last executing test programs: 26m37.112871687s ago: executing program 32 (id=257): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) 23m2.471441386s ago: executing program 5 (id=906): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x2}, 0x8) 23m1.205283728s ago: executing program 5 (id=911): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x37, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00'}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 22m59.861605518s ago: executing program 5 (id=915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27032400000214000e00002fb96dffff1144ee163cddcb0000008000008276000000000000", 0x25}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 22m56.55608135s ago: executing program 5 (id=925): syz_mount_image$minix(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xa, 0x251, &(0x7f0000001440)="$eJzs3L1v00AcxvHHduImhdKKtwGBVIEoLDS8TAwI2Dp1YO2ESoCqQaooDImQSBdgQOrExsKEhMTAiFDZEBN/AAMSGwjRIRITQ41s/JLUThoHh7Tp97P0cs/ZZ7u5+le5qQDsWlc0KUOGbPfF0cLE6gGj03Dzvx0YgL5z/K8bOScSrHIHwHC7PTboIwAwGOtXpecnpZ+NB/OybP/Gb4f1wdrUY9Xl5+aIpJefpFyYr69IR3J+bhRUbKotJtwS4oV0KtjeGI3VH+72o2G+pykphvnpE8H8ezWmfRrPu8l+WX5+I9z+cLsyJx80cmkLJAAAhpCh6a3yjgNM3VyolM+2zfNefs6rKayE3Pby8167fX4hfD0Stuaezd5/51zacPPpeUNembK1QlejgF3B7GH9fz4Wta1C5/WfC9Z/sbW/2MvBAsjUcrW2eL1ScR5KXqN81+/xG7b/zC/qsWJjMmkEzxwSIntTFDyhjO3H3UdTjxWfa3Uqfu7ZnYUZHdi4pP5cqH9q2Mnf5YwaSoi+zvy9JmGP2Y8r39I4/v33o6Wnb952M/h1yinM8F03t1ZubBrjLpWgR5m+Ab5cq9YWJ1siw1uVhe72Y9QdJ+WkiT8uoj8OoI4GdrzSvTtLpeVq7cyC+9v3rXI+uNnOfPvhVfalzvU9gJ0ruuknpSuxHqf15eyHj78aF1896WHmy5Lexx8IAgAAAAAAAAAAAACA1A7qULoNOv57IAAAAADbWfzTP5Lq2X4ka9DnCAAAAAAAAAAAAAAAAADAsPkTAAD//14jAIo=") open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 22m54.779069724s ago: executing program 5 (id=930): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x61, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x4, 0xbe, 0x3, 0xe}]}}, {0x4e20, 0x4e20, 0x49, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}, "e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73eacb24c20d9d92e5f83e219b0692a1a8fb9c1dea76"}}}}, 0x6f) 22m53.536844251s ago: executing program 5 (id=933): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 22m50.179578629s ago: executing program 33 (id=933): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 19m35.989323316s ago: executing program 34 (id=1293): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r2, r0, 0x0) 18m0.178605185s ago: executing program 4 (id=1522): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x37, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d000000000000300012800800", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 17m58.780606488s ago: executing program 4 (id=1525): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x7}) 17m57.68058478s ago: executing program 4 (id=1527): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001440)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "8600", '\x00', "000000007fffffff"}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r1) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2142) recvfrom(r0, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001800)={&(0x7f0000001480)="9d0115db188ee89f44a205f888cc816ede0218761e9134b8785eb31dd2182091613cb609985ce8f706f0a76798d58af82d2d985a0a229212b66cb9b460d5ec0ce9083b8ef3d3ea156127f9e52e74277c914bb55191069ec42357657f9cc94ab18279eaf3552fafcfa51521c85cb37478adc19b357384f1ecb09d30b82421b814a47aa7e0c72e5284fd18fcded438fe6eaacacd94ad7dfc3aff264d3e9ef7dde9e1a0ffe9761e8d0b1b5f17207ae94621230dae85f1dd3ce2dc1e87e6bd82e0531fd62beb327e07ee03110556256e5c4525372132dbab3ad912a9778f32047e2c35cb3b8e", &(0x7f0000001580)=""/227, &(0x7f0000001680)="91fa3e425e70d82cd083932660172154e89a8131f5f104f443aa88218d91fb790515ccde83e00d5678eb26be0e75b4a78e02d7da1c33bf1db0c2cefc8d0e35dde11659cd6cf1d257d82bc419450ee3cf8e1599410934327d457c1c949412919c35af4af9933651470459167e287a49de6ef5d6ff6b901558395b7a27f153f410cf04eaa277d7785bcec521dcae428a56f292cbb66a6c587e3dd0d34a8c1c8540a6aca5b0d976bc955783c2", &(0x7f0000001740)="9105593c7afbe9a2365c81ee7840f69d401b46f4edbc96f2ecbb07f7c17f8a0665e21391db441bd8b3aaee8594c8a27e0b73924e0eba0d8f65e38a8171270f261fac6c8c69cc1d5197376c22ef357e201340e8423dc1716d9c81197e652d956fe10402b2fd2256bf9947f6b2414a15cf9c749f52f624e2d535b06b194c2c057d866fe2e662da65a27cf3cfdaf43c3341bf885d248341366a976eb28b", 0x7f, r2}, 0x38) recvfrom(r0, 0x0, 0x0, 0x40, &(0x7f0000000300)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x1, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}]}]}, 0xfc}}, 0x4000) 17m55.477159035s ago: executing program 4 (id=1530): syz_mount_image$minix(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xa, 0x251, &(0x7f0000001440)="$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") open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 17m53.869737247s ago: executing program 4 (id=1533): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x37, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d000000000000300012800800", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 17m52.84100047s ago: executing program 4 (id=1535): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x7, r1}) 17m48.747123714s ago: executing program 35 (id=1535): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x7, r1}) 16m48.573430792s ago: executing program 1 (id=1613): syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004d0000480000000000059078ac1414000a01010044140903000000000000000000000000000000008907ceac141415070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078000072edaa05ce3c141f7ba73a34da919c66d1153a55d43146b80ac8098c4ce1b0c088790393121fe05c9177b8dd434b7d3e5c1a0dd59e2389092daf43dbc696c02d08a276d3baca8dbc92112c22ffb50c0eb21184f6ae"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x4048820) 16m44.11329166s ago: executing program 1 (id=1617): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 16m39.953699025s ago: executing program 1 (id=1621): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x61000006, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@can={0xc, {{0x2, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "15dc998c172fbd46"}}}}, 0x0) 16m34.857426987s ago: executing program 1 (id=1625): r0 = socket$packet(0x11, 0x3, 0x300) r1 = gettid() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109280, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = dup(r3) read$snddsp(r4, 0x0, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 16m33.180839738s ago: executing program 1 (id=1626): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) 16m29.447993122s ago: executing program 1 (id=1630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000007060109000000007fffffff00000ec00500010006"], 0x1c}}, 0x4000044) 16m13.459728082s ago: executing program 36 (id=1630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000007060109000000007fffffff00000ec00500010006"], 0x1c}}, 0x4000044) 4m29.930618502s ago: executing program 0 (id=1990): setresuid(0xee00, 0xee00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 4m29.293452864s ago: executing program 0 (id=1992): unshare(0x4000400) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2062) 4m28.438042286s ago: executing program 0 (id=1994): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x233, 0x0, &(0x7f0000000580)={0x1, 0x3, [0xc22, 0x231, 0x8e6, 0x68c]}) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 4m27.27657759s ago: executing program 0 (id=1996): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) 4m25.829892858s ago: executing program 0 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x7}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xd0, 0x1, 0x810e, 0x1, 0xfff3, 0x8d13}, {0x94, 0x2, 0x4, 0x6, 0x0, 0x80000001}, 0x2, 0xb25, 0x162c}}, @TCA_TBF_RTAB={0x404, 0x2, [0x39914b87, 0x907f, 0xffffffff, 0x1000, 0x9, 0x7fff, 0x5, 0x10000, 0xff, 0x6, 0x80000000, 0x8, 0x6, 0x0, 0xb, 0x8, 0xfffffeff, 0x0, 0x3, 0x7, 0x4, 0x4, 0x8, 0x0, 0x7, 0xd467, 0x3, 0xa, 0x1ff, 0x4, 0x9, 0x5, 0x80000000, 0x9, 0xfffffffa, 0xffffff80, 0x0, 0x0, 0x5, 0x13e, 0x101, 0x81, 0x1, 0x1, 0x7fff, 0x3, 0x0, 0x8, 0x8001, 0x3, 0x100, 0x7, 0x10, 0x9, 0x6, 0x80000000, 0x25d2, 0x7, 0xffff, 0xfffffbff, 0x81, 0x9, 0x0, 0xfffffff9, 0x5, 0x1d67, 0x8, 0xffffffff, 0x7, 0x4, 0xfffffffe, 0x3ff, 0x5, 0xfff, 0x7, 0xd5, 0x3, 0x4, 0x0, 0x1b2a, 0x8, 0x4, 0x0, 0x0, 0xe, 0x9, 0xffff, 0x7831, 0x4, 0xa740744, 0x1, 0x2, 0x4, 0xc, 0x8000, 0x1, 0x9, 0x1, 0x7, 0x8b50, 0x1, 0x800, 0x8, 0x9, 0x400, 0x2, 0x2, 0xfffffff8, 0xffff, 0x3, 0x228, 0x7, 0xd, 0xd, 0x38000000, 0x5, 0xfffff39d, 0x3, 0xffffffff, 0x5, 0x2, 0xc6e, 0x1, 0x9, 0x7, 0xf, 0x2f, 0x3, 0x8, 0xfffffffb, 0x9, 0x2d, 0x401, 0x3, 0x401, 0x8, 0x6, 0x9, 0xfffffc24, 0x0, 0x6, 0x9, 0x6, 0xfffffffe, 0x4, 0x8, 0x5, 0x40, 0x5, 0x4, 0x7fff, 0x0, 0x9, 0x6, 0x10, 0x6, 0x8001, 0x1, 0x5, 0x8, 0x2, 0x2, 0x3, 0x80000001, 0xfffffffc, 0x1, 0x7, 0x0, 0x6, 0xd, 0x7, 0xffffffff, 0x8001, 0x2, 0xfffffffb, 0xe, 0x6, 0xc0000, 0xffffffff, 0x40, 0x2, 0xd, 0xfffffff7, 0x8, 0x8, 0x398, 0x1, 0x1, 0xfffffffc, 0x8, 0x5, 0x7, 0x8, 0xfffffffe, 0x9, 0x3f83e93a, 0x4, 0xe, 0x1000, 0x5, 0x203, 0x2b8de1d9, 0x4, 0xf, 0x9, 0x7ff, 0x1ff, 0x8, 0x3, 0x6, 0x4, 0x3, 0x1, 0xedc2, 0x7fffffff, 0x40, 0x3, 0x8, 0xb7, 0x7f, 0x2, 0x3, 0xff, 0x401, 0x5, 0x80000001, 0x1ff, 0x96d5, 0xe71, 0x7, 0x5, 0x0, 0x10000, 0x1, 0x101, 0x7, 0xc76, 0x4, 0x7, 0x3, 0xd, 0x0, 0xf1b, 0xc7, 0x6, 0x5, 0x0, 0xffffffff, 0x8, 0x100, 0x0, 0x40, 0x1ff, 0x4, 0x3, 0x7]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 4m24.798607967s ago: executing program 0 (id=2001): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000240), 0x400000000000, 0x8100) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r1, @ANYRES32=r0], 0x1c}}, 0x0) 3m13.063228434s ago: executing program 7 (id=2142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 3m12.025300019s ago: executing program 7 (id=2146): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000240), 0x400000000000, 0x8100) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r1, @ANYRES32=r0], 0x1c}}, 0x0) 3m8.392327494s ago: executing program 7 (id=2152): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000640)="000a18000b00000000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r7, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 3m2.08934065s ago: executing program 7 (id=2164): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000640)='./file1\x00', 0x800010, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x172, &(0x7f00000001c0)="$eJzs27GKE1EUBuAzZjZGLUwtFgM2VkF9AmVZQRxQlCm0Uog2u7LgNqNVHsUXFGSr7a5kZkl2lwQMJI7ufF+TE37u5Z5mDjdkPtz/cjg9Pvl8/Po0RlkW+dMo4iyLcdyIQUyriIhZAADXyVlK8SullPKI+BEppa5PBADs2mL+35zFLfMfAHrB/AeA/jH/AaB/3r57//JZWR68KYpRxM9ZXdVV87nf5s9flAePisZ4ueq0rqvBIn/c5sXlfC9un+dPmvTivwjn+TAePmjzebr/qryy/k5Md949AAAA9MOkWFh5v59M1uVtdeH3gfn9/e4yz+Ne3nwZ/8V2AIA/cPLt++HHo6NPX//zYnDez6bLRxHR+eEVmxTZv3GMrothbHXDvYjLG3b8YAJ2bvkY6PokAAAAAAAAAAAAAADAOlt9LWm4esOuewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICrfgcAAP//TMFI9w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "2be13c086884449291376aaab3f822cd1bdbd211505af9305ee8860e3fc002d87075eb79567bf5e0f4bca7106ac01c1b57c35ccad9b9765784fe87f45f7b6ef77fcada488fe7c88173f2687e291ed1e74833989a34a16d57c4508c550aed75460c8aad5ebd53d001d243d723077e65f7eac17e396e4aa9874d8d3757ac66e098a79f7d22aa5d83bedf4f31f298f54dda92c6ee66dd0e13e386adcaa66cc9d7d1dff800863de8b5caf4be5c38aa64f5a0f1857c4c6a5b733bd56c0bdbd3dbae6638c0f5ff090885017b72e0ae8dc09619923e3cb4df3039fa91b969e5d31077ce8438f5c4f0f747dd43d62de3e408d8aaafed238cee632bfd7a14d1dd0a1f96e6"}}, 0xfffffea3) syz_clone(0x9001000, &(0x7f00000003c0), 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m59.986324859s ago: executing program 7 (id=2169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x48000) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x2a, 0xc2}}}}}}, 0x0) 2m57.77446285s ago: executing program 7 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, 0x20885}}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m53.921727384s ago: executing program 37 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, 0x20885}}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m33.112736872s ago: executing program 8 (id=2224): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}]}, 0x38}}, 0x10) 2m31.792043877s ago: executing program 8 (id=2228): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37}, 0x28) 2m30.917857793s ago: executing program 8 (id=2229): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) 2m30.121086178s ago: executing program 6 (id=2231): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6d9311000000f8dbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) 2m29.879647826s ago: executing program 8 (id=2232): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") write$binfmt_script(r0, 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 2m28.33427235s ago: executing program 6 (id=2234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000400000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m27.461754681s ago: executing program 8 (id=2235): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0000000000000073019a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m27.040434128s ago: executing program 6 (id=2236): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0xfff2, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x3, @broadcast, 0xf}]}}}}}}}}, 0x0) 2m26.262876576s ago: executing program 8 (id=2238): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 2m22.468471251s ago: executing program 38 (id=2238): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 2m22.373424143s ago: executing program 6 (id=2242): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000640)='./file1\x00', 0x800010, &(0x7f0000000800)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x172, &(0x7f00000001c0)="$eJzs27GKE1EUBuAzZjZGLUwtFgM2VkF9AmVZQRxQlCm0Uog2u7LgNqNVHsUXFGSr7a5kZkl2lwQMJI7ufF+TE37u5Z5mDjdkPtz/cjg9Pvl8/Po0RlkW+dMo4iyLcdyIQUyriIhZAADXyVlK8SullPKI+BEppa5PBADs2mL+35zFLfMfAHrB/AeA/jH/AaB/3r57//JZWR68KYpRxM9ZXdVV87nf5s9flAePisZ4ueq0rqvBIn/c5sXlfC9un+dPmvTivwjn+TAePmjzebr/qryy/k5Md949AAAA9MOkWFh5v59M1uVtdeH3gfn9/e4yz+Ne3nwZ/8V2AIA/cPLt++HHo6NPX//zYnDez6bLRxHR+eEVmxTZv3GMrothbHXDvYjLG3b8YAJ2bvkY6PokAAAAAAAAAAAAAADAOlt9LWm4esOuewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICrfgcAAP//TMFI9w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "2be13c086884449291376aaab3f822cd1bdbd211505af9305ee8860e3fc002d87075eb79567bf5e0f4bca7106ac01c1b57c35ccad9b9765784fe87f45f7b6ef77fcada488fe7c88173f2687e291ed1e74833989a34a16d57c4508c550aed75460c8aad5ebd53d001d243d723077e65f7eac17e396e4aa9874d8d3757ac66e098a79f7d22aa5d83bedf4f31f298f54dda92c6ee66dd0e13e386adcaa66cc9d7d1dff800863de8b5caf4be5c38aa64f5a0f1857c4c6a5b733bd56c0bdbd3dbae6638c0f5ff090885017b72e0ae8dc09619923e3cb4df3039fa91b969e5d31077ce8438f5c4f0f747dd43d62de3e408d8aaafed238cee632bfd7a14d1dd0a1f96e6"}}, 0xfffffea3) syz_clone(0x9001000, &(0x7f00000003c0), 0x0, &(0x7f0000000480), &(0x7f00000004c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m20.130171749s ago: executing program 6 (id=2244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000400000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m12.944054797s ago: executing program 6 (id=2250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x48000) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x2a, 0xc2}}}}}}, 0x0) 2m9.06569592s ago: executing program 39 (id=2250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x48000) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x2a, 0xc2}}}}}}, 0x0) 9.317084186s ago: executing program 9 (id=2396): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 7.821634805s ago: executing program 9 (id=2399): syz_pidfd_open(0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 6.896044193s ago: executing program 3 (id=2401): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a01"], 0x188}}, 0x0) 6.430387412s ago: executing program 9 (id=2402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000082000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.792321962s ago: executing program 2 (id=2403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e0001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) 5.71961122s ago: executing program 3 (id=2404): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(r0, &(0x7f00000000c0), 0x0, 0x145, 0x0) 5.353275259s ago: executing program 9 (id=2405): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="ae"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000640)="000a18000b00000000eb55000000", 0xe, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r8, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 4.587832182s ago: executing program 2 (id=2406): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) ioprio_get$pid(0x2, 0xffffffffffffffff) 4.587670332s ago: executing program 3 (id=2407): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r0], 0x44}}, 0x2000800) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c0007800800050000000000080006000000000008000600000000000800050000000000080005000000000044"], 0x198}}, 0x0) 3.7024559s ago: executing program 2 (id=2408): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x2) 3.123419616s ago: executing program 2 (id=2409): syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.781980485s ago: executing program 2 (id=2410): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000100)) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 1.727541137s ago: executing program 3 (id=2411): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff"], 0x110) 1.582043099s ago: executing program 9 (id=2412): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000806, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) io_uring_setup(0x28a6, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 891.568822ms ago: executing program 3 (id=2413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000082000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 457.914788ms ago: executing program 2 (id=2414): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e0001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) 457.662924ms ago: executing program 9 (id=2415): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x6f6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 0s ago: executing program 3 (id=2416): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) ioprio_get$pid(0x2, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 484][ T1022] bridge_slave_0: left promiscuous mode [ 1631.777280][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.263985][ T4871] Bluetooth: hci4: command tx timeout [ 1633.379248][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.463236][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.512245][ T1022] bond0 (unregistering): Released all slaves [ 1633.920008][T15900] veth0_vlan: entered promiscuous mode [ 1634.294000][ T1022] hsr_slave_0: left promiscuous mode [ 1634.336582][ T1022] hsr_slave_1: left promiscuous mode [ 1634.382342][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.407197][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.436453][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.485386][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.591502][ T1022] veth1_macvtap: left promiscuous mode [ 1634.622875][ T1022] veth0_macvtap: left promiscuous mode [ 1634.656507][ T1022] veth1_vlan: left promiscuous mode [ 1634.684127][ T1022] veth0_vlan: left promiscuous mode [ 1635.316852][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1635.336503][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1635.344445][ T48] Bluetooth: hci4: command tx timeout [ 1635.356371][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1635.381788][T16115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1635.400102][T16115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1637.244107][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 1637.368810][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 1637.509017][T16115] Bluetooth: hci5: command tx timeout [ 1637.874002][ T4871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1637.886993][ T4871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1637.898325][ T4871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1637.924568][ T4871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1637.941490][ T4871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1639.135527][T15900] veth1_vlan: entered promiscuous mode [ 1639.583954][T16115] Bluetooth: hci5: command tx timeout [ 1639.946513][ T1022] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.074202][T16115] Bluetooth: hci1: command tx timeout [ 1640.392692][ T1022] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.787713][ T1022] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.204453][ T1022] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.668208][T16115] Bluetooth: hci5: command tx timeout [ 1641.822206][T15900] veth0_macvtap: entered promiscuous mode [ 1642.116633][T15900] veth1_macvtap: entered promiscuous mode [ 1642.144153][T16115] Bluetooth: hci1: command tx timeout [ 1643.390158][ T1022] bridge_slave_1: left allmulticast mode [ 1643.401660][ T1022] bridge_slave_1: left promiscuous mode [ 1643.418115][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.495066][ T1022] bridge_slave_0: left allmulticast mode [ 1643.520629][ T1022] bridge_slave_0: left promiscuous mode [ 1643.529753][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.756541][T16115] Bluetooth: hci5: command tx timeout [ 1644.225588][T16115] Bluetooth: hci1: command tx timeout [ 1644.435632][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1644.490914][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1644.525603][ T1022] bond0 (unregistering): Released all slaves [ 1644.952660][ T1022] hsr_slave_0: left promiscuous mode [ 1644.980079][ T1022] hsr_slave_1: left promiscuous mode [ 1644.997108][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1645.012462][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1645.052163][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1645.069373][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.110981][ T1022] veth1_macvtap: left promiscuous mode [ 1645.125919][ T1022] veth0_macvtap: left promiscuous mode [ 1645.132170][ T1022] veth1_vlan: left promiscuous mode [ 1645.144075][ T1022] veth0_vlan: left promiscuous mode [ 1645.636766][T16174] netlink: 'syz.0.1983': attribute type 13 has an invalid length. [ 1645.674350][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1983'. [ 1646.313897][T16115] Bluetooth: hci1: command tx timeout [ 1646.541929][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 1646.622747][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 1647.719534][T15900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.195232][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.213847][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.235401][T16060] bridge_slave_0: entered allmulticast mode [ 1648.246814][T16060] bridge_slave_0: entered promiscuous mode [ 1648.277510][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.285538][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.293981][T16060] bridge_slave_1: entered allmulticast mode [ 1648.304834][T16060] bridge_slave_1: entered promiscuous mode [ 1648.338722][T15900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.702122][ T7527] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.751843][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.891248][ T7527] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.913984][ T7527] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.005325][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.248352][ T7527] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.751152][T16060] team0: Port device team_slave_0 added [ 1649.790614][T16060] team0: Port device team_slave_1 added [ 1650.138480][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 1650.191823][T16196] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 1650.236308][T16196] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1987'. [ 1650.849189][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1650.863216][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1650.892408][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1650.913222][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1650.921505][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1650.953621][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.159628][T16060] hsr_slave_0: entered promiscuous mode [ 1652.187685][T16060] hsr_slave_1: entered promiscuous mode [ 1652.207627][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 1652.225144][T16060] Cannot create hsr debugfs directory [ 1652.843079][ T1022] bridge_slave_1: left allmulticast mode [ 1652.851583][ T1022] bridge_slave_1: left promiscuous mode [ 1652.885022][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.909739][ T1022] bridge_slave_0: left allmulticast mode [ 1652.917603][ T1022] bridge_slave_0: left promiscuous mode [ 1652.927165][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.342111][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.376972][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.396164][ T1022] bond0 (unregistering): Released all slaves [ 1653.414802][ T5225] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1653.927690][ T1022] hsr_slave_0: left promiscuous mode [ 1653.959304][ T1022] hsr_slave_1: left promiscuous mode [ 1653.980124][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1654.006506][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1654.096860][ T1022] veth1_macvtap: left promiscuous mode [ 1654.115046][ T1022] veth0_macvtap: left promiscuous mode [ 1654.127073][ T1022] veth1_vlan: left promiscuous mode [ 1654.150512][ T1022] veth0_vlan: left promiscuous mode [ 1655.414772][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 1655.519896][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 1655.769263][ T4871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1655.779523][ T4871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1655.799853][ T4871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1655.824069][ T4871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1655.840786][ T4871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1656.688372][T16113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.705405][T16113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.715726][T16113] bridge_slave_0: entered allmulticast mode [ 1656.733633][T16113] bridge_slave_0: entered promiscuous mode [ 1656.752130][T16131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.769221][T16131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.777638][T16131] bridge_slave_0: entered allmulticast mode [ 1656.791352][T16131] bridge_slave_0: entered promiscuous mode [ 1656.851786][T16113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.861638][T16113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.870080][T16113] bridge_slave_1: entered allmulticast mode [ 1656.881507][T16113] bridge_slave_1: entered promiscuous mode [ 1656.900958][T16131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.911116][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.919528][T16131] bridge_slave_1: entered allmulticast mode [ 1656.953055][T16131] bridge_slave_1: entered promiscuous mode [ 1657.317822][T16113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.348061][T16131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.458383][T16113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.497779][T16131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.613148][ T1022] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.871937][T16113] team0: Port device team_slave_0 added [ 1657.889434][T16131] team0: Port device team_slave_0 added [ 1657.905930][T16115] Bluetooth: hci2: command tx timeout [ 1657.928210][ T1022] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.038681][T16113] team0: Port device team_slave_1 added [ 1658.111299][T16131] team0: Port device team_slave_1 added [ 1658.137996][ T1022] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.331821][ T1022] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.351214][T16113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.358640][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.386661][T16113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.536476][T16113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.544945][T16113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.572503][T16113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.661346][T16131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.690567][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.720175][T16131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.806037][T16131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.823742][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.869557][T16131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.407314][T16113] hsr_slave_0: entered promiscuous mode [ 1659.419487][T16113] hsr_slave_1: entered promiscuous mode [ 1659.429843][T16113] debugfs: 'hsr0' already exists in 'hsr' [ 1659.437726][T16113] Cannot create hsr debugfs directory [ 1659.727379][T16131] hsr_slave_0: entered promiscuous mode [ 1659.739311][T16131] hsr_slave_1: entered promiscuous mode [ 1659.750197][T16131] debugfs: 'hsr0' already exists in 'hsr' [ 1659.758126][T16131] Cannot create hsr debugfs directory [ 1659.948950][ T1022] bridge_slave_1: left allmulticast mode [ 1659.960317][ T1022] bridge_slave_1: left promiscuous mode [ 1659.973042][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.985681][T16115] Bluetooth: hci2: command tx timeout [ 1660.001813][ T1022] bridge_slave_0: left allmulticast mode [ 1660.014678][ T1022] bridge_slave_0: left promiscuous mode [ 1660.021710][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.627075][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.649163][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.669938][ T1022] bond0 (unregistering): Released all slaves [ 1660.812171][ T5225] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1660.941393][T16060] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1660.971531][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1661.000873][ T1022] hsr_slave_0: left promiscuous mode [ 1661.009233][ T1022] hsr_slave_1: left promiscuous mode [ 1661.019086][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.027953][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.038882][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.048123][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.086660][ T1022] veth1_macvtap: left promiscuous mode [ 1661.092432][ T1022] veth0_macvtap: left promiscuous mode [ 1661.100208][ T1022] veth1_vlan: left promiscuous mode [ 1661.106543][ T1022] veth0_vlan: left promiscuous mode [ 1661.811439][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 1661.839917][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 1662.064733][T16115] Bluetooth: hci2: command tx timeout [ 1662.246665][T16060] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1662.279141][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1662.422370][T16060] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1662.463141][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1662.559789][T16060] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1662.584641][T16060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1663.758291][T16229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.766727][T16229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.774874][T16229] bridge_slave_0: entered allmulticast mode [ 1663.788112][T16229] bridge_slave_0: entered promiscuous mode [ 1663.858316][T16229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.868148][T16229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.878831][T16229] bridge_slave_1: entered allmulticast mode [ 1663.890342][T16229] bridge_slave_1: entered promiscuous mode [ 