last executing test programs: 4m45.742606839s ago: executing program 1 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 4m45.709347235s ago: executing program 1 (id=1959): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mq_timedreceive(r0, &(0x7f00000004c0)=""/169, 0xa9, 0x3fffffffffff, 0x0) 4m45.586088145s ago: executing program 1 (id=1961): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x25a, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0xffffffe4, 0x8}}, @TCA_CT_MARK={0x8, 0x10, 0x5}, @TCA_CT_LABELS={0x14, 0x7, "2d71dc84871c83bdc06b16dfd848cdaf"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r5 = socket(0x400000000010, 0x3, 0x0) setuid(0xee01) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x5f, 0x20000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6, @ANYRES32=r1, @ANYRES64, @ANYRES32=0x0], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x9, 0xfffffffd, 0x9}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 4m44.535442492s ago: executing program 1 (id=1965): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c020400) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = open(&(0x7f0000000080)='.\x00', 0x480, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='user.syz\x00') 4m44.036503195s ago: executing program 1 (id=1968): r0 = socket$inet(0x2, 0x0, 0x42) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x35, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="980500001200200627bd7000fedbdf251e020d7f4e244e21d0b10000feffffff050000009c000000100000000300000002000000fdffffff", @ANYRES32=0x0, @ANYBLOB="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"/1370], 0x598}, 0x1, 0x0, 0x0, 0x80010}, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0xead) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f00000002c0)=ANY=[], 0x0) sendto$inet6(r7, &(0x7f0000000200)="398114c4e26bd35adcd21272d611ceadbf6018dc3e87cbde5440444fc65ac9deba6928fa670365989f7633ddb2b1dafa5ff12e4d08c5475919220e62695eb191e780030c44598668801ac7fe190f02c7c5bfca2091af4c95e9350eac1568a8adaaa7f5fb60ae3c78410bf14e08ca4322a4cc2b428443be5a9882a922758275cf924d84fc3a164e53a036ac209d590fa5870c08", 0x93, 0x4, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) bind$inet(r8, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r9 = socket$inet(0x2, 0x801, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r9, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 4m43.518424852s ago: executing program 1 (id=1975): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4m43.47347284s ago: executing program 32 (id=1975): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 6.701932403s ago: executing program 4 (id=3225): timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0xe4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x1) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r4, 0xa, 0x12) dup2(r4, r5) tkill(r3, 0xe) tkill(r3, 0x13) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000100)) 6.54017876s ago: executing program 0 (id=3226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000040), 0x0) 5.695874711s ago: executing program 3 (id=3228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.546731816s ago: executing program 3 (id=3230): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000b40)={[{@nombcache}, {@nomblk_io_submit}, {@lazytime}, {@commit={'commit', 0x3d, 0x6}}, {@usrquota}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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") socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496e", 0x54) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.490543775s ago: executing program 5 (id=3232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_socket_connect_nvme_tcp() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d77e) sendmsg$key(0xffffffffffffffff, 0x0, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x20000880) 4.990369828s ago: executing program 0 (id=3233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) syz_emit_ethernet(0x76, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}]}}}}}}}, 0x0) fchdir(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1d950300bcb7", @ANYRESHEX, @ANYRESDEC, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 3.60104114s ago: executing program 4 (id=3236): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 3.445786866s ago: executing program 3 (id=3237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r3, 0x0, 0x40) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x3, 0x3a) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x80) fchdir(r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@journal_ioprio}, {@nojournal_checksum}]}, 0x1, 0x53a, &(0x7f0000002400)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000000900020073797a31000000000900010073797a310000140018000380140000800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) 3.411273312s ago: executing program 4 (id=3238): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x62040200) unshare(0x2000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000"/66], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.273136025s ago: executing program 0 (id=3239): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1ec, 0xfeffffff, 0x1ec, 0x1ec, 0x2a4, 0x2a4, 0xffffffff, 0x2a4, 0x2a4, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x1f, @multicast1, @loopback, @port=0x4e21, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x4}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan1\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key=0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x394) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') 3.259503357s ago: executing program 5 (id=3241): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x3, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000008224", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000080)=0x4, 0x4) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000900)={r6, 0x1, {0x0, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x5, 0x5, 0x1, "0feb6f0254307ed3db1179ff2366f4e972ff138b9e1e9f67c804fe27937087d07fbba710d397c474a7e4bf95448a81fc7f87160580ce8ce1183774075ac3cc16", "62b546af4ecf20d6ee209eebb10ba2547703d428df2caa3a3f97651bea1ac2ceef98453a756c33331bf9045f1a7f4c8cf33297a54a088ef6525dc252e42632c1", "c35c7b143bcb674649549bb4a3c468c52c79e649a9ddf34af3e2d05b198ee571", [0x7fffffffffffffff, 0x9]}}) syz_clone(0x8905000, &(0x7f0000000200)="9b85a7355a04c85b0d5d5bf5a7abbd1918bb2629c58462715e1dc0ddfd28820cba2304d7c2699788842a0256c4dc7a5532c2feb8afda3e27726b79ffa56fee7a28ce7acea79d22eb86e3dc253cdfe974be899e64ab8d1e942e2d006cd2466badc8e567270534c507d1796b59f5b6314bea40d593aa7c28323278cb9eddcc318b741830b099d0a8c9b8c46b57091f652c4eefef1cbf4f18769eb9ea3da6cd16bf0527173f664263da12261205b4001d13d86bb686af0f52fa521e81753af258002e7ca012596495482a0d1ad188e2b11414453ac276a412d3d6c9c3488d1a49face8ff2ef8c", 0xe5, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 3.081093857s ago: executing program 5 (id=3242): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x2, 0x196, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x5933, 0x1ff, 0x4, 0xfffffffffffffff7, 0x90000000000000, 0x64, 0x100, 0xfc}, &(0x7f0000000340)={0x1, 0x6, 0x8, 0xffffffffffff72aa, 0xab, 0x2, 0x5, 0x5}, &(0x7f00000003c0)={0x9, 0xfffffffffffffff1, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000540)={[0xfffffffffffffffd]}, 0x8}) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) poll(0x0, 0x0, 0x9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x16, @remote, 0x4e24, 0x0, 'sh\x00', 0x1, 0xc1, 0x2d}, 0x2c) 2.51926333s ago: executing program 4 (id=3243): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x21, 0x6, 0x800, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(0x0, 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2.472538408s ago: executing program 3 (id=3244): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x2, 0x1, 0x1000b0a7}, 0x1c) ppoll(&(0x7f0000000040)=[{r0, 0x1380}], 0x1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0), 0x400000000000181, 0x20004050) 2.366022896s ago: executing program 2 (id=3245): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x70}, 0x1, 0x7}, 0x0) 2.328637212s ago: executing program 0 (id=3246): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000003c0)=ANY=[], 0xfe49, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.323358073s ago: executing program 2 (id=3247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xf, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.062423456s ago: executing program 2 (id=3248): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3ddc, 0x3, 0x80}, {0x7, 0x2, 0x1, 0xd72}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="e26a6d", 0x3}], 0x1}, 0x44) 2.005889996s ago: executing program 0 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) syz_emit_ethernet(0x76, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}]}}}}}}}, 0x0) fchdir(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1d950300bcb7", @ANYRESHEX, @ANYRESDEC, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 1.794066052s ago: executing program 5 (id=3250): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 1.775981104s ago: executing program 2 (id=3251): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) pread64(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4c084) 1.451220988s ago: executing program 3 (id=3252): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x3, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000008224", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000080)=0x4, 0x4) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000900)={r6, 0x1, {0x0, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x5, 0x5, 0x1, "0feb6f0254307ed3db1179ff2366f4e972ff138b9e1e9f67c804fe27937087d07fbba710d397c474a7e4bf95448a81fc7f87160580ce8ce1183774075ac3cc16", "62b546af4ecf20d6ee209eebb10ba2547703d428df2caa3a3f97651bea1ac2ceef98453a756c33331bf9045f1a7f4c8cf33297a54a088ef6525dc252e42632c1", "c35c7b143bcb674649549bb4a3c468c52c79e649a9ddf34af3e2d05b198ee571", [0x7fffffffffffffff, 0x9]}}) syz_clone(0x8905000, &(0x7f0000000200)="9b85a7355a04c85b0d5d5bf5a7abbd1918bb2629c58462715e1dc0ddfd28820cba2304d7c2699788842a0256c4dc7a5532c2feb8afda3e27726b79ffa56fee7a28ce7acea79d22eb86e3dc253cdfe974be899e64ab8d1e942e2d006cd2466badc8e567270534c507d1796b59f5b6314bea40d593aa7c28323278cb9eddcc318b741830b099d0a8c9b8c46b57091f652c4eefef1cbf4f18769eb9ea3da6cd16bf0527173f664263da12261205b4001d13d86bb686af0f52fa521e81753af258002e7ca012596495482a0d1ad188e2b11414453ac276a412d3d6c9c3488d1a49face8ff2ef8c", 0xe5, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 1.299304754s ago: executing program 3 (id=3253): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x62040200) unshare(0x2000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000"/66], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.290076555s ago: executing program 5 (id=3254): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = gettid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1ec, 0xfeffffff, 0x1ec, 0x1ec, 0x2a4, 0x2a4, 0xffffffff, 0x2a4, 0x2a4, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x1f, @multicast1, @loopback, @port=0x4e21, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x4}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan1\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key=0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x394) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') 1.268514959s ago: executing program 4 (id=3255): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) inotify_init() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') epoll_create1(0x0) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x86) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d30", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) 891.924182ms ago: executing program 2 (id=3256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmsg$unix(r3, 0x0, 0x40) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x3, 0x3a) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x80) fchdir(r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@journal_ioprio}, {@nojournal_checksum}]}, 0x1, 0x53a, &(0x7f0000002400)="$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") sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000000900020073797a31000000000900010073797a310000140018000380140000800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)) 689.775295ms ago: executing program 4 (id=3257): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0)={0x10}, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map, 0xffffffffffffffff, 0x25, 0x17}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x50}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00), 0x0, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(0x0, 0x0) 409.009672ms ago: executing program 5 (id=3258): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0)={0x10}, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001008010400000000ffff00bfd4c2232e", @ANYRES32=0x0, @ANYBLOB="00010000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d3000"/56], 0x50}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 377.554807ms ago: executing program 0 (id=3259): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 0s ago: executing program 2 (id=3260): mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) kernel console output (not intermixed with test programs): 32.982677][T11232] bridge32: entered allmulticast mode [ 333.046452][T11230] loop0: detected capacity change from 0 to 2048 [ 333.486800][T11230] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.563971][T11230] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2263: bg 0: block 234: padding at end of block bitmap is not set [ 333.582764][T11230] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 770 with error 28 [ 333.598517][T11230] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.598517][T11230] [ 333.613673][T11230] EXT4-fs (loop0): Total free blocks count 0 [ 333.647937][T11230] EXT4-fs (loop0): Free/Dirty block details [ 333.670155][T11230] EXT4-fs (loop0): free_blocks=0 [ 333.726630][T11230] EXT4-fs (loop0): dirty_blocks=784 [ 333.732961][T11230] EXT4-fs (loop0): Block reservation details [ 333.740306][T11230] EXT4-fs (loop0): i_reserved_data_blocks=49 [ 333.785994][T11252] tipc: Resetting bearer [ 333.889022][T11256] loop2: detected capacity change from 0 to 1024 [ 333.906659][T11250] tipc: Resetting bearer [ 333.921032][ T3312] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 333.957680][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.992941][T11256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 334.008233][T11256] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.805088][T11255] delete_channel: no stack [ 334.846479][T11277] bridge24: entered promiscuous mode [ 334.853359][T11277] bridge24: entered allmulticast mode [ 335.359015][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 335.874463][T11292] bridge31: entered promiscuous mode [ 335.880507][T11292] bridge31: entered allmulticast mode [ 336.320617][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 337.507267][T11318] bridge32: entered promiscuous mode [ 337.513685][T11318] bridge32: entered allmulticast mode [ 337.569918][T11320] loop0: detected capacity change from 0 to 1024 [ 337.617931][T11320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 337.663406][T11320] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.841874][T11328] loop4: detected capacity change from 0 to 1024 [ 337.863661][T11328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.884562][T11328] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 337.904784][T11328] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 337.954464][T11328] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 338.616715][T11343] bridge6: entered promiscuous mode [ 