last executing test programs: 4m51.039318459s ago: executing program 1 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x11}, 0x94) 4m48.257978214s ago: executing program 1 (id=1122): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 4m43.60892699s ago: executing program 1 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x20048808) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000001240)=""/250, 0xfa, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 4m42.959414149s ago: executing program 1 (id=1131): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0x4002, 0x4, 0x1ff, 0x1105, 0x101}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x154, 0x24, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x10, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x807ff}, @TCA_RED_STAB={0x104, 0x2, "f53338eaef9b6da22754c45f4f190852df3e4f7f36753eff1931e82119b023bcc46e46087da8c68a147659889a1db1d54d5fe7375cb3e84ddf3a43015ccf564cc7de8aff5a829b28eadc925711d966c271ccbeae2e0334fa6d03f7e288470a45d8d39613aebcb0a4fc09ad14df7901eae7e9fa306b7921014bc96031d42ef949d438ea83058687ed98ace7c984bf66ffecf6f9a19702b0030834e4057ddcdd87dc8b322a94c076705b373100f3bc280fbbe31c0c8cde8d6d53d3082f10e770ea33b38fc54f5095f496af616fc35c3ffbd12164d3a4673cb5941e370335ec782fd28a2cd6dfc193bfaf7cabf2c3a0f7ca69bc53a3e1a806d2833d618108ed5c42"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0xe179}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x5}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4048841}, 0x895) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getqdisc={0x40, 0x26, 0x300, 0x70bd29, 0xab, {0x0, 0x0, 0x0, 0x0, {0xfffe, 0x2}, {0xfff3, 0x1}, {0xf, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c8c1}, 0x4000000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x11) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60181, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000002c0)=0x3) 4m37.13938892s ago: executing program 1 (id=1139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x20048808) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000001240)=""/250, 0xfa, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 4m36.591998232s ago: executing program 1 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x18, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 4m20.164732036s ago: executing program 32 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x18, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 18.013068412s ago: executing program 0 (id=1860): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) ioctl$PPPIOCSFLAGS1(r3, 0x4020744f, 0x0) bind$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x1, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) readv(r4, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0xf02, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000020c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc2002, 0x80) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.780866498s ago: executing program 0 (id=1862): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x3, 0x8, 0x5, 0x1, 0x8, 0x7}}, {0x4}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x33}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad00000085000000d000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe, 0x1}, 0x4}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r5, &(0x7f0000003100)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000f00)="b3bd296539fff3fb9bb64f722bbd5dd7f840dc1d194d5026fec2c15904a12bd66b750e44460230d41547fd623cb270eb7e3c56df888021bbe6fd81d83323babf985d67039100ab0439becd237d23d8f494a3d3e4201c35a616f64471bbd2c9e2d7e7bb62941fcb5454143359a3c740e313724a2c5f9884a23a544261f62961b547ec9ff7ea0a4da080123f4e6e98598e9cd620d5c3808fe39ce98ac6055b3aec24bb5bbdfed24e521cd347fcc0d376d622e3b561b1650e9135de383ca92da47ec7f43d66ac5efc60536df8345ecc3128039af59d00e4a44b1908bbfdcdbda5e344588d1ae0574663a1ba1694515cabce7f65b34f32ee6f4b73fe8a46140d41ec33add3f4f74bbcc82305777edd3fdecf24057e245d233bdd6bbacf368a46b709204773b2f860dbeb4fc78c116b8c187a3741811ffc75530cc67d3cdf83c378805aece5c6ea4dc87e260259e500276f53b6e95ece102907a9dcfed9e6d15d5c0ab5a6365cb6560951dc098ce1b8c4ae617343000afa98e14d4a35fb3a11990d1161a2ea56ea7e01a2f23c8f3d3e5e600a4e6c995a46ef717cb347fc9a5d830ab5f2520d098995605ba4e05b790a89392b9894a0c03ba5d92b910c1bd6641666a59d5126c4bdc7e149b5f77bf95d5efb5029a32671fffd7e638b3e4174121ed6f1b709b31d0bf7995a3b56338ecbc1b4008730ec53baa9e1048ea13e75e00c48c19a5cd4a0186a0dc9379cfda2565b2a5ef9ddd25669184ef5f0c4ece9bc010250e1437c78ce0ee713a5bafe9db7d19f870de835b6e397ffedd3506ecc8b6b09567195477d7ce09e3080be1f690d5f9d471b90130917f974a5ae026a89e4c5252311df4e97cd0324a25f2c7105a42e35554a92c44faa077c07149e629183e49b1ad78188460d2a6cf694489837ed81848c4eb88173d60b39e89f7314c261f91ef967b6702b5af2f4aa3a816b79be35789f59c6372e26be3c7652e851174cd36b101254f635e007f92d40c466be9da5f97918e87e855d416a1b9df8597222be13433d", 0x2e1}], 0x1}}], 0x2, 0xc044) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000001a40)=[{&(0x7f0000000240)="5bda516d", 0x4}], 0x1, 0x17, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x40810, 0x3}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) write$binfmt_misc(r5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 16.016981365s ago: executing program 0 (id=1868): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b3d, 0x0) 15.739468632s ago: executing program 0 (id=1869): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x313, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a8}, 0x0, 0x8000, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.906753101s ago: executing program 0 (id=1873): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x24000010) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x4000000a, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="698eb65e04ffe0f002d800", 0xb, 0x4008090, 0x0, 0x0) 7.90476886s ago: executing program 2 (id=1898): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0xa, 0x4e1b, 0x1, @private0, 0xf1f2}, 0x1c, 0x0}}], 0x1, 0x40001) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) 7.012236199s ago: executing program 2 (id=1900): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x895) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getqdisc={0x40, 0x26, 0x300, 0x70bd29, 0xab, {0x0, 0x0, 0x0, 0x0, {0xfffe, 0x2}, {0xfff3, 0x1}, {0xf, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c8c1}, 0x4000000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x11) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60181, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x3) 6.720620888s ago: executing program 3 (id=1902): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) ioctl$PPPIOCSFLAGS1(r3, 0x4020744f, 0x0) bind$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x1, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) readv(r4, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0xf02, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000020c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc2002, 0x80) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.781885215s ago: executing program 2 (id=1904): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 5.75306818s ago: executing program 3 (id=1905): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x313, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a8}, 0x0, 0x8000, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xff, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x3, 0x8, 0x20, 0xff, 0x0, 0x2}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.581824988s ago: executing program 4 (id=1906): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000", @ANYRES64=r0], 0x24}}, 0x4000000) 5.45138677s ago: executing program 4 (id=1907): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000100)={0x3, 0x9}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0xe, @in={0x2, 0x4e20, @loopback}}]}, 0x50}}, 0x4) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 5.400906548s ago: executing program 2 (id=1908): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4c084) 5.354013026s ago: executing program 3 (id=1909): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x100fdfa, 0x6, 0x0, 0x101, &(0x7f0000000040)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fcffe9431ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3422db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada5d91f6458c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88ae7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90605ff8f3a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88fd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e88597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d000000000000000000000000000000000100"}) 4.939452775s ago: executing program 3 (id=1910): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @exit], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x11}, 0x94) 4.000258562s ago: executing program 2 (id=1911): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x508402, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x4000000a, 0x0) 3.852711897s ago: executing program 4 (id=1912): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, r1}, 0x38) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 2.441961563s ago: executing program 4 (id=1913): socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r0], 0x24}}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.914969961s ago: executing program 3 (id=1914): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 1.895853943s ago: executing program 4 (id=1915): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x8044) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4c084) 351.349012ms ago: executing program 2 (id=1916): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000001c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 268.175725ms ago: executing program 3 (id=1917): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff5000009000000000000000000ff003b", 0x29}], 0x1}, 0x0) 44.344523ms ago: executing program 0 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=1919): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0x4002, 0x4, 0x1ff, 0x1105, 0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x5}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4048841}, 0x895) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getqdisc={0x40, 0x26, 0x300, 0x70bd29, 0xab, {0x0, 0x0, 0x0, 0x0, {0xfffe, 0x2}, {0xfff3, 0x1}, {0xf, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c8c1}, 0x4000000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x11) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60181, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000002c0)=0x3) kernel console output (not intermixed with test programs): U of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.594644][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.709939][ T5783] hsr_slave_0: entered promiscuous mode [ 90.716939][ T5783] hsr_slave_1: entered promiscuous mode [ 90.726550][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.734248][ T5783] Cannot create hsr debugfs directory [ 90.764099][ T5769] hsr_slave_0: entered promiscuous mode [ 90.771580][ T5769] hsr_slave_1: entered promiscuous mode [ 90.778017][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.785780][ T5769] Cannot create hsr debugfs directory [ 91.174360][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.188684][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.199771][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.250746][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.310585][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.331188][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.341428][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.355812][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.451759][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.473193][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.491124][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.502280][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.594979][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.610376][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.621245][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.636801][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.735680][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.777853][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.812498][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.850700][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.861742][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.869177][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.898022][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.905200][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.927809][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.935031][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.952904][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.976417][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.983664][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.049740][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.118483][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.125710][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.160729][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.179543][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.229966][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.237191][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.265276][ T9] cfg80211: failed to load regulatory.db [ 92.291990][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.344566][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.352162][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.392733][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.400053][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.573198][ T5777] Bluetooth: hci1: command tx timeout [ 92.573227][ T5785] Bluetooth: hci0: command tx timeout [ 92.578946][ T51] Bluetooth: hci3: command tx timeout [ 92.588353][ T5083] Bluetooth: hci2: command tx timeout [ 92.604945][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.659252][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.724688][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.814837][ T5773] veth0_vlan: entered promiscuous mode [ 92.900231][ T5773] veth1_vlan: entered promiscuous mode [ 92.929707][ T5779] veth0_vlan: entered promiscuous mode [ 92.970121][ T5779] veth1_vlan: entered promiscuous mode [ 93.042051][ T5773] veth0_macvtap: entered promiscuous mode [ 93.070835][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.084786][ T5773] veth1_macvtap: entered promiscuous mode [ 93.129502][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.140436][ T5779] veth0_macvtap: entered promiscuous mode [ 93.164394][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.187283][ T5779] veth1_macvtap: entered promiscuous mode [ 93.213162][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.231698][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.241616][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.250969][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.260388][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.278761][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.291247][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.311336][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.349831][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.360760][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.372684][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.414260][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.424646][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.433991][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.443321][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.498114][ T5783] veth0_vlan: entered promiscuous mode [ 93.522254][ T5783] veth1_vlan: entered promiscuous mode [ 93.551335][ T5769] veth0_vlan: entered promiscuous mode [ 93.602392][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.619224][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.676256][ T5769] veth1_vlan: entered promiscuous mode [ 93.691559][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.708847][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.771494][ T5783] veth0_macvtap: entered promiscuous mode [ 93.818182][ T5783] veth1_macvtap: entered promiscuous mode [ 93.854702][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.862611][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.889082][ T5769] veth0_macvtap: entered promiscuous mode [ 93.915698][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.931669][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.949676][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.961618][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.979813][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.012766][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.034770][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.044949][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.056332][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.067815][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.078291][ T5841] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 94.086402][ T5769] veth1_macvtap: entered promiscuous mode [ 94.110036][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.124375][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.137518][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.148227][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.161175][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.170951][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.215608][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.231998][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.242072][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.258204][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.268995][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.280945][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.293777][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.440008][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.470761][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.480901][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.492338][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.504407][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.515398][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.527690][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.587169][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.609640][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.620642][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.634526][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.653424][ T51] Bluetooth: hci3: command tx timeout [ 94.654482][ T5083] Bluetooth: hci1: command tx timeout [ 94.666211][ T51] Bluetooth: hci2: command tx timeout [ 94.666238][ T5785] Bluetooth: hci0: command tx timeout [ 94.734912][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.764826][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.887767][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.925581][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.074682][ T5853] syz.3.8[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.090876][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.108377][ T5851] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 95.116712][ T5851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 95.125121][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.128089][ T5851] Zero length message leads to an empty skb [ 95.141874][ T5853] loop3: detected capacity change from 0 to 128 [ 95.274310][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.313258][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.326689][ T5853] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 95.379969][ T5853] FAT-fs (loop3): Filesystem has been set read-only [ 95.787880][ T5861] bridge1: entered promiscuous mode [ 95.793258][ T5861] bridge1: entered allmulticast mode [ 96.840775][ T5083] Bluetooth: hci0: command tx timeout [ 96.846438][ T5083] Bluetooth: hci3: command tx timeout [ 96.851934][ T5083] Bluetooth: hci1: command tx timeout [ 96.857589][ T5785] Bluetooth: hci2: command tx timeout [ 97.318020][ T5864] syzkaller1: entered promiscuous mode [ 97.346856][ T5864] syzkaller1: entered allmulticast mode [ 97.387750][ T5868] loop1: detected capacity change from 0 to 128 [ 97.657312][ T5875] loop0: detected capacity change from 0 to 512 [ 97.712668][ T5875] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 97.765672][ T5875] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.782628][ T5875] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.14: Block bitmap for bg 0 marked uninitialized [ 97.832603][ T5875] EXT4-fs (loop0): Remounting filesystem read-only [ 97.844487][ T5875] EXT4-fs (loop0): 1 orphan inode deleted [ 97.892408][ T5875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.422632][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.674491][ T5899] bridge1: entered promiscuous mode [ 98.679861][ T5899] bridge1: entered allmulticast mode [ 99.516905][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 99.555151][ T5903] netlink: 'syz.3.26': attribute type 9 has an invalid length. [ 99.592308][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 99.706253][ T5908] syzkaller1: entered promiscuous mode [ 99.711823][ T5908] syzkaller1: entered allmulticast mode [ 100.348989][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 100.380805][ T5931] netlink: 'syz.0.37': attribute type 9 has an invalid length. [ 100.426814][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 100.549329][ T5937] loop1: detected capacity change from 0 to 256 [ 101.098496][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 101.110143][ T5962] netlink: 'syz.2.50': attribute type 9 has an invalid length. [ 101.122163][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 101.606420][ T5981] loop1: detected capacity change from 0 to 256 [ 101.724083][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 101.784072][ T5987] netlink: 'syz.3.63': attribute type 9 has an invalid length. [ 101.791942][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 103.143410][ T6017] loop0: detected capacity change from 0 to 256 [ 103.440996][ T6022] xt_hashlimit: size too large, truncated to 1048576 [ 103.449790][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 103.489105][ T6024] netlink: 'syz.0.77': attribute type 9 has an invalid length. [ 103.528439][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 106.262012][ T6061] loop3: detected capacity change from 0 to 8192 [ 106.385793][ T6061] loop3: p3 p4 < > [ 106.444486][ T6061] loop3: p3 size 83886080 extends beyond EOD, truncated [ 108.077137][ T6067] bridge2: entered promiscuous mode [ 108.083566][ T6067] bridge2: entered allmulticast mode [ 110.406169][ T6096] bridge1: entered promiscuous mode [ 110.411517][ T6096] bridge1: entered allmulticast mode [ 112.601864][ T6114] netlink: 324 bytes leftover after parsing attributes in process `syz.3.108'. [ 114.317069][ T6142] netlink: 324 bytes leftover after parsing attributes in process `syz.0.119'. [ 116.503590][ T6172] netlink: 324 bytes leftover after parsing attributes in process `syz.1.130'. [ 118.948962][ T6204] ipvlan2: entered allmulticast mode [ 118.958841][ T6204] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 119.042968][ T6208] netlink: 324 bytes leftover after parsing attributes in process `syz.1.143'. [ 121.722098][ T6245] capability: warning: `syz.3.152' uses deprecated v2 capabilities in a way that may be insecure [ 121.741511][ T6247] netlink: 324 bytes leftover after parsing attributes in process `syz.0.155'. [ 121.808893][ T6249] ipvlan2: entered allmulticast mode [ 121.847542][ T6249] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 121.943465][ T6254] loop2: detected capacity change from 0 to 512 [ 122.364730][ T6254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.603044][ T6254] ext4 filesystem being mounted at /33/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.866143][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.002103][ T6283] netlink: 324 bytes leftover after parsing attributes in process `syz.2.165'. [ 125.296057][ T6291] ipvlan2: entered allmulticast mode [ 125.310548][ T6291] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 127.336415][ T6332] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 127.349222][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 128.613842][ T6344] netlink: 324 bytes leftover after parsing attributes in process `syz.1.187'. [ 128.998570][ T6359] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 129.006687][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 130.132056][ T6374] ======================================================= [ 130.132056][ T6374] WARNING: The mand mount option has been deprecated and [ 130.132056][ T6374] and is ignored by this kernel. Remove the mand [ 130.132056][ T6374] option from the mount to silence this warning. [ 130.132056][ T6374] ======================================================= [ 130.397022][ T6380] netlink: 324 bytes leftover after parsing attributes in process `syz.1.198'. [ 130.668737][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.202'. [ 132.168037][ T6418] netlink: 324 bytes leftover after parsing attributes in process `syz.2.209'. [ 133.316012][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.333496][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.982804][ T6450] netlink: 324 bytes leftover after parsing attributes in process `syz.3.221'. [ 134.974625][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'. [ 136.498389][ T6483] netlink: 324 bytes leftover after parsing attributes in process `syz.1.234'. [ 139.001119][ T6513] netlink: 324 bytes leftover after parsing attributes in process `syz.0.246'. [ 141.271344][ T6547] netlink: 324 bytes leftover after parsing attributes in process `syz.2.258'. [ 142.328091][ T6556] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.034448][ T6576] netlink: 324 bytes leftover after parsing attributes in process `syz.2.268'. [ 145.551696][ T6599] netlink: 324 bytes leftover after parsing attributes in process `syz.1.278'. [ 147.192786][ C1] sched: RT throttling activated [ 147.912539][ T6627] netlink: 324 bytes leftover after parsing attributes in process `syz.0.289'. [ 150.638593][ T6641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.293'. [ 152.322963][ T6659] netlink: 324 bytes leftover after parsing attributes in process `syz.0.301'. [ 154.869322][ T6680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 156.265707][ T6692] netlink: 324 bytes leftover after parsing attributes in process `syz.1.312'. [ 157.684953][ T6717] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.140212][ T6783] syzkaller1: entered promiscuous mode [ 165.149604][ T6783] syzkaller1: entered allmulticast mode [ 168.060185][ T6817] syzkaller1: entered promiscuous mode [ 168.087362][ T6817] syzkaller1: entered allmulticast mode [ 170.506179][ T6849] syzkaller1: entered promiscuous mode [ 170.528715][ T6849] syzkaller1: entered allmulticast mode [ 171.433763][ T6875] syzkaller1: entered promiscuous mode [ 171.449656][ T6875] syzkaller1: entered allmulticast mode [ 171.514804][ T6877] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 171.522629][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.376'. [ 171.561022][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.585498][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.592811][ T6877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.302097][ T6901] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.312571][ T6901] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 172.596893][ T6906] syzkaller1: entered promiscuous mode [ 172.602588][ T6906] syzkaller1: entered allmulticast mode [ 173.323558][ T6913] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 173.341652][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.389'. [ 173.362059][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.398623][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.406047][ T6913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.804221][ T6926] netlink: 324 bytes leftover after parsing attributes in process `syz.0.395'. [ 175.814934][ T6950] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 175.847545][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.402'. [ 175.872975][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.880509][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.888657][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.054277][ T6956] syzkaller1: entered promiscuous mode [ 176.059837][ T6956] syzkaller1: entered allmulticast mode [ 178.167117][ T6990] mmap: syz.3.416 (6990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.771902][ T6988] bond0: entered promiscuous mode [ 178.777127][ T6988] bond_slave_0: entered promiscuous mode [ 178.783224][ T6988] bond_slave_1: entered promiscuous mode [ 178.799354][ T6988] batadv0: entered promiscuous mode [ 178.814506][ T6988] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 178.824287][ T6988] bond0: left promiscuous mode [ 178.829139][ T6988] bond_slave_0: left promiscuous mode [ 178.834860][ T6988] bond_slave_1: left promiscuous mode [ 178.842108][ T6988] batadv0: left promiscuous mode [ 184.013253][ T7053] syzkaller1: entered promiscuous mode [ 184.018814][ T7053] syzkaller1: entered allmulticast mode [ 186.385533][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 186.399426][ T7095] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.408107][ T7095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.415849][ T7095] IPv6: NLM_F_CREATE should be set when creating new route [ 186.423252][ T7095] IPv6: NLM_F_CREATE should be set when creating new route [ 186.581432][ T7100] syzkaller1: entered promiscuous mode [ 186.589715][ T7100] syzkaller1: entered allmulticast mode [ 189.532325][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'. [ 189.542346][ T7137] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.550846][ T7137] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.558388][ T7137] IPv6: NLM_F_CREATE should be set when creating new route [ 189.565723][ T7137] IPv6: NLM_F_CREATE should be set when creating new route [ 189.826075][ T7143] syzkaller1: entered promiscuous mode [ 189.831731][ T7143] syzkaller1: entered allmulticast mode [ 190.222963][ T7151] bond0: entered promiscuous mode [ 190.228371][ T7151] bond_slave_0: entered promiscuous mode [ 190.235484][ T7151] bond_slave_1: entered promiscuous mode [ 190.255391][ T7151] batadv0: entered promiscuous mode [ 190.273000][ T7151] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 190.290223][ T7151] bond0: left promiscuous mode [ 190.295868][ T7151] bond_slave_0: left promiscuous mode [ 190.302522][ T7151] bond_slave_1: left promiscuous mode [ 190.316642][ T7151] batadv0: left promiscuous mode [ 193.025278][ T7177] syzkaller1: entered promiscuous mode [ 193.031134][ T7177] syzkaller1: entered allmulticast mode [ 194.784642][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.792846][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.826865][ T7217] syzkaller1: entered promiscuous mode [ 195.832438][ T7217] syzkaller1: entered allmulticast mode [ 199.182671][ T7262] syzkaller1: entered promiscuous mode [ 199.189046][ T7262] syzkaller1: entered allmulticast mode [ 199.198129][ T7271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.505'. [ 199.614054][ T7280] loop0: detected capacity change from 0 to 8192 [ 201.167933][ T7290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 201.214898][ T7290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.222352][ T7290] IPv6: NLM_F_CREATE should be set when creating new route [ 201.229766][ T7290] IPv6: NLM_F_CREATE should be set when creating new route [ 203.532496][ T7306] netlink: 32 bytes leftover after parsing attributes in process `syz.1.515'. [ 204.359542][ T7329] bridge1: entered promiscuous mode [ 204.364926][ T7329] bridge1: entered allmulticast mode [ 206.027673][ T7341] loop3: detected capacity change from 0 to 2048 [ 206.229428][ T7345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.527'. [ 206.727091][ T7341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.974895][ T7341] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 207.045037][ T7341] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 207.078463][ T7341] EXT4-fs (loop3): This should not happen!! Data will be lost [ 207.078463][ T7341] [ 207.094108][ T7341] EXT4-fs (loop3): Total free blocks count 0 [ 207.100434][ T7341] EXT4-fs (loop3): Free/Dirty block details [ 207.112966][ T7341] EXT4-fs (loop3): free_blocks=66060288 [ 207.123093][ T7341] EXT4-fs (loop3): dirty_blocks=32 [ 207.140958][ T7341] EXT4-fs (loop3): Block reservation details [ 207.155255][ T7341] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 207.170172][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.537'. [ 207.352517][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.213279][ T7367] syzkaller1: entered promiscuous mode [ 208.218847][ T7367] syzkaller1: entered allmulticast mode [ 209.811719][ T7392] loop1: detected capacity change from 0 to 8192 [ 210.042225][ T7396] bridge2: entered promiscuous mode [ 210.047622][ T7396] bridge2: entered allmulticast mode [ 211.973671][ T7408] syzkaller1: entered promiscuous mode [ 211.998594][ T7408] syzkaller1: entered allmulticast mode [ 212.340890][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 212.351640][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 212.357853][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 212.364044][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 213.914266][ T7437] loop2: detected capacity change from 0 to 512 [ 214.049180][ T7437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.075095][ T7437] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.854139][ T7437] EXT4-fs (loop2): shut down requested (0) [ 214.948328][ T7447] EXT4-fs (loop2): shut down requested (0) [ 214.955157][ T7446] loop1: detected capacity change from 0 to 256 [ 214.974527][ T7446] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.057673][ T7449] syzkaller1: entered promiscuous mode [ 215.074720][ T7449] syzkaller1: entered allmulticast mode [ 215.222328][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.459068][ T7455] loop1: detected capacity change from 0 to 8192 [ 217.092568][ T7481] syzkaller1: entered promiscuous mode [ 217.111380][ T7481] syzkaller1: entered allmulticast mode [ 217.304148][ T7488] loop1: detected capacity change from 0 to 512 [ 217.372407][ T7488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.429981][ T7488] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.494088][ T7488] EXT4-fs (loop1): shut down requested (0) [ 217.546520][ T7495] EXT4-fs (loop1): shut down requested (0) [ 217.572467][ T7490] loop3: detected capacity change from 0 to 8192 [ 218.128481][ T7503] bridge2: entered promiscuous mode [ 218.133858][ T7503] bridge2: entered allmulticast mode [ 218.758892][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.433934][ T7517] bridge2: entered promiscuous mode [ 219.439239][ T7517] bridge2: entered allmulticast mode [ 220.766636][ T7521] syzkaller1: entered promiscuous mode [ 221.002957][ T7521] syzkaller1: entered allmulticast mode [ 221.721731][ T7538] bridge3: entered promiscuous mode [ 221.727126][ T7538] bridge3: entered allmulticast mode [ 222.332004][ T7532] loop3: detected capacity change from 0 to 8192 [ 223.137560][ T7555] bridge3: entered promiscuous mode [ 223.142970][ T7555] bridge3: entered allmulticast mode [ 224.208375][ T7562] syzkaller1: entered promiscuous mode [ 224.255052][ T7562] syzkaller1: entered allmulticast mode [ 226.687114][ T7593] bridge3: entered promiscuous mode [ 226.692495][ T7593] bridge3: entered allmulticast mode [ 227.273691][ T7596] syzkaller1: entered promiscuous mode [ 227.296543][ T7596] syzkaller1: entered allmulticast mode [ 229.082653][ T7624] loop2: detected capacity change from 0 to 512 [ 229.101996][ T7624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.153108][ T7624] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 229.212544][ T7624] EXT4-fs (loop2): orphan cleanup on readonly fs [ 229.283450][ T7629] syzkaller1: entered promiscuous mode [ 229.289052][ T7629] syzkaller1: entered allmulticast mode [ 229.295251][ T7624] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 229.381909][ T7624] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 229.391981][ T7624] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #13: comm syz.2.626: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 229.466786][ T7624] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.626: couldn't read orphan inode 13 (err -117) [ 229.504271][ T7624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.859254][ T7636] loop0: detected capacity change from 0 to 512 [ 229.928467][ T7636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.974867][ T7636] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.116848][ T7636] EXT4-fs (loop0): shut down requested (0) [ 230.265181][ T7624] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.626: inode #15: comm syz.2.626: iget: illegal inode # [ 230.542463][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.668809][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.972273][ T7662] syzkaller1: entered promiscuous mode [ 232.006091][ T7662] syzkaller1: entered allmulticast mode [ 233.126171][ T7675] bridge4: entered promiscuous mode [ 233.131460][ T7675] bridge4: entered allmulticast mode [ 233.207272][ T7677] loop1: detected capacity change from 0 to 128 [ 233.219607][ T7677] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.250049][ T7677] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.532350][ T7680] loop1: detected capacity change from 0 to 512 [ 233.628122][ T7680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.682958][ T7680] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.801242][ T7680] EXT4-fs (loop1): shut down requested (0) [ 233.943680][ T7692] syzkaller1: entered promiscuous mode [ 233.949248][ T7692] syzkaller1: entered allmulticast mode [ 234.686732][ T7689] bond0: entered promiscuous mode [ 234.691892][ T7689] bond_slave_0: entered promiscuous mode [ 234.698098][ T7689] bond_slave_1: entered promiscuous mode [ 234.706195][ T7689] batadv0: entered promiscuous mode [ 234.715019][ T7689] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 234.723428][ T7689] bond0: left promiscuous mode [ 234.728266][ T7689] bond_slave_0: left promiscuous mode [ 234.734202][ T7689] bond_slave_1: left promiscuous mode [ 234.740735][ T7689] batadv0: left promiscuous mode [ 234.799787][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.121121][ T7709] bridge4: entered promiscuous mode [ 236.126505][ T7709] bridge4: entered allmulticast mode [ 236.930419][ T7721] loop2: detected capacity change from 0 to 512 [ 236.977480][ T7721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.004266][ T7721] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.047692][ T7721] EXT4-fs (loop2): shut down requested (0) [ 237.100366][ T7729] EXT4-fs (loop2): shut down requested (0) [ 237.495077][ T7735] syzkaller1: entered promiscuous mode [ 237.500768][ T7735] syzkaller1: entered allmulticast mode [ 237.742066][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.774600][ T7748] bridge3: entered promiscuous mode [ 238.779988][ T7748] bridge3: entered allmulticast mode [ 239.265399][ T7751] loop2: detected capacity change from 0 to 512 [ 239.364713][ T7751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.472059][ T7751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 239.515716][ T7751] EXT4-fs (loop2): orphan cleanup on readonly fs [ 239.538651][ T7751] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 239.560496][ T7751] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 239.581139][ T7751] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #13: comm syz.2.665: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 239.670670][ T7758] bridge5: entered promiscuous mode [ 239.676265][ T7758] bridge5: entered allmulticast mode [ 240.041485][ T7751] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.665: couldn't read orphan inode 13 (err -117) [ 240.219627][ T7751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.869057][ T7751] EXT4-fs error (device loop2): ext4_lookup:1858: comm syz.2.665: inode #15: comm syz.2.665: iget: illegal inode # [ 240.894178][ T7770] syzkaller1: entered promiscuous mode [ 240.901113][ T7770] syzkaller1: entered allmulticast mode [ 241.257512][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.622692][ T7786] loop3: detected capacity change from 0 to 512 [ 242.402250][ T7786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.873063][ T7786] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.942461][ T7795] bridge6: entered promiscuous mode [ 242.948861][ T7795] bridge6: entered allmulticast mode [ 243.024605][ T7798] EXT4-fs (loop3): shut down requested (0) [ 243.377962][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.415507][ T7808] syzkaller1: entered promiscuous mode [ 243.426051][ T7808] syzkaller1: entered allmulticast mode [ 243.500815][ T7811] loop3: detected capacity change from 0 to 512 [ 243.513401][ T7811] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.562949][ T7811] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 243.588277][ T7811] EXT4-fs (loop3): orphan cleanup on readonly fs [ 243.639876][ T7811] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 243.715842][ T7811] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 243.727175][ T7811] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #13: comm syz.3.685: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 243.747862][ T7811] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.685: couldn't read orphan inode 13 (err -117) [ 243.788563][ T7811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.164012][ T7811] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.685: inode #15: comm syz.3.685: iget: illegal inode # [ 245.576734][ T7838] loop0: detected capacity change from 0 to 512 [ 245.599281][ T7836] bond0: entered promiscuous mode [ 245.604568][ T7836] bond_slave_0: entered promiscuous mode [ 245.611223][ T7836] bond_slave_1: entered promiscuous mode [ 245.625813][ T7836] batadv0: entered promiscuous mode [ 245.635748][ T7836] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 245.651630][ T7836] bond0: left promiscuous mode [ 245.656608][ T7836] bond_slave_0: left promiscuous mode [ 245.662295][ T7836] bond_slave_1: left promiscuous mode [ 245.668936][ T7836] batadv0: left promiscuous mode [ 245.714816][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.731177][ T7838] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 245.777894][ T7838] System zones: 1-12 [ 245.837905][ T7838] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.694: corrupted in-inode xattr: e_value size too large [ 245.865944][ T7838] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.694: couldn't read orphan inode 15 (err -117) [ 245.912035][ T7838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.930645][ T7845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.696'. [ 246.033425][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.436850][ T7874] loop2: detected capacity change from 0 to 512 [ 248.449357][ T7874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.459025][ T7874] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 248.479036][ T7874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 248.486965][ T7874] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 248.509304][ T7874] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 248.526701][ T7874] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #13: comm syz.2.705: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 248.603923][ T7874] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.705: couldn't read orphan inode 13 (err -117) [ 248.665825][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 248.831994][ T7884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.708'. [ 253.262134][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.871926][ T7937] loop0: detected capacity change from 0 to 512 [ 255.916129][ T7937] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.951074][ T7937] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 255.988782][ T7937] EXT4-fs (loop0): orphan cleanup on readonly fs [ 256.028978][ T7935] loop3: detected capacity change from 0 to 8192 [ 256.063208][ T7937] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 256.119294][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.127285][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.140613][ T7937] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 256.167801][ T7937] EXT4-fs error (device loop0): ext4_ext_check_inode:530: inode #13: comm syz.0.726: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 256.211475][ T7937] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.726: couldn't read orphan inode 13 (err -117) [ 256.251251][ T7937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.693056][ T7937] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.726: inode #15: comm syz.0.726: iget: illegal inode # [ 259.958523][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.134251][ T7983] bridge4: entered promiscuous mode [ 261.139601][ T7983] bridge4: entered allmulticast mode [ 265.015405][ T8012] netlink: 324 bytes leftover after parsing attributes in process `syz.3.749'. [ 266.755524][ T8036] bridge7: entered promiscuous mode [ 266.760912][ T8036] bridge7: entered allmulticast mode [ 268.216607][ T8043] loop3: detected capacity change from 0 to 128 [ 268.882347][ T8045] loop1: detected capacity change from 0 to 512 [ 268.942364][ T8045] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.061293][ T8045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.151550][ T8045] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.840219][ T8063] bridge4: entered promiscuous mode [ 271.845564][ T8063] bridge4: entered allmulticast mode [ 272.164558][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.831934][ T8104] loop3: detected capacity change from 0 to 8192 [ 285.067939][ T8133] loop1: detected capacity change from 0 to 128 [ 290.366395][ T8144] loop3: detected capacity change from 0 to 128 [ 291.887921][ T8150] loop1: detected capacity change from 0 to 8192 [ 298.687323][ T8177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.797'. [ 299.279392][ T8189] loop1: detected capacity change from 0 to 128 [ 301.597789][ T8183] loop0: detected capacity change from 0 to 8192 [ 302.048612][ T8198] bond0: entered promiscuous mode [ 302.053859][ T8198] bond_slave_0: entered promiscuous mode [ 302.059845][ T8198] bond_slave_1: entered promiscuous mode [ 302.067177][ T8198] batadv0: entered promiscuous mode [ 302.074142][ T8198] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 302.082515][ T8198] bond0: left promiscuous mode [ 302.087486][ T8198] bond_slave_0: left promiscuous mode [ 302.093460][ T8198] bond_slave_1: left promiscuous mode [ 302.100070][ T8198] batadv0: left promiscuous mode [ 308.012133][ T8210] netlink: 32 bytes leftover after parsing attributes in process `syz.3.808'. [ 308.634777][ T8219] loop3: detected capacity change from 0 to 8192 [ 310.767968][ T8234] bond0: entered promiscuous mode [ 310.773729][ T8234] bond_slave_0: entered promiscuous mode [ 310.779651][ T8234] bond_slave_1: entered promiscuous mode [ 310.786998][ T8234] batadv0: entered promiscuous mode [ 310.794613][ T8234] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 310.804089][ T8234] bond0: left promiscuous mode [ 310.809038][ T8234] bond_slave_0: left promiscuous mode [ 310.815036][ T8234] bond_slave_1: left promiscuous mode [ 310.854611][ T8234] batadv0: left promiscuous mode [ 313.770672][ T8251] bridge8: entered promiscuous mode [ 313.776169][ T8251] bridge8: entered allmulticast mode [ 318.254453][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.260866][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.138943][ T8291] loop2: detected capacity change from 0 to 128 [ 323.610672][ T8296] bridge5: entered promiscuous mode [ 323.616072][ T8296] bridge5: entered allmulticast mode [ 326.259332][ T8312] loop1: detected capacity change from 0 to 128 [ 332.621719][ T8319] bond0: entered promiscuous mode [ 332.628713][ T8319] bond_slave_0: entered promiscuous mode [ 332.634932][ T8319] bond_slave_1: entered promiscuous mode [ 332.644512][ T8319] batadv0: entered promiscuous mode [ 332.661345][ T8319] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 332.682903][ T8319] bond0: left promiscuous mode [ 332.687776][ T8319] bond_slave_0: left promiscuous mode [ 332.694065][ T8319] bond_slave_1: left promiscuous mode [ 332.721714][ T8319] batadv0: left promiscuous mode [ 333.160978][ T8330] loop3: detected capacity change from 0 to 128 [ 338.457226][ T8337] bridge5: entered promiscuous mode [ 338.462519][ T8337] bridge5: entered allmulticast mode [ 339.816274][ T8356] loop3: detected capacity change from 0 to 128 [ 343.354370][ T8360] loop0: detected capacity change from 0 to 8192 [ 350.934540][ T8384] bridge6: entered promiscuous mode [ 350.939852][ T8384] bridge6: entered allmulticast mode [ 350.946059][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.860'. [ 352.240060][ T8399] loop0: detected capacity change from 0 to 8192 [ 352.493194][ T8401] loop1: detected capacity change from 0 to 128 [ 354.188064][ T8410] loop2: detected capacity change from 0 to 512 [ 354.457511][ T8410] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.532987][ T8410] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.587501][ T8410] EXT4-fs (loop2): shut down requested (0) [ 354.838920][ T8423] loop3: detected capacity change from 0 to 128 [ 358.432939][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.190794][ T8430] bridge9: entered promiscuous mode [ 359.196215][ T8430] bridge9: entered allmulticast mode [ 360.011252][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.876'. [ 360.563669][ T8452] loop3: detected capacity change from 0 to 128 [ 365.325609][ T8459] loop1: detected capacity change from 0 to 128 [ 369.701608][ T8470] loop0: detected capacity change from 0 to 512 [ 369.936870][ T8470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.006877][ T8470] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.293413][ T8470] EXT4-fs (loop0): shut down requested (0) [ 371.200673][ T8478] bridge10: entered promiscuous mode [ 371.206144][ T8478] bridge10: entered allmulticast mode [ 371.844561][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.922640][ T8486] loop1: detected capacity change from 0 to 512 [ 371.999994][ T8486] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 372.013402][ T8486] System zones: 1-12 [ 372.021640][ T8486] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.886: corrupted in-inode xattr: e_value size too large [ 372.074293][ T8486] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.886: couldn't read orphan inode 15 (err -117) [ 372.219753][ T8486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.393834][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.500530][ T8494] bond0: entered promiscuous mode [ 372.505909][ T8494] bond_slave_0: entered promiscuous mode [ 372.512037][ T8494] bond_slave_1: entered promiscuous mode [ 372.527401][ T8494] batadv0: entered promiscuous mode [ 372.535154][ T8494] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 372.544103][ T8494] bond0: left promiscuous mode [ 372.548951][ T8494] bond_slave_0: left promiscuous mode [ 372.554760][ T8494] bond_slave_1: left promiscuous mode [ 372.561448][ T8494] batadv0: left promiscuous mode [ 373.426752][ T8505] loop0: detected capacity change from 0 to 128 [ 377.440586][ T8523] bridge5: entered promiscuous mode [ 377.445984][ T8523] bridge5: entered allmulticast mode [ 378.994948][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.001543][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.878728][ T8557] loop2: detected capacity change from 0 to 128 [ 386.904237][ T8563] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 388.109648][ T8565] bond1: (slave bridge11): making interface the new active one [ 388.142493][ T8565] bond1: (slave bridge11): Enslaving as an active interface with an up link [ 388.171436][ T8573] bridge6: entered promiscuous mode [ 388.177049][ T8573] bridge6: entered allmulticast mode [ 388.382333][ T8563] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 388.428954][ T8584] loop3: detected capacity change from 0 to 512 [ 388.461374][ T8584] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.483509][ T8563] macvlan2: entered promiscuous mode [ 388.489411][ T8563] macvlan2: entered allmulticast mode [ 388.501089][ T8563] bond1: entered promiscuous mode [ 388.506764][ T8563] bridge11: entered promiscuous mode [ 388.520230][ T8584] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 388.520243][ T8563] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.539192][ T8563] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 388.558825][ T8584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 388.569208][ T8563] bond1: left promiscuous mode [ 388.576741][ T8563] bridge11: left promiscuous mode [ 388.596525][ T8584] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 388.640417][ T8584] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 388.667514][ T8584] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #13: comm syz.3.912: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 388.711270][ T8584] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.912: couldn't read orphan inode 13 (err -117) [ 388.741664][ T8584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 388.818639][ T8584] EXT4-fs error (device loop3): ext4_lookup:1858: comm syz.3.912: inode #15: comm syz.3.912: iget: illegal inode # [ 388.935721][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.229889][ T8611] netlink: 56 bytes leftover after parsing attributes in process `syz.0.920'. [ 391.303074][ T8633] bond0: entered promiscuous mode [ 391.308207][ T8633] bond_slave_0: entered promiscuous mode [ 391.314228][ T8633] bond_slave_1: entered promiscuous mode [ 391.325873][ T8633] batadv0: entered promiscuous mode [ 391.332916][ T8633] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 391.341018][ T8633] bond0: left promiscuous mode [ 391.346016][ T8633] bond_slave_0: left promiscuous mode [ 391.351605][ T8633] bond_slave_1: left promiscuous mode [ 391.363744][ T8633] batadv0: left promiscuous mode [ 391.794731][ T8636] loop2: detected capacity change from 0 to 512 [ 391.806469][ T8636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 391.847520][ T8636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.997991][ T8636] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.121772][ T8641] netlink: 56 bytes leftover after parsing attributes in process `syz.3.930'. [ 392.264025][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.747676][ T8654] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 392.961782][ T8658] bond1: (slave bridge7): making interface the new active one [ 392.986478][ T8658] bond1: (slave bridge7): Enslaving as an active interface with an up link [ 394.274416][ T8654] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 394.294578][ T8672] loop2: detected capacity change from 0 to 512 [ 394.347047][ T8672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.364506][ T8672] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.437968][ T8658] macvlan2: entered promiscuous mode [ 394.491575][ T8658] macvlan2: entered allmulticast mode [ 394.536135][ T8672] EXT4-fs (loop2): shut down requested (0) [ 394.553302][ T8658] bond1: entered promiscuous mode [ 394.558419][ T8658] bridge7: entered promiscuous mode [ 394.593970][ T8658] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.605858][ T8658] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 394.665172][ T8658] bond1: left promiscuous mode [ 394.670040][ T8658] bridge7: left promiscuous mode [ 394.779060][ T8679] netlink: 48 bytes leftover after parsing attributes in process `syz.1.940'. [ 395.390821][ T8687] bridge8: entered promiscuous mode [ 395.396202][ T8687] bridge8: entered allmulticast mode [ 395.881523][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.100669][ T8689] bond0: entered promiscuous mode [ 396.105955][ T8689] bond_slave_0: entered promiscuous mode [ 396.111930][ T8689] bond_slave_1: entered promiscuous mode [ 396.119204][ T8689] batadv0: entered promiscuous mode [ 396.129997][ T8689] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 396.138891][ T8689] bond0: left promiscuous mode [ 396.143816][ T8689] bond_slave_0: left promiscuous mode [ 396.149630][ T8689] bond_slave_1: left promiscuous mode [ 396.156235][ T8689] batadv0: left promiscuous mode [ 397.052436][ T8706] loop3: detected capacity change from 0 to 1024 [ 397.061609][ T8706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.090462][ T8706] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 397.149862][ T8706] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 397.190060][ T8706] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 399.822228][ T8716] loop1: detected capacity change from 0 to 512 [ 399.966238][ T8716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.992118][ T8716] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.128176][ T8716] EXT4-fs (loop1): shut down requested (0) [ 400.368500][ T8727] bridge7: entered promiscuous mode [ 400.374068][ T8727] bridge7: entered allmulticast mode [ 400.975090][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.965993][ T8755] loop2: detected capacity change from 0 to 512 [ 404.094517][ T8755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.108556][ T8759] loop1: detected capacity change from 0 to 512 [ 404.125348][ T8755] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.147560][ T8759] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.264387][ T8759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.306063][ T8755] EXT4-fs (loop2): shut down requested (0) [ 404.353687][ T8759] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.496754][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.767242][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.805337][ T8772] loop1: detected capacity change from 0 to 1024 [ 404.894415][ T8772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.132119][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.371150][ T8793] loop3: detected capacity change from 0 to 512 [ 408.425673][ T8793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 408.546508][ T8793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.631405][ T8793] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.031795][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.358864][ T8807] loop0: detected capacity change from 0 to 512 [ 410.020061][ T8807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.117693][ T8807] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.296708][ T8807] EXT4-fs (loop0): shut down requested (0) [ 410.574213][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.299650][ T8843] loop0: detected capacity change from 0 to 512 [ 413.360384][ T8843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 413.504033][ T8843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.809744][ T8843] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 415.873298][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.648149][ T8870] loop0: detected capacity change from 0 to 128 [ 417.744198][ T8868] loop2: detected capacity change from 0 to 8192 [ 420.338371][ T8887] loop3: detected capacity change from 0 to 512 [ 420.381216][ T8891] bridge8: entered promiscuous mode [ 420.386694][ T8891] bridge8: entered allmulticast mode [ 421.115236][ T8887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 421.397080][ T8887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.456507][ T8887] ext4 filesystem being mounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 421.670462][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.347153][ T8910] loop1: detected capacity change from 0 to 8192 [ 424.571133][ T8929] bridge12: entered promiscuous mode [ 424.576608][ T8929] bridge12: entered allmulticast mode [ 425.467170][ T8933] loop3: detected capacity change from 0 to 512 [ 425.622788][ T8933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.776071][ T8933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.850209][ T8933] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 426.953059][ T27] audit: type=1800 audit(1775962029.943:2): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1013" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 427.098347][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.173092][ T8952] loop2: detected capacity change from 0 to 8192 [ 435.362908][ T8980] bridge9: entered promiscuous mode [ 436.173473][ T8980] bridge9: entered allmulticast mode [ 436.242700][ T8983] bridge13: entered promiscuous mode [ 436.248130][ T8983] bridge13: entered allmulticast mode [ 436.576588][ T8989] bridge6: entered promiscuous mode [ 436.583094][ T8989] bridge6: entered allmulticast mode [ 440.983914][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.990815][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.044823][ T9026] loop2: detected capacity change from 0 to 1024 [ 443.119968][ T9026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.193284][ T9019] loop0: detected capacity change from 0 to 8192 [ 443.817329][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.864327][ T9061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1045'. [ 453.908281][ T9099] loop1: detected capacity change from 0 to 8192 [ 454.544220][ T9105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1057'. [ 460.528985][ T9137] loop0: detected capacity change from 0 to 8192 [ 460.635327][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1067'. [ 461.863205][ T9151] loop1: detected capacity change from 0 to 128 [ 467.561163][ T9190] netlink: 'syz.3.1078': attribute type 5 has an invalid length. [ 467.594987][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 468.156921][ T9194] bridge14: entered promiscuous mode [ 468.162315][ T9194] bridge14: entered allmulticast mode [ 469.650253][ T9203] bond0: entered promiscuous mode [ 469.657251][ T9203] bond_slave_0: entered promiscuous mode [ 469.663262][ T9203] bond_slave_1: entered promiscuous mode [ 469.671669][ T9203] batadv0: entered promiscuous mode [ 469.678631][ T9203] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 469.687333][ T9203] bond0: left promiscuous mode [ 469.692167][ T9203] bond_slave_0: left promiscuous mode [ 469.697969][ T9203] bond_slave_1: left promiscuous mode [ 469.705000][ T9203] batadv0: left promiscuous mode [ 470.798197][ T9210] loop2: detected capacity change from 0 to 8192 [ 476.178832][ T9237] netlink: 'syz.1.1089': attribute type 5 has an invalid length. [ 476.210695][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 477.689334][ T9244] bond0: entered promiscuous mode [ 477.694581][ T9244] bond_slave_0: entered promiscuous mode [ 477.700488][ T9244] bond_slave_1: entered promiscuous mode [ 477.708327][ T9244] batadv0: entered promiscuous mode [ 477.715559][ T9244] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 477.724095][ T9244] bond0: left promiscuous mode [ 477.728932][ T9244] bond_slave_0: left promiscuous mode [ 477.734766][ T9244] bond_slave_1: left promiscuous mode [ 477.742180][ T9244] batadv0: left promiscuous mode [ 484.292528][ T9274] netlink: 'syz.1.1098': attribute type 5 has an invalid length. [ 484.328735][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 484.570165][ T9273] loop0: detected capacity change from 0 to 8192 [ 485.152344][ T9278] bridge15: entered promiscuous mode [ 485.157804][ T9278] bridge15: entered allmulticast mode [ 486.796473][ T9286] loop3: detected capacity change from 0 to 128 [ 489.428348][ T9289] bond0: entered promiscuous mode [ 489.433601][ T9289] bond_slave_0: entered promiscuous mode [ 489.439478][ T9289] bond_slave_1: entered promiscuous mode [ 489.474516][ T9289] batadv0: entered promiscuous mode [ 489.492966][ T9289] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 489.504169][ T9289] bond0: left promiscuous mode [ 489.509040][ T9289] bond_slave_0: left promiscuous mode [ 489.514853][ T9289] bond_slave_1: left promiscuous mode [ 489.539268][ T9289] batadv0: left promiscuous mode [ 496.015534][ T9326] loop2: detected capacity change from 0 to 128 [ 497.567567][ T9333] bond0: entered promiscuous mode [ 497.572875][ T9333] bond_slave_0: entered promiscuous mode [ 497.578759][ T9333] bond_slave_1: entered promiscuous mode [ 497.604575][ T9333] batadv0: entered promiscuous mode [ 497.613740][ T9333] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 497.622168][ T9333] bond0: left promiscuous mode [ 497.627335][ T9333] bond_slave_0: left promiscuous mode [ 497.633077][ T9333] bond_slave_1: left promiscuous mode [ 497.639691][ T9333] batadv0: left promiscuous mode [ 498.050909][ T9330] loop0: detected capacity change from 0 to 8192 [ 501.943535][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.960155][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.045424][ T9370] bridge16: entered promiscuous mode [ 503.081084][ T9370] bridge16: entered allmulticast mode [ 504.327339][ T9375] bond0: entered promiscuous mode [ 504.332597][ T9375] bond_slave_0: entered promiscuous mode [ 504.339691][ T9375] bond_slave_1: entered promiscuous mode [ 504.388679][ T9375] batadv0: entered promiscuous mode [ 504.404280][ T9375] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 504.422239][ T9375] bond0: left promiscuous mode [ 504.427496][ T9375] bond_slave_0: left promiscuous mode [ 504.434179][ T9375] bond_slave_1: left promiscuous mode [ 504.444274][ T9375] batadv0: left promiscuous mode [ 505.138958][ T9387] loop2: detected capacity change from 0 to 128 [ 507.752721][ T9401] loop0: detected capacity change from 0 to 8192 [ 511.190832][ T9424] bond0: entered promiscuous mode [ 511.195991][ T9424] bond_slave_0: entered promiscuous mode [ 511.201895][ T9424] bond_slave_1: entered promiscuous mode [ 511.209691][ T9424] batadv0: entered promiscuous mode [ 511.216632][ T9424] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 511.224856][ T9424] bond0: left promiscuous mode [ 511.229674][ T9424] bond_slave_0: left promiscuous mode [ 511.236059][ T9424] bond_slave_1: left promiscuous mode [ 511.244111][ T9424] batadv0: left promiscuous mode [ 511.770680][ T9433] loop3: detected capacity change from 0 to 128 [ 514.834829][ T9445] loop0: detected capacity change from 0 to 8192 [ 524.169399][ T9488] loop2: detected capacity change from 0 to 128 [ 524.459383][ T9486] bond0: entered promiscuous mode [ 524.464632][ T9486] bond_slave_0: entered promiscuous mode [ 524.520293][ T9486] bond_slave_1: entered promiscuous mode [ 525.011131][ T9486] batadv0: entered promiscuous mode [ 525.033594][ T9486] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 525.057692][ T9486] bond0: left promiscuous mode [ 525.062659][ T9486] bond_slave_0: left promiscuous mode [ 525.068300][ T9486] bond_slave_1: left promiscuous mode [ 525.117860][ T9486] batadv0: left promiscuous mode [ 526.111576][ T9493] loop3: detected capacity change from 0 to 8192 [ 527.499609][ T9510] bridge9: entered promiscuous mode [ 527.843029][ T9510] bridge9: entered allmulticast mode [ 531.532724][ T9530] bond0: entered promiscuous mode [ 531.537998][ T9530] bond_slave_0: entered promiscuous mode [ 531.544975][ T9530] bond_slave_1: entered promiscuous mode [ 531.580817][ T9530] batadv0: entered promiscuous mode [ 531.594921][ T9530] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 531.613510][ T9530] bond0: left promiscuous mode [ 531.618598][ T9530] bond_slave_0: left promiscuous mode [ 531.625338][ T9530] bond_slave_1: left promiscuous mode [ 531.638858][ T9530] batadv0: left promiscuous mode [ 532.577783][ T9535] loop2: detected capacity change from 0 to 128 [ 533.431520][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 533.441360][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 533.450120][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 