C0] Code: 1e 18 00 75 25 65 8b 05 b9 d6 12 11 89 c1 81 e1 ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e <65> 8b 05 94 d6 12 11 f7 df 65 01 3d 8b d6 12 11 5b 5d c3 cc cc cc [ 329.373852][ C0] RSP: 0018:ffffc90003e0f288 EFLAGS: 00000202 [ 329.373866][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 329.373877][ C0] RDX: 0000000000000006 RSI: ffffffff8d98febb RDI: 0000000000000001 [ 329.373895][ C0] RBP: ffffc90003e0f330 R08: ffffffff8fa29637 R09: 1ffffffff1f452c6 [ 329.373907][ C0] R10: dffffc0000000000 R11: fffffbfff1f452c7 R12: dffffc0000000000 [ 329.373920][ C0] R13: 1ffff920007c1e78 R14: ffffffff99d9cf38 R15: 1ffff920007c1e54 [ 329.373943][ C0] _raw_spin_unlock_irqrestore+0xad/0x110 [ 329.373962][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.373986][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 329.374003][ C0] call_rcu+0xc3/0x9c0 [ 329.374027][ C0] ? __pfx_call_rcu+0x10/0x10 [ 329.374052][ C0] ? __put_anon_vma+0x12b/0x2d0 [ 329.374073][ C0] kmem_cache_free+0x309/0x400 [ 329.374096][ C0] __put_anon_vma+0x12b/0x2d0 [ 329.374119][ C0] unlink_anon_vmas+0x503/0x670 [ 329.374143][ C0] free_pgtables+0x7bf/0xaf0 [ 329.374172][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 329.374199][ C0] ? __pfx_down_write+0x10/0x10 [ 329.374224][ C0] ? __mas_set_range+0x12f/0x3c0 [ 329.374248][ C0] exit_mmap+0x444/0xb50 [ 329.374268][ C0] ? uprobe_clear_state+0x20f/0x290 [ 329.374286][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 329.374309][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 329.374339][ C0] ? __pfx_exit_aio+0x10/0x10 [ 329.374367][ C0] ? uprobe_clear_state+0x274/0x290 [ 329.374386][ C0] __mmput+0x118/0x420 [ 329.374403][ C0] exec_mmap+0x6ac/0x7d0 [ 329.374420][ C0] ? generic_permission+0x2e5/0x690 [ 329.374454][ C0] ? __pfx_exec_mmap+0x10/0x10 [ 329.374478][ C0] begin_new_exec+0x129c/0x2120 [ 329.374500][ C0] ? __pfx_load_elf_phdrs+0x10/0x10 [ 329.374530][ C0] load_elf_binary+0x993/0x2730 [ 329.374568][ C0] ? load_misc_binary+0x110/0xc40 [ 329.374592][ C0] ? __lock_acquire+0xab9/0xd20 [ 329.374611][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 329.374644][ C0] bprm_execve+0x99c/0x1450 [ 329.374671][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 329.374696][ C0] do_execveat_common+0x510/0x6a0 [ 329.374723][ C0] __x64_sys_execve+0x94/0xb0 [ 329.374744][ C0] do_syscall_64+0xfa/0x3b0 [ 329.374766][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.374786][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.374801][ C0] ? clear_bhb_loop+0x60/0xb0 [ 329.374820][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.374835][ C0] RIP: 0033:0x7f9aa181b107 [ 329.374862][ C0] Code: Unable to access opcode bytes at 0x7f9aa181b0dd. [ 329.374871][ C0] RSP: 002b:00007ffce1f043f8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 329.374886][ C0] RAX: ffffffffffffffda RBX: 000055a3f93e1078 RCX: 00007f9aa181b107 [ 329.374899][ C0] RDX: 000055a3f93e10a0 RSI: 000055a3f93e1078 RDI: 000055a3f93e1130 [ 329.374911][ C0] RBP: 000055a3f93e1130 R08: 00007ffce1f08df8 R09: 0000000000000000 [ 329.374922][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 000055a3f93e10a0 [ 329.374933][ C0] R13: 00007f9aa19e0e8b R14: 000055a3f93e10a0 R15: 0000000000000000 [ 329.374953][ C0] [ 329.379641][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 330.039311][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 330.050696][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.060768][ T31] Call Trace: [ 330.064073][ T31] [ 330.067017][ T31] dump_stack_lvl+0x99/0x250 [ 330.071625][ T31] ? __asan_memcpy+0x40/0x70 [ 330.076233][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.081457][ T31] ? __pfx__printk+0x10/0x10 [ 330.086104][ T31] vpanic+0x281/0x750 [ 330.090117][ T31] ? __pfx_vpanic+0x10/0x10 [ 330.094637][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 330.100222][ T31] ? preempt_schedule+0xae/0xc0 [ 330.105110][ T31] ? preempt_schedule_common+0x83/0xd0 [ 330.110612][ T31] panic+0xb9/0xc0 [ 330.114350][ T31] ? __pfx_panic+0x10/0x10 [ 330.118786][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 330.124200][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 330.130384][ T31] watchdog+0x102d/0x1030 [ 330.134744][ T31] ? watchdog+0x1de/0x1030 [ 330.139197][ T31] kthread+0x70e/0x8a0 [ 330.143288][ T31] ? __pfx_watchdog+0x10/0x10 [ 330.147984][ T31] ? __pfx_kthread+0x10/0x10 [ 330.152616][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 330.157828][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.163038][ T31] ? __pfx_kthread+0x10/0x10 [ 330.167647][ T31] ret_from_fork+0x3f9/0x770 [ 330.172248][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 330.177375][ T31] ? __switch_to_asm+0x39/0x70 [ 330.182164][ T31] ? __switch_to_asm+0x33/0x70 [ 330.186950][ T31] ? __pfx_kthread+0x10/0x10 [ 330.191558][ T31] ret_from_fork_asm+0x1a/0x30 [ 330.196347][ T31] [ 330.199748][ T31] Kernel Offset: disabled [ 330.204094][ T31] Rebooting in 86400 seconds..