338.622945][T11343] bridge6: entered allmulticast mode [ 338.652595][T11319] delete_channel: no stack [ 338.718913][T11244] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 338.812871][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 339.144469][T11352] bridge28: entered promiscuous mode [ 339.922309][T11365] sd 0:0:1:0: device reset [ 340.041458][T11352] bridge28: entered allmulticast mode [ 340.133972][T11356] bridge25: entered promiscuous mode [ 340.140096][T11356] bridge25: entered allmulticast mode [ 341.032158][T11384] loop3: detected capacity change from 0 to 1024 [ 341.056786][T11384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 341.117332][T11384] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 341.135312][T11386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.154614][T11384] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 341.167326][T11386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.186267][T11384] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 342.032020][T11401] bridge7: entered promiscuous mode [ 342.037949][T11401] bridge7: entered allmulticast mode [ 342.186476][T11403] loop3: detected capacity change from 0 to 2048 [ 342.296117][T11403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.491339][T11412] loop5: detected capacity change from 0 to 2048 [ 342.622277][T11417] bridge33: entered promiscuous mode [ 342.628270][T11417] bridge33: entered allmulticast mode [ 342.687200][T11412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.709760][T11403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2307: bg 0: block 234: padding at end of block bitmap is not set [ 342.793976][T11403] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 858 with error 28 [ 342.933536][T11403] EXT4-fs (loop3): This should not happen!! Data will be lost [ 342.933536][T11403] [ 342.944443][T11412] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2309: bg 0: block 234: padding at end of block bitmap is not set [ 342.947235][T11425] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 342.974083][T11403] EXT4-fs (loop3): Total free blocks count 0 [ 342.997857][T11403] EXT4-fs (loop3): Free/Dirty block details [ 343.008345][T11403] EXT4-fs (loop3): free_blocks=0 [ 343.014224][T11403] EXT4-fs (loop3): dirty_blocks=864 [ 343.020782][T11403] EXT4-fs (loop3): Block reservation details [ 343.028015][T11403] EXT4-fs (loop3): i_reserved_data_blocks=54 [ 343.053162][T11412] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 342 with error 28 [ 343.114670][T11412] EXT4-fs (loop5): This should not happen!! Data will be lost [ 343.114670][T11412] [ 343.126009][T11412] EXT4-fs (loop5): Total free blocks count 0 [ 343.133583][T11412] EXT4-fs (loop5): Free/Dirty block details [ 343.140427][T11412] EXT4-fs (loop5): free_blocks=0 [ 343.213653][T11433] sd 0:0:1:0: device reset [ 343.370141][T11412] EXT4-fs (loop5): dirty_blocks=352 [ 343.439385][T11412] EXT4-fs (loop5): Block reservation details [ 343.484885][T11412] EXT4-fs (loop5): i_reserved_data_blocks=22 [ 343.663019][T11435] bridge18: left promiscuous mode [ 343.673276][T11435] bridge19: left promiscuous mode [ 343.683938][T11435] bridge20: left promiscuous mode [ 343.693171][T11435] bridge21: left promiscuous mode [ 343.709549][T11435] syzkaller0: left promiscuous mode [ 343.752753][T11435] tipc: Resetting bearer [ 343.766533][T10105] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 343.786159][T11435] tipc: Resetting bearer [ 343.801447][T10105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.937477][ T3318] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 343.949871][T11435] bridge22: left promiscuous mode [ 343.961757][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.972859][T11435] bridge23: left promiscuous mode [ 343.983211][T11435] bridge25: left promiscuous mode [ 343.993261][T11435] bridge26: left promiscuous mode [ 344.015835][T11435] bridge27: left promiscuous mode [ 344.032406][T11435] bridge28: left promiscuous mode [ 344.041473][T11435] bridge29: left promiscuous mode [ 344.057451][T11435] bridge30: left promiscuous mode [ 344.064621][T11435] bridge31: left promiscuous mode [ 344.071671][T11435] bridge32: left promiscuous mode [ 344.078592][T11435] bridge33: left promiscuous mode [ 344.198379][T11452] loop2: detected capacity change from 0 to 1024 [ 344.224769][T11452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.276704][T11452] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 344.308728][T11452] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 344.366717][T11452] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 345.266829][T11463] loop5: detected capacity change from 0 to 1024 [ 345.281753][T11465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.345201][T11463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.364034][T11465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.373170][T11463] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 345.454745][T11463] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 345.525746][T11463] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 345.886910][T11473] netlink: 808 bytes leftover after parsing attributes in process `syz.4.2324'. [ 346.937001][T11488] loop3: detected capacity change from 0 to 1024 [ 346.966640][T11488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.095994][T11488] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 347.154680][T11488] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 347.184439][T11488] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 347.394214][T11501] bridge26: entered promiscuous mode [ 347.401566][T11501] bridge26: entered allmulticast mode [ 348.242373][T11511] tipc: Resetting bearer [ 348.304090][T11511] tipc: Resetting bearer [ 348.335334][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 348.377770][T11511] tipc: Resetting bearer [ 348.407692][T11511] syzkaller0: entered promiscuous mode [ 348.413717][T11511] syzkaller0: left allmulticast mode [ 348.796497][T11520] sd 0:0:1:0: device reset [ 349.815174][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.834623][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.857187][T11530] loop2: detected capacity change from 0 to 2048 [ 349.970703][T11530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.301444][T11543] bridge8: entered promiscuous mode [ 350.307452][T11543] bridge8: entered allmulticast mode [ 350.609092][T11550] tipc: Resetting bearer [ 350.657180][T11550] syzkaller0: entered promiscuous mode [ 350.688870][T11549] tipc: Resetting bearer [ 351.093091][T11530] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2341: bg 0: block 234: padding at end of block bitmap is not set [ 351.169183][T11557] loop0: detected capacity change from 0 to 1024 [ 351.237706][T11557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 351.254670][T11530] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 351.259947][T11557] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.294400][T11530] EXT4-fs (loop2): This should not happen!! Data will be lost [ 351.294400][T11530] [ 351.322987][T11530] EXT4-fs (loop2): Total free blocks count 0 [ 351.329887][T11530] EXT4-fs (loop2): Free/Dirty block details [ 351.336101][T11530] EXT4-fs (loop2): free_blocks=0 [ 351.341589][T11530] EXT4-fs (loop2): dirty_blocks=8192 [ 351.347471][T11530] EXT4-fs (loop2): Block reservation details [ 351.355397][T11530] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 351.443731][ T9442] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 351.653312][ T3313] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 351.990930][T11556] delete_channel: no stack [ 352.020249][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 352.644737][T11586] bridge29: entered promiscuous mode [ 352.666314][T11586] bridge29: entered allmulticast mode [ 353.234410][T11598] syzkaller0: entered promiscuous mode [ 353.722543][T11608] bridge34: entered promiscuous mode [ 353.728103][T11608] bridge34: entered allmulticast mode [ 354.411440][T11618] bridge9: entered promiscuous mode [ 354.417198][T11618] bridge9: entered allmulticast mode [ 354.493920][T11616] loop3: detected capacity change from 0 to 1024 [ 354.527434][T11620] random: crng reseeded on system resumption [ 354.548011][T11616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 354.606871][T11616] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.798144][T11610] delete_channel: no stack [ 355.841168][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 356.041901][T11648] loop3: detected capacity change from 0 to 1024 [ 356.054735][T11648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.074931][T11648] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 356.101792][T11648] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 356.133993][T11648] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 356.830013][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811e369000: rx timeout, send abort [ 356.844392][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811e369000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 356.971093][T11658] bridge10: entered promiscuous mode [ 356.976870][T11658] bridge10: entered allmulticast mode [ 358.378486][T11687] loop3: detected capacity change from 0 to 1024 [ 358.535333][T11690] bridge22: left promiscuous mode [ 358.541862][T11690] bridge23: left promiscuous mode [ 358.548540][T11690] bridge24: left promiscuous mode [ 358.554303][T11690] bridge25: left promiscuous mode [ 358.559987][T11690] bridge26: left promiscuous mode [ 358.566829][T11690] bridge27: left promiscuous mode [ 358.572666][T11690] bridge28: left promiscuous mode [ 358.578537][T11690] bridge29: left promiscuous mode [ 358.890732][T11687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 359.046659][T11687] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 359.117880][T11687] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 359.194442][T11687] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 359.888891][T11704] bridge11: entered promiscuous mode [ 359.894468][T11704] bridge11: entered allmulticast mode [ 360.394529][T11718] loop5: detected capacity change from 0 to 1024 [ 360.402393][T11718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 360.434844][T11718] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 360.454640][T11718] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 360.534852][T11718] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 362.802704][T11753] bridge27: entered promiscuous mode [ 362.809090][T11753] bridge27: entered allmulticast mode [ 363.639681][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881244ddc00: rx timeout, send abort [ 363.654391][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881244ddc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 364.197750][T11766] loop5: detected capacity change from 0 to 1024 [ 364.207117][T11766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.272948][T11766] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 365.284904][T11766] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 365.296446][T11766] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 367.590224][T11806] loop0: detected capacity change from 0 to 512 [ 367.611934][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.624874][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.000441][T11806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.039119][T11806] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.052920][T11806] EXT4-fs (loop0): shut down requested (0) [ 368.378508][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.557240][T11826] loop5: detected capacity change from 0 to 128 [ 368.624546][T11826] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 368.750343][T11826] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.923017][T11823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=11823 comm=syz.0.2426 [ 369.289560][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bb75200: rx timeout, send abort [ 369.304386][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb75200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 369.967294][T10105] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.003865][T11841] bridge35: entered promiscuous mode [ 370.009524][T11841] bridge35: entered allmulticast mode [ 370.691765][T11848] loop2: detected capacity change from 0 to 1024 [ 370.708715][T11848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.764055][T11848] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 370.774751][T11854] tipc: Resetting bearer [ 370.783901][T11848] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 370.797210][T11848] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 370.800991][T11854] tipc: Resetting bearer [ 370.822260][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 370.858645][T11853] tipc: Resetting bearer [ 370.867714][T11853] tipc: Resetting bearer [ 371.480017][T11873] loop5: detected capacity change from 0 to 128 [ 371.559105][T11873] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 371.644476][T11873] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.647379][T10105] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.799853][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 373.941352][T11921] loop5: detected capacity change from 0 to 1024 [ 373.953224][T11921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.981652][T11921] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 374.017450][T11921] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 374.052841][T11921] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 374.081966][T11934] loop4: detected capacity change from 0 to 512 [ 374.095106][T11876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=11876 comm=syz.2.2440 [ 374.629198][T11934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.730899][T11934] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.018118][T11934] EXT4-fs (loop4): shut down requested (0) [ 375.327256][T11988] bridge33: entered promiscuous mode [ 375.333451][T11988] bridge33: entered allmulticast mode [ 375.390443][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.387251][T11997] loop4: detected capacity change from 0 to 2048 [ 376.496178][T11997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.885920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811e3bb800: rx timeout, send abort [ 376.894208][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811e3bb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 377.254579][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 377.298218][T11997] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2459: bg 0: block 234: padding at end of block bitmap is not set [ 377.455967][T11997] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 444 with error 28 [ 377.484496][T11997] EXT4-fs (loop4): This should not happen!! Data will be lost [ 377.484496][T11997] [ 378.025505][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 378.068005][T11997] EXT4-fs (loop4): Total free blocks count 0 [ 378.085505][T11997] EXT4-fs (loop4): Free/Dirty block details [ 378.093556][T11997] EXT4-fs (loop4): free_blocks=0 [ 378.100657][T11997] EXT4-fs (loop4): dirty_blocks=448 [ 378.115988][T11997] EXT4-fs (loop4): Block reservation details [ 378.123372][T11997] EXT4-fs (loop4): i_reserved_data_blocks=28 [ 378.395264][T12041] loop0: detected capacity change from 0 to 2048 [ 378.445423][T12033] bridge12: entered promiscuous mode [ 378.451291][T12033] bridge12: entered allmulticast mode [ 378.545141][ T3319] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 378.546322][T12041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.575908][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.594900][T12051] syz_tun: entered allmulticast mode [ 378.608935][T12050] syz_tun: left allmulticast mode [ 378.655189][T12052] bridge34: entered promiscuous mode [ 