last executing test programs: 2m48.853844606s ago: executing program 3 (id=106): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$eJzs3M9vFFUcAPDvzLblt62IP0DQKhqJP1pafsjBi0YTDpqY6AHjqbYLqSzU0JoIIVo94NGQeDfe/QOMJ70Y9WTiVe+GhBguoKc1szMDS9ktXbplofv5JLP73syD974z83bezNttAH1rNHtJIrZGxJ8RMZxnby4wmr9du3J++t8r56eTqNff+SdplLt65fx0WbT8d1vyTL1e5De0qPfC+xFTtVr1TJEfXzj10fj82XMvzZ6aOlE9UT09eeTIwQN7hg5PHupKnFlcV3d9Ord759H3Lr41feziB79+l7V3a7G9OY5uGc33bkvPdruyHtvWlE4GetgQOlKJiOxwDTb6/3BUYtP1bcPxxhc9bRywpur1er3V9bmwWAfWsSR63QKgN8oLfXb/Wy53aehxT7j8an4DlMV9rVjyLQOR5oknB5fc33bTaEQcW/zvm2yJNXoOAQDQ7Mds/PNiq/FfGo/kiaHs5YFiDmUkIh6MiO0R8VBE7IiIhyMaZR+NiMc6rH/pDMmt45/00h0HtwLZ+O+VYm7r5vFfWhYZqRS5bY34B5Pjs7Xq/mKf7IvBDcdnk+rEMnX89PofX7Xb1jz+y5as/nIsWLTj0sCSB3QzUwtTq4m52eXPI3YNtIo/iXIaJ4mInRGx6w7rmH2+/YTQ7eNfRhfmmerfRjyXH//FWBJ/KWk7Pznx8uHJQ+Mbo1bdP16eFbf67fcLb7erf1Xxd0F2/De3PP+vxz+SbIyYP3vuZGO+dr7zOi789WXbe5oOz/+j24rzfyh5t7FiqNjwydTCwpmJiKHkzVvXT97438p8WT6Lf9/e1v1/e9zYE49HxO6I2BMRT2Q3hUXbn4qIpyNi7zLx//LaMx92Hv8yT+W7KIt/5nbHP5qPf+eJysmff+g8/lJ2/A82UvuKNSv5/FtpA1ez7wAAAOB+kTa+A5+kY9fTaTo2ln+Hf0dsTmtz8wsvHJ/7+PRM/l35kRhMyyddw03PQyeKZ8NlfnJJ/kDx3PjryqZGfmx6rjbT6+Chz21p0/8zf1d63Tpgzfm9FvQv/R/6l/4P/SnR/6Gv6f/Qv1r1/8/alh77fk0bA9xVrv/Qv1bQ/xfzt/ajAuD+5PoP/Uv/h77U9rfx6ap+8i+x7hOR3hPNWP+JgRX/MYsOEvXhvP9naza0LNPrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+D8AAP//Yz/jTQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknod(0x0, 0x800, 0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m36.188799555s ago: executing program 3 (id=135): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fremovexattr(r6, &(0x7f0000000000)=@random={'user.', 'GPL\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740000000001800068014000400200100000000"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m32.158990922s ago: executing program 3 (id=144): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x8, 0x0, &(0x7f0000001040)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 2m29.924094464s ago: executing program 3 (id=149): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNF1Gk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvebNmaNGmXrZn5fOC259x70nNP7v2enpOTkACG1mT2oxDxakR8m0Qcajk2GvnByY1y6w+uzWVbEvX6Z38lkeT7muWT/Pd4nnklIn77OuJEYXO91dW1xVK5nC7n+ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dvbX3z3D8/fHrno9PfHFv//pd7h28lcSYO5sda2/EUrrdmJmMyf07G4swTBaf7UNkgSXb7BNiRkTzOxyLrAw7FSB71wP/fVxFRB4ZUIv5hSDXHAc25fZ/mwS+M+x9uTIA2tz/ZeG0k9jXmRgfWk8dmRtl8d6IP9Wd1/Prn7VvZFv17HQKgq+s3IuLU6Gjn/m/nTvVQ5sk69H/w/NzJxj9vtRv/FB6Of6LN+Ge8TezuRPf4L9zrQzUdZeO/D9qOfx8uWk2M5LmXGmO+seTCxXKa9W0vR8TxGNub5bdazzm9frfe6Vjr+C/bsvqbY8H8PO6N7n38MfOlWulp2tzq/o2I17qMf5M21z97Ps71WMfR9PbrnY51b/+zVf854o221//Rilay9frkVON+mGreFZv9ffPo753q3+32Z9f/wNbtn0ha12ur26/jp33/pp2OTSb5ouk27/89yeeN9J5839VSrbY8HbEn+WTz/plHj23mm+Wz9h8/tnX/1+7+3x8RX/TY/ptHbnYsOgjXf35b13/7ibsff/ljp/p76//ebqSO53t66f96PcGnee4AAAAAAABg0BQi4mAkheLDdKFQLG68v+NIHCiUK9XaiQuVlUvz0fis7ESMFZor3eMt74eYzt8P28zPPJGfjYjDEfHdyP5GvjhXKc/vduMBAAAAAAAAAAAAAAAAAABgQIx3+Px/5o+R3T474Jnzld8wvLrGfz++6QkYSP7/w/AS/zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXXu7Nlsq68/uDaX5eevrK4sVq6cnE+ri8WllbniXGX5cnGhUlkop8W5ylK3v1euVC5Pz8TK1alaWq1NVVfXzi9VVi7Vzl9cKi2k59Ox59IqAAAAAAAAAAAAAAAAAAAAeLFUV9cWS+VyuiwhsaPE6GCchkSfE7vdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/8FAAD//wZvNao=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2m27.423385949s ago: executing program 3 (id=154): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fremovexattr(r6, &(0x7f0000000000)=@random={'user.', 'GPL\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740000000001800068014000400200100000000"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m25.91899825s ago: executing program 3 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, 0x0, 0x4040000) 2m24.607727158s ago: executing program 32 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, 0x0, 0x4040000) 2m2.256030854s ago: executing program 0 (id=207): unshare(0x62040200) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00', 0x7003}, &(0x7f0000000100)=0x54) 2m1.684089802s ago: executing program 0 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, 0x0, 0x4040000) 2m0.229958502s ago: executing program 0 