1664.061190][T16229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.106578][T16229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1664.144628][T16115] Bluetooth: hci2: command tx timeout [ 1664.255899][T16229] team0: Port device team_slave_0 added [ 1664.285393][T16229] team0: Port device team_slave_1 added [ 1664.427632][T16229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.435350][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.462814][T16229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.507565][T16229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.515136][T16229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1664.542001][T16229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.646553][T16131] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1664.669766][T16131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1664.706399][T16131] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1664.741018][T16131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1664.806365][T16131] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1664.834185][T16131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1664.912790][T16131] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1664.936988][T16131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1665.004818][T16229] hsr_slave_0: entered promiscuous mode [ 1665.017962][T16229] hsr_slave_1: entered promiscuous mode [ 1665.028587][T16229] debugfs: 'hsr0' already exists in 'hsr' [ 1665.037105][T16229] Cannot create hsr debugfs directory [ 1665.261139][T16113] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1665.293708][T16113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1665.322090][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.377830][T16113] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1665.403703][T16113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1665.466424][T16113] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1665.489415][T16113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1665.500265][T16113] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1665.521370][T16113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1665.922867][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1666.067633][T13196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.075404][T13196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.188651][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.196224][ T7563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1667.021087][T16229] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1667.080457][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1667.116408][T16131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.138663][T16229] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1667.190089][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1667.217550][T16229] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1667.247818][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1667.295451][T16229] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1667.350916][T16229] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1667.616720][T16131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.795025][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.802786][ T7559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1667.902629][T16113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.936163][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.944025][ T7559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.298683][T16113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1668.488718][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.496573][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.622382][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.630133][ T7527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.476737][T16229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.632783][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1669.866696][T16229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.072973][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.080675][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.274563][T13196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.282260][T13196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.901657][T16131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.912746][T16060] veth0_vlan: entered promiscuous mode [ 1673.292395][T16060] veth1_vlan: entered promiscuous mode [ 1674.006414][T16113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.185957][T16060] veth0_macvtap: entered promiscuous mode [ 1674.312163][T16060] veth1_macvtap: entered promiscuous mode [ 1674.724182][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1674.942584][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1675.190261][ T7527] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.235711][ T7527] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.277644][ T7527] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.373884][ T7527] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.967384][T16229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.266999][T16131] veth0_vlan: entered promiscuous mode [ 1676.434372][T16131] veth1_vlan: entered promiscuous mode [ 1677.253483][T16131] veth0_macvtap: entered promiscuous mode [ 1677.469492][T16113] veth0_vlan: entered promiscuous mode [ 1677.577291][T16131] veth1_macvtap: entered promiscuous mode [ 1677.800772][T16113] veth1_vlan: entered promiscuous mode [ 1677.971920][T16131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1678.192744][T16131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1678.361048][ T7557] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.393908][ T7557] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.439100][ T7557] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.468587][ T7557] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.922505][T16113] veth0_macvtap: entered promiscuous mode [ 1679.119114][T16113] veth1_macvtap: entered promiscuous mode [ 1679.202825][T16229] veth0_vlan: entered promiscuous mode [ 1679.469729][T16113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1679.501771][T16229] veth1_vlan: entered promiscuous mode [ 1679.656180][T16113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1679.922068][ T7527] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1679.942071][ T7527] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.012286][ T7527] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.044634][ T7527] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.528860][T16229] veth0_macvtap: entered promiscuous mode [ 1680.679823][T16229] veth1_macvtap: entered promiscuous mode [ 1681.229890][T16229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.516956][T16229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.837323][ T7542] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.871818][ T7542] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.912305][ T7542] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.981919][ T7542] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.891109][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.919696][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.267173][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.307600][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.925091][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1683.931882][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1686.532156][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.602435][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.069758][ T7559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.126023][ T7559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.179298][T16452] loop8: detected capacity change from 0 to 512 [ 1688.242723][T16452] ======================================================= [ 1688.242723][T16452] WARNING: The mand mount option has been deprecated and [ 1688.242723][T16452] and is ignored by this kernel. Remove the mand [ 1688.242723][T16452] option from the mount to silence this warning. [ 1688.242723][T16452] ======================================================= [ 1688.383120][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 1688.455777][T16452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1688.637243][T16452] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1688.658567][T16452] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1689.170489][T16060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.221278][ T7545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.265952][ T7545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.757628][ T7557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.814282][ T7557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.791871][T13196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.840343][T13196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.491222][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.542072][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.460778][T16482] loop7: detected capacity change from 0 to 128 [ 1694.572774][T16488] loop9: detected capacity change from 0 to 4096 [ 1694.891854][T16496] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1695.186498][ T29] audit: type=1800 audit(1777744709.652:19): pid=16488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1640" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1695.384052][ T29] audit: type=1800 audit(1777744709.852:20): pid=16500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1640" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1696.296179][ T4871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1696.307968][ T4871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1696.319966][ T4871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1696.344501][ T4871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1696.360583][ T4871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1697.554244][T16517] loop7: detected capacity change from 0 to 64 [ 1698.464170][ T4871] Bluetooth: hci3: command tx timeout [ 1698.604153][T16519] loop8: detected capacity change from 0 to 2048 [ 1698.815142][T16523] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1699.699156][T16523] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1699.763100][T16523] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1699.833116][T16523] Remounting filesystem read-only [ 1699.885017][T16060] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1700.552990][ T4871] Bluetooth: hci3: command tx timeout [ 1701.990341][T16540] loop7: detected capacity change from 0 to 2048 [ 1702.289308][T16540] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1702.627623][ T4871] Bluetooth: hci3: command tx timeout [ 1703.436537][T16131] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1704.092471][T16559] random: crng reseeded on system resumption [ 1704.655883][T10480] syz_tun (unregistering): left allmulticast mode [ 1704.704221][ T4871] Bluetooth: hci3: command tx timeout [ 1705.044195][T10302] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1705.298827][ T80] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.305076][T10302] usb 9-1: Using ep0 maxpacket: 32 [ 1705.374214][T10302] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.440610][T10302] usb 9-1: config 0 has no interfaces? [ 1705.477562][T10302] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1705.540380][T10302] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.625936][T10302] usb 9-1: config 0 descriptor?? [ 1705.630920][ T80] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.834574][T16569] loop6: detected capacity change from 0 to 64 [ 1705.999267][ T80] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.099397][T12974] usb 9-1: USB disconnect, device number 2 [ 1706.223049][ T80] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.155824][T16578] loop7: detected capacity change from 0 to 256 [ 1707.317668][T16578] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1707.459081][T16578] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1709.760610][T16595] loop7: detected capacity change from 0 to 512 [ 1709.791169][ T80] gretap0 (unregistering): left promiscuous mode [ 1710.072291][T16595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1710.124268][T16595] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1710.323559][ T29] audit: type=1800 audit(1777744724.762:21): pid=16595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2036" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1710.652711][T16131] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1710.680404][ T80] bond0 (unregistering): (slave vcan1): Releasing backup interface [ 1710.692191][T12973] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1710.737443][ T80] bond0 (unregistering): (slave vcan2): Releasing backup interface [ 1710.761630][ T80] bond0 (unregistering): Released all slaves [ 1710.946896][T12973] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1710.995555][T12973] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.050728][T12973] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1711.110226][T12973] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1711.222599][T12973] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1711.278899][ T80] tipc: Left network mode [ 1711.325334][T12973] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1711.379210][T12973] usb 10-1: Product: syz [ 1711.402632][T12973] usb 10-1: Manufacturer: syz [ 1711.564342][T12973] cdc_wdm 10-1:1.0: skipping garbage [ 1711.604089][T12973] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1711.827117][T12973] usb 10-1: USB disconnect, device number 2 [ 1712.405412][T12973] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1712.684571][T12973] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1712.736384][T12973] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.747089][T16616] loop7: detected capacity change from 0 to 64 [ 1712.837583][T12973] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1712.891810][T12973] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1713.019388][T12973] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1713.093782][T12973] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1713.146601][ T80] veth1_to_team: left promiscuous mode [ 1713.160915][T12973] usb 10-1: Product: syz [ 1713.219912][T12973] usb 10-1: Manufacturer: syz [ 1713.310939][ T80] hsr_slave_0: left promiscuous mode [ 1713.327584][T12973] cdc_wdm 10-1:1.0: skipping garbage [ 1713.373188][T12973] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1713.406511][ T80] hsr_slave_1: left promiscuous mode [ 1713.451261][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.507448][ T80] net_ratelimit: 10 callbacks suppressed [ 1713.507527][ T80] batadv0: mtu less than device minimum [ 1713.581129][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1713.595244][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1713.608798][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1713.621991][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1713.636037][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1713.649473][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1713.662607][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1713.676406][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1713.689988][ T80] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1714.039293][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.092291][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.120269][T12973] usb 10-1: USB disconnect, device number 3 [ 1714.426483][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.500264][ T80] batman_adv: batadv0: Interface deactivated: dummy0 [ 1714.569914][ T80] batman_adv: batadv0: Removing interface: dummy0 [ 1714.729194][ T80] batadv_slave_0: left allmulticast mode [ 1714.768318][ T80] batadv_slave_0: left promiscuous mode [ 1714.809233][ T80] veth1_macvtap: left promiscuous mode [ 1714.877415][ T80] veth0_macvtap: left