533.459717][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 533.467889][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 533.475877][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.773900][ T9539] chnl_net:caif_netlink_parms(): no params data found [ 535.532821][ T5777] Bluetooth: hci4: command tx timeout [ 536.261692][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.345080][ T9569] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1170'. [ 536.357504][ T9539] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.367770][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.378978][ T9539] bridge_slave_0: entered allmulticast mode [ 536.389938][ T9539] bridge_slave_0: entered promiscuous mode [ 536.435569][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.487640][ T9539] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.509038][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.526141][ T9539] bridge_slave_1: entered allmulticast mode [ 536.545085][ T9539] bridge_slave_1: entered promiscuous mode [ 536.616595][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.751620][ T9572] loop0: detected capacity change from 0 to 8192 [ 537.153222][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.297538][ T9576] bond0: entered promiscuous mode [ 537.302866][ T9576] bond_slave_0: entered promiscuous mode [ 537.309685][ T9576] bond_slave_1: entered promiscuous mode [ 537.323586][ T9576] batadv0: entered promiscuous mode [ 537.336560][ T9576] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 537.352103][ T9576] bond0: left promiscuous mode [ 537.357135][ T9576] bond_slave_0: left promiscuous mode [ 537.363849][ T9576] bond_slave_1: left promiscuous mode [ 537.375052][ T9576] batadv0: left promiscuous mode [ 537.624847][ T5777] Bluetooth: hci4: command tx timeout [ 537.749508][ T9539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.847834][ T9539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.159928][ T9539] team0: Port device team_slave_0 added [ 538.663330][ T9584] bridge7: entered promiscuous mode [ 538.668735][ T9584] bridge7: entered allmulticast mode [ 538.825596][ T9539] team0: Port device team_slave_1 added [ 538.995005][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.041965][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.076913][ T9539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.119869][ T9539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.156899][ T9539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.227642][ T9539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.443209][ T9539] hsr_slave_0: entered promiscuous mode [ 539.488859][ T9539] hsr_slave_1: entered promiscuous mode [ 539.499777][ T9539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.507715][ T9539] Cannot create hsr debugfs directory [ 539.850063][ T5777] Bluetooth: hci4: command tx timeout [ 539.869530][ T9597] loop0: detected capacity change from 0 to 128 [ 542.355232][ T9610] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1179'. [ 542.696944][ T9618] loop3: detected capacity change from 0 to 8192 [ 542.703544][ T9539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 542.804428][ T9539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 542.817004][ T5777] Bluetooth: hci4: command tx timeout [ 542.932793][ T9539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 543.073704][ T11] bond1: (slave gretap1): Releasing active interface [ 543.125951][ T9539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 543.786840][ T9640] bond0: entered promiscuous mode [ 543.792068][ T9640] bond_slave_0: entered promiscuous mode [ 543.799828][ T9640] bond_slave_1: entered promiscuous mode [ 543.825172][ T9640] batadv0: entered promiscuous mode [ 543.845109][ T9640] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 543.861003][ T9640] bond0: left promiscuous mode [ 543.866092][ T9640] bond_slave_0: left promiscuous mode [ 543.872847][ T9640] bond_slave_1: left promiscuous mode [ 543.886790][ T9640] batadv0: left promiscuous mode [ 544.559509][ T9539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.660778][ T9539] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.727153][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.734436][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.084941][ T9644] loop3: detected capacity change from 0 to 128 [ 546.752575][ T11] hsr_slave_0: left promiscuous mode [ 546.788685][ T11] hsr_slave_1: left promiscuous mode [ 546.892990][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.941292][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.005623][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.042257][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.076899][ T11] bridge_slave_1: left allmulticast mode [ 547.118445][ T11] bridge_slave_1: left promiscuous mode [ 547.130179][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.221911][ T11] bridge_slave_0: left allmulticast mode [ 547.241270][ T11] bridge_slave_0: left promiscuous mode [ 547.279109][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.503338][ T11] veth1_macvtap: left promiscuous mode [ 547.529191][ T11] veth0_macvtap: left promiscuous mode [ 547.563128][ T11] veth1_vlan: left promiscuous mode [ 547.589939][ T11] veth0_vlan: left promiscuous mode [ 548.324982][ T11] bond1 (unregistering): (slave bridge11): Releasing active interface [ 548.383683][ T11] bond1 (unregistering): Released all slaves [ 548.895208][ T9678] loop0: detected capacity change from 0 to 8192 [ 549.701876][ T11] team0 (unregistering): Port device team_slave_1 removed [ 549.751744][ T11] team0 (unregistering): Port device team_slave_0 removed [ 549.797223][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.850976][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.322755][ T11] bond0 (unregistering): Released all slaves [ 550.464711][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.471969][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.491882][ T9672] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1188'. [ 550.817716][ T9539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.868212][ T9699] bond0: entered promiscuous mode [ 551.876536][ T9699] bond_slave_0: entered promiscuous mode [ 551.882545][ T9699] bond_slave_1: entered promiscuous mode [ 551.895226][ T9699] batadv0: entered promiscuous mode [ 551.907183][ T9699] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 551.915586][ T9699] bond0: left promiscuous mode [ 551.920422][ T9699] bond_slave_0: left promiscuous mode [ 551.926134][ T9699] bond_slave_1: left promiscuous mode [ 551.933013][ T9699] batadv0: left promiscuous mode [ 552.325683][ T9703] bridge10: entered promiscuous mode [ 552.407025][ T9703] bridge10: entered allmulticast mode [ 553.370635][ T9539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.656077][ T9539] veth0_vlan: entered promiscuous mode [ 554.775433][ T9539] veth1_vlan: entered promiscuous mode [ 554.917612][ T9539] veth0_macvtap: entered promiscuous mode [ 554.990964][ T9539] veth1_macvtap: entered promiscuous mode [ 555.109030][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.136189][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.417241][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.449046][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.476447][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.492016][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.511304][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.662102][ T9744] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1200'. [ 555.701382][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.739487][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.755381][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.765995][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.779268][ T9539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.789891][ T9539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.801580][ T9539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.824724][ T9539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.910334][ T9746] loop2: detected capacity change from 0 to 128 [ 556.009023][ T9539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.712304][ T9539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.762493][ T9539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.191562][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.227870][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.398278][ T9773] bond0: entered promiscuous mode [ 559.403507][ T9773] bond_slave_0: entered promiscuous mode [ 559.409387][ T9773] bond_slave_1: entered promiscuous mode [ 559.426985][ T9773] batadv0: entered promiscuous mode [ 559.443885][ T9773] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 559.472922][ T9773] bond0: left promiscuous mode [ 559.477789][ T9773] bond_slave_0: left promiscuous mode [ 559.483734][ T9773] bond_slave_1: left promiscuous mode [ 559.509578][ T9766] loop3: detected capacity change from 0 to 8192 [ 559.520716][ T9773] batadv0: left promiscuous mode [ 559.589330][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.799403][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.419852][ T9797] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1208'. [ 562.279246][ T9808] loop3: detected capacity change from 0 to 128 [ 563.063498][ T9810] bridge10: entered promiscuous mode [ 563.068979][ T9810] bridge10: entered allmulticast mode [ 563.313576][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.320240][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.283009][ T9832] loop0: detected capacity change from 0 to 8192 [ 566.627203][ T9842] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1218'. [ 567.617884][ T9863] bond0: entered promiscuous mode [ 567.649346][ T9863] bond_slave_0: entered promiscuous mode [ 567.680066][ T9863] bond_slave_1: entered promiscuous mode [ 567.701776][ T9863] batadv0: entered promiscuous mode [ 567.719477][ T9863] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 567.741372][ T9863] bond0: left promiscuous mode [ 567.818631][ T9863] bond_slave_0: left promiscuous mode [ 567.879986][ T9863] bond_slave_1: left promiscuous mode [ 567.903678][ T9863] batadv0: left promiscuous mode [ 568.027865][ T9870] loop0: detected capacity change from 0 to 128 [ 570.093258][ T9884] bridge1: entered promiscuous mode [ 570.098556][ T9884] bridge1: entered allmulticast mode [ 572.098345][ T9921] bridge8: entered promiscuous mode [ 572.104080][ T9921] bridge8: entered allmulticast mode [ 572.292497][ T9925] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1228'. [ 573.852163][ T9945] loop0: detected capacity change from 0 to 8192 [ 575.575734][ T9958] loop3: detected capacity change from 0 to 128 [ 578.261320][ T9987] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1237'. [ 578.604603][ T9996] bond0: entered promiscuous mode [ 578.655719][ T9996] bond_slave_0: entered promiscuous mode [ 578.748629][ T9996] bond_slave_1: entered promiscuous mode [ 578.795851][ T9996] batadv0: entered promiscuous mode [ 578.825207][ T9996] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 578.862785][ T9996] bond0: left promiscuous mode [ 578.867650][ T9996] bond_slave_0: left promiscuous mode [ 578.893521][ T9996] bond_slave_1: left promiscuous mode [ 578.919105][ T9996] batadv0: left promiscuous mode [ 579.138357][T10000] bridge11: entered promiscuous mode [ 579.143877][T10000] bridge11: entered allmulticast mode [ 581.036530][T10014] bridge9: entered promiscuous mode [ 581.041900][T10014] bridge9: entered allmulticast mode [ 582.258764][T10029] loop3: detected capacity change from 0 to 128 [ 583.562534][T10041] bridge2: entered promiscuous mode [ 583.568112][T10041] bridge2: entered allmulticast mode [ 584.496397][T10048] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1247'. [ 587.566710][T10085] bridge11: entered promiscuous mode [ 587.572273][T10085] bridge11: entered allmulticast mode [ 588.401759][T10094] bridge12: entered promiscuous mode [ 588.407296][T10094] bridge12: entered allmulticast mode [ 589.690476][T10103] loop2: detected capacity change from 0 to 128 [ 590.587263][T10107] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1257'. [ 592.775009][T10137] bridge10: entered promiscuous mode [ 592.780531][T10137] bridge10: entered allmulticast mode [ 593.755870][T10151] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1268'. [ 594.714044][T10173] bridge3: entered promiscuous mode [ 594.745062][T10173] bridge3: entered allmulticast mode [ 595.072534][T10180] loop0: detected capacity change from 0 to 128 [ 596.808836][T10185] bridge12: entered promiscuous mode [ 596.814332][T10185] bridge12: entered allmulticast mode [ 597.793570][T10196] loop3: detected capacity change from 0 to 128 [ 597.868499][T10196] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.949669][T10196] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 598.234644][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 599.241111][T10200] bond0: entered promiscuous mode [ 599.246491][T10200] bond_slave_0: entered promiscuous mode [ 599.252390][T10200] bond_slave_1: entered promiscuous mode [ 599.288603][T10200] batadv0: entered promiscuous mode [ 599.324647][T10200] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 599.353036][T10200] bond0: left promiscuous mode [ 599.359289][T10200] bond_slave_0: left promiscuous mode [ 599.365159][T10200] bond_slave_1: left promiscuous mode [ 599.396486][T10200] batadv0: left promiscuous mode [ 599.466495][T10212] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1278'. [ 600.045886][T10219] bridge4: entered promiscuous mode [ 600.051219][T10219] bridge4: entered allmulticast mode [ 601.962329][T10270] bridge13: entered promiscuous mode [ 602.001664][T10270] bridge13: entered allmulticast mode [ 602.095703][T10275] bridge11: entered promiscuous mode [ 602.101104][T10275] bridge11: entered allmulticast mode [ 602.728849][T10282] bond0: entered promiscuous mode [ 602.734092][T10282] bond_slave_0: entered promiscuous mode [ 602.739967][T10282] bond_slave_1: entered promiscuous mode [ 602.761178][T10282] batadv0: entered promiscuous mode [ 602.773716][T10282] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 602.783616][T10282] bond0: left promiscuous mode [ 602.788502][T10282] bond_slave_0: left promiscuous mode [ 602.794309][T10282] bond_slave_1: left promiscuous mode [ 602.801174][T10282] batadv0: left promiscuous mode [ 604.324769][T10316] bridge12: entered promiscuous mode [ 604.330154][T10316] bridge12: entered allmulticast mode [ 605.726297][T10337] bond0: entered promiscuous mode [ 605.731457][T10337] bond_slave_0: entered promiscuous mode [ 605.737405][T10337] bond_slave_1: entered promiscuous mode [ 605.754647][T10337] batadv0: entered promiscuous mode [ 605.762961][T10337] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 605.772120][T10337] bond0: left promiscuous mode [ 605.777145][T10337] bond_slave_0: left promiscuous mode [ 605.784162][T10337] bond_slave_1: left promiscuous mode [ 605.791018][T10337] batadv0: left promiscuous mode [ 606.817289][T10359] bridge14: entered promiscuous mode [ 606.823242][T10359] bridge14: entered allmulticast mode [ 608.627199][T10380] loop0: detected capacity change from 0 to 128 [ 610.936883][T10404] bridge5: entered promiscuous mode [ 610.942279][T10404] bridge5: entered allmulticast mode [ 614.273766][T10443] bridge13: entered promiscuous mode [ 614.279196][T10443] bridge13: entered allmulticast mode [ 618.393052][T10476] bridge15: entered promiscuous mode [ 618.398452][T10476] bridge15: entered allmulticast mode [ 618.823725][T10485] bridge13: entered promiscuous mode [ 618.829157][T10485] bridge13: entered allmulticast mode [ 619.923013][T10492] loop2: detected capacity change from 0 to 1024 [ 620.017763][T10492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.683738][ T27] audit: type=1800 audit(1775962223.693:3): pid=10492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1343" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 620.867570][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.907073][T10525] bridge14: entered promiscuous mode [ 622.912541][T10525] bridge14: entered allmulticast mode [ 623.491235][T10527] loop2: detected capacity change from 0 to 1024 [ 623.632294][T10527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.800657][ T27] audit: type=1800 audit(1775962226.813:4): pid=10527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1352" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 624.204627][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.272081][T10540] bridge14: entered promiscuous mode [ 624.322007][T10540] bridge14: entered allmulticast mode [ 624.766135][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.774758][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.259554][T10553] loop2: detected capacity change from 0 to 1764 [ 625.628476][T10557] bond0: entered promiscuous mode [ 625.633689][T10557] bond_slave_0: entered promiscuous mode [ 625.639572][T10557] bond_slave_1: entered promiscuous mode [ 625.647712][T10557] batadv0: entered promiscuous mode [ 625.654675][T10557] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 