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_settime(0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m57.745595998s ago: executing program 0 (id=218): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m44.235870838s ago: executing program 0 (id=254): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 1m43.991530272s ago: executing program 0 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2000000000000296, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x168, 0x9403, 0x4, 0x0, 0x2c0, 0x268, 0x4a8, 0x3d8, 0x268, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xa, 0xfffd, 0x84}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'syz_tun\x00', 'team0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) 1m29.288757109s ago: executing program 5 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, 0x0, 0x66) 1m28.828274646s ago: executing program 33 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2000000000000296, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x168, 0x9403, 0x4, 0x0, 0x2c0, 0x268, 0x4a8, 0x3d8, 0x268, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xa, 0xfffd, 0x84}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'syz_tun\x00', 'team0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) 1m28.688197968s ago: executing program 5 (id=291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) geteuid() 1m27.707968562s ago: executing program 5 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000580)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 1m26.819793995s ago: executing program 5 (id=296): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_settime(0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m25.877531927s ago: executing program 5 (id=297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) stat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x7f, 0x1, 0x401}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4800}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.542211002s ago: executing program 5 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000980)={0x1, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@fallback=r1, r3, 0x14, 0x20, 0x0, @void, @void, @void, @value=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 1m8.755504109s ago: executing program 34 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000980)={0x1, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@fallback=r1, r3, 0x14, 0x20, 0x0, @void, @void, @void, @value=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) 40.203992902s ago: executing program 7 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, 0x0, 0x4040000) 39.68261734s ago: executing program 7 (id=387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r5, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000200001030000000000000000020000000000790f00000000"], 0x1c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000200)={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) 37.571746s ago: executing program 7 (id=395): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}}, 0xf0}, 0x1, 0xe}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x1501) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 22.494235813s ago: executing program 35 (id=395): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}}, 0xf0}, 0x1, 0xe}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x1501) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 19.995412848s ago: executing program 6 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2000000000000296, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x168, 0x9403, 0x4, 0x0, 0x2c0, 0x268, 0x4a8, 0x3d8, 0x268, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xa, 0xfffd, 0x84}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'syz_tun\x00', 'team0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) 9.2561827s ago: executing program 4 (id=444): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000280)={[{0x8, 0x6, 0x7, 0x40, 0x53, 0x28, 0x81, 0x81, 0x8, 0x0, 0x3, 0x9, 0x4}, {0x100, 0x8, 0x2, 0xc, 0x60, 0x8, 0x6, 0x0, 0x8, 0x4, 0x2c, 0x3, 0x7}, {0x6, 0x6, 0xf8, 0x5, 0xf0, 0x7f, 0x6, 0x8, 0x80, 0x9d, 0x3, 0xff, 0x3}], 0xf7}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000000)={@id={0x2, 0x0, @auto="e612c52d1a931f