378.661422][T12052] bridge34: entered allmulticast mode [ 378.826851][T12041] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2470: bg 0: block 234: padding at end of block bitmap is not set [ 379.588824][T12041] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 88 with error 28 [ 379.608771][T12041] EXT4-fs (loop0): This should not happen!! Data will be lost [ 379.608771][T12041] [ 379.796154][T12041] EXT4-fs (loop0): Total free blocks count 0 [ 379.821608][T12041] EXT4-fs (loop0): Free/Dirty block details [ 379.966728][T12041] EXT4-fs (loop0): free_blocks=0 [ 379.985723][T12041] EXT4-fs (loop0): dirty_blocks=96 [ 379.991720][T12041] EXT4-fs (loop0): Block reservation details [ 380.010931][T12041] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 380.214814][ T3312] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 380.297064][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.307599][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124708c00: rx timeout, send abort [ 380.317465][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888124708c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 380.644614][T12085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2482'. [ 380.827524][T12098] sd 0:0:1:0: device reset [ 381.510014][T12102] loop2: detected capacity change from 0 to 1024 [ 382.038409][T12102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.105447][T12106] bridge13: entered promiscuous mode [ 382.111475][T12106] bridge13: entered allmulticast mode [ 382.205466][T12102] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 382.302687][T12102] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 382.418438][T12102] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 383.531425][T12122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2492'. [ 383.646960][T12121] loop4: detected capacity change from 0 to 2048 [ 383.772439][T12121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.976746][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2499'. [ 383.978021][T12121] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2491: bg 0: block 234: padding at end of block bitmap is not set [ 384.005962][T12121] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1578 with error 28 [ 384.019153][T12121] EXT4-fs (loop4): This should not happen!! Data will be lost [ 384.019153][T12121] [ 384.090551][T12145] bridge36: entered promiscuous mode [ 384.096726][T12145] bridge36: entered allmulticast mode [ 384.118223][T12121] EXT4-fs (loop4): Total free blocks count 0 [ 384.148847][T12121] EXT4-fs (loop4): Free/Dirty block details [ 384.180815][T12121] EXT4-fs (loop4): free_blocks=0 [ 384.247634][T12121] EXT4-fs (loop4): dirty_blocks=1584 [ 384.298667][T12121] EXT4-fs (loop4): Block reservation details [ 384.338083][T12121] EXT4-fs (loop4): i_reserved_data_blocks=99 [ 384.409738][T12144] bridge6: left promiscuous mode [ 384.415340][T12144] bridge7: left promiscuous mode [ 384.422077][T12144] bridge8: left promiscuous mode [ 384.429187][T12144] bridge9: left promiscuous mode [ 384.467500][T12144] bridge10: left promiscuous mode [ 384.472940][T12144] bridge11: left promiscuous mode [ 384.480639][T12144] bridge12: left promiscuous mode [ 384.496067][T12144] bridge13: left promiscuous mode [ 384.511140][T12144] bridge14: left promiscuous mode [ 384.564194][T12144] bridge15: left promiscuous mode [ 384.585040][T12144] bridge16: left promiscuous mode [ 384.604565][T12144] bridge17: left promiscuous mode [ 384.610518][T12144] bridge18: left promiscuous mode [ 384.617323][T12144] bridge19: left promiscuous mode [ 384.623196][T12144] bridge20: left promiscuous mode [ 384.629991][T12144] syzkaller0: left promiscuous mode [ 384.637691][T12144] tipc: Resetting bearer [ 384.907985][T12152] loop2: detected capacity change from 0 to 1024 [ 385.014782][T12152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.035226][T12144] tipc: Resetting bearer [ 385.073574][T12144] bridge21: left promiscuous mode [ 385.083607][T12144] bridge22: left promiscuous mode [ 385.104610][T12156] random: crng reseeded on system resumption [ 385.115661][T12144] bridge23: left promiscuous mode [ 385.136586][T12152] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 385.151069][T12144] bridge24: left promiscuous mode [ 385.164455][T12152] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 385.175005][T12152] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 385.185579][T12144] bridge25: left promiscuous mode [ 385.191673][T12144] bridge26: left promiscuous mode [ 385.197302][T12144] bridge27: left promiscuous mode [ 385.203492][T12144] bridge28: left promiscuous mode [ 385.209336][T12144] bridge29: left promiscuous mode [ 385.214603][T12144] bridge30: left promiscuous mode [ 385.220016][T12144] bridge31: left promiscuous mode [ 385.225429][T12144] bridge32: left promiscuous mode [ 385.230912][T12144] bridge33: left promiscuous mode [ 385.237089][T12144] bridge34: left promiscuous mode [ 385.487721][ T3319] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 385.596285][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.141590][T12178] syzkaller0: entered allmulticast mode [ 387.163636][T12178] tipc: Resetting bearer [ 387.728772][T12185] loop0: detected capacity change from 0 to 1024 [ 387.816559][T12185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.830747][T12185] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 387.841454][T12185] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 387.852856][T12185] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 388.111861][T12196] loop3: detected capacity change from 0 to 512 [ 388.896270][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812477c400: rx timeout, send abort [ 388.905334][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88812477c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 389.243629][T12196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.275995][T12196] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.301071][T12196] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.563994][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2512'. [ 389.739569][T12212] loop0: detected capacity change from 0 to 1024 [ 389.777169][T12212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.945070][T12212] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 389.964870][T12212] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 390.327790][T12212] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 391.540889][T12237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2521'. [ 391.846357][T12248] bridge28: entered promiscuous mode [ 391.851876][T12248] bridge28: entered allmulticast mode [ 392.680652][T12258] 9p: Bad value for 'wfdno' [ 392.872523][T12260] loop3: detected capacity change from 0 to 1024 [ 392.893959][T12260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.036174][T12250] bridge14: entered promiscuous mode [ 393.042258][T12250] bridge14: entered allmulticast mode [ 393.330458][T12260] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 393.342013][T12260] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 393.364430][T12260] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 394.204146][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b0e2000: rx timeout, send abort [ 394.213807][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b0e2000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 394.541370][T12289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2536'. [ 394.618257][T12291] bridge29: entered promiscuous mode [ 394.624593][T12291] bridge29: entered allmulticast mode [ 395.672556][T12302] loop2: detected capacity change from 0 to 2048 [ 395.812766][T12302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.905142][T12312] sd 0:0:1:0: device reset [ 396.866611][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.025500][T12330] bridge30: entered promiscuous mode [ 397.031130][T12330] bridge30: entered allmulticast mode [ 397.562772][T12329] loop3: detected capacity change from 0 to 1024 [ 397.571351][T12329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.873113][T12329] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 397.894626][T12329] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 397.906480][T12339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2550'. [ 397.914434][T12329] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 398.263736][T12350] loop0: detected capacity change from 0 to 2048 [ 398.307515][T12350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.461199][T12350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2552: bg 0: block 234: padding at end of block bitmap is not set [ 398.482651][T12350] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 590 with error 28 [ 398.496371][T12350] EXT4-fs (loop0): This should not happen!! Data will be lost [ 398.496371][T12350] [ 398.507243][T12350] EXT4-fs (loop0): Total free blocks count 0 [ 398.513565][T12350] EXT4-fs (loop0): Free/Dirty block details [ 398.520384][T12350] EXT4-fs (loop0): free_blocks=0 [ 398.525874][T12350] EXT4-fs (loop0): dirty_blocks=592 [ 398.531811][T12350] EXT4-fs (loop0): Block reservation details [ 398.538385][T12350] EXT4-fs (loop0): i_reserved_data_blocks=37 [ 399.183103][ T3312] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 399.284655][T12374] bridge30: entered promiscuous mode [ 399.290423][T12374] bridge30: entered allmulticast mode [ 399.351579][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.303757][T12397] syzkaller0: entered promiscuous mode [ 402.344439][T12397] syzkaller0: entered allmulticast mode [ 402.421003][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 402.810803][T12421] sd 0:0:1:0: device reset [ 402.879232][T12418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2570'. [ 403.281418][T12431] netlink: 808 bytes leftover after parsing attributes in process `syz.3.2574'. [ 403.299764][T12429] tipc: Enabling of bearer rejected, already enabled [ 403.349646][T12435] tipc: Resetting bearer [ 403.395661][T12434] tipc: Resetting bearer [ 403.472777][T12440] syzkaller0: entered promiscuous mode [ 403.599562][T12446] tipc: Resetting bearer [ 403.679132][T12446] tipc: Resetting bearer [ 403.706644][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 403.875348][T12453] bridge31: entered promiscuous mode [ 403.881615][T12453] bridge31: entered allmulticast mode [ 404.509358][T12442] tipc: Resetting bearer [ 404.526459][T12442] tipc: Resetting bearer [ 404.725658][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2584'. [ 405.608887][T12481] syzkaller0: entered promiscuous mode [ 405.627727][T12481] syzkaller0: entered allmulticast mode [ 405.723716][T12489] loop4: detected capacity change from 0 to 1024 [ 405.757882][T12489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.780572][T12489] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 405.792706][T12489] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 405.805645][T12489] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 405.868209][T12495] sd 0:0:1:0: device reset [ 407.130508][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'. [ 408.183472][T12541] syzkaller0: entered promiscuous mode [ 408.190425][T12541] syzkaller0: entered allmulticast mode [ 408.761963][T12552] loop2: detected capacity change from 0 to 1024 [ 408.772155][T12552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 408.789283][T12552] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 408.799882][T12552] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 408.810959][T12552] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 408.955092][T12557] bridge15: entered promiscuous mode [ 408.961149][T12557] bridge15: entered allmulticast mode [ 409.829471][T12566] loop4: detected capacity change from 0 to 512 [ 409.899589][T12573] bridge35: entered promiscuous mode [ 409.906007][T12573] bridge35: entered allmulticast mode [ 410.016503][T12576] syzkaller0: entered promiscuous mode [ 410.022870][T12566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.065984][T12576] syzkaller0: entered allmulticast mode [ 410.113906][T12566] ext4 filesystem being mounted at /542/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.335300][T12589] EXT4-fs (loop4): shut down requested (0) [ 410.419155][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.440765][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.450531][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.921653][T12599] loop2: detected capacity change from 0 to 2048 [ 410.961943][T12599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.098195][T12606] loop5: detected capacity change from 0 to 1024 [ 411.111824][T12606] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.153470][T12606] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 411.274469][T12606] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 411.311663][T12606] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 411.983150][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.592065][T12627] syzkaller0: entered promiscuous mode [ 412.614501][T12627] syzkaller0: entered allmulticast mode [ 412.753129][T12632] loop4: detected capacity change from 0 to 512 [ 412.980788][T12632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.995693][T12632] ext4 filesystem being mounted at /545/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.071364][T12640] bridge36: entered promiscuous mode [ 413.078054][T12640] bridge36: entered allmulticast mode [ 413.129035][T12632] EXT4-fs (loop4): shut down requested (0) [ 413.446113][T12647] EXT4-fs (loop4): shut down requested (0) [ 413.467240][T12642] tipc: Enabled bearer , priority 0 [ 414.096520][T12643] syzkaller0: entered promiscuous mode [ 414.110085][T12643] syzkaller0: entered allmulticast mode [ 414.123642][T12642] tipc: Resetting bearer [ 414.388771][T12653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.399488][T12641] tipc: Resetting bearer [ 414.407252][T12653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.418841][T12641] tipc: Disabling bearer [ 414.444264][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.142441][T12659] syzkaller0: left promiscuous mode [ 415.148349][T12659] tipc: Resetting bearer [ 415.154510][T12659] bridge24: left promiscuous mode [ 415.159948][T12659] bridge25: left promiscuous mode [ 415.165931][T12659] bridge26: left promiscuous mode [ 415.171141][T12659] bridge27: left promiscuous mode [ 415.178077][T12659] bridge28: left promiscuous mode [ 415.183820][T12659] bridge29: left promiscuous mode [ 415.189257][T12659] bridge30: left promiscuous mode [ 415.808332][T12663] loop5: detected capacity change from 0 to 1024 [ 415.829740][T12667] loop4: detected capacity change from 0 to 1024 [ 415.849374][T12663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.856820][T12667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.869331][T12663] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 415.884856][T12667] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 415.911560][T12663] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 415.950620][T12667] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 415.961360][T12663] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 415.980135][T12667] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 416.765162][T12686] bridge37: entered promiscuous mode [ 416.770781][T12686] bridge37: entered allmulticast mode [ 417.075996][T12690] tipc: Enabling of bearer rejected, already enabled [ 417.176645][T12690] syzkaller0: entered promiscuous mode [ 418.152208][T12703] bridge16: entered promiscuous mode [ 418.158133][T12703] bridge16: entered allmulticast mode [ 418.421274][T12715] loop2: detected capacity change from 0 to 2048 [ 418.746658][T12715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.143569][T12715] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2655: bg 0: block 234: padding at end of block