625.662795][T10557] bond0: left promiscuous mode [ 625.667615][T10557] bond_slave_0: left promiscuous mode [ 625.673285][T10557] bond_slave_1: left promiscuous mode [ 625.679719][T10557] batadv0: left promiscuous mode [ 626.064727][T10563] bridge15: entered promiscuous mode [ 626.070132][T10563] bridge15: entered allmulticast mode [ 627.473780][T10590] bridge15: entered promiscuous mode [ 627.479172][T10590] bridge15: entered allmulticast mode [ 628.620259][T10603] loop0: detected capacity change from 0 to 512 [ 628.655103][T10603] EXT4-fs: inline encryption not supported [ 628.695987][T10601] bond0: entered promiscuous mode [ 628.701133][T10601] bond_slave_0: entered promiscuous mode [ 628.707208][T10601] bond_slave_1: entered promiscuous mode [ 628.716544][T10601] batadv0: entered promiscuous mode [ 628.723562][T10601] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 628.731794][T10601] bond0: left promiscuous mode [ 628.736942][T10601] bond_slave_0: left promiscuous mode [ 628.742642][T10601] bond_slave_1: left promiscuous mode [ 628.749163][T10601] batadv0: left promiscuous mode [ 628.780157][T10603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.873211][T10603] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.267967][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.503255][T10610] bridge16: entered promiscuous mode [ 629.508726][T10610] bridge16: entered allmulticast mode [ 630.361400][T10614] loop3: detected capacity change from 0 to 128 [ 630.429124][T10614] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 630.564217][T10614] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 630.592921][T10617] bridge16: entered promiscuous mode [ 630.602834][T10617] bridge16: entered allmulticast mode [ 630.759767][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 632.099786][T10639] bond0: entered promiscuous mode [ 632.105043][T10639] bond_slave_0: entered promiscuous mode [ 632.110943][T10639] bond_slave_1: entered promiscuous mode [ 632.118293][T10639] batadv0: entered promiscuous mode [ 632.125305][T10639] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 632.133694][T10639] bond0: left promiscuous mode [ 632.138548][T10639] bond_slave_0: left promiscuous mode [ 632.144883][T10639] bond_slave_1: left promiscuous mode [ 632.151526][T10639] batadv0: left promiscuous mode [ 632.861923][T10645] bridge17: entered promiscuous mode [ 632.867427][T10645] bridge17: entered allmulticast mode [ 633.518991][T10649] loop4: detected capacity change from 0 to 128 [ 633.615122][T10649] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 633.636110][T10649] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 633.767875][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 633.771998][T10653] loop3: detected capacity change from 0 to 128 [ 635.963415][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d112400: rx timeout, send abort [ 635.974000][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d112400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 636.241415][T10682] loop4: detected capacity change from 0 to 128 [ 636.278484][T10682] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 636.332641][T10682] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 636.531587][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 636.622526][T10686] bridge17: entered promiscuous mode [ 636.628232][T10686] bridge17: entered allmulticast mode [ 637.151873][T10694] bridge6: entered promiscuous mode [ 637.273083][T10694] bridge6: entered allmulticast mode [ 637.348715][T10695] bridge18: entered promiscuous mode [ 637.404041][T10695] bridge18: entered allmulticast mode [ 641.117107][T10739] bridge19: entered promiscuous mode [ 641.157996][T10739] bridge19: entered allmulticast mode [ 641.783004][T10745] bridge18: entered promiscuous mode [ 641.872316][T10747] loop4: detected capacity change from 0 to 128 [ 641.993169][T10745] bridge18: entered allmulticast mode [ 644.955661][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 644.990715][T10770] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.000934][T10770] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.010136][T10770] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.019397][T10770] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.919052][T10780] loop0: detected capacity change from 0 to 128 [ 646.486764][T10790] loop3: detected capacity change from 0 to 128 [ 646.590288][T10790] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.626734][T10790] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 646.806274][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 647.427327][T10796] bridge19: entered promiscuous mode [ 647.477202][T10796] bridge19: entered allmulticast mode [ 648.388127][T10800] bond0: entered promiscuous mode [ 648.393507][T10800] bond_slave_0: entered promiscuous mode [ 648.399405][T10800] bond_slave_1: entered promiscuous mode [ 648.407146][T10800] batadv0: entered promiscuous mode [ 648.415090][T10800] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 648.423676][T10800] bond0: left promiscuous mode [ 648.428509][T10800] bond_slave_0: left promiscuous mode [ 648.434190][T10800] bond_slave_1: left promiscuous mode [ 648.442686][T10800] batadv0: left promiscuous mode [ 649.408804][T10811] loop3: detected capacity change from 0 to 128 [ 649.591865][T10820] loop2: detected capacity change from 0 to 512 [ 649.776230][T10820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 649.889528][T10820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.997677][T10820] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.312526][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.751885][T10840] loop3: detected capacity change from 0 to 1024 [ 650.832932][T10840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.067823][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.377891][T10850] loop4: detected capacity change from 0 to 764 [ 651.441426][T10852] bridge16: entered promiscuous mode [ 651.446889][T10852] bridge16: entered allmulticast mode [ 652.031656][T10857] loop4: detected capacity change from 0 to 128 [ 653.269617][T10877] loop3: detected capacity change from 0 to 1024 [ 653.344719][T10877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.474927][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1452'. [ 653.564587][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.379640][T10889] bridge20: entered promiscuous mode [ 654.414811][T10889] bridge20: entered allmulticast mode [ 654.503992][T10893] loop4: detected capacity change from 0 to 128 [ 657.558223][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 658.086185][T10917] bridge7: entered promiscuous mode [ 658.091485][T10917] bridge7: entered allmulticast mode [ 658.173280][T10914] loop3: detected capacity change from 0 to 1024 [ 658.295778][T10914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.607865][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.863946][T10930] loop3: detected capacity change from 0 to 128 [ 658.944159][T10930] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 659.007638][T10930] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 659.185176][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 659.331644][T10939] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.1467'. [ 659.840495][T10944] bridge21: entered promiscuous mode [ 659.954017][T10944] bridge21: entered allmulticast mode [ 661.539551][T10962] loop2: detected capacity change from 0 to 1024 [ 661.645938][T10962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.864950][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.119563][T10969] bridge20: entered promiscuous mode [ 662.125044][T10969] bridge20: entered allmulticast mode [ 662.447703][T10971] loop2: detected capacity change from 0 to 128 [ 662.471528][T10971] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 662.569712][T10971] ext4 filesystem being mounted at /357/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 662.805264][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 664.503928][T10992] loop2: detected capacity change from 0 to 1024 [ 664.583923][T10992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.798720][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.906962][T10998] loop4: detected capacity change from 0 to 128 [ 664.978707][T10998] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 665.021930][T10998] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 665.254399][T11005] xt_hashlimit: size too large, truncated to 1048576 [ 665.331025][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 665.410155][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.727073][T11006] bridge_slave_0 (unregistering): left allmulticast mode [ 665.753989][T11006] bridge_slave_0 (unregistering): left promiscuous mode [ 665.794016][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.909946][T11010] bridge17: entered promiscuous mode [ 665.931403][T11010] bridge17: entered allmulticast mode [ 667.248330][T11026] loop2: detected capacity change from 0 to 1024 [ 667.504279][T11026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.795691][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.526295][T11037] loop0: detected capacity change from 0 to 128 [ 668.588653][T11037] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 668.635133][T11037] ext4 filesystem being mounted at /383/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 668.856410][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 669.255897][T11046] macsec1: entered promiscuous mode [ 670.689713][T11062] loop2: detected capacity change from 0 to 1024 [ 670.772693][T11062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.972815][T11067] bridge8: entered promiscuous mode [ 670.979071][T11067] bridge8: entered allmulticast mode [ 670.994675][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.150834][T11082] loop0: detected capacity change from 0 to 128 [ 673.313512][T11082] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 673.362842][T11082] ext4 filesystem being mounted at /388/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 673.537943][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 674.896384][T11097] loop4: detected capacity change from 0 to 2048 [ 674.983293][T11097] GPT:first_usable_lbas don't match. [ 674.988707][T11097] GPT:34 != 290 [ 674.992207][T11097] GPT: Use GNU Parted to correct GPT errors. [ 675.020228][T11097] loop4: p1 p2 p3 [ 675.075581][T11097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 675.115282][ T5138] GPT:first_usable_lbas don't match. [ 675.120643][ T5138] GPT:34 != 290 [ 675.138395][ T5138] GPT: Use GNU Parted to correct GPT errors. [ 675.162750][ T5138] loop4: p1 p2 p3 [ 676.314977][T11112] bridge22: entered promiscuous mode [ 676.322670][T11112] bridge22: entered allmulticast mode [ 676.658668][T11115] loop4: detected capacity change from 0 to 128 [ 676.699136][T11115] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 676.770404][T11115] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 677.024350][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 679.666736][T11142] loop3: detected capacity change from 0 to 128 [ 679.734034][T11142] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 679.788313][T11147] loop2: detected capacity change from 0 to 2048 [ 679.815290][T11142] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 679.857004][T11147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.086863][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 680.120976][T11147] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.1529: bg 0: block 234: padding at end of block bitmap is not set [ 680.170027][T11147] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 322 with error 28 [ 680.217941][T11147] EXT4-fs (loop2): This should not happen!! Data will be lost [ 680.217941][T11147] [ 680.228579][T11147] EXT4-fs (loop2): Total free blocks count 0 [ 680.236321][T11147] EXT4-fs (loop2): Free/Dirty block details [ 680.242387][T11147] EXT4-fs (loop2): free_blocks=0 [ 680.248064][T11147] EXT4-fs (loop2): dirty_blocks=336 [ 680.253850][T11147] EXT4-fs (loop2): Block reservation details [ 680.259883][T11147] EXT4-fs (loop2): i_reserved_data_blocks=21 [ 680.479534][T11152] bridge9: entered promiscuous mode [ 680.484957][T11152] bridge9: entered allmulticast mode [ 680.721948][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.446803][T11184] loop4: detected capacity change from 0 to 128 [ 683.869820][T11184] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 684.194154][T11184] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 684.345281][T11161] bridge18: entered promiscuous mode [ 684.350685][T11161] bridge18: entered allmulticast mode [ 684.487915][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 684.566432][T11196] loop3: detected capacity change from 0 to 512 [ 684.600398][T11196] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 684.667432][T11194] bridge21: entered promiscuous mode [ 684.672840][T11194] bridge21: entered allmulticast mode [ 684.679402][T11196] EXT4-fs (loop3): orphan cleanup on readonly fs [ 684.688363][T11196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.1542: Block bitmap for bg 0 marked uninitialized [ 684.714921][T11196] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 684.832220][T11196] EXT4-fs (loop3): 1 orphan inode deleted [ 684.856211][T11196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 684.957455][T11196] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 684.997758][T11196] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 685.027081][T11196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.1542: Block bitmap for bg 0 marked uninitialized [ 685.167619][T11196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.1542: Block bitmap for bg 0 marked uninitialized [ 685.245775][T11196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.1542: Block bitmap for bg 0 marked uninitialized [ 685.290497][T11196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.1542: Block bitmap for bg 0 marked uninitialized [ 685.325396][T11196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.1542: Block bitmap for bg 0 marked uninitialized [ 685.460040][T11196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.1542: Block bitmap for bg 0 marked uninitialized [ 685.968349][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.194139][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.200546][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.543923][T11218] loop3: detected capacity change from 0 to 128 [ 687.628646][T11224] loop0: detected capacity change from 0 to 128 [ 687.657243][T11224] FAT-fs (loop0): Directory bread(block 524322) failed [ 687.703925][T11224] FAT-fs (loop0): Directory bread(block 524323) failed [ 687.719095][T11224] FAT-fs (loop0): Directory bread(block 524324) failed [ 687.747808][T11224] FAT-fs (loop0): Directory bread(block 524325) failed [ 687.763946][T11224] FAT-fs (loop0): Directory bread(block 524326) failed [ 687.783276][T11224] FAT-fs (loop0): Directory bread(block 524327) failed [ 687.800623][T11224] FAT-fs (loop0): Directory bread(block 524328) failed [ 687.824077][T11224] FAT-fs (loop0): Directory bread(block 524329) failed [ 688.106939][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1551'. [ 688.718996][T11240] sch_fq: defrate 2 ignored. [ 690.579218][T11249] bridge19: entered promiscuous mode [ 690.602679][T11249] bridge19: entered allmulticast mode [ 690.803503][T11252] bridge22: entered promiscuous mode [ 690.862604][T11252] bridge22: entered allmulticast mode [ 691.824600][T11255] loop4: detected capacity change from 0 to 128 [ 691.884833][T11255] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 691.983189][T11255] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 692.236952][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 693.485761][T11278] loop4: detected capacity change from 0 to 512 [ 693.573792][T11278] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 693.652921][T11278] EXT4-fs (loop4): orphan cleanup on readonly fs [ 693.692883][T11278] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.1568: Block bitmap for bg 0 marked uninitialized [ 693.767145][T11278] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 693.853560][T11278] EXT4-fs (loop4): 1 orphan inode deleted [ 693.871428][T11278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 694.000755][T11278] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 694.030873][T11278] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 694.058357][T11278] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.1568: Block bitmap for bg 0 marked uninitialized [ 694.079746][T11278] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.1568: Block bitmap for bg 0 marked uninitialized [ 694.096451][T11278] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.1568: Block bitmap for bg 0 marked uninitialized [ 694.112014][T11278] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.1568: Block bitmap for bg 0 marked uninitialized [ 694.130127][T11278] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.1568: Block bitmap for bg 0 marked uninitialized [ 