promiscuous mode [ 1715.711483][T16632] loop6: detected capacity change from 0 to 512 [ 1715.810286][T16632] ext4: Unknown parameter 'seclabel' [ 1718.536145][ T80] team0 (unregistering): Port device team_slave_1 removed [ 1718.660907][ T80] team0 (unregistering): Port device team_slave_0 removed [ 1719.347846][T16669] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2052'. [ 1720.354646][T16265] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1720.509710][ T5225] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1720.652283][T16265] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1720.692171][T16265] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.762462][T16265] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1720.822557][T16265] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1720.905779][T16265] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1720.947218][T16265] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1720.996427][T16265] usb 9-1: Product: syz [ 1721.026333][T16265] usb 9-1: Manufacturer: syz [ 1721.139863][T16265] cdc_wdm 9-1:1.0: skipping garbage [ 1721.168470][T16265] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1721.285140][T16678] loop6: detected capacity change from 0 to 64 [ 1721.299495][T16507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.348337][T16507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.404891][T16507] bridge_slave_0: entered allmulticast mode [ 1721.439090][T16265] usb 9-1: USB disconnect, device number 3 [ 1721.494922][T16507] bridge_slave_0: entered promiscuous mode [ 1721.598411][T16507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.621450][T16507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.664144][T16507] bridge_slave_1: entered allmulticast mode [ 1721.750668][T16507] bridge_slave_1: entered promiscuous mode [ 1722.048734][T16265] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1722.348819][T16265] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1722.385618][T16265] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.471352][T16265] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1722.528049][T16507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.547196][T16265] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.683996][T16265] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1722.742250][T16507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.755174][T16265] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1722.783166][T16265] usb 9-1: Product: syz [ 1722.808857][T16265] usb 9-1: Manufacturer: syz [ 1722.880931][T16265] cdc_wdm 9-1:1.0: skipping garbage [ 1722.904730][T16265] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1723.308612][T16507] team0: Port device team_slave_0 added [ 1723.456694][T16507] team0: Port device team_slave_1 added [ 1723.563884][T12973] usb 9-1: USB disconnect, device number 4 [ 1723.776376][T16690] loop9: detected capacity change from 0 to 64 [ 1724.161760][T16507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.201775][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.323765][T16507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.421730][T16507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.465370][T16507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.634588][T16507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.124333][T16507] hsr_slave_0: entered promiscuous mode [ 1726.201944][T16507] hsr_slave_1: entered promiscuous mode [ 1727.776581][T16720] loop8: detected capacity change from 0 to 64 [ 1728.103740][T12969] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1728.365885][T16724] loop9: detected capacity change from 0 to 2048 [ 1728.387305][T12969] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1728.421866][T12969] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.494255][T12969] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1728.527241][T12969] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1728.595312][T16726] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1728.667825][T12969] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1728.702225][T12969] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1728.722952][T12969] usb 7-1: Product: syz [ 1728.747485][T12969] usb 7-1: Manufacturer: syz [ 1728.813527][T16726] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1728.880368][T12969] cdc_wdm 7-1:1.0: skipping garbage [ 1728.906431][T16726] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1728.936095][T12969] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1728.985435][T16726] Remounting filesystem read-only [ 1729.165459][T12969] usb 7-1: USB disconnect, device number 2 [ 1729.572622][T16229] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 1729.784317][T12969] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1730.041280][T12969] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1730.120296][T12969] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.180463][T12969] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1730.232208][T12969] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1730.312740][T12969] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1730.384228][T12969] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1730.435986][T12969] usb 7-1: Product: syz [ 1730.450492][T12969] usb 7-1: Manufacturer: syz [ 1730.665971][T12969] cdc_wdm 7-1:1.0: skipping garbage [ 1730.722200][T12969] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1731.170167][T16736] loop8: detected capacity change from 0 to 64 [ 1731.558880][T12969] usb 7-1: USB disconnect, device number 3 [ 1731.877414][T16507] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1732.017748][T16507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1732.134919][T16507] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1732.249634][T16507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1732.317749][T16507] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1732.483800][T16507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1732.682131][T16745] loop7: detected capacity change from 0 to 512 [ 1732.750149][T16745] EXT4-fs: Ignoring removed orlov option [ 1732.801142][T16745] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1732.837953][T16507] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1733.001668][T16507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1735.053798][T16765] loop6: detected capacity change from 0 to 64 [ 1736.752482][T16507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1737.293124][T16507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1737.555722][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.563692][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1737.868670][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.876448][ T7559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1738.426810][T16793] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 1738.458974][T16791] IPVS: stopping backup sync thread 16793 ... [ 1738.917763][T16795] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2091'. [ 1738.995207][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2091'. [ 1739.072140][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2091'. [ 1743.868310][T16840] loop9: detected capacity change from 0 to 64 [ 1745.376526][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1745.383830][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1746.159084][T16860] netlink: 'syz.7.2106': attribute type 1 has an invalid length. [ 1746.839266][T16862] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 1746.894378][T16862] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1747.139676][T16862] bond1: (slave vcan0): making interface the new active one [ 1747.194860][T16862] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 1747.335523][T16865] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1747.466977][T16865] bond1: (slave vcan1): Enslaving as a backup interface with an up link [ 1748.590262][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e83e000: rx timeout, send abort [ 1749.091990][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dff9000: rx timeout, send abort [ 1749.101998][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e83e000: abort rx timeout. Force session deactivation [ 1749.126455][T16507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.601004][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dff9000: abort rx timeout. Force session deactivation [ 1750.510543][T16507] veth0_vlan: entered promiscuous mode [ 1750.783635][T16507] veth1_vlan: entered promiscuous mode [ 1751.426351][T16901] loop8: detected capacity change from 0 to 64 [ 1751.840739][T16507] veth0_macvtap: entered promiscuous mode [ 1752.169161][T16507] veth1_macvtap: entered promiscuous mode [ 1752.543777][T16115] Bluetooth: hci4: command 0x0406 tx timeout [ 1753.647969][T16920] netlink: 'syz.7.2122': attribute type 1 has an invalid length. [ 1753.870470][T16920] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 1754.043557][T16920] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 1754.095185][T16507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1754.364539][T16922] bond1: (slave vcan3): The slave device specified does not support setting the MAC address [ 1754.510583][T16922] bond1: (slave vcan3): Enslaving as a backup interface with an up link [ 1755.245553][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e82de00: rx timeout, send abort [ 1755.746547][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e82da00: rx timeout, send abort [ 1755.755807][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e82de00: abort rx timeout. Force session deactivation [ 1756.255551][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e82da00: abort rx timeout. Force session deactivation [ 1756.504868][T16940] loop8: detected capacity change from 0 to 64 [ 1757.321503][T14665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1757.340405][T14665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1757.351133][T14665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1757.373933][T14665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1757.391627][T14665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1757.664127][T14665] Bluetooth: hci5: command 0x0406 tx timeout [ 1759.154592][T16957] loop6: detected capacity change from 0 to 64 [ 1759.503960][ T4871] Bluetooth: hci0: command tx timeout [ 1760.017312][T16962] netlink: 'syz.9.2136': attribute type 1 has an invalid length. [ 1760.638247][T16964] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1760.717548][T16964] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1760.899487][T16964] bond1: (slave vcan1): making interface the new active one [ 1760.997456][T16964] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1761.156969][T16965] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 1761.320168][T16965] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 1761.569812][ C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 1761.586437][T14665] Bluetooth: hci0: command tx timeout [ 1761.821030][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e83ce00: rx timeout, send abort [ 1762.329914][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e83ce00: abort rx timeout. Force session deactivation [ 1762.787159][T14665] Bluetooth: hci1: command 0x0406 tx timeout [ 1763.663661][ T4871] Bluetooth: hci0: command tx timeout [ 1763.898081][T11231] bridge_slave_1: left allmulticast mode [ 1763.920102][T16993] loop8: detected capacity change from 0 to 64 [ 1763.921682][T11231] bridge_slave_1: left promiscuous mode [ 1763.987019][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.078636][T11231] bridge_slave_0: left allmulticast mode [ 1764.108225][T11231] bridge_slave_0: left promiscuous mode [ 1764.151837][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.229952][T17004] loop6: detected capacity change from 0 to 64 [ 1765.743719][ T4871] Bluetooth: hci0: command tx timeout [ 1766.151202][T17009] netlink: 'syz.9.2149': attribute type 1 has an invalid length. [ 1766.617695][T11231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1766.782332][T11231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1766.872258][T11231] bond0 (unregistering): Released all slaves [ 1767.092891][T17010] bond1: (slave vcan3): The slave device specified does not support setting the MAC address [ 1767.236737][T17010] bond1: (slave vcan3): Enslaving as a backup interface with an up link [ 1767.378923][T17012] bond1: (slave vcan4): The slave device specified does not support setting the MAC address [ 1767.496146][T17012] bond1: (slave vcan4): Enslaving as a backup interface with an up link [ 1767.824525][T11231] hsr_slave_0: left promiscuous mode [ 1767.887666][T11231] hsr_slave_1: left promiscuous mode [ 1767.943721][T11231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1767.990165][T11231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1768.054776][T11231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1768.247230][T11231] veth1_macvtap: left promiscuous mode [ 1768.270804][T11231] veth0_macvtap: left promiscuous mode [ 1768.273169][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e901200: rx timeout, send abort [ 1768.277820][T11231] veth1_vlan: left promiscuous mode [ 1768.314213][T11231] veth0_vlan: left promiscuous mode [ 1768.772522][T17026] loop9: detected capacity change from 0 to 1024 [ 1768.779726][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013ea7800: rx timeout, send abort [ 1768.793620][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e901200: abort rx timeout. Force session deactivation [ 1769.125362][T17026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1769.279964][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013ea7800: abort rx timeout. Force session deactivation [ 1769.752868][T16229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1771.162221][T17045] loop8: detected capacity change from 0 to 64 [ 1772.484217][T11231] team0 (unregistering): Port device team_slave_1 removed [ 1772.596991][T11231] team0 (unregistering): Port device team_slave_0 removed [ 1772.861811][T17059] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2162'. [ 1772.937399][T17060] netlink: 'syz.8.2163': attribute type 1 has an invalid length. [ 1773.907726][T17061] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1773.948947][T17061] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1774.068415][T17061] bond1: (slave vcan1): making interface the new active one [ 1774.105510][T17066] loop7: detected capacity change from 0 to 128 [ 1774.119653][T17061] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1774.252047][ T29] audit: type=1800 audit(1777744788.712:22): pid=17066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2164" name="file1" dev="loop7" ino=1048631 res=0 errno=0 [ 1774.284733][T17062] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 1774.377582][T17062] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 1774.607159][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dde6c00: rx timeout, send abort [ 1775.108029][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dd33800: rx timeout, send abort [ 1775.117877][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dde6c00: abort rx timeout. Force session deactivation [ 1775.197194][T17073] loop8: detected capacity change from 0 to 512 [ 1775.478734][T17073] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1775.617234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dd33800: abort rx timeout. Force session deactivation [ 1776.060117][T16131] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1776.102156][T16131] FAT-fs (loop7): Filesystem has been set read-only [ 1776.576306][T16060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1777.871404][ T7542] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.113114][T17097] loop6: detected capacity change from 0 to 64 [ 1778.143731][T14665] Bluetooth: hci2: command 0x0406 tx timeout [ 1778.239144][ T7542] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.553004][ T7542] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1779.126560][ T7542] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.223719][ T7542] bridge_slave_1: left allmulticast mode [ 1780.279711][ T7542] bridge_slave_1: left promiscuous mode [ 1780.316002][ T7542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.391368][ T7542] bridge_slave_0: left allmulticast mode [ 1780.428604][ T7542] bridge_slave_0: left promiscuous mode [ 1780.474861][ T7542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.660249][ T7542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1781.733961][ T7542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1781.786857][ T7542] bond0 (unregistering): Released all slaves [ 1781.821523][ T7542] bond1 (unregistering): (slave vcan0): Releasing backup interface [ 1781.868409][ T7542] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1781.936916][ T7542] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 1782.025708][ T7542] bond1 (unregistering): (slave vcan3): Releasing backup interface [ 1782.067245][ T7542] bond1 (unregistering): Released all slaves [ 1782.228529][ T5225] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1782.260847][T17123] loop8: detected capacity change from 0 to 512 [ 1782.450338][T17123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1782.486401][T17123] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1782.783025][T17122] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2177'. [ 1783.358571][T16060] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1783.605260][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.659676][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.685908][T14665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1783.697276][T14665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1783.707933][T14665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1783.723905][T14665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1783.741717][T16941] bridge_slave_0: entered allmulticast mode [ 1783.742379][T14665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1783.813863][T16941] bridge_slave_0: entered promiscuous mode [ 1784.101378][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.155583][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.196220][T16941] bridge_slave_1: entered allmulticast mode [ 1784.272619][T16941] bridge_slave_1: entered promiscuous mode [ 1784.903191][ T7542] hsr_slave_0: left promiscuous mode [ 1784.920586][ T7542] hsr_slave_1: left promiscuous mode [ 1784.951713][ T7542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1784.972276][ T7542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1784.990944][ T7542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1785.012148][ T7542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.086878][ T7542] veth1_macvtap: left promiscuous mode [ 1785.101368][ T7542] veth0_macvtap: left promiscuous mode [ 1785.117341][ T7542] veth1_vlan: left promiscuous mode [ 1785.130007][ T7542] veth0_vlan: left promiscuous mode [ 1785.823951][ T4871] Bluetooth: hci1: command tx timeout [ 1786.337696][T17152] loop9: detected capacity change from 0 to 64 [ 1786.650118][ T7542] team0 (unregistering): Port device team_slave_1 removed [ 1786.743175][ T7542] team0 (unregistering): Port device team_slave_0 removed [ 1787.467053][T16941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1787.628303][T16941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.903663][ T4871] Bluetooth: hci1: command tx timeout [ 1788.268137][T16941] team0: Port device team_slave_0 added [ 1788.309565][T16941] team0: Port device team_slave_1 added [ 1788.876757][T16941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.912883][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.067077][T16941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.150017][T16941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.253852][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.414584][T16941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.982270][T17171] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2190'. [ 1789.995112][ T4871] Bluetooth: hci1: command tx timeout [ 1790.252104][T16941] hsr_slave_0: entered promiscuous mode [ 1790.311410][T16941] hsr_slave_1: entered promiscuous mode [ 1791.179905][T17188] loop8: detected capacity change from 0 to 64 [ 1792.063905][ T4871] Bluetooth: hci1: command tx timeout [ 1794.332775][T17210] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2202'. [ 1795.841426][T17229] loop6: detected capacity change from 0 to 64 [ 1795.909980][T16941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1796.034513][T16941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1796.110371][T16941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1796.256512][T16941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1796.659223][T16941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1796.718811][T16941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1796.898056][T16941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1797.017008][T16941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1799.220698][T17134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.264383][T17134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.311074][T17134] bridge_slave_0: entered allmulticast mode [ 1799.360095][T17134] bridge_slave_0: entered promiscuous mode [ 1799.458350][T17134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.484888][T17134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.492924][T17134] bridge_slave_1: entered allmulticast mode [ 1799.545702][T17134] bridge_slave_1: entered promiscuous mode [ 1799.813920][T17265] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2215'. [ 1799.900172][T17263] sctp: [Deprecated]: syz.8.2216 (pid 17263) Use of int in max_burst socket option deprecated. [ 1799.900172][T17263] Use struct sctp_assoc_value instead [ 1800.127081][T17134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1800.248336][T17134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.840751][T17134] team0: Port device team_slave_0 added [ 1800.922399][T17134] team0: Port device team_slave_1 added [ 1801.078599][T17277] loop8: detected capacity change from 0 to 64 [ 1801.696825][T17134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.724461][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.809269][T17134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.915796][T17134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.932081][T17134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1802.031303][T17134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1802.206851][T16941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1802.958212][T17134] hsr_slave_0: entered promiscuous mode [ 1803.016315][T17134] hsr_slave_1: entered promiscuous mode [ 1803.042869][T17134] debugfs: 'hsr0' already exists in 'hsr' [ 1803.069119][T17134] Cannot create hsr debugfs directory [ 1803.183798][T16941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.739131][T16657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.747222][T16657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.321286][ T5225] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1804.520551][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.528373][ T7557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1804.741726][T17295] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2226'. [ 1804.749076][T17300] loop9: detected capacity change from 0 to 2048 [ 1804.882110][T17300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1805.522091][T16229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1806.385598][T17309] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2231'. [ 1806.430949][T17313] loop8: detected capacity change from 0 to 64 [ 1806.823787][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1806.830608][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1808.059108][T17320] bridge0: port 3(macvlan2) entered blocking state [ 1808.070055][T17320] bridge0: port 3(macvlan2) entered disabled state [ 1808.081931][T17320] macvlan2: entered allmulticast mode [ 1808.114878][T17320] ip6gretap0: entered allmulticast mode [ 1808.160513][T17320] macvlan2: entered promiscuous mode [ 1808.172355][T17320] bridge0: port 3(macvlan2) entered blocking state [ 1808.180245][T17320] bridge0: port 3(macvlan2) entered forwarding state [ 1808.342452][T16060] BFS-fs: bfs_iget(): Bad inode number loop8:0000fe02 [ 1808.431228][T16060] BFS-fs: bfs_iget(): Bad inode number loop8:0000fe02 [ 1809.619045][ T7559] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.010832][ T7559] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.087610][T17134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1810.242992][T17134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1810.437961][ T7559] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.570752][T17134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1810.728451][T17134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1810.830531][T17134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1810.952291][T17134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1811.095485][ T7559] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.159973][T17134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1811.309909][T17134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1812.321007][ T7559] bridge_slave_1: left allmulticast mode [ 1812.344788][ T7559] bridge_slave_1: left promiscuous mode [ 1812.374332][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.421082][ T7559] bridge_slave_0: left allmulticast mode [ 1812.439689][ T7559] bridge_slave_0: left promiscuous mode [ 1812.484786][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.689344][T17352] loop6: detected capacity change from 0 to 128 [ 1813.706660][ T7559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1813.798067][ T7559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1813.814434][T17353] loop9: detected capacity change from 0 to 256 [ 1813.877562][T17353] FAT-fs (loop9): Directory bread(block 1285) failed [ 1813.888129][ T7559] bond0 (unregistering): Released all slaves [ 1813.915596][T17353] FAT-fs (loop9): Directory bread(block 1286) failed [ 1813.938471][ T29] audit: type=1800 audit(1777744828.402:23): pid=17352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2242" name="file1" dev="loop6" ino=1048641 res=0 errno=0 [ 1813.962097][T17353] FAT-fs (loop9): Directory bread(block 1287) failed [ 1814.008647][T17353] FAT-fs (loop9): Directory bread(block 1288) failed [ 1814.083053][ T7559] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 1814.191698][T17353] FAT-fs (loop9): Directory bread(block 1285) failed [ 1814.204879][ T7559] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 1814.252989][T17353] FAT-fs (loop9): Directory bread(block 1286) failed [ 1814.291077][ T7559] bond1 (unregistering): Released all slaves [ 1814.304547][T17353] FAT-fs (loop9): Directory bread(block 1287) failed [ 1814.327532][T17353] FAT-fs (loop9): Directory bread(block 1288) failed [ 1814.373118][T17353] FAT-fs (loop9): Directory bread(block 1285) failed [ 1814.406834][T17353] FAT-fs (loop9): Directory bread(block 1286) failed [ 1814.613396][ T5225] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1815.747796][T14665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1815.764459][T14665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1815.785492][T14665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1815.835873][T14665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1815.860314][T14665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1815.922621][T17363] loop9: detected capacity change from 0 to 64 [ 1816.053070][T16113] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1816.129127][T16113] FAT-fs (loop6): Filesystem has been set read-only [ 1816.898948][ T7559] hsr_slave_0: left promiscuous mode [ 1816.986491][ T7559] hsr_slave_1: left promiscuous mode [ 1817.034993][ T7559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1817.042932][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1817.146680][ T7559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1817.193017][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1817.403208][ T7559] veth1_macvtap: left promiscuous mode [ 1817.447261][ T7559] veth0_macvtap: left promiscuous mode [ 1817.497365][ T7559] veth1_vlan: left promiscuous mode [ 1817.548670][ T7559] veth0_vlan: left promiscuous mode [ 1817.721144][T14665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1817.738700][T14665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1817.749167][T14665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1817.770689][T14665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1817.786216][T14665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1817.903949][T14665] Bluetooth: hci3: command tx timeout [ 1818.928644][T17376] loop9: detected capacity change from 0 to 1024 [ 1818.984301][T17376] EXT4-fs (loop9): filesystem is read-only [ 1819.034933][T17376] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1819.096407][T17376] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1819.132672][T17376] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 1819.222721][T17376] EXT4-fs (loop9): filesystem has both journal inode and journal device! [ 1819.824004][T14665] Bluetooth: hci4: command tx timeout [ 1819.983646][T14665] Bluetooth: hci3: command tx timeout [ 1820.877710][ T7559] team0 (unregistering): Port device team_slave_1 removed [ 1820.900862][T17387] loop9: detected capacity change from 0 to 512 [ 1820.952509][T17387] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1821.012466][ T7559] team0 (unregistering): Port device team_slave_0 removed [ 1821.087168][T17387] EXT4-fs (loop9): 1 orphan inode deleted [ 1821.099754][T17387] EXT4-fs (loop9): 1 truncate cleaned up [ 1821.160042][T17387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1821.248503][T17387] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1821.667589][T16229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.904128][T14665] Bluetooth: hci4: command tx timeout [ 1822.063650][T14665] Bluetooth: hci3: command tx timeout [ 1823.377521][T17134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1823.494453][ T5225] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1823.984329][T14665] Bluetooth: hci4: command tx timeout [ 1824.144532][T14665] Bluetooth: hci3: command tx timeout [ 1824.179172][T17134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.753920][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.761645][ T7557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1825.021773][T12663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.029579][T12663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1826.064370][T14665] Bluetooth: hci4: command tx timeout [ 1826.089883][ T80] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.253215][ T80] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.491450][ T80] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.724534][ T80] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.981736][T17419] loop9: detected capacity change from 0 to 64 [ 1828.011156][ T4871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1828.027989][ T4871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1828.043188][ T4871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1828.072458][ T4871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1828.104715][ T4871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1829.483615][ T80] bridge_slave_1: left allmulticast mode [ 1829.491630][ T80] bridge_slave_1: left promiscuous mode [ 1829.523662][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.586158][ T80] bridge_slave_0: left allmulticast mode [ 1829.610191][ T80] bridge_slave_0: left promiscuous mode [ 1829.643185][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.689608][ T80] bridge_slave_1: left allmulticast mode [ 1829.713664][ T80] bridge_slave_1: left promiscuous mode [ 1829.736162][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.765999][ T80] bridge_slave_0: left allmulticast mode [ 1829.784141][ T80] bridge_slave_0: left promiscuous mode [ 1829.792972][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.145995][T14665] Bluetooth: hci0: command tx timeout [ 1831.147518][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.189284][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.213627][ T80] bond0 (unregistering): Released all slaves [ 1831.682797][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.717930][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.733163][ T80] bond0 (unregistering): Released all slaves [ 1831.976999][ T5225] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1832.228031][T14665] Bluetooth: hci0: command tx timeout [ 1833.204880][ T80] hsr_slave_0: left promiscuous mode [ 1833.216694][ T80] hsr_slave_1: left promiscuous mode [ 1833.225976][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1833.238966][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1833.311640][ T80] hsr_slave_0: left promiscuous mode [ 1833.337584][ T80] hsr_slave_1: left promiscuous mode [ 1833.386792][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1833.408919][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1833.424046][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1833.431845][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1833.481643][ T80] veth1_macvtap: left promiscuous mode [ 1833.488123][ T80] veth0_macvtap: left promiscuous mode [ 1833.502079][ T80] veth1_vlan: left promiscuous mode [ 1833.508774][ T80] veth0_vlan: left promiscuous mode [ 1834.316112][T14665] Bluetooth: hci0: command tx timeout [ 1834.993051][ T80] team0 (unregistering): Port device team_slave_1 removed [ 1835.089714][ T80] team0 (unregistering): Port device team_slave_0 removed [ 1836.385860][T14665] Bluetooth: hci0: command tx timeout [ 1836.430538][ T80] team0 (unregistering): Port device team_slave_1 removed [ 1836.540255][ T80] team0 (unregistering): Port device team_slave_0 removed [ 1839.368296][T17369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.377062][T17369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.389877][T17369] bridge_slave_0: entered allmulticast mode [ 1839.402476][T17369] bridge_slave_0: entered promiscuous mode [ 1839.568756][T17369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.597248][T17369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.621351][T17369] bridge_slave_1: entered allmulticast mode [ 1839.654007][T17369] bridge_slave_1: entered promiscuous mode [ 1840.057808][T17369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.150936][T17360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.161912][T17360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.172722][T17360] bridge_slave_0: entered allmulticast mode [ 1840.190806][T17360] bridge_slave_0: entered promiscuous mode [ 1840.234246][T17369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1840.284298][T17360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.292267][T17360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.306055][T17360] bridge_slave_1: entered allmulticast mode [ 1840.316741][T17360] bridge_slave_1: entered promiscuous mode [ 1840.585374][T17134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1840.675148][T17360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.702753][T17369] team0: Port device team_slave_0 added [ 1840.785158][T17369] team0: Port device team_slave_1 added [ 1840.836856][T17360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1841.278484][T17360] team0: Port device team_slave_0 added [ 1841.289908][T17369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1841.301775][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.329892][T17369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1841.410403][T17360] team0: Port device team_slave_1 added [ 1841.475763][T17369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1841.485417][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.516184][T17369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1841.869688][T17360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1841.883746][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.959467][T17360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1842.046922][T17360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1842.066838][T17360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.127973][T17360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.631268][T17369] hsr_slave_0: entered promiscuous mode [ 1842.656851][T17369] hsr_slave_1: entered promiscuous mode [ 1843.057051][T17360] hsr_slave_0: entered promiscuous mode [ 1843.080485][T17360] hsr_slave_1: entered promiscuous mode [ 1843.106847][T17360] debugfs: 'hsr0' already exists in 'hsr' [ 1843.141034][T17360] Cannot create hsr debugfs directory [ 1843.490656][ T4871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1843.501752][ T4871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1843.532762][ T4871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1843.552344][ T4871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1843.566231][ T4871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1843.790213][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.831234][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.866306][T17424] bridge_slave_0: entered allmulticast mode [ 1843.922930][T17424] bridge_slave_0: entered promiscuous mode [ 1844.357055][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.376884][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.395837][T17424] bridge_slave_1: entered allmulticast mode [ 1844.424932][T17424] bridge_slave_1: entered promiscuous mode [ 1845.028492][T17424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.294818][T17424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.663857][ T4871] Bluetooth: hci5: command tx timeout [ 1845.897736][T17424] team0: Port device team_slave_0 added [ 1845.953714][T17424] team0: Port device team_slave_1 added [ 1846.608764][T17424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.616449][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.675306][T17424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.811919][T17424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.826217][T17424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.856436][T17424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.673988][T17424] hsr_slave_0: entered promiscuous mode [ 1847.692269][T17424] hsr_slave_1: entered promiscuous mode [ 1847.702814][T17424] debugfs: 'hsr0' already exists in 'hsr' [ 1847.709305][T17424] Cannot create hsr debugfs directory [ 1847.744110][ T4871] Bluetooth: hci5: command tx timeout [ 1848.525443][ T7559] bridge_slave_1: left allmulticast mode [ 1848.536055][ T7559] bridge_slave_1: left promiscuous mode [ 1848.549318][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.570422][ T7559] bridge_slave_0: left allmulticast mode [ 1848.577418][ T7559] bridge_slave_0: left promiscuous mode [ 1848.587523][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.200798][ T7559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1849.223150][ T7559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1849.270883][ T7559] bond0 (unregistering): Released all slaves [ 1849.644696][ T7559] hsr_slave_0: left promiscuous mode [ 1849.669425][ T7559] hsr_slave_1: left promiscuous mode [ 1849.681550][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1849.694594][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1849.836577][ T4871] Bluetooth: hci5: command tx timeout [ 1850.255468][ T7559] team0 (unregistering): Port device team_slave_1 removed [ 1850.322358][ T7559] team0 (unregistering): Port device team_slave_0 removed [ 1851.720777][T17360] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1851.795566][T17360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1851.818140][T17360] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1851.871344][T17360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1851.906949][ T4871] Bluetooth: hci5: command tx timeout [ 1851.959058][T17360] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1852.039304][T17360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1852.062221][T17360] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1852.133937][T17360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1852.772887][T17369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1852.850818][T17369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1852.877702][T17369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1852.939730][T17369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1853.082432][T17369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1853.116925][T17369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1853.148058][T17369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1853.176914][T17369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1853.708374][T17537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.729723][T17537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.740170][T17537] bridge_slave_0: entered allmulticast mode [ 1853.754674][T17537] bridge_slave_0: entered promiscuous mode [ 1853.818394][T17537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.828982][T17537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.842843][T17537] bridge_slave_1: entered allmulticast mode [ 1853.872699][T17537] bridge_slave_1: entered promiscuous mode [ 1854.140110][T17537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.173037][T17537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1854.517399][T17537] team0: Port device team_slave_0 added [ 1854.561196][T17537] team0: Port device team_slave_1 added [ 1854.901752][T17537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1854.918367][T17537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1854.947003][T17537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.001558][T17537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.010007][T17537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.041344][T17537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1855.069464][T17424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1855.119640][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1855.227223][T17424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1855.267676][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1855.311929][T17424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1855.348570][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1855.452071][T17424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1855.481297][T17424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1855.750412][T17537] hsr_slave_0: entered promiscuous mode [ 1855.771546][T17537] hsr_slave_1: entered promiscuous mode [ 1855.784017][T17537] debugfs: 'hsr0' already exists in 'hsr' [ 1855.790555][T17537] Cannot create hsr debugfs directory [ 1856.337468][T17360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.891165][T17360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.182447][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.190413][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.472698][T17369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.501142][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.508994][ T7557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.057895][T17369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.307221][T16657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.315376][T16657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1858.356023][T17537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1858.396158][T17537] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1858.509103][T16657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.517084][T16657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.551135][T17537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1858.588906][T17537] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1858.604195][T17537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1858.637628][T17537] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1858.719055][T17537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1858.749317][T17537] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1858.913869][T17424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1859.535068][T17424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1859.679216][T16657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.687063][T16657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1859.919135][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.927028][ T7557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1861.517712][T17537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.852730][T17537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1861.998854][T16657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.006594][T16657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.247823][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.255623][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.404338][T17360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1864.593124][T17369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1865.516011][T17369] veth0_vlan: entered promiscuous mode [ 1865.702433][T17369] veth1_vlan: entered promiscuous mode [ 1866.202613][T17424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1866.644685][T17369] veth0_macvtap: entered promiscuous mode [ 1866.798257][T17369] veth1_macvtap: entered promiscuous mode [ 1867.140954][T17360] veth0_vlan: entered promiscuous mode [ 1867.353188][T17369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1867.557981][T17369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1867.621562][T17424] veth0_vlan: entered promiscuous mode [ 1867.659451][T17360] veth1_vlan: entered promiscuous mode [ 1867.800131][T17537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1867.813825][ T7542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.837862][ T7542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.939562][ T7542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.971288][ T7542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.052418][T17424] veth1_vlan: entered promiscuous mode [ 1868.251022][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1868.259004][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1868.638549][T17360] veth0_macvtap: entered promiscuous mode [ 1868.719409][T17360] veth1_macvtap: entered promiscuous mode [ 1868.912461][T17424] veth0_macvtap: entered promiscuous mode [ 1869.099939][T17424] veth1_macvtap: entered promiscuous mode [ 1869.155154][T17537] veth0_vlan: entered promiscuous mode [ 1869.221669][T17360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1869.386594][T17360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1869.589957][T12663] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.605529][T12663] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.628136][T17424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1869.647047][T17537] veth1_vlan: entered promiscuous mode [ 1869.688355][T12663] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.708613][T12663] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.852208][T17424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1870.021015][T13196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.066886][ T7545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.106286][ T7545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.142518][ T7545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.692531][T17537] veth0_macvtap: entered promiscuous mode [ 1870.841690][T17537] veth1_macvtap: entered promiscuous mode [ 1871.246381][T17537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.460404][T17537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.678463][ T7542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.740516][ T7542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.811247][ T7542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.861822][ T7542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.941840][T14665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1875.956940][T14665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1875.974683][T14665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1875.997733][T14665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1876.021195][T14665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1877.378842][ T4871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1877.393630][ T4871] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1877.407386][ T4871] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1877.446049][ T4871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1877.464510][ T4871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1878.144767][ T4871] Bluetooth: hci1: command tx timeout [ 1879.505485][ T4871] Bluetooth: hci6: command tx timeout [ 1879.895254][ T1022] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.150083][ T1022] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.223920][ T4871] Bluetooth: hci1: command tx timeout [ 1880.424620][ T1022] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.673996][ T1022] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.981606][T13196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1881.043547][T13196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.584201][ T4871] Bluetooth: hci6: command tx timeout [ 1881.799727][T13196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1881.827908][T13196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1882.308528][ T4871] Bluetooth: hci1: command tx timeout [ 1882.669218][T17832] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2262'. [ 1882.701714][ T1022] bridge_slave_1: left allmulticast mode [ 1882.711692][T17832] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2262'. [ 1882.729805][ T1022] bridge_slave_1: left promiscuous mode [ 1882.739830][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.809703][ T1022] bridge_slave_0: left allmulticast mode [ 1882.847783][ T1022] bridge_slave_0: left promiscuous mode [ 1882.898754][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.663897][ T4871] Bluetooth: hci6: command tx timeout [ 1883.824617][T17839] loop9: detected capacity change from 0 to 512 [ 1884.031808][T17839] Quota error (device loop9): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 1884.059186][T17839] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1884.071328][T17839] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.2264: Failed to acquire dquot type 1 [ 1884.087666][T17839] loop9: lost filesystem error report for type 5 error -117 [ 1884.093429][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1884.107842][ C0] EXT4-fs (loop9): initial error at time 1777744898: ext4_acquire_dquot:7034 [ 1884.117104][ C0] EXT4-fs (loop9): last error at time 1777744898: ext4_acquire_dquot:7034 [ 1884.142588][T17839] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.2264: corrupted inode contents [ 1884.158617][T17839] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1884.161437][T17839] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #16: comm syz.9.2264: mark_inode_dirty error [ 1884.186384][T17839] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1884.192256][T17839] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.2264: corrupted inode contents [ 1884.292752][T17839] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1884.295080][T17839] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.2264: mark_inode_dirty error [ 1884.371590][T17839] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1884.376448][T17839] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.2264: corrupted inode contents [ 1884.398993][ T4871] Bluetooth: hci1: command tx timeout [ 1884.425865][T17839] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1884.427675][T17839] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1884.452812][T17839] loop9: lost filesystem error report for type 5 error -117 [ 1884.533655][T17839] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #16: comm syz.9.2264: corrupted inode contents [ 1884.615538][T17839] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1884.617919][T17839] EXT4-fs error (device loop9): ext4_truncate:4690: inode #16: comm syz.9.2264: mark_inode_dirty error [ 1884.709115][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1884.738791][T17839] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1884.740489][T17839] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1884.766399][T17839] loop9: lost filesystem error report for type 5 error -117 [ 1884.778233][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1884.817795][T17839] EXT4-fs (loop9): 1 truncate cleaned up [ 1884.832196][ T1022] bond0 (unregistering): Released all slaves [ 1884.850745][T17839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1884.884217][T17839] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1885.239872][T11231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.279268][T11231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.296863][T16229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1885.385542][ T1022] hsr_slave_0: left promiscuous mode [ 1885.422133][ T1022] hsr_slave_1: left promiscuous mode [ 1885.432252][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1885.453011][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1885.491339][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1885.521498][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1885.584941][ T1022] veth1_macvtap: left promiscuous mode [ 1885.598158][ T1022] veth0_macvtap: left promiscuous mode [ 1885.624192][ T1022] veth1_vlan: left promiscuous mode [ 1885.638291][ T1022] veth0_vlan: left promiscuous mode [ 1885.743691][ T4871] Bluetooth: hci6: command tx timeout [ 1887.403107][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 1887.461249][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 1888.405695][ T29] audit: type=1326 audit(1777744902.872:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1888.479846][ T7545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1888.508910][ T7545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1888.522862][ T29] audit: type=1326 audit(1777744902.872:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1888.575243][ T29] audit: type=1326 audit(1777744902.972:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1888.667864][ T29] audit: type=1326 audit(1777744902.982:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1888.760237][ T29] audit: type=1326 audit(1777744902.982:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1888.901852][ T29] audit: type=1326 audit(1777744902.972:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1889.047933][ T29] audit: type=1326 audit(1777744902.992:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1889.195369][ T1022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.223003][ T29] audit: type=1326 audit(1777744902.992:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1889.328715][ T29] audit: type=1326 audit(1777744903.002:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17872 comm="syz.3.2265" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1889.572242][ T1022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.906472][ T1022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.567369][ T1022] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.872444][T17881] loop3: detected capacity change from 0 to 8192 [ 1890.907902][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 1892.122763][ T1022] bridge_slave_1: left allmulticast mode [ 1892.166315][ T1022] bridge_slave_1: left promiscuous mode [ 1892.237913][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.542953][ T1022] bridge_slave_0: left allmulticast mode [ 1892.648657][ T1022] bridge_slave_0: left promiscuous mode [ 1892.699637][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.863054][T17908] loop9: detected capacity change from 0 to 512 [ 1892.929991][T17908] EXT4-fs: Ignoring removed oldalloc option [ 1893.008268][T17908] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1893.102994][T17908] EXT4-fs (loop9): 1 truncate cleaned up [ 1893.160976][T17908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1893.420248][T17915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2273'. [ 1893.474395][T17915] netlink: 'syz.3.2273': attribute type 5 has an invalid length. [ 1893.802738][T16229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1894.330402][ T29] audit: type=1326 audit(1777744908.802:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1894.451571][ T29] audit: type=1326 audit(1777744908.812:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1894.582060][ T29] audit: type=1326 audit(1777744908.842:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1894.685999][ T29] audit: type=1326 audit(1777744908.842:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1894.772025][ T29] audit: type=1326 audit(1777744908.842:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1894.819234][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1894.887862][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1894.905021][ T29] audit: type=1326 audit(1777744908.872:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1895.017121][ T29] audit: type=1326 audit(1777744908.842:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1895.065901][ T1022] bond0 (unregistering): Released all slaves [ 1895.146283][ T29] audit: type=1326 audit(1777744908.872:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1895.266040][ T29] audit: type=1326 audit(1777744908.882:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17919 comm="syz.9.2274" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709f00c code=0x7ffc0000 [ 1895.671479][ T1022] hsr_slave_0: left promiscuous mode [ 1895.757209][ T1022] hsr_slave_1: left promiscuous mode [ 1895.789877][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1895.821811][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1895.864645][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1895.895307][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.022053][ T1022] veth1_macvtap: left promiscuous mode [ 1896.049028][ T1022] veth0_macvtap: left promiscuous mode [ 1896.083753][ T1022] veth1_vlan: left promiscuous mode [ 1896.097974][ T1022] veth0_vlan: left promiscuous mode [ 1897.974192][T17940] loop2: detected capacity change from 0 to 8192 [ 1898.735368][T17952] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1898.772813][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 1898.781468][T17952] FAT-fs (loop2): Filesystem has been set read-only [ 1898.890160][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 1899.726362][ T5225] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1900.481325][T17777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1900.530199][T17777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.578864][T17777] bridge_slave_0: entered allmulticast mode [ 1900.628179][T17777] bridge_slave_0: entered promiscuous mode [ 1900.741089][T17777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.784087][T17777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.805755][T17777] bridge_slave_1: entered allmulticast mode [ 1900.848694][T17777] bridge_slave_1: entered promiscuous mode [ 1901.299504][T17971] loop3: detected capacity change from 0 to 128 [ 1901.370060][T17777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.388180][T17971] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1901.529842][T17777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1901.778000][T17971] syz.3.2288: attempt to access beyond end of device [ 1901.778000][T17971] loop3: rw=2049, sector=132, nr_sectors = 9 limit=128 [ 1902.247015][T17790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1902.266652][T17790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.276691][T17790] bridge_slave_0: entered allmulticast mode [ 1902.297330][T17790] bridge_slave_0: entered promiscuous mode [ 1902.367700][T17777] team0: Port device team_slave_0 added [ 1902.403179][T17790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.444009][T17790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.452358][T17790] bridge_slave_1: entered allmulticast mode [ 1902.486233][T17790] bridge_slave_1: entered promiscuous mode [ 1902.571571][T17777] team0: Port device team_slave_1 added [ 1903.049165][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1903.071082][T17984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2294'. [ 1903.239812][T17777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1903.263441][T17777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1903.372282][T17777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1903.458050][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1903.511794][T17777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1903.556355][T17777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1903.670889][T17777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1904.196905][T17790] team0: Port device team_slave_0 added [ 1904.442462][T17790] team0: Port device team_slave_1 added [ 1905.013953][T17777] hsr_slave_0: entered promiscuous mode [ 1905.054548][T17777] hsr_slave_1: entered promiscuous mode [ 1905.147006][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1905.177649][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1905.298127][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1905.390315][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1905.414042][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1905.499713][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.804389][T17790] hsr_slave_0: entered promiscuous mode [ 1906.837490][T17790] hsr_slave_1: entered promiscuous mode [ 1906.865738][T17790] debugfs: 'hsr0' already exists in 'hsr' [ 1906.889136][T17790] Cannot create hsr debugfs directory [ 1909.731377][T18042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1910.172709][T17777] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1910.261049][T17777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1910.375456][T17777] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1910.477989][T17777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1910.619889][T17777] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1910.760614][T17777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1910.797068][T17777] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1910.900580][T18054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2320'. [ 1910.901184][T17777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1911.943867][T17790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1912.012316][T17790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1912.099098][T17790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1912.179950][T17790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1912.211586][T17790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1912.267798][T17790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1912.343791][T17790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1912.467338][T17790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1913.918188][T17777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1914.226787][T18083] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2331'. [ 1914.314903][T18085] IPv6: Can't replace route, no match found [ 1914.337101][T17777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1914.472939][ T7542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.480670][ T7542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1914.667343][T18087] loop3: detected capacity change from 0 to 128 [ 1914.749125][T16657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.756856][T16657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1914.887838][ T29] audit: type=1800 audit(1777744929.362:42): pid=18087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2333" name="file1" dev="loop3" ino=1048664 res=0 errno=0 [ 1915.349060][T17790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.071510][T17790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.355706][T13196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.363665][T13196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1916.617659][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.625482][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.027209][T18115] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2342'. [ 1922.058673][ T29] audit: type=1326 audit(1777744936.532:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1922.236916][ T29] audit: type=1326 audit(1777744936.532:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1922.370220][ T29] audit: type=1326 audit(1777744936.532:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1922.535667][ T29] audit: type=1326 audit(1777744936.532:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1922.692529][ T29] audit: type=1326 audit(1777744936.572:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1922.860306][ T29] audit: type=1326 audit(1777744936.582:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1923.020302][ T29] audit: type=1326 audit(1777744936.582:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf72194d0 code=0x7ffc0000 [ 1923.177821][ T29] audit: type=1326 audit(1777744936.602:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1923.329795][ T29] audit: type=1326 audit(1777744936.612:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1923.453738][ T29] audit: type=1326 audit(1777744936.612:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18154 comm="syz.3.2352" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fe500c code=0x7ffc0000 [ 1923.726543][T17777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1924.773932][T17790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1925.967977][T17790] veth0_vlan: entered promiscuous mode [ 1926.212905][T17790] veth1_vlan: entered promiscuous mode [ 1927.005096][T17790] veth0_macvtap: entered promiscuous mode [ 1927.147497][T17790] veth1_macvtap: entered promiscuous mode [ 1927.761405][T17790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1928.045563][T17790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1928.402272][ T7545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.451516][ T7545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.560061][T16657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.582188][T16657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.919884][T17777] veth0_vlan: entered promiscuous mode [ 1929.183851][T17777] veth1_vlan: entered promiscuous mode [ 1929.753615][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1929.764788][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1930.328831][T17777] veth0_macvtap: entered promiscuous mode [ 1930.455511][T17777] veth1_macvtap: entered promiscuous mode [ 1930.839156][T17777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1931.215640][T17777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1931.464137][ T80] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.517534][ T80] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.561013][ T80] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.611609][ T80] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1934.061993][T18257] loop2: detected capacity change from 0 to 512 [ 1934.165840][T18257] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1934.386807][T18257] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.2377: invalid indirect mapped block 4294967295 (level 0) [ 1934.465905][T18257] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1934.473416][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1934.489649][ C1] EXT4-fs (loop2): initial error at time 1777744948: ext4_free_branches:1023: inode 16 [ 1934.499882][ C1] EXT4-fs (loop2): last error at time 1777744948: ext4_free_branches:1023: inode 16 [ 1934.510530][T18257] EXT4-fs (loop2): Remounting filesystem read-only [ 1934.552387][T18257] EXT4-fs (loop2): 1 orphan inode deleted [ 1934.602425][T18257] EXT4-fs (loop2): 1 truncate cleaned up [ 1934.649059][T18257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1935.539608][T17537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1937.440629][T14665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1937.445647][T14665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1937.448574][T14665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1937.456989][T14665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1937.462594][T14665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1939.117559][T14665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1939.137226][T14665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1939.171234][T14665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1939.209705][T14665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1939.254544][T14665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1939.504305][ T4871] Bluetooth: hci3: command tx timeout [ 1941.343802][ T4871] Bluetooth: hci4: command tx timeout [ 1941.583888][ T4871] Bluetooth: hci3: command tx timeout [ 1943.424714][ T4871] Bluetooth: hci4: command tx timeout [ 1943.450332][T18312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.461377][T18312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.667260][ T4871] Bluetooth: hci3: command tx timeout [ 1944.152709][T18337] loop9: detected capacity change from 0 to 1024 [ 1944.430831][T18337] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1944.643051][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2392'. [ 1944.654372][T18337] net_ratelimit: 30 callbacks suppressed [ 1944.654470][T18337] openvswitch: netlink: Flow key attr not present in new flow. [ 1944.791271][T18312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1944.872374][T18312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1945.503877][ T4871] Bluetooth: hci4: command tx timeout [ 1945.743604][ T4871] Bluetooth: hci3: command tx timeout [ 1946.671318][ T56] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.743751][ T56] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.954392][T13196] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.098154][ T56] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.140019][ T56] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.288890][T13196] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1947.588785][ T4871] Bluetooth: hci4: command tx timeout [ 1947.659649][T13196] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.016489][T13196] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1948.946803][T18373] loop2: detected capacity change from 0 to 764 [ 1949.054807][T18373] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1949.597553][T18378] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2401'. [ 1950.797727][T13196] bridge_slave_1: left allmulticast mode [ 1950.834064][T13196] bridge_slave_1: left promiscuous mode [ 1950.874499][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.975196][T13196] bridge_slave_0: left allmulticast mode [ 1950.996631][T13196] bridge_slave_0: left promiscuous mode [ 1951.027807][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.233620][ T4871] Bluetooth: hci0: command 0x0406 tx timeout [ 1952.985354][T18404] loop2: detected capacity change from 0 to 512 [ 1953.045714][T13196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1953.063778][T18404] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1953.142554][T18404] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2409: bg 0: block 104: invalid block bitmap [ 1953.173985][T18404] loop2: lost filesystem error report for type 5 error -117 [ 1953.176046][T18404] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1953.184211][T13196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.184276][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1953.184402][ C1] EXT4-fs (loop2): initial error at time 1777744967: ext4_validate_block_bitmap:432 [ 1953.184577][ C1] EXT4-fs (loop2): last error at time 1777744967: ext4_validate_block_bitmap:432 [ 1953.259779][T13196] bond0 (unregistering): Released all slaves [ 1953.323484][T18404] loop2: lost filesystem error report for type 5 error -117 [ 1953.325233][T18404] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2409: invalid indirect mapped block 1 (level 1) [ 1953.418423][T18404] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1953.428174][T18404] EXT4-fs (loop2): 1 truncate cleaned up [ 1953.535829][T18404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1953.962255][T13196] hsr_slave_0: left promiscuous mode [ 1954.007343][T17537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1954.035845][T13196] hsr_slave_1: left promiscuous mode [ 1954.065799][T13196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1954.087287][T13196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1954.141176][T13196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1954.179179][T13196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1954.374823][T13196] veth1_macvtap: left promiscuous mode [ 1954.392735][T13196] veth0_macvtap: left promiscuous mode [ 1954.413895][T13196] veth1_vlan: left promiscuous mode [ 1954.449228][T13196] veth0_vlan: left promiscuous mode [ 1955.896026][T18425] ===================================================== [ 1955.906231][T18425] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 1955.915679][T18425] mptcp_established_options+0x112f/0x3530 [ 1955.921867][T18425] tcp_established_options+0x312/0xcc0 [ 1955.928222][T18425] __tcp_transmit_skb+0x5dc/0x5fe0 [ 1955.933777][T18425] __tcp_send_ack+0x967/0xad0 [ 1955.938759][T18425] tcp_send_ack+0x3d/0x60 SYZFAIL: failed to recv rpc [ 1955.944268][T18425] mptcp_subflow_shutdown+0x164/0x690 [ 1955.955631][T18425] mptcp_check_send_data_fin+0x31b/0x3d0 [ 1955.964237][T18425] __mptcp_close+0x860/0x1360 [ 1955.969286][T18425] mptcp_close+0x42/0x260 [ 1955.974397][T18425] inet_release+0x1ee/0x2a0 [ 1955.979377][T18425] sock_close+0xd6/0x2f0 [ 1955.984514][T18425] __fput+0x60e/0x1010 [ 1955.989006][T18425] ____fput+0x25/0x30 [ 1955.993424][T18425] task_work_run+0x208/0x2b0 [ 1956.000050][T18425] exit_to_user_mode_loop+0x306/0x1b60 [ 1956.008173][T18425] __do_fast_syscall_32+0x2c7/0x460 [ 1956.014345][T18425] do_fast_syscall_32+0x37/0x80 [ 1956.019514][T18425] do_SYSENTER_32+0x1f/0x30 [ 1956.024500][T18425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.031324][T18425] [ 1956.034246][T18425] Local variable opts created at: [ 1956.039575][T18425] __tcp_transmit_skb+0x4d/0x5fe0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1956.045216][T18425] __tcp_send_ack+0x967/0xad0 [ 1956.050179][T18425] [ 1956.052713][T18425] CPU: 0 UID: 0 PID: 18425 Comm: syz.9.2415 Not tainted syzkaller #0 PREEMPT(full) [ 1956.063053][T18425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1956.073809][T18425] ===================================================== [ 1956.080922][T18425] Disabling lock debugging due to kernel taint [ 1956.124262][T18425] Kernel panic - not syncing: kmsan.panic set ... [ 1956.130981][T18425] CPU: 1 UID: 0 PID: 18425 Comm: syz.9.2415 Tainted: G B syzkaller #0 PREEMPT(full) [ 1956.142222][T18425] Tainted: [B]=BAD_PAGE [ 1956.146535][T18425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1956.156816][T18425] Call Trace: [ 1956.160272][T18425] [ 1956.163349][T18425] __dump_stack+0x26/0x30 [ 1956.167937][T18425] dump_stack_lvl+0x50/0x1c0 [ 1956.172779][T18425] ? dump_stack+0x12/0x25 [ 1956.177345][T18425] dump_stack+0x1e/0x25 [ 1956.181777][T18425] vpanic+0x7b4/0x1430 [ 1956.186142][T18425] panic+0x15d/0x160 [ 1956.190367][T18425] kmsan_report+0x31a/0x320 [ 1956.195164][T18425] ? __msan_warning+0x1b/0x30 [ 1956.200169][T18425] ? mptcp_established_options+0x112f/0x3530 [ 1956.206425][T18425] ? tcp_established_options+0x312/0xcc0 [ 1956.212361][T18425] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 1956.217893][T18425] ? __tcp_send_ack+0x967/0xad0 [ 1956.222951][T18425] ? tcp_send_ack+0x3d/0x60 [ 1956.227703][T18425] ? mptcp_subflow_shutdown+0x164/0x690 [ 1956.233539][T18425] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 1956.239630][T18425] ? __mptcp_close+0x860/0x1360 [ 1956.244743][T18425] ? mptcp_close+0x42/0x260 [ 1956.249533][T18425] ? inet_release+0x1ee/0x2a0 [ 1956.254468][T18425] ? sock_close+0xd6/0x2f0 [ 1956.259175][T18425] ? __fput+0x60e/0x1010 [ 1956.263648][T18425] ? ____fput+0x25/0x30 [ 1956.268012][T18425] ? task_work_run+0x208/0x2b0 [ 1956.272988][T18425] ? exit_to_user_mode_loop+0x306/0x1b60 [ 1956.278900][T18425] ? __do_fast_syscall_32+0x2c7/0x460 [ 1956.284577][T18425] ? do_fast_syscall_32+0x37/0x80 [ 1956.289994][T18425] ? do_SYSENTER_32+0x1f/0x30 [ 1956.294945][T18425] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.301718][T18425] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.308484][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 1956.313878][T18425] ? tcp_established_options+0x312/0xcc0 [ 1956.319847][T18425] ? __msan_warning+0x1b/0x30 [ 1956.324842][T18425] ? filter_irq_stacks+0x13f/0x190 [ 1956.330176][T18425] ? stack_depot_save_flags+0x35/0x790 [ 1956.336348][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 1956.341801][T18425] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1956.348414][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 1956.353829][T18425] __msan_warning+0x1b/0x30 [ 1956.358648][T18425] mptcp_established_options+0x112f/0x3530 [ 1956.364814][T18425] tcp_established_options+0x312/0xcc0 [ 1956.370617][T18425] __tcp_transmit_skb+0x5dc/0x5fe0 [ 1956.375991][T18425] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 1956.382464][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 1956.387854][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 1956.393217][T18425] ? kmsan_get_metadata+0xf1/0x160 [ 1956.398601][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1956.404761][T18425] ? __alloc_skb+0xb7d/0x1190 [ 1956.409841][T18425] __tcp_send_ack+0x967/0xad0 [ 1956.414755][T18425] tcp_send_ack+0x3d/0x60 [ 1956.419344][T18425] mptcp_subflow_shutdown+0x164/0x690 [ 1956.424998][T18425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1956.431164][T18425] mptcp_check_send_data_fin+0x31b/0x3d0 [ 1956.437087][T18425] __mptcp_close+0x860/0x1360 [ 1956.442087][T18425] ? __pfx_mptcp_close+0x10/0x10 [ 1956.447317][T18425] mptcp_close+0x42/0x260 [ 1956.451883][T18425] ? __pfx_mptcp_close+0x10/0x10 [ 1956.457175][T18425] inet_release+0x1ee/0x2a0 [ 1956.461982][T18425] ? __pfx_inet_release+0x10/0x10 [ 1956.467382][T18425] sock_close+0xd6/0x2f0 [ 1956.471940][T18425] ? __pfx_sock_close+0x10/0x10 [ 1956.477053][T18425] __fput+0x60e/0x1010 [ 1956.481387][T18425] ? __pfx_____fput+0x10/0x10 [ 1956.486346][T18425] ____fput+0x25/0x30 [ 1956.490638][T18425] task_work_run+0x208/0x2b0 [ 1956.495556][T18425] exit_to_user_mode_loop+0x306/0x1b60 [ 1956.501325][T18425] ? __ia32_sys_close_range+0x96/0xe0 [ 1956.507079][T18425] __do_fast_syscall_32+0x2c7/0x460 [ 1956.512576][T18425] do_fast_syscall_32+0x37/0x80 [ 1956.517648][T18425] do_SYSENTER_32+0x1f/0x30 [ 1956.522373][T18425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1956.529014][T18425] RIP: 0023:0xf709f00c [ 1956.533319][T18425] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1956.553170][T18425] RSP: 002b:00000000ffc4c35c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1956.561862][T18425] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1956.570021][T18425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1956.578199][T18425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1956.586385][T18425] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1956.594555][T18425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1956.602793][T18425] [ 1956.606611][T18425] Kernel Offset: disabled [ 1956.611057][T18425] Rebooting in 86400 seconds..