bitmap is not set [ 419.159243][T12715] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 182 with error 117 [ 419.173111][T12715] EXT4-fs (loop2): This should not happen!! Data will be lost [ 419.173111][T12715] [ 419.241637][ T3313] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 419.255856][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.421881][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2666'. [ 420.142134][T12768] loop3: detected capacity change from 0 to 128 [ 420.200136][T12768] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 420.355244][T12768] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.396526][T12772] syz_tun: entered allmulticast mode [ 420.815694][T12787] syzkaller0: entered promiscuous mode [ 420.855475][T12787] syzkaller0: entered allmulticast mode [ 421.031688][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.188599][T12797] loop4: detected capacity change from 0 to 1024 [ 421.228912][T12799] tipc: Started in network mode [ 421.242599][T12797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 421.268500][T12799] tipc: Node identity 36e3f331a68c, cluster identity 4711 [ 421.293505][T12797] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 421.323208][T12799] tipc: Enabled bearer , priority 0 [ 421.347321][T12797] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 421.360702][T12800] syzkaller0: entered promiscuous mode [ 421.375587][T12800] syzkaller0: entered allmulticast mode [ 421.392251][T12797] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 421.459482][T12799] tipc: Resetting bearer [ 421.589942][T12798] tipc: Resetting bearer [ 421.631400][T12798] tipc: Disabling bearer [ 421.641926][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2679'. [ 421.671474][T12808] tipc: Resetting bearer [ 422.170972][T12807] tipc: Resetting bearer [ 422.662363][T12829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.697130][T12831] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 422.782692][T12829] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 422.810012][T12829] bond2 (unregistering): Released all slaves [ 422.929589][T12836] loop3: detected capacity change from 0 to 128 [ 422.956513][T12836] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 422.990714][T12836] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.480233][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811e2ee200: rx timeout, send abort [ 423.489566][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811e2ee200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 423.862450][T12846] loop5: detected capacity change from 0 to 1024 [ 423.879719][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 423.891229][T12846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 423.904227][T12846] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 423.905880][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2692'. [ 423.960163][T12846] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 424.010375][T12846] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 427.332564][T12899] loop4: detected capacity change from 0 to 128 [ 427.358127][T12899] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 427.628604][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124585800: rx timeout, send abort [ 427.644382][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888124585800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 427.888010][T12903] bridge30: left promiscuous mode [ 427.894496][T12903] bridge31: left promiscuous mode [ 428.025493][T12899] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.189628][T12907] loop3: detected capacity change from 0 to 2048 [ 428.260288][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2708'. [ 428.355282][T12907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.865921][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.915620][T12925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.939711][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.950929][T12925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.370735][T12959] loop0: detected capacity change from 0 to 1024 [ 431.533502][T12964] bridge31: entered promiscuous mode [ 431.539252][T12964] bridge31: entered allmulticast mode [ 432.414120][T12959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.452405][T12959] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 432.493207][T12959] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 432.517391][T12959] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 433.915350][T12989] loop5: detected capacity change from 0 to 512 [ 434.392344][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.402205][T12989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.414264][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.438321][T13002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.451582][T13002] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 434.455947][T12989] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.473911][T13002] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 434.475789][T12989] EXT4-fs (loop5): shut down requested (0) [ 434.516370][T13002] bond1 (unregistering): Released all slaves [ 434.660018][T10105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.257670][T13017] tipc: Resetting bearer [ 435.283615][T13019] netlink: 796 bytes leftover after parsing attributes in process `syz.0.2736'. [ 435.350632][T13015] tipc: Resetting bearer [ 435.566928][T13023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13023 comm=syz.5.2732 [ 436.513800][T13054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13054 comm=syz.3.2738 [ 436.530338][T13093] syzkaller0: entered promiscuous mode [ 436.536429][T13093] syzkaller0: entered allmulticast mode [ 436.629142][T13100] tipc: Resetting bearer [ 436.638838][T13099] netlink: 'syz.2.2746': attribute type 1 has an invalid length. [ 436.650701][T13097] tipc: Resetting bearer [ 436.814810][T13099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.879969][T13110] bond1 (unregistering): Released all slaves [ 436.921724][T13107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.942023][T13107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.972943][T13135] loop2: detected capacity change from 0 to 128 [ 437.072051][T13135] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 437.106997][T13135] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.122230][T13167] loop3: detected capacity change from 0 to 1024 [ 437.130606][T13167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.174800][T13167] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 437.201309][T13167] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 437.237250][T13167] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 437.928490][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.097016][T13174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2752'. [ 439.215281][T13196] syzkaller0: entered promiscuous mode [ 439.221334][T13196] syzkaller0: entered allmulticast mode [ 439.547524][T13211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13211 comm=syz.2.2757 [ 439.883622][T13227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13227 comm=syz.0.2761 [ 440.244612][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811e3ba400: rx timeout, send abort [ 440.254392][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811e3ba400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 440.501052][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.744962][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.835655][T13285] random: crng reseeded on system resumption [ 445.991422][ C1] vcan0: j1939_tp_rxtimer: 0xffff888123dee000: rx timeout, send abort [ 446.004380][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888123dee000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 446.511682][T13350] netlink: 'syz.5.2780': attribute type 1 has an invalid length. [ 447.142042][T13351] bridge37: entered promiscuous mode [ 447.147651][T13351] bridge37: entered allmulticast mode [ 447.308293][T13350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.330844][T13353] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 447.642737][T13358] bridge38: entered promiscuous mode [ 447.649115][T13358] bridge38: entered allmulticast mode [ 447.668130][T13337] bridge32: entered promiscuous mode [ 447.674223][T13337] bridge32: entered allmulticast mode [ 447.699090][T13350] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 447.750562][T13350] bond1 (unregistering): Released all slaves [ 449.472412][T13377] syzkaller0: entered promiscuous mode [ 449.478702][T13377] syzkaller0: entered allmulticast mode [ 449.960017][T13392] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2790'. [ 450.778347][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.783749][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.607609][T13407] syzkaller0: left promiscuous mode [ 452.613753][T13407] tipc: Resetting bearer [ 452.619965][T13407] bridge31: left promiscuous mode [ 452.625892][T13407] bridge32: left promiscuous mode [ 454.438823][T13427] bridge33: entered promiscuous mode [ 454.446338][T13427] bridge33: entered allmulticast mode [ 454.608894][T13431] loop5: detected capacity change from 0 to 128 [ 454.701204][T13431] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 454.811737][T13431] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.065554][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.089850][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.278000][T13443] loop2: detected capacity change from 0 to 1024 [ 455.302429][T13443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 455.348950][T13443] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 455.378740][T13443] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 455.410243][T13443] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 455.576866][T10105] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 456.375047][T13457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2808'. [ 457.630894][T13480] bridge32: entered promiscuous mode [ 457.637027][T13480] bridge32: entered allmulticast mode [ 457.760683][T13481] bridge39: entered promiscuous mode [ 457.766974][T13481] bridge39: entered allmulticast mode [ 457.880440][T13486] netlink: 'syz.4.2816': attribute type 1 has an invalid length. [ 458.114805][T13486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.125771][T13487] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 458.269684][T13486] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 458.296222][T13486] bond1 (unregistering): Released all slaves [ 458.314079][T13497] bridge33: entered promiscuous mode [ 458.320290][T13497] bridge33: entered allmulticast mode [ 458.371503][T13501] bridge40: entered promiscuous mode [ 458.377797][T13501] bridge40: entered allmulticast mode [ 458.743539][T13505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.799852][T13505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.495502][T13515] loop5: detected capacity change from 0 to 1024 [ 459.505607][T13515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.529124][T13515] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 459.566668][T13515] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 459.581064][T13515] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 459.971467][T13522] bridge34: entered promiscuous mode [ 459.977695][T13522] bridge34: entered allmulticast mode [ 460.512811][T13530] syzkaller0: left promiscuous mode [ 460.519287][T13530] tipc: Resetting bearer [ 460.525490][T13530] bridge35: left promiscuous mode [ 460.530799][T13530] bridge36: left promiscuous mode [ 460.536812][T13530] bridge37: left promiscuous mode [ 460.542704][T13530] bridge38: left promiscuous mode [ 460.548248][T13530] bridge39: left promiscuous mode [ 460.554498][T13530] bridge40: left promiscuous mode [ 461.333026][T13534] loop5: detected capacity change from 0 to 2048 [ 461.518833][T13543] loop0: detected capacity change from 0 to 1024 [ 461.526238][T13534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.532568][T13543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.602170][T13548] bridge38: entered promiscuous mode [ 461.608966][T13548] bridge38: entered allmulticast mode [ 461.687880][T13543] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 461.779715][T13552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.823678][T13543] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 461.858377][T13552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.918475][T13543] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 462.397919][T13546] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 462.701766][T13559] loop0: detected capacity change from 0 to 2048 [ 462.726751][ T69] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 462.821342][ T69] EXT4-fs (loop5): This should not happen!! Data will be lost [ 462.821342][ T69] [ 462.844837][T13559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.848207][ T69] EXT4-fs (loop5): Total free blocks count 0 [ 462.911815][T13564] sd 0:0:1:0: device reset [ 463.004918][ T69] EXT4-fs (loop5): Free/Dirty block details [ 463.077772][ T69] EXT4-fs (loop5): free_blocks=0 [ 463.099455][T13559] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2835: bg 0: block 234: padding at end of block bitmap is not set [ 463.131474][ T69] EXT4-fs (loop5): dirty_blocks=3216 [ 463.157732][ T69] EXT4-fs (loop5): Block reservation details [ 463.179397][T13559] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 230 with error 28 [ 463.204282][ T69] EXT4-fs (loop5): i_reserved_data_blocks=201 [ 463.267554][T13534] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1166 with error 28 [ 463.296396][T13559] EXT4-fs (loop0): This should not happen!! Data will be lost [ 463.296396][T13559] [ 463.322810][T13559] EXT4-fs (loop0): Total free blocks count 0 [ 463.339439][T13559] EXT4-fs (loop0): Free/Dirty block details [ 463.347118][T13559] EXT4-fs (loop0): free_blocks=0 [ 463.352837][T13559] EXT4-fs (loop0): dirty_blocks=240 [ 463.360779][T13559] EXT4-fs (loop0): Block reservation details [ 463.371535][T13559] EXT4-fs (loop0): i_reserved_data_blocks=15 [ 463.429266][ T3312] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 463.445218][T10105] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 463.459623][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.481808][T13581] bridge35: entered promiscuous mode [ 464.487608][T13581] bridge35: entered allmulticast mode [ 464.593681][T13596] loop2: detected capacity change from 0 to 1024 [ 464.625318][T13587] syzkaller0: entered promiscuous mode [ 464.634833][T13596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 464.639231][T13587] syzkaller0: entered allmulticast mode [ 464.652899][T13594] tipc: Enabling of bearer rejected, already enabled [ 464.677043][T13594] syzkaller0: entered promiscuous mode [ 464.764717][T13596] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 464.831002][T13596] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 464.859441][T13596] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 464.921447][T13605] bridge36: entered promiscuous mode [ 464.929300][T13605] bridge36: entered allmulticast mode [ 465.792192][T13609] bridge41: entered promiscuous mode [ 465.798721][T13609] bridge41: entered allmulticast mode [ 466.175616][T13617] bridge37: entered promiscuous mode [ 466.181355][T13617] bridge37: entered allmulticast mode [ 466.975056][T13624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13624 comm=syz.0.2846 [ 468.285481][T13728] bridge42: entered promiscuous mode [ 468.291083][T13728] bridge42: entered allmulticast mode [ 468.344364][T13729] sd 0:0:1:0: device reset [ 470.027623][T13767] syzkaller0: left promiscuous mode [ 470.033686][T13767] tipc: Resetting bearer [ 470.040182][T13767] bridge41: left promiscuous mode [ 