694.144384][T11278] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.1568: Block bitmap for bg 0 marked uninitialized [ 694.227645][T11290] loop2: detected capacity change from 0 to 128 [ 694.283049][T11289] bridge23: entered promiscuous mode [ 694.288427][T11289] bridge23: entered allmulticast mode [ 694.301639][ T9539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.549465][T11295] loop4: detected capacity change from 0 to 128 [ 694.588485][T11295] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 694.649106][T11295] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 694.847374][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 695.296995][T11304] ip6gre0: Caught tx_queue_len zero misconfig [ 695.312678][T11304] sch_fq: defrate 2 ignored. [ 695.536853][T11307] bridge23: entered promiscuous mode [ 695.542240][T11307] bridge23: entered allmulticast mode [ 697.546168][T11328] loop3: detected capacity change from 0 to 128 [ 697.596398][T11332] loop0: detected capacity change from 0 to 512 [ 697.641437][T11328] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 697.660214][T11332] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 697.752279][T11328] ext4 filesystem being mounted at /400/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 697.769004][T11332] EXT4-fs (loop0): orphan cleanup on readonly fs [ 697.810804][T11332] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1582: Block bitmap for bg 0 marked uninitialized [ 697.903651][T11332] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 697.921942][T11332] EXT4-fs (loop0): 1 orphan inode deleted [ 697.934442][T11332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 697.953016][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 698.012894][T11332] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 698.039879][T11332] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 698.070179][T11332] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1582: Block bitmap for bg 0 marked uninitialized [ 698.098892][T11332] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1582: Block bitmap for bg 0 marked uninitialized [ 698.124121][T11332] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1582: Block bitmap for bg 0 marked uninitialized [ 698.142205][T11332] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1582: Block bitmap for bg 0 marked uninitialized [ 698.162174][T11332] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1582: Block bitmap for bg 0 marked uninitialized [ 698.176529][T11332] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1582: Block bitmap for bg 0 marked uninitialized [ 698.286688][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.614958][T11352] bridge24: entered promiscuous mode [ 699.620397][T11352] bridge24: entered allmulticast mode [ 699.980681][T11351] loop3: detected capacity change from 0 to 128 [ 701.963405][T11371] loop2: detected capacity change from 0 to 128 [ 701.979885][T11372] bridge25: entered promiscuous mode [ 701.985297][T11372] bridge25: entered allmulticast mode [ 702.033951][T11371] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 702.102035][T11371] ext4 filesystem being mounted at /385/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 702.391924][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 702.494913][T11376] bridge24: entered promiscuous mode [ 702.500299][T11376] bridge24: entered allmulticast mode [ 704.107289][T11398] loop2: detected capacity change from 0 to 128 [ 706.295850][T11412] loop3: detected capacity change from 0 to 128 [ 706.505544][T11412] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 706.546599][T11412] ext4 filesystem being mounted at /407/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 706.641983][T11416] bridge26: entered promiscuous mode [ 706.647502][T11416] bridge26: entered allmulticast mode [ 706.731548][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.855210][T11418] loop4: detected capacity change from 0 to 128 [ 706.891313][T11418] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 706.955362][T11418] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 707.171396][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 708.206705][T11429] bridge27: entered promiscuous mode [ 708.212101][T11429] bridge27: entered allmulticast mode [ 710.478936][T11447] loop0: detected capacity change from 0 to 128 [ 710.493376][T11447] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 710.626635][T11450] bridge25: entered promiscuous mode [ 710.632118][T11450] bridge25: entered allmulticast mode [ 710.836191][T11447] ext4 filesystem being mounted at /419/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 711.386406][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 712.361628][T11459] bridge28: entered promiscuous mode [ 712.367064][T11459] bridge28: entered allmulticast mode [ 712.729534][T11463] bridge10: entered promiscuous mode [ 712.735073][T11463] bridge10: entered allmulticast mode [ 714.088997][T11476] loop3: detected capacity change from 0 to 128 [ 714.167424][T11476] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 714.227408][T11476] ext4 filesystem being mounted at /415/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 714.238452][T11480] loop0: detected capacity change from 0 to 512 [ 714.302719][T11480] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 714.349245][T11480] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 714.384558][T11480] Quota error (device loop0): write_blk: dquota write failed [ 714.413167][T11480] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 714.449728][T11480] Quota error (device loop0): write_blk: dquota write failed [ 714.466217][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 714.479791][T11480] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 714.504797][T11480] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1627: Failed to acquire dquot type 1 [ 714.546046][T11480] EXT4-fs (loop0): 1 truncate cleaned up [ 714.567284][T11480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.640700][T11484] loop3: detected capacity change from 0 to 512 [ 714.694228][T11480] EXT4-fs: Cannot change journaled quota options when quota turned on [ 714.727413][T11484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.799404][T11484] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.142010][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.175922][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.207200][T11491] bridge20: entered promiscuous mode [ 715.241416][T11491] bridge20: entered allmulticast mode [ 717.636320][T11516] loop4: detected capacity change from 0 to 128 [ 717.700011][T11516] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 717.718776][T11516] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 717.764230][T11522] bridge21: entered promiscuous mode [ 717.769642][T11522] bridge21: entered allmulticast mode [ 717.887409][T11526] loop0: detected capacity change from 0 to 128 [ 717.909512][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 718.878276][T11537] bridge11: entered promiscuous mode [ 718.884006][T11537] bridge11: entered allmulticast mode [ 719.815546][T11549] loop3: detected capacity change from 0 to 128 [ 719.887316][T11549] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 719.915221][T11549] ext4 filesystem being mounted at /424/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 720.157779][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 720.750294][T11563] bridge26: entered promiscuous mode [ 720.755792][T11563] bridge26: entered allmulticast mode [ 722.098585][T11577] bridge22: entered promiscuous mode [ 722.142878][T11577] bridge22: entered allmulticast mode [ 722.472779][T11584] bridge12: entered promiscuous mode [ 722.490119][T11584] bridge12: entered allmulticast mode [ 722.723287][T11587] loop3: detected capacity change from 0 to 128 [ 722.793701][T11587] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 722.825693][T11587] ext4 filesystem being mounted at /429/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 723.048195][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 725.096123][T11613] loop4: detected capacity change from 0 to 128 [ 725.114295][T11613] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 725.143548][T11613] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 725.352241][ T9539] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 727.390172][T11637] bridge23: entered promiscuous mode [ 727.406450][T11637] bridge23: entered allmulticast mode [ 727.483908][T11639] bridge27: entered promiscuous mode [ 727.489298][T11639] bridge27: entered allmulticast mode [ 727.790222][T11644] loop4: detected capacity change from 0 to 128 [ 729.466671][T11659] loop0: detected capacity change from 0 to 128 [ 729.553317][T11659] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 729.597472][T11659] ext4 filesystem being mounted at /434/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 729.860193][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 730.898164][ T27] audit: type=1326 audit(1775962333.903:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11676 comm="syz.3.1690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4db139c819 code=0x0 [ 732.152669][T11692] bridge28: entered promiscuous mode [ 732.158058][T11692] bridge28: entered allmulticast mode [ 732.188225][T11690] bridge24: entered promiscuous mode [ 732.193717][T11690] bridge24: entered allmulticast mode [ 732.715311][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1692'. [ 732.739333][T11695] loop2: detected capacity change from 0 to 128 [ 732.776864][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 732.887305][T11695] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 732.957991][T11695] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 732.979070][T11689] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.988141][T11689] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.997086][T11689] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.006070][T11689] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.107849][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1692'. [ 733.138696][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 733.148014][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 733.713397][ T27] audit: type=1326 audit(1775962336.733:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11713 comm="syz.2.1699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c6619c819 code=0x0 [ 735.721076][T11729] bridge25: entered promiscuous mode [ 735.726642][T11729] bridge25: entered allmulticast mode [ 736.115959][T11731] loop3: detected capacity change from 0 to 128 [ 736.331284][T11731] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 736.389522][T11731] ext4 filesystem being mounted at /443/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 736.565524][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 736.996202][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 737.008764][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'. [ 737.036516][T11743] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.045719][T11743] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.054790][T11743] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.063617][T11743] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.220534][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1711'. [ 737.230379][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'. [ 738.454940][T11763] bridge29: entered promiscuous mode [ 738.461206][T11763] bridge29: entered allmulticast mode [ 741.265731][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 741.275069][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 741.355793][T11816] loop4: detected capacity change from 0 to 128 [ 741.376384][T11817] bridge29: entered promiscuous mode [ 741.381947][T11817] bridge29: entered allmulticast mode [ 743.873698][T11854] bridge26: entered promiscuous mode [ 743.879074][T11854] bridge26: entered allmulticast mode [ 746.742032][T11892] loop2: detected capacity change from 0 to 128 [ 746.799039][T11892] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 746.842458][T11892] ext4 filesystem being mounted at /423/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 746.965638][T11896] bridge30: entered promiscuous mode [ 746.971011][T11896] bridge30: entered allmulticast mode [ 747.060126][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 747.706577][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.717503][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.110917][T11937] bridge31: entered promiscuous mode [ 750.116345][T11937] bridge31: entered allmulticast mode [ 750.436536][T11945] loop2: detected capacity change from 0 to 1024 [ 750.581169][T11945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 750.616843][T11945] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.381210][T11957] loop0: detected capacity change from 0 to 128 [ 751.396976][T11957] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 751.442989][T11957] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 751.556986][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 751.602428][T11944] delete_channel: no stack [ 751.731743][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 753.049446][T11983] bridge30: entered promiscuous mode [ 753.054960][T11983] bridge30: entered allmulticast mode [ 755.467167][T12017] bridge31: entered promiscuous mode [ 755.472833][T12017] bridge31: entered allmulticast mode [ 755.897698][T12027] bridge13: entered promiscuous mode [ 755.903134][T12027] bridge13: entered allmulticast mode [ 756.215104][T12032] bond0: entered promiscuous mode [ 756.220271][T12032] bond_slave_0: entered promiscuous mode [ 756.227445][T12032] bond_slave_1: entered promiscuous mode [ 756.244293][T12032] batadv0: entered promiscuous mode [ 756.259329][T12032] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 758.720188][T12062] bridge32: entered promiscuous mode [ 758.725599][T12062] bridge32: entered allmulticast mode [ 758.835962][ T27] audit: type=1326 audit(1775962361.763:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12067 comm="syz.4.1811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe56339c819 code=0x0 [ 760.089230][T12087] loop2: detected capacity change from 0 to 128 [ 761.621695][T12104] bridge33: entered promiscuous mode [ 761.683818][T12104] bridge33: entered allmulticast mode [ 761.984438][T12111] bridge14: entered promiscuous mode [ 761.989921][T12111] bridge14: entered allmulticast mode [ 767.571031][T12177] bridge32: entered promiscuous mode [ 767.582637][T12177] bridge32: entered allmulticast mode [ 770.866233][T12206] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 772.494256][T12238] loop2: detected capacity change from 0 to 128 [ 778.207977][T12301] loop3: detected capacity change from 0 to 1764 [ 778.480119][T12311] loop0: detected capacity change from 0 to 128 [ 782.177672][T12353] loop4: detected capacity change from 0 to 1764 [ 782.253341][ T9602] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 785.728625][T12394] bridge27: entered promiscuous mode [ 785.734079][T12394] bridge27: entered allmulticast mode [ 790.695348][T12428] loop2: detected capacity change from 0 to 512 [ 790.719485][T12428] EXT4-fs: Ignoring removed nobh option [ 790.875708][T12428] [ 790.878120][T12428] ====================================================== [ 790.885177][T12428] WARNING: possible circular locking dependency detected [ 790.892366][T12428] syzkaller #0 Not tainted [ 790.896816][T12428] ------------------------------------------------------ [ 790.903875][T12428] syz.2.1916/12428 is trying to acquire lock: [ 790.909977][T12428] ffff88802e5eac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 790.920096][T12428] [ 790.920096][T12428] but task is already holding lock: [ 790.927493][T12428] ffff88805c889ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 790.937403][T12428] [ 790.937403][T12428] which lock already depends on the new lock. [ 790.937403][T12428] [ 790.947833][T12428] [ 790.947833][T12428] the existing dependency chain (in reverse order) is: [ 790.956863][T12428] [ 790.956863][T12428] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 790.964452][T12428] down_write+0x97/0x200 [ 790.969246][T12428] ext4_destroy_inline_data+0x28/0xe0 [ 790.975171][T12428] ext4_do_writepages+0x4f0/0x3990 [ 790.980830][T12428] ext4_writepages+0x1dd/0x350 [ 790.986147][T12428] do_writepages+0x3b3/0x630 [ 790.991288][T12428] filemap_fdatawrite_wbc+0x122/0x180 [ 790.997229][T12428] filemap_flush+0xe4/0x150 [ 791.002303][T12428] ext4_convert_inline_data+0x18f/0x5f0 [ 791.008419][T12428] ext4_fallocate+0xed/0x1d40 [ 791.013677][T12428] vfs_fallocate+0x58e/0x700 [ 791.018812][T12428] __x64_sys_fallocate+0xc1/0x110 [ 791.024385][T12428] do_syscall_64+0x55/0xa0 [ 791.029342][T12428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.035784][T12428] [ 791.035784][T12428] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 791.044233][T12428] __lock_acquire+0x2df1/0x7d40 [ 791.049633][T12428] lock_acquire+0x19e/0x420 [ 791.054687][T12428] percpu_down_read+0x44/0x1a0 [ 791.060002][T12428] ext4_writepages+0x1a4/0x350 [ 791.065317][T12428] do_writepages+0x3b3/0x630 [ 791.070471][T12428] __writeback_single_inode+0x153/0xec0 [ 791.076581][T12428] writeback_single_inode+0x21f/0x760 [ 791.082513][T12428] write_inode_now+0x183/0x210 [ 791.087836][T12428] iput+0x5ae/0x920 [ 791.092216][T12428] ext4_xattr_block_set+0x273f/0x32b0 [ 791.098150][T12428] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 791.104599][T12428] __ext4_expand_extra_isize+0x306/0x400 [ 791.110780][T12428] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 791.116782][T12428] ext4_evict_inode+0x7f3/0xea0 [ 791.122182][T12428] evict+0x4ca/0x8d0 [ 791.126631][T12428] ext4_orphan_cleanup+0xbec/0x1420 [ 791.132371][T12428] ext4_fill_super+0x5eea/0x67b0 [ 791.137858][T12428] get_tree_bdev+0x3f3/0x520 [ 791.143000][T12428] vfs_get_tree+0x8c/0x280 [ 791.147965][T12428] do_new_mount+0x24b/0xa40 [ 791.153010][T12428] __se_sys_mount+0x2e7/0x3d0 [ 791.158239][T12428] do_syscall_64+0x55/0xa0 [ 791.163203][T12428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.169644][T12428] [ 791.169644][T12428] other info that might help us debug this: [ 791.169644][T12428] [ 791.179894][T12428] Possible unsafe locking scenario: [ 791.179894][T12428] [ 791.187361][T12428] CPU0 CPU1 [ 791.192746][T12428] ---- ---- [ 791.198138][T12428] lock(&ei->xattr_sem); [ 791.202494][T12428] lock(&sbi->s_writepages_rwsem); [ 791.210250][T12428] lock(&ei->xattr_sem); [ 791.217127][T12428] rlock(&sbi->s_writepages_rwsem); [ 791.222436][T12428] [ 791.222436][T12428] *** DEADLOCK *** [ 791.222436][T12428] [ 791.230599][T12428] 3 locks held by syz.2.1916/12428: [ 791.235814][T12428] #0: ffff88802ebc20e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x353/0x520 [ 791.245949][T12428] #1: ffff88802ebc2608 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x2bf/0xea0 [ 791.255410][T12428] #2: ffff88805c889ec8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 791.265718][T12428] [ 791.265718][T12428] stack backtrace: [ 791.271650][T12428] CPU: 1 PID: 12428 Comm: syz.2.1916 Not tainted syzkaller #0 [ 791.279136][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 791.289311][T12428] Call Trace: [ 791.292632][T12428] [ 791.295592][T12428] dump_stack_lvl+0x18c/0x250 [ 791.300315][T12428] ? load_image+0x420/0x420 [ 791.304856][T12428] ? show_regs_print_info+0x20/0x20 [ 791.310100][T12428] ? print_circular_bug+0x12b/0x1a0 [ 791.315332][T12428] check_noncircular+0x2fc/0x400 [ 791.320297][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 791.325525][T12428] ? look_up_lock_class+0x75/0x140 [ 791.330667][T12428] ? print_deadlock_bug+0x5d0/0x5d0 [ 791.335898][T12428] ? lockdep_lock+0xf5/0x230 [ 791.340521][T12428] ? _find_first_zero_bit+0xd3/0x100 [ 791.345835][T12428] __lock_acquire+0x2df1/0x7d40 [ 791.350722][T12428] ? mark_lock+0x94/0x320 [ 791.355076][T12428] ? verify_lock_unused+0x140/0x140 [ 791.360338][T12428] ? __lock_acquire+0x1347/0x7d40 [ 791.365437][T12428] lock_acquire+0x19e/0x420 [ 791.369965][T12428] ? ext4_writepages+0x1a4/0x350 [ 791.374964][T12428] ? __might_sleep+0xe0/0xe0 [ 791.379579][T12428] ? read_lock_is_recursive+0x20/0x20 [ 791.384975][T12428] ? mark_lock+0x94/0x320 [ 791.389372][T12428] ? __lock_acquire+0x1347/0x7d40 [ 791.394439][T12428] percpu_down_read+0x44/0x1a0 [ 791.399239][T12428] ? ext4_writepages+0x1a4/0x350 [ 791.404214][T12428] ext4_writepages+0x1a4/0x350 [ 791.409022][T12428] ? ext4_read_folio+0x2f0/0x2f0 [ 791.413993][T12428] ? __rwlock_init+0x150/0x150 [ 791.418809][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 791.424048][T12428] ? ext4_read_folio+0x2f0/0x2f0 [ 791.429029][T12428] do_writepages+0x3b3/0x630 [ 791.433661][T12428] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 791.439408][T12428] ? writeback_single_inode+0x214/0x760 [ 791.444980][T12428] ? __lock_acquire+0x7d40/0x7d40 [ 791.450049][T12428] ? do_raw_spin_lock+0x11f/0x2c0 [ 791.455128][T12428] __writeback_single_inode+0x153/0xec0 [ 791.460715][T12428] writeback_single_inode+0x21f/0x760 [ 791.466126][T12428] ? io_schedule+0x80/0xd0 [ 791.470577][T12428] ? write_inode_now+0x210/0x210 [ 791.475551][T12428] write_inode_now+0x183/0x210 [ 791.480349][T12428] ? bdi_split_work_to_wbs+0x910/0x910 [ 791.485843][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 791.491081][T12428] iput+0x5ae/0x920 [ 791.494921][T12428] ext4_xattr_block_set+0x273f/0x32b0 [ 791.500353][T12428] ? __might_sleep+0xe0/0xe0 [ 791.505016][T12428] ? xattr_find_entry+0x12b/0x2f0 [ 791.510087][T12428] ? ext4_xattr_block_find+0x350/0x350 [ 791.515610][T12428] ? ext4_xattr_block_find+0x2d4/0x350 [ 791.521097][T12428] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 791.527044][T12428] __ext4_expand_extra_isize+0x306/0x400 [ 791.532725][T12428] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 791.538258][T12428] ext4_evict_inode+0x7f3/0xea0 [ 791.543140][T12428] ? _raw_spin_unlock+0x28/0x40 [ 791.548021][T12428] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 791.553956][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 791.559181][T12428] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 791.565108][T12428] evict+0x4ca/0x8d0 [ 791.569036][T12428] ? proc_nr_inodes+0x230/0x230 [ 791.574094][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 791.579419][T12428] ? _raw_spin_unlock+0x28/0x40 [ 791.584301][T12428] ? iput+0x706/0x920 [ 791.588310][T12428] ext4_orphan_cleanup+0xbec/0x1420 [ 791.593538][T12428] ? ext4_orphan_del+0xbf0/0xbf0 [ 791.598496][T12428] ? ext4_register_li_request+0x183/0x940 [ 791.604283][T12428] ? errseq_check_and_advance+0x66/0x120 [ 791.609965][T12428] ext4_fill_super+0x5eea/0x67b0 [ 791.614949][T12428] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 791.621249][T12428] ? __might_sleep+0xe0/0xe0 [ 791.625878][T12428] ? read_lock_is_recursive+0x20/0x20 [ 791.631281][T12428] ? snprintf+0xe9/0x140 [ 791.635563][T12428] ? down_read_killable+0x340/0x340 [ 791.640794][T12428] ? setup_bdev_super+0x56b/0x660 [ 791.645844][T12428] get_tree_bdev+0x3f3/0x520 [ 791.650468][T12428] ? vfs_parse_fs_string+0x170/0x170 [ 791.655787][T12428] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 791.662052][T12428] ? setup_bdev_super+0x660/0x660 [ 791.667106][T12428] ? apparmor_capable+0x137/0x1a0 [ 791.672163][T12428] ? bpf_lsm_capable+0x9/0x10 [ 791.676882][T12428] ? security_capable+0x89/0xb0 [ 791.681761][T12428] vfs_get_tree+0x8c/0x280 [ 791.686205][T12428] do_new_mount+0x24b/0xa40 [ 791.690737][T12428] __se_sys_mount+0x2e7/0x3d0 [ 791.695447][T12428] ? __x64_sys_mount+0xc0/0xc0 [ 791.700231][T12428] ? lockdep_hardirqs_on+0x98/0x150 [ 791.705455][T12428] ? __x64_sys_mount+0x20/0xc0 [ 791.710252][T12428] do_syscall_64+0x55/0xa0 [ 791.714685][T12428] ? clear_bhb_loop+0x40/0x90 [ 791.719396][T12428] ? clear_bhb_loop+0x40/0x90 [ 791.724104][T12428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.730025][T12428] RIP: 0033:0x7f7c6619da8a [ 791.734477][T12428] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.754106][T12428] RSP: 002b:00007f7c67027e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 791.762562][T12428] RAX: ffffffffffffffda RBX: 00007f7c67027ee0 RCX: 00007f7c6619da8a [ 791.770562][T12428] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f7c67027ea0 [ 791.778591][T12428] RBP: 0000200000000180 R08: 00007f7c67027ee0 R09: 0000000000800718 [ 791.786585][T12428] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 791.794605][T12428] R13: 00007f7c67027ea0 R14: 00000000000004a3 R15: 00002000000001c0 [ 791.802616][T12428] [ 791.902967][T12428] ------------[ cut here ]------------ [ 791.908528][T12428] EA inode 11 i_nlink=1026 [ 791.909741][T12428] WARNING: CPU: 0 PID: 12428 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 791.924965][T12428] Modules linked in: [ 791.928904][T12428] CPU: 0 PID: 12428 Comm: syz.2.1916 Not tainted syzkaller #0 [ 791.936501][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 791.946638][T12428] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 791.953322][T12428] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 65 d5 98 ff 49 8b 37 48 c7 c7 20 d8 de 8a 89 da e8 34 54 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 7e d5 3f 08 [ 791.973071][T12428] RSP: 0018:ffffc900033271a0 EFLAGS: 00010246 [ 791.979183][T12428] RAX: b6beaf2741b0d600 RBX: 0000000000000402 RCX: 0000000000080000 [ 791.987245][T12428] RDX: ffffc9000c919000 RSI: 000000000007ffff RDI: 0000000000080000 [ 791.995343][T12428] RBP: ffffc90003327298 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 792.003390][T12428] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 792.012228][T12428] R13: ffff88805ea298a8 R14: ffff88805ea296b0 R15: ffff88805ea29700 [ 792.020831][T12428] FS: 00007f7c670286c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 792.029962][T12428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.036814][T12428] CR2: 0000200000000140 CR3: 0000000069c89000 CR4: 00000000003506f0 [ 792.044857][T12428] Call Trace: [ 792.048177][T12428] [ 792.051152][T12428] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 792.056895][T12428] ? ext4_xattr_inode_iget+0x3df/0x600 [ 792.062404][T12428] ext4_xattr_set_entry+0xcda/0x1e90 [ 792.067796][T12428] ext4_xattr_ibody_set+0x254/0x6a0 [ 792.073083][T12428] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 792.079047][T12428] __ext4_expand_extra_isize+0x306/0x400 [ 792.085061][T12428] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 792.090610][T12428] ext4_evict_inode+0x7f3/0xea0 [ 792.095864][T12428] ? _raw_spin_unlock+0x28/0x40 [ 792.100775][T12428] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 792.107058][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 792.112321][T12428] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 792.119416][T12428] evict+0x4ca/0x8d0 [ 792.123758][T12428] ? proc_nr_inodes+0x230/0x230 [ 792.128948][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 792.134543][T12428] ? _raw_spin_unlock+0x28/0x40 [ 792.139702][T12428] ? iput+0x706/0x920 [ 792.143997][T12428] ext4_orphan_cleanup+0xbec/0x1420 [ 792.149242][T12428] ? ext4_orphan_del+0xbf0/0xbf0 [ 792.154467][T12428] ? ext4_register_li_request+0x183/0x940 [ 792.160242][T12428] ? errseq_check_and_advance+0x66/0x120 [ 792.165977][T12428] ext4_fill_super+0x5eea/0x67b0 [ 792.170995][T12428] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 792.177341][T12428] ? __might_sleep+0xe0/0xe0 [ 792.182016][T12428] ? read_lock_is_recursive+0x20/0x20 [ 792.187469][T12428] ? snprintf+0xe9/0x140 [ 792.191771][T12428] ? down_read_killable+0x340/0x340 [ 792.197079][T12428] ? setup_bdev_super+0x56b/0x660 [ 792.202171][T12428] get_tree_bdev+0x3f3/0x520 [ 792.206942][T12428] ? vfs_parse_fs_string+0x170/0x170 [ 792.212280][T12428] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 792.219253][T12428] ? setup_bdev_super+0x660/0x660 [ 792.224440][T12428] ? apparmor_capable+0x137/0x1a0 [ 792.229607][T12428] ? bpf_lsm_capable+0x9/0x10 [ 792.234397][T12428] ? security_capable+0x89/0xb0 [ 792.239311][T12428] vfs_get_tree+0x8c/0x280 [ 792.243832][T12428] do_new_mount+0x24b/0xa40 [ 792.248417][T12428] __se_sys_mount+0x2e7/0x3d0 [ 792.253214][T12428] ? __x64_sys_mount+0xc0/0xc0 [ 792.258033][T12428] ? lockdep_hardirqs_on+0x98/0x150 [ 792.263322][T12428] ? __x64_sys_mount+0x20/0xc0 [ 792.268122][T12428] do_syscall_64+0x55/0xa0 [ 792.272608][T12428] ? clear_bhb_loop+0x40/0x90 [ 792.277323][T12428] ? clear_bhb_loop+0x40/0x90 [ 792.282015][T12428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.287977][T12428] RIP: 0033:0x7f7c6619da8a [ 792.292422][T12428] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.312114][T12428] RSP: 002b:00007f7c67027e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 792.321328][T12428] RAX: ffffffffffffffda RBX: 00007f7c67027ee0 RCX: 00007f7c6619da8a [ 792.329507][T12428] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f7c67027ea0 [ 792.337573][T12428] RBP: 0000200000000180 R08: 00007f7c67027ee0 R09: 0000000000800718 [ 792.345644][T12428] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 792.353692][T12428] R13: 00007f7c67027ea0 R14: 00000000000004a3 R15: 00002000000001c0 [ 792.361715][T12428] [ 792.364820][T12428] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 792.372122][T12428] CPU: 0 PID: 12428 Comm: syz.2.1916 Not tainted syzkaller #0 [ 792.379658][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 792.389734][T12428] Call Trace: [ 792.393026][T12428] [ 792.395972][T12428] dump_stack_lvl+0x18c/0x250 [ 792.400691][T12428] ? show_regs_print_info+0x20/0x20 [ 792.405929][T12428] ? load_image+0x420/0x420 [ 792.410459][T12428] panic+0x2dc/0x730 [ 792.414387][T12428] ? bpf_jit_dump+0xd0/0xd0 [ 792.418924][T12428] __warn+0x2e0/0x470 [ 792.422942][T12428] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 792.428963][T12428] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 792.434974][T12428] report_bug+0x2be/0x4f0 [ 792.439330][T12428] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 792.445348][T12428] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 792.451360][T12428] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 792.457372][T12428] handle_bug+0xcf/0x120 [ 792.461635][T12428] exc_invalid_op+0x1a/0x50 [ 792.466171][T12428] asm_exc_invalid_op+0x1a/0x20 [ 792.471046][T12428] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 792.477666][T12428] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 65 d5 98 ff 49 8b 37 48 c7 c7 20 d8 de 8a 89 da e8 34 54 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 7e d5 3f 08 [ 792.497484][T12428] RSP: 0018:ffffc900033271a0 EFLAGS: 00010246 [ 792.503583][T12428] RAX: b6beaf2741b0d600 RBX: 0000000000000402 RCX: 0000000000080000 [ 792.511592][T12428] RDX: ffffc9000c919000 RSI: 000000000007ffff RDI: 0000000000080000 [ 792.519587][T12428] RBP: ffffc90003327298 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 792.527581][T12428] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 792.535598][T12428] R13: ffff88805ea298a8 R14: ffff88805ea296b0 R15: ffff88805ea29700 [ 792.543627][T12428] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 792.549308][T12428] ? ext4_xattr_inode_iget+0x3df/0x600 [ 792.554835][T12428] ext4_xattr_set_entry+0xcda/0x1e90 [ 792.560167][T12428] ext4_xattr_ibody_set+0x254/0x6a0 [ 792.565394][T12428] ext4_expand_extra_isize_ea+0x1398/0x1e80 [ 792.571328][T12428] __ext4_expand_extra_isize+0x306/0x400 [ 792.576994][T12428] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 792.582486][T12428] ext4_evict_inode+0x7f3/0xea0 [ 792.587365][T12428] ? _raw_spin_unlock+0x28/0x40 [ 792.592247][T12428] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 792.598198][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 792.603433][T12428] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 792.609348][T12428] evict+0x4ca/0x8d0 [ 792.613284][T12428] ? proc_nr_inodes+0x230/0x230 [ 792.618192][T12428] ? do_raw_spin_unlock+0x121/0x230 [ 792.623417][T12428] ? _raw_spin_unlock+0x28/0x40 [ 792.628300][T12428] ? iput+0x706/0x920 [ 792.632334][T12428] ext4_orphan_cleanup+0xbec/0x1420 [ 792.637568][T12428] ? ext4_orphan_del+0xbf0/0xbf0 [ 792.642542][T12428] ? ext4_register_li_request+0x183/0x940 [ 792.648289][T12428] ? errseq_check_and_advance+0x66/0x120 [ 792.653960][T12428] ext4_fill_super+0x5eea/0x67b0 [ 792.658941][T12428] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 792.665216][T12428] ? __might_sleep+0xe0/0xe0 [ 792.669835][T12428] ? read_lock_is_recursive+0x20/0x20 [ 792.675238][T12428] ? snprintf+0xe9/0x140 [ 792.679515][T12428] ? down_read_killable+0x340/0x340 [ 792.684750][T12428] ? setup_bdev_super+0x56b/0x660 [ 792.689798][T12428] get_tree_bdev+0x3f3/0x520 [ 792.694411][T12428] ? vfs_parse_fs_string+0x170/0x170 [ 792.699820][T12428] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 792.706080][T12428] ? setup_bdev_super+0x660/0x660 [ 792.711139][T12428] ? apparmor_capable+0x137/0x1a0 [ 792.716230][T12428] ? bpf_lsm_capable+0x9/0x10 [ 792.720965][T12428] ? security_capable+0x89/0xb0 [ 792.725851][T12428] vfs_get_tree+0x8c/0x280 [ 792.730304][T12428] do_new_mount+0x24b/0xa40 [ 792.734839][T12428] __se_sys_mount+0x2e7/0x3d0 [ 792.739541][T12428] ? __x64_sys_mount+0xc0/0xc0 [ 792.744329][T12428] ? lockdep_hardirqs_on+0x98/0x150 [ 792.749554][T12428] ? __x64_sys_mount+0x20/0xc0 [ 792.754339][T12428] do_syscall_64+0x55/0xa0 [ 792.758801][T12428] ? clear_bhb_loop+0x40/0x90 [ 792.763507][T12428] ? clear_bhb_loop+0x40/0x90 [ 792.768208][T12428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.774136][T12428] RIP: 0033:0x7f7c6619da8a [ 792.778579][T12428] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.798222][T12428] RSP: 002b:00007f7c67027e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 792.806670][T12428] RAX: ffffffffffffffda RBX: 00007f7c67027ee0 RCX: 00007f7c6619da8a [ 792.814666][T12428] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f7c67027ea0 [ 792.822671][T12428] RBP: 0000200000000180 R08: 00007f7c67027ee0 R09: 0000000000800718 [ 792.830711][T12428] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 792.838714][T12428] R13: 00007f7c67027ea0 R14: 00000000000004a3 R15: 00002000000001c0 [ 792.846721][T12428] [ 792.850352][T12428] Kernel Offset: disabled [ 792.854690][T12428] Rebooting in 86400 seconds..