470.046019][T13767] bridge42: left promiscuous mode [ 471.064793][T13776] loop4: detected capacity change from 0 to 2048 [ 471.167217][T13777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13777 comm=syz.2.2865 [ 471.220542][T13788] loop0: detected capacity change from 0 to 2048 [ 471.280941][T13776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.312163][T13788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.466193][T13806] bridge17: entered promiscuous mode [ 471.471673][T13806] bridge17: entered allmulticast mode [ 472.657645][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.920428][T13776] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2868: bg 0: block 234: padding at end of block bitmap is not set [ 472.979728][T13776] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 473.017572][T13871] bridge34: entered promiscuous mode [ 473.023805][T13871] bridge34: entered allmulticast mode [ 473.104380][T13776] EXT4-fs (loop4): This should not happen!! Data will be lost [ 473.104380][T13776] [ 473.150920][T13776] EXT4-fs (loop4): Total free blocks count 0 [ 473.187344][T13776] EXT4-fs (loop4): Free/Dirty block details [ 473.221730][T13776] EXT4-fs (loop4): free_blocks=0 [ 473.252131][T13776] EXT4-fs (loop4): dirty_blocks=6176 [ 473.286403][T13776] EXT4-fs (loop4): Block reservation details [ 473.324055][T13776] EXT4-fs (loop4): i_reserved_data_blocks=386 [ 473.475810][ T9444] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 473.519799][ T3319] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 473.616340][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b481800: rx timeout, send abort [ 473.625920][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b481800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 473.710289][T13873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.726475][T13873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.068347][T13890] bridge35: entered promiscuous mode [ 474.073944][T13890] bridge35: entered allmulticast mode [ 474.121790][T13893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=13893 comm=syz.2.2886 [ 474.174799][ T8219] syz_tun (unregistering): left allmulticast mode [ 474.819549][T13902] bridge18: entered promiscuous mode [ 474.825373][T13902] bridge18: entered allmulticast mode [ 475.107019][T13919] loop4: detected capacity change from 0 to 512 [ 475.165961][T13919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.203757][T13919] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.223949][T13919] EXT4-fs (loop4): shut down requested (0) [ 475.700346][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.712558][ T8219] tipc: Resetting bearer [ 475.737025][ T8219] tipc: Disabling bearer [ 476.002826][ T9409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.048781][T13982] bridge38: entered promiscuous mode [ 476.054908][T13982] bridge38: entered allmulticast mode [ 476.075914][T13986] loop2: detected capacity change from 0 to 1024 [ 476.100172][ T9409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.111793][T13986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 476.173383][T13986] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 476.225793][T13986] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 476.252262][ T9409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.373588][T13986] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 476.440669][ T9409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.477757][T13891] chnl_net:caif_netlink_parms(): no params data found [ 476.547696][ T28] audit: type=1400 audit(1775920252.546:3816): avc: denied { read } for pid=3039 comm="dhcpcd" name="n25" dev="tmpfs" ino=15327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 476.584540][ T28] audit: type=1400 audit(1775920252.546:3817): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=15327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 476.609720][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881057ada00: rx timeout, send abort [ 476.618681][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881057ada00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 476.625829][T13891] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.114215][T13891] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.121694][T13891] bridge_slave_0: entered allmulticast mode [ 477.128355][T13891] bridge_slave_0: entered promiscuous mode [ 477.217721][ T28] audit: type=1400 audit(1775920252.546:3818): avc: denied { getattr } for pid=3039 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=15327 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 477.306783][ T9409] bridge_slave_1: left allmulticast mode [ 477.328138][ T9409] bridge_slave_1: left promiscuous mode [ 477.893384][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.912405][ T9409] bridge_slave_0: left allmulticast mode [ 477.948427][ T9409] bridge_slave_0: left promiscuous mode [ 478.100492][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.187329][ T28] audit: type=1400 audit(1775920254.176:3819): avc: denied { create } for pid=14000 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 478.230244][T14016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.270917][T14016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.334276][ T28] audit: type=1400 audit(1775920254.176:3820): avc: denied { write } for pid=14000 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=15352 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 478.374020][ T28] audit: type=1400 audit(1775920254.176:3821): avc: denied { append } for pid=14000 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=15352 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 478.403969][ T28] audit: type=1400 audit(1775920254.366:3822): avc: denied { unlink } for pid=14032 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=15352 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 478.996523][T14037] loop2: detected capacity change from 0 to 512 [ 479.017667][T14037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.031774][T14037] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.056565][T14037] EXT4-fs (loop2): shut down requested (0) [ 479.124393][T14041] EXT4-fs (loop2): shut down requested (0) [ 479.143121][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.208301][T14056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=14056 comm=syz.5.2904 [ 480.399906][ T9409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.411869][ T9409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.423832][ T9409] bond0 (unregistering): Released all slaves [ 480.438518][ T9409] bond1 (unregistering): Released all slaves [ 480.456275][T14010] bridge39: entered promiscuous mode [ 480.463177][T14010] bridge39: entered allmulticast mode [ 480.514161][T13891] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.531886][T13891] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.539803][T13891] bridge_slave_1: entered allmulticast mode [ 480.550574][T13891] bridge_slave_1: entered promiscuous mode [ 480.656592][T13891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.680365][ T9409] tipc: Left network mode [ 480.681957][T13891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.734411][T13891] team0: Port device team_slave_0 added [ 481.262522][ T9409] hsr_slave_0: left promiscuous mode [ 481.274664][ T9409] hsr_slave_1: left promiscuous mode [ 481.284663][ T9409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.294156][ T9409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.302228][ T9409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.311802][ T9409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.323710][ T9409] veth1_macvtap: left promiscuous mode [ 481.331573][ T9409] veth0_macvtap: left promiscuous mode [ 481.339505][ T9409] veth1_vlan: left promiscuous mode [ 481.345650][ T9409] veth0_vlan: left promiscuous mode [ 481.556865][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.586649][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.631340][ T9409] team0 (unregistering): Port device team_slave_1 removed [ 481.642690][ T9409] team0 (unregistering): Port device team_slave_0 removed [ 481.689366][T13891] team0: Port device team_slave_1 added [ 481.720861][T14213] syzkaller0: entered promiscuous mode [ 481.726973][T14213] syzkaller0: entered allmulticast mode [ 481.787403][T13891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.826699][T13891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.830888][T14229] loop2: detected capacity change from 0 to 512 [ 481.855197][T13891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.873750][T13891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.910968][T13891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.166539][T14229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.180320][T13891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.195222][T14229] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.213356][T14230] bridge36: entered promiscuous mode [ 482.219015][T14230] bridge36: entered allmulticast mode [ 482.238452][T14237] bridge19: entered promiscuous mode [ 482.244871][T14237] bridge19: entered allmulticast mode [ 482.346538][T14229] EXT4-fs (loop2): shut down requested (0) [ 482.388989][T13891] hsr_slave_0: entered promiscuous mode [ 482.403067][T13891] hsr_slave_1: entered promiscuous mode [ 482.409646][T13891] debugfs: 'hsr0' already exists in 'hsr' [ 482.416477][T13891] Cannot create hsr debugfs directory [ 482.444239][T14240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2917'. [ 482.466529][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.506154][T14253] tipc: Resetting bearer [ 482.645902][T14253] syzkaller0: entered promiscuous mode [ 482.671734][T14251] tipc: Resetting bearer [ 482.960951][T14270] loop4: detected capacity change from 0 to 1024 [ 483.065735][T14270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.154832][T14270] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 483.174148][T14270] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 483.185485][T14270] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 483.461326][T13891] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 483.471481][T13891] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 483.481157][T13891] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.017876][T13891] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.723783][T13891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.795097][T13891] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.826526][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.834626][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.875941][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.884394][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.962678][T14345] loop4: detected capacity change from 0 to 512 [ 484.978415][T13891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.027204][T14345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.049758][T14345] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.138511][T14345] EXT4-fs (loop4): shut down requested (0) [ 485.185606][T13891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.200170][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.372503][T13891] veth0_vlan: entered promiscuous mode [ 485.386691][T13891] veth1_vlan: entered promiscuous mode [ 485.442911][T13891] veth0_macvtap: entered promiscuous mode [ 485.475009][T13891] veth1_macvtap: entered promiscuous mode [ 485.510372][T13891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.546015][T13891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.580792][ T9412] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.644129][ T9412] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.670169][ T9412] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.680205][ T9412] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.795998][T14402] loop3: detected capacity change from 0 to 2048 [ 485.875186][T14402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.998255][T14402] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2887: bg 0: block 234: padding at end of block bitmap is not set [ 486.037472][T14422] tipc: Enabling of bearer rejected, already enabled [ 486.062519][T14402] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 386 with error 28 [ 486.124780][T14402] EXT4-fs (loop3): This should not happen!! Data will be lost [ 486.124780][T14402] [ 486.235732][T14402] EXT4-fs (loop3): Total free blocks count 0 [ 486.273203][T14402] EXT4-fs (loop3): Free/Dirty block details [ 486.284916][ T8168] tipc: Resetting bearer [ 486.292037][T14402] EXT4-fs (loop3): free_blocks=0 [ 486.299090][ T8168] tipc: Disabling bearer [ 486.312125][T14402] EXT4-fs (loop3): dirty_blocks=400 [ 486.319052][T14402] EXT4-fs (loop3): Block reservation details [ 486.326638][T14402] EXT4-fs (loop3): i_reserved_data_blocks=25 [ 486.766931][T13891] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 486.846172][T13891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.126950][T14489] loop2: detected capacity change from 0 to 2048 [ 487.129284][T14425] chnl_net:caif_netlink_parms(): no params data found [ 487.144477][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.162195][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.162181][T14489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.253159][T14425] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.270910][T14425] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.281092][T14425] bridge_slave_0: entered allmulticast mode [ 487.290270][T14425] bridge_slave_0: entered promiscuous mode [ 487.318988][T14425] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.327638][T14425] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.341693][T14425] bridge_slave_1: entered allmulticast mode [ 487.348840][T14425] bridge_slave_1: entered promiscuous mode [ 487.383862][T14503] tipc: Enabled bearer , priority 0 [ 487.392760][T14503] tipc: Resetting bearer [ 487.401252][T14502] tipc: Disabling bearer [ 487.413462][T14425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.428216][T14425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.438565][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.480451][T14425] team0: Port device team_slave_0 added [ 487.487615][T14425] team0: Port device team_slave_1 added [ 487.504792][T14425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.512173][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.571171][T14425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.589552][T14425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.598649][T14425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.628501][T14425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.658238][T14425] hsr_slave_0: entered promiscuous mode [ 487.664714][T14425] hsr_slave_1: entered promiscuous mode [ 487.671125][T14425] debugfs: 'hsr0' already exists in 'hsr' [ 487.677288][T14425] Cannot create hsr debugfs directory [ 488.148454][T14517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=14517 comm=syz.0.2945 [ 488.479513][T14545] bridge1: entered promiscuous mode [ 488.484865][T14545] bridge1: entered allmulticast mode [ 489.389153][T14425] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 489.414844][T14425] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 489.427621][T14425] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 489.529613][T14425] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 489.823935][T14617] sd 0:0:1:0: device reset [ 489.842728][T14425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.099789][T14425] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.200938][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.208413][ T9409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.251389][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.259339][ T9412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.403463][T14425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.484460][T14678] sd 0:0:1:0: device reset [ 493.269119][T14693] tipc: Resetting bearer [ 493.306608][T14692] tipc: Resetting bearer [ 493.437035][T14705] bridge2: entered promiscuous mode [ 493.442529][T14705] bridge2: entered allmulticast mode [ 493.617335][T14706] loop0: detected capacity change from 0 to 2048 [ 493.692355][T14425] veth0_vlan: entered promiscuous mode [ 493.723843][T14706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.790913][T14425] veth1_vlan: entered promiscuous mode [ 493.808459][T14425] veth0_macvtap: entered promiscuous mode [ 493.816872][T14425] veth1_macvtap: entered promiscuous mode [ 493.828647][T14425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.838052][T14425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.855245][ T9666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.894377][ T9666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.959297][ T9666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.013255][ T9666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.338885][T14706] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2966: bg 0: block 234: padding at end of block bitmap is not set [ 495.110628][T14738] bridge3: entered promiscuous mode [ 495.116066][T14738] bridge3: entered allmulticast mode [ 495.125207][T14735] bridge1: entered promiscuous mode [ 495.130796][T14735] bridge1: entered allmulticast mode [ 495.186504][T14706] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 495.200236][T14706] EXT4-fs (loop0): This should not happen!! Data will be lost [ 495.200236][T14706] [ 495.218775][T14706] EXT4-fs (loop0): Total free blocks count 0 [ 495.231588][T14706] EXT4-fs (loop0): Free/Dirty block details [ 495.239374][T14706] EXT4-fs (loop0): free_blocks=0 [ 495.334662][T14706] EXT4-fs (loop0): dirty_blocks=7200 [ 495.340618][T14706] EXT4-fs (loop0): Block reservation details [ 495.368822][T14706] EXT4-fs (loop0): i_reserved_data_blocks=450 [ 495.397092][T14754] loop3: detected capacity change from 0 to 128 [ 495.433544][T14754] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 495.460812][T14754] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.495316][T14713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=14713 comm=syz.2.2965 [ 495.579840][ T9664] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 496.098901][ T3312] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 496.281814][T13891] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.359509][T14799] loop0: detected capacity change from 0 to 512 [ 496.369374][T14800] tipc: Started in network mode [ 496.384407][T14800] tipc: Node identity 366ae1609109, cluster identity 4711 [ 496.391877][T14800] tipc: Enabled bearer , priority 0 [ 496.406289][T14800] tipc: Resetting bearer [ 496.515580][T14798] tipc: Disabling bearer [ 496.584889][T14799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.605495][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.614247][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.634464][T14799] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.744986][T14799] EXT4-fs (loop0): shut down requested (0) [ 496.788822][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.815804][T14812] loop3: detected capacity change from 0 to 1024 [ 496.882341][T14812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.914589][T14812] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 496.941764][T14812] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 496.973156][T14812] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 498.221659][T14832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2983'. [ 498.355767][T14835] loop5: detected capacity change from 0 to 1024 [ 498.372238][T14835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.387982][T14839] loop3: detected capacity change from 0 to 128 [ 498.390424][T14835] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 498.424917][T14835] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 498.438860][T14840] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.439676][T14835] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 498.449844][T14840] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.502675][T14840] bridge1: left promiscuous mode [ 498.526095][T14839] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 498.548137][T14839] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.714843][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.731629][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.734119][T13891] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 499.872738][T14863] syz_tun: entered allmulticast mode [ 499.880641][T14862] syz_tun: left allmulticast mode [ 499.964517][T14866] bridge20: entered promiscuous mode [ 499.971021][T14866] bridge20: entered allmulticast mode [ 500.713200][T14876] loop0: detected capacity change from 0 to 1024 [ 500.732731][T14876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 500.747330][T14876] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 500.770814][T14876] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 500.818339][T14877] bridge39: entered promiscuous mode [ 500.823869][T14877] bridge39: entered allmulticast mode [ 500.850260][T14876] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 501.680272][T14882] bridge4: entered promiscuous mode [ 501.686080][T14882] bridge4: entered allmulticast mode [ 501.762382][T14886] tipc: Started in network mode [ 501.768696][T14886] tipc: Node identity 0efadb53704e, cluster identity 4711 [ 501.776878][T14886] tipc: Enabled bearer , priority 0 [ 501.789875][T14886] tipc: Resetting bearer [ 501.903474][T14885] tipc: Disabling bearer [ 501.909687][T14891] loop3: detected capacity change from 0 to 1024 [ 501.918410][T14891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 501.927470][T14891] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 501.938567][T14891] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 502.164412][T14891] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 502.406263][T14898] loop4: detected capacity change from 0 to 128 [ 502.450140][T14898] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 502.507455][T14898] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.337275][T14425] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.045013][T14930] loop3: detected capacity change from 0 to 2048 [ 504.146808][T14930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.410077][T14937] loop4: detected capacity change from 0 to 512 [ 504.449824][T14937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.497799][T14937] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.546773][T14937] EXT4-fs (loop4): shut down requested (0) [ 504.595853][T14930] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3010: bg 0: block 234: padding at end of block bitmap is not set [ 504.611192][T14930] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 504.625284][T14930] EXT4-fs (loop3): This should not happen!! Data will be lost [ 504.625284][T14930] [ 504.635587][T14930] EXT4-fs (loop3): Total free blocks count 0 [ 504.642103][T14930] EXT4-fs (loop3): Free/Dirty block details [ 504.648795][T14930] EXT4-fs (loop3): free_blocks=0 [ 504.654082][T14930] EXT4-fs (loop3): dirty_blocks=6368 [ 504.664338][T14930] EXT4-fs (loop3): Block reservation details [ 504.671501][T14930] EXT4-fs (loop3): i_reserved_data_blocks=398 [ 504.723603][ T9412] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 504.757448][T13891] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 505.663852][T14952] loop5: detected capacity change from 0 to 1024 [ 505.678584][T14953] bridge5: entered promiscuous mode [ 505.684063][T14953] bridge5: entered allmulticast mode [ 505.695386][T14954] bridge37: entered promiscuous mode [ 505.701492][T14954] bridge37: entered allmulticast mode [ 505.730707][T14952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 505.747454][T14425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.869467][T14952] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 505.898745][T14961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.916152][T14952] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 505.934508][T14961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.960105][T14952] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 507.231669][T14977] bridge40: entered promiscuous mode [ 507.238125][T14977] bridge40: entered allmulticast mode [ 507.354903][ T9040] syz_tun (unregistering): left allmulticast mode [ 507.527896][T14988] loop4: detected capacity change from 0 to 2048 [ 507.567958][T14988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.686073][T14425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.867882][T14980] chnl_net:caif_netlink_parms(): no params data found [ 508.079181][T14980] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.104668][T14980] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.122973][T14980] bridge_slave_0: entered allmulticast mode [ 508.135067][T14980] bridge_slave_0: entered promiscuous mode [ 508.152387][T14980] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.182875][T14980] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.212496][T14980] bridge_slave_1: entered allmulticast mode [ 508.230524][T14980] bridge_slave_1: entered promiscuous mode [ 508.292058][T14980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.379197][T14980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.485980][T14980] team0: Port device team_slave_0 added [ 508.516499][T14980] team0: Port device team_slave_1 added [ 508.595524][T14980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.602631][T14980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.754417][T14980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.816791][T14980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.829746][T14980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.862497][T14980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.884740][T15012] loop4: detected capacity change from 0 to 512 [ 508.902217][T14980] hsr_slave_0: entered promiscuous mode [ 508.929180][T15012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.930089][T14980] hsr_slave_1: entered promiscuous mode [ 508.964554][T15012] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.970851][T14980] debugfs: 'hsr0' already exists in 'hsr' [ 508.992982][T14980] Cannot create hsr debugfs directory [ 509.002007][T15012] EXT4-fs (loop4): shut down requested (0) [ 509.082937][T14980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.208555][T14980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.267156][T14980] team0: Port device netdevsim1 removed [ 509.284923][T14980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.351730][T15023] bridge41: entered promiscuous mode [ 509.357924][T15023] bridge41: entered allmulticast mode [ 509.467596][T14980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.671566][T14980] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 509.700025][T14425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.766462][T14980] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.782237][T14980] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 509.795064][T14980] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.798507][T15025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3032'. [ 509.893609][T14980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.976059][T14980] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.997114][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.004643][ T9419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.041324][T15036] random: crng reseeded on system resumption [ 510.044370][ T28] audit: type=1400 audit(1775920286.036:3823): avc: denied { read write } for pid=15031 comm="syz.5.3033" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 510.110409][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.118185][ T9419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.127534][ T28] audit: type=1400 audit(1775920286.036:3824): avc: denied { ioctl open } for pid=15031 comm="syz.5.3033" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 510.162922][T14980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.194351][T14980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.299788][T14980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.441576][T14980] veth0_vlan: entered promiscuous mode [ 510.482530][T14980] veth1_vlan: entered promiscuous mode [ 510.540610][T14980] veth0_macvtap: entered promiscuous mode [ 510.573487][T14980] veth1_macvtap: entered promiscuous mode [ 510.728186][T14980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.752747][T14980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.777611][ T9426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.786874][ T9426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.821542][ T9426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.842938][ T9426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.963500][T15058] loop2: detected capacity change from 0 to 1024 [ 510.974323][T15058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.111311][T15058] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 511.123784][T15058] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 511.134757][T15058] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 511.169421][T15066] loop4: detected capacity change from 0 to 1024 [ 511.180400][T15066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 511.317059][T15066] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 511.333433][T15066] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 511.350903][T15066] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 511.575212][T15075] loop5: detected capacity change from 0 to 512 [ 511.684002][T15075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.726126][T15075] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.746598][T15075] EXT4-fs (loop5): shut down requested (0) [ 511.897332][T15080] EXT4-fs (loop5): shut down requested (0) [ 512.325304][T10105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.723757][T15101] bridge6: entered promiscuous mode [ 512.729249][T15101] bridge6: entered allmulticast mode [ 512.984209][T15105] bridge2: entered promiscuous mode [ 512.989722][T15105] bridge2: entered allmulticast mode [ 513.229586][T15108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.325482][T15108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.645848][T15110] loop4: detected capacity change from 0 to 1024 [ 513.664745][T15110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.683670][T15110] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 513.700074][T15110] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 513.712638][T15110] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 513.983520][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.993277][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.478169][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3053'. [ 514.957411][T15142] bridge3: entered promiscuous mode [ 514.963154][T15142] bridge3: entered allmulticast mode [ 515.416065][T15144] loop5: detected capacity change from 0 to 2048 [ 515.450763][T15144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.546639][T15144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3058: bg 0: block 234: padding at end of block bitmap is not set [ 515.616453][T15144] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 538 with error 28 [ 515.762171][T15144] EXT4-fs (loop5): This should not happen!! Data will be lost [ 515.762171][T15144] [ 515.786050][T15144] EXT4-fs (loop5): Total free blocks count 0 [ 515.810922][T15144] EXT4-fs (loop5): Free/Dirty block details [ 515.931835][T15144] EXT4-fs (loop5): free_blocks=0 [ 515.944468][T15144] EXT4-fs (loop5): dirty_blocks=544 [ 515.954547][T15144] EXT4-fs (loop5): Block reservation details [ 515.961611][T15144] EXT4-fs (loop5): i_reserved_data_blocks=34 [ 516.478930][T15208] bridge42: entered promiscuous mode [ 516.484636][T15208] bridge42: entered allmulticast mode [ 516.904444][T10105] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 516.924091][T15214] loop2: detected capacity change from 0 to 1024 [ 516.963615][T10105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.964682][T15214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 517.040612][T15214] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 517.061594][T15214] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 517.083002][T15214] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 517.265902][T15222] bridge4: entered promiscuous mode [ 517.271389][T15222] bridge4: entered allmulticast mode [ 518.105103][ T8321] tipc: Resetting bearer [ 518.146519][ T8699] syz_tun (unregistering): left allmulticast mode [ 518.180686][ T8499] tipc: Resetting bearer [ 518.201498][ T8499] tipc: Disabling bearer [ 518.270976][T15237] loop4: detected capacity change from 0 to 512 [ 518.320417][T15237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.365686][T15237] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.408509][T15237] EXT4-fs (loop4): shut down requested (0) [ 518.461038][T15244] EXT4-fs (loop4): shut down requested (0) [ 518.553687][T15249] syz_tun: entered allmulticast mode [ 518.569365][T15225] chnl_net:caif_netlink_parms(): no params data found [ 518.801828][T15225] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.814686][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.822588][T15225] bridge_slave_0: entered allmulticast mode [ 518.830341][T15225] bridge_slave_0: entered promiscuous mode [ 519.080862][T14425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.244232][T15225] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.252672][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.260660][T15225] bridge_slave_1: entered allmulticast mode [ 519.267879][T15225] bridge_slave_1: entered promiscuous mode [ 519.300314][T15225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.311380][T15225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.333666][T15225] team0: Port device team_slave_0 added [ 519.340820][T15225] team0: Port device team_slave_1 added [ 519.359001][T15225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.366375][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.434920][T15225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.447912][T15225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.455753][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.482998][T15225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.535228][T15270] sd 0:0:1:0: device reset [ 519.694830][T15225] hsr_slave_0: entered promiscuous mode [ 519.701636][T15225] hsr_slave_1: entered promiscuous mode [ 519.708907][T15225] debugfs: 'hsr0' already exists in 'hsr' [ 519.715255][T15225] Cannot create hsr debugfs directory [ 521.292617][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b766000: rx timeout, send abort [ 521.302726][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b766000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 521.602662][T15225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.246335][T15381] bridge5: entered promiscuous mode [ 522.252110][T15381] bridge5: entered allmulticast mode [ 522.555376][T15225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.708310][T15225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.746658][T15407] loop4: detected capacity change from 0 to 2048 [ 522.774799][T15225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.807689][T15407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.905901][T15225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 522.926629][T15225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 522.956882][T15225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 522.966893][T15225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 522.990750][T14425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.083387][T15225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.133223][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.159957][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.168180][ T9445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.219366][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.228317][ T9445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.334666][T15419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=15419 comm=syz.4.3083 [ 523.347471][T15225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.059187][T15225] veth0_vlan: entered promiscuous mode [ 524.069118][T15225] veth1_vlan: entered promiscuous mode [ 524.089347][T15225] veth0_macvtap: entered promiscuous mode [ 524.101021][T15225] veth1_macvtap: entered promiscuous mode [ 524.125083][T15225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.141204][T15225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.160993][ T9427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.165193][T15453] random: crng reseeded on system resumption [ 524.202510][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.238611][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.248305][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.550369][T15465] bridge7: entered promiscuous mode [ 524.556170][T15465] bridge7: entered allmulticast mode [ 525.794716][T15474] tipc: Enabled bearer , priority 0 [ 525.850766][T15473] tipc: Disabling bearer [ 526.033347][T15481] bridge6: entered promiscuous mode [ 526.039079][T15481] bridge6: entered allmulticast mode [ 526.888270][T15512] loop0: detected capacity change from 0 to 2048 [ 526.909114][T15512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.011466][T15512] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3107: bg 0: block 234: padding at end of block bitmap is not set [ 527.035962][T15512] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 962 with error 28 [ 527.054340][T15512] EXT4-fs (loop0): This should not happen!! Data will be lost [ 527.054340][T15512] [ 527.067856][T15512] EXT4-fs (loop0): Total free blocks count 0 [ 527.076037][T15512] EXT4-fs (loop0): Free/Dirty block details [ 527.087382][T15512] EXT4-fs (loop0): free_blocks=0 [ 527.097050][T15525] 9p: Bad value for 'wfdno' [ 527.097538][T15512] EXT4-fs (loop0): dirty_blocks=976 [ 527.108370][T15512] EXT4-fs (loop0): Block reservation details [ 527.117549][T15512] EXT4-fs (loop0): i_reserved_data_blocks=61 [ 527.319228][T14980] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 527.336568][T14980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.366187][T15530] loop0: detected capacity change from 0 to 2048 [ 527.386428][T15530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.457137][T15530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3111: bg 0: block 234: padding at end of block bitmap is not set [ 527.472849][T15530] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1818 with error 28 [ 527.486645][T15530] EXT4-fs (loop0): This should not happen!! Data will be lost [ 527.486645][T15530] [ 527.497454][T15530] EXT4-fs (loop0): Total free blocks count 0 [ 527.503712][T15530] EXT4-fs (loop0): Free/Dirty block details [ 527.510393][T15530] EXT4-fs (loop0): free_blocks=0 [ 527.516032][T15530] EXT4-fs (loop0): dirty_blocks=1824 [ 527.521813][T15530] EXT4-fs (loop0): Block reservation details [ 527.528813][T15530] EXT4-fs (loop0): i_reserved_data_blocks=114 [ 527.632136][T14980] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 527.650238][T14980] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.239749][T15552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.266393][T15552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.403269][ C0] vcan0: j1939_tp_rxtimer: 0xffff888123dd8a00: rx timeout, send abort [ 529.413118][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888123dd8a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 529.502451][T15568] syzkaller0: entered promiscuous mode [ 529.508407][T15568] syzkaller0: entered allmulticast mode [ 530.616033][T15587] loop2: detected capacity change from 0 to 2048 [ 530.697451][T15587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.983650][T15225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.732665][T15622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.765420][T15622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.451715][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124798c00: rx timeout, send abort [ 532.461244][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888124798c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 532.856408][T15642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.866845][T15642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.116683][T15650] tipc: Started in network mode [ 533.121713][T15650] tipc: Node identity c6659358a7c3, cluster identity 4711 [ 533.129485][T15650] tipc: Enabled bearer , priority 0 [ 533.166832][T15649] tipc: Disabling bearer [ 533.548687][T15656] bridge8: entered promiscuous mode [ 533.554503][T15656] bridge8: entered allmulticast mode [ 533.620690][T15658] syzkaller0: entered promiscuous mode [ 533.650297][T15658] syzkaller0: entered allmulticast mode [ 533.838909][T15662] bridge1: entered promiscuous mode [ 533.845468][T15662] bridge1: entered allmulticast mode [ 534.954786][T15664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=15664 comm=syz.5.3147 [ 535.319745][T15678] sd 0:0:1:0: device reset [ 535.932593][T15689] bridge7: entered promiscuous mode [ 535.938951][T15689] bridge7: entered allmulticast mode [ 536.351114][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811e36be00: rx timeout, send abort [ 536.360242][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811e36be00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 536.448961][T15696] loop5: detected capacity change from 0 to 2048 [ 536.477040][T15696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.552625][T15696] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3156: bg 0: block 234: padding at end of block bitmap is not set [ 536.688036][T15707] loop4: detected capacity change from 0 to 128 [ 536.768294][T15707] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 536.794978][T15696] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 946 with error 28 [ 536.859025][T15696] EXT4-fs (loop5): This should not happen!! Data will be lost [ 536.859025][T15696] [ 536.870110][T15696] EXT4-fs (loop5): Total free blocks count 0 [ 536.876589][T15696] EXT4-fs (loop5): Free/Dirty block details [ 536.883784][T15696] EXT4-fs (loop5): free_blocks=0 [ 536.923027][T15707] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.985983][T15696] EXT4-fs (loop5): dirty_blocks=960 [ 536.991503][T15696] EXT4-fs (loop5): Block reservation details [ 537.108307][T15696] EXT4-fs (loop5): i_reserved_data_blocks=60 [ 537.474718][T15717] netlink: 'syz.3.3160': attribute type 1 has an invalid length. [ 537.593904][T10105] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 537.601429][T15718] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.617593][T15718] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.632040][T14425] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 537.670602][T10105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.686332][T15717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.753837][T15719] bond1 (unregistering): Released all slaves [ 537.769578][T15724] loop5: detected capacity change from 0 to 2048 [ 537.806216][T15724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.095526][T15724] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3161: bg 0: block 234: padding at end of block bitmap is not set [ 538.124885][T15724] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 716 with error 28 [ 538.157192][T15724] EXT4-fs (loop5): This should not happen!! Data will be lost [ 538.157192][T15724] [ 538.177828][T15724] EXT4-fs (loop5): Total free blocks count 0 [ 538.194374][T15724] EXT4-fs (loop5): Free/Dirty block details [ 538.204315][T15724] EXT4-fs (loop5): free_blocks=0 [ 538.214377][T15724] EXT4-fs (loop5): dirty_blocks=720 [ 538.220404][T15724] EXT4-fs (loop5): Block reservation details [ 538.236542][T15724] EXT4-fs (loop5): i_reserved_data_blocks=45 [ 538.488690][T15743] bridge9: entered promiscuous mode [ 538.494138][T15743] bridge9: entered allmulticast mode [ 539.007293][T10105] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 539.022829][T10105] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.180273][T15747] syzkaller0: entered promiscuous mode [ 539.187030][T15747] syzkaller0: entered allmulticast mode [ 539.504954][T15769] bridge2: entered promiscuous mode [ 539.510586][T15769] bridge2: entered allmulticast mode [ 539.926155][T15775] syzkaller0: entered promiscuous mode [ 539.938315][T15775] syzkaller0: entered allmulticast mode [ 540.323078][T15808] bridge1: entered promiscuous mode [ 540.329091][T15808] bridge1: entered allmulticast mode [ 541.257437][T15841] loop2: detected capacity change from 0 to 512 [ 541.725146][T15841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.937519][T15855] bridge2: entered promiscuous mode [ 541.943123][T15855] bridge2: entered allmulticast mode [ 541.973971][T15841] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.067397][T15831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=15831 comm=syz.4.3178 [ 542.088966][T15841] EXT4-fs (loop2): shut down requested (0) [ 542.431868][T15225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.608357][T15867] loop2: detected capacity change from 0 to 1024 [ 542.685219][T15867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 542.772869][T15867] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 542.898381][T15867] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 543.020150][T15867] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 543.444441][T15881] bridge8: entered promiscuous mode [ 543.450406][T15881] bridge8: entered allmulticast mode [ 544.322762][T15883] bridge3: entered promiscuous mode [ 544.328756][T15883] bridge3: entered allmulticast mode [ 544.387836][T15894] loop3: detected capacity change from 0 to 1024 [ 544.396357][T15894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.407821][T15894] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 544.426383][T15896] loop4: detected capacity change from 0 to 512 [ 544.447549][T15894] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 544.522254][T15894] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 544.538320][T15896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.644427][T15896] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.798713][T15904] bridge4: entered promiscuous mode [ 544.804741][T15904] bridge4: entered allmulticast mode [ 544.930562][T15896] EXT4-fs (loop4): shut down requested (0) [ 545.294889][T14425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.737360][T15912] loop2: detected capacity change from 0 to 2048 [ 545.891966][T15912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.079349][T15225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.723598][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bb4e200: rx timeout, send abort [ 546.732434][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb4e200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 547.270031][T15944] loop4: detected capacity change from 0 to 2048 [ 547.309002][T15948] loop2: detected capacity change from 0 to 1024 [ 547.317972][T15948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 547.330298][T15948] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 547.341319][T15944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.354653][T15948] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 547.365720][T15948] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 547.762818][T15944] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3207: bg 0: block 234: padding at end of block bitmap is not set [ 547.812335][T15944] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 998 with error 28 [ 548.030402][T15944] EXT4-fs (loop4): This should not happen!! Data will be lost [ 548.030402][T15944] [ 548.153417][T15944] EXT4-fs (loop4): Total free blocks count 0 [ 548.204316][T15944] EXT4-fs (loop4): Free/Dirty block details [ 548.210625][T15944] EXT4-fs (loop4): free_blocks=0 [ 548.215943][T15944] EXT4-fs (loop4): dirty_blocks=1008 [ 548.221579][T15944] EXT4-fs (loop4): Block reservation details [ 548.228579][T15944] EXT4-fs (loop4): i_reserved_data_blocks=63 [ 548.510594][T14425] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 548.613916][T14425] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.915537][T15992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.023646][T15992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.587632][T16036] loop0: detected capacity change from 0 to 512 [ 549.622333][T16036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.639926][T16036] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.655189][T16036] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.673995][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'. [ 549.872480][T16046] netlink: 'syz.4.3221': attribute type 1 has an invalid length. [ 549.892717][T16046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 549.913492][T16046] bond1 (unregistering): Released all slaves [ 550.001791][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bb69000: rx timeout, send abort [ 550.014307][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb69000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 550.963733][T16060] random: crng reseeded on system resumption [ 551.898605][T16051] bridge10: entered promiscuous mode [ 551.904331][T16051] bridge10: entered allmulticast mode [ 553.288799][T16089] loop3: detected capacity change from 0 to 1024 [ 553.308672][T16091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.334606][T16089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 553.346333][T16091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.357109][T16089] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 553.376017][T16089] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 553.389329][T16089] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 553.659797][T16095] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.685501][T16095] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.870414][T16095] bridge1: left promiscuous mode [ 553.876596][T16095] bridge2: left promiscuous mode [ 553.882338][T16095] bridge3: left promiscuous mode [ 553.888277][T16095] bridge4: left promiscuous mode [ 553.894032][T16095] bridge5: left promiscuous mode [ 553.906335][T16095] bridge6: left promiscuous mode [ 553.912385][T16095] bridge7: left promiscuous mode [ 553.934181][T16095] bridge8: left promiscuous mode [ 553.966933][T16095] bridge9: left promiscuous mode [ 553.973162][T16095] bridge10: left promiscuous mode [ 554.357187][T16095] bridge11: left promiscuous mode [ 554.465039][T16095] bridge12: left promiscuous mode [ 554.514492][T16095] bridge13: left promiscuous mode [ 554.584925][T16095] bridge14: left promiscuous mode [ 554.591520][T16095] bridge15: left promiscuous mode [ 554.598109][T16095] bridge16: left promiscuous mode [ 554.605092][T16095] bridge17: left promiscuous mode [ 554.611181][T16095] bridge18: left promiscuous mode [ 554.617364][T16095] bridge19: left promiscuous mode [ 554.624563][T16095] bridge20: left promiscuous mode [ 555.222517][T16111] netlink: 'syz.4.3236': attribute type 1 has an invalid length. [ 555.253638][T16111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.272282][T16111] bond1 (unregistering): Released all slaves [ 555.339661][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bb5dc00: rx timeout, send abort [ 555.349217][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb5dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 555.628928][T16117] loop3: detected capacity change from 0 to 512 [ 555.803483][T16122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=16122 comm=syz.2.3240 [ 555.921546][T16131] random: crng reseeded on system resumption [ 556.049167][T16117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.067847][T16117] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.081754][T16117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.181637][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 556.823668][T16151] syzkaller0: entered promiscuous mode [ 556.840538][T16151] syzkaller0: entered allmulticast mode [ 557.025208][T16158] netlink: 'syz.5.3250': attribute type 1 has an invalid length. [ 557.047433][T16158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.342501][T16158] bond1 (unregistering): Released all slaves [ 557.396220][T16164] bridge5: entered promiscuous mode [ 557.401810][T16164] bridge5: entered allmulticast mode [ 557.551209][T16172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.561491][T16172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.575653][T16172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3255'. [ 558.114353][T16177] loop2: detected capacity change from 0 to 512 [ 558.156793][T16177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.173543][T16177] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.186692][T16177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.201758][T16177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'. [ 558.356449][ C0] vcan0: j1939_tp_rxtimer: 0xffff888124553a00: rx timeout, send abort [ 558.366790][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888124553a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 558.749533][T16207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=16207 comm=syz.5.3258 [ 558.988099][ T9449] ================================================================== [ 558.997731][ T9449] BUG: KCSAN: data-race in alloc_pid / copy_process [ 559.004871][ T9449] [ 559.007530][ T9449] read-write to 0xffffffff86c5ff68 of 4 bytes by task 2 on cpu 1: [ 559.016647][ T9449] alloc_pid+0x651/0x940 [ 559.021599][ T9449] copy_process+0xf37/0x20b0 [ 559.026517][ T9449] kernel_clone+0x16b/0x5d0 [ 559.031723][ T9449] kernel_thread+0xe5/0x120 [ 559.037029][ T9449] kthreadd+0x25b/0x320 [ 559.041753][ T9449] ret_from_fork+0x150/0x360 [ 559.046832][ T9449] ret_from_fork_asm+0x1a/0x30 [ 559.052447][ T9449] [ 559.054779][ T9449] read to 0xffffffff86c5ff68 of 4 bytes by task 9449 on cpu 0: [ 559.064473][ T9449] copy_process+0x187f/0x20b0 [ 559.070187][ T9449] kernel_clone+0x16b/0x5d0 [ 559.075488][ T9449] user_mode_thread+0x9c/0xd0 [ 559.082053][ T9449] call_usermodehelper_exec_work+0x7a/0x160 [ 559.089142][ T9449] process_scheduled_works+0x513/0xa10 [ 559.095700][ T9449] worker_thread+0x58a/0x780 [ 559.100625][ T9449] kthread+0x22a/0x280 [ 559.104973][ T9449] ret_from_fork+0x150/0x360 [ 559.110278][ T9449] ret_from_fork_asm+0x1a/0x30 [ 559.116357][ T9449] [ 559.118992][ T9449] value changed: 0x8000012d -> 0x8000012e [ 559.125254][ T9449] [ 559.127847][ T9449] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 559.134298][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: kworker/u8:29 Not tainted syzkaller #0 PREEMPT(full) [ 559.144148][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 559.155447][ T9449] Workqueue: events_unbound call_usermodehelper_exec_work [ 559.164608][ T9449] ================================================================== [ 559.407872][T16194] syz_tun (unregistering): left allmulticast mode [ 559.421272][T16191] syz_tun (unregistering): left allmulticast mode [ 559.710751][ T9435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.767423][ T9435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.827703][ T9435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.878351][ T9435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.966627][ T9435] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.028703][ T9435] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.058600][ T9435] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.107258][ T9435] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.196483][ T9435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.277661][ T9435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.317828][ T9435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.357219][ T9435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.451311][ T9435] bridge_slave_1: left allmulticast mode [ 560.458181][ T9435] bridge_slave_1: left promiscuous mode [ 560.464629][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.473283][ T9435] bridge_slave_0: left allmulticast mode [ 560.480051][ T9435] bridge_slave_0: left promiscuous mode [ 560.486363][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.496088][ T9435] bridge_slave_1: left allmulticast mode [ 560.502605][ T9435] bridge_slave_1: left promiscuous mode [ 560.508798][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.517142][ T9435] bridge_slave_0: left allmulticast mode [ 560.523479][ T9435] bridge_slave_0: left promiscuous mode [ 560.529839][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.540114][ T9435] bridge_slave_1: left allmulticast mode [ 560.546965][ T9435] bridge_slave_1: left promiscuous mode [ 560.553151][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.561503][ T9435] bridge_slave_0: left allmulticast mode [ 560.567496][ T9435] bridge_slave_0: left promiscuous mode [ 560.573572][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.816018][ T9435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.826882][ T9435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.837043][ T9435] bond0 (unregistering): Released all slaves [ 561.116220][ T9435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.126282][ T9435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.136910][ T9435] bond0 (unregistering): Released all slaves [ 561.606363][ T9435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.618342][ T9435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.629177][ T9435] bond0 (unregistering): Released all slaves [ 561.691535][ T9435] tipc: Left network mode [ 561.696818][ T9435] tipc: Left network mode [ 561.706132][ T9435] hsr_slave_0: left promiscuous mode [ 561.712237][ T9435] hsr_slave_1: left promiscuous mode [ 561.718280][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.727660][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.736611][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.745976][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.756311][ T9435] hsr_slave_0: left promiscuous mode [ 561.763213][ T9435] hsr_slave_1: left promiscuous mode [ 561.769616][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.777964][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.798575][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.814342][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.828993][ T9435] hsr_slave_0: left promiscuous mode [ 561.835665][ T9435] hsr_slave_1: left promiscuous mode [ 561.842209][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.850722][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.860921][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.870100][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.889696][ T9435] veth1_macvtap: left promiscuous mode [ 561.898039][ T9435] veth0_macvtap: left promiscuous mode [ 561.905403][ T9435] veth1_vlan: left promiscuous mode [ 561.911332][ T9435] veth0_vlan: left promiscuous mode [ 561.918365][ T9435] veth1_macvtap: left promiscuous mode [ 561.926095][ T9435] veth0_macvtap: left promiscuous mode [ 561.932537][ T9435] veth1_vlan: left promiscuous mode [ 561.939257][ T9435] veth0_vlan: left promiscuous mode [ 561.945674][ T9435] veth1_macvtap: left promiscuous mode [ 561.951501][ T9435] veth0_macvtap: left promiscuous mode [ 561.957727][ T9435] veth1_vlan: left promiscuous mode [ 561.963414][ T9435] veth0_vlan: left promiscuous mode [ 562.088806][ T9435] team0 (unregistering): Port device team_slave_1 removed [ 562.099066][ T9435] team0 (unregistering): Port device team_slave_0 removed [ 562.156307][ T9435] team0 (unregistering): Port device team_slave_1 removed [ 562.167011][ T9435] team0 (unregistering): Port device team_slave_0 removed [ 562.221511][ T9435] team0 (unregistering): Port device team_slave_1 removed [ 562.232165][ T9435] team0 (unregistering): Port device team_slave_0 removed [ 562.908707][ T9435] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.967025][ T9435] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.037169][ T9435] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.086994][ T9435] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.156468][ T9435] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.198047][ T9435] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.267216][ T9435] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.297168][ T9435] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.377073][ T9435] bridge_slave_1: left allmulticast mode [ 563.383345][ T9435] bridge_slave_1: left promiscuous mode [ 563.389925][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.398228][ T9435] bridge_slave_0: left allmulticast mode [ 563.404470][ T9435] bridge_slave_0: left promiscuous mode [ 563.410694][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.421757][ T9435] bridge_slave_1: left allmulticast mode [ 563.428225][ T9435] bridge_slave_1: left promiscuous mode [ 563.435499][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.444749][ T9435] bridge_slave_0: left allmulticast mode [ 563.450934][ T9435] bridge_slave_0: left promiscuous mode [ 563.457332][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.917199][ T9435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.928363][ T9435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.939952][ T9435] bond0 (unregistering): Released all slaves [ 564.866349][ T9435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.878612][ T9435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.889261][ T9435] bond0 (unregistering): Released all slaves [ 564.938375][ T9435] tipc: Left network mode [ 564.943288][ T9435] tipc: Left network mode [ 564.951768][ T9435] hsr_slave_0: left promiscuous mode [ 564.959338][ T9435] hsr_slave_1: left promiscuous mode [ 564.965731][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.974100][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.982575][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.992777][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.003354][ T9435] hsr_slave_0: left promiscuous mode [ 565.009791][ T9435] hsr_slave_1: left promiscuous mode [ 565.016398][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.024115][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.032663][ T9435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.041312][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.055348][ T9435] veth1_macvtap: left promiscuous mode [ 565.062450][ T9435] veth0_macvtap: left promiscuous mode [ 565.069326][ T9435] veth1_vlan: left promiscuous mode [ 565.075121][ T9435] veth0_vlan: left promiscuous mode [ 565.081409][ T9435] veth1_macvtap: left promiscuous mode [ 565.087786][ T9435] veth0_macvtap: left promiscuous mode [ 565.093988][ T9435] veth1_vlan: left promiscuous mode [ 565.101118][ T9435] veth0_vlan: left promiscuous mode [ 565.189376][ T9435] team0 (unregistering): Port device team_slave_1 removed [ 565.201281][ T9435] team0 (unregistering): Port device team_slave_0 removed [ 565.253897][ T9435] team0 (unregistering): Port device team_slave_1 removed [ 565.264325][ T9435] team0 (unregistering): Port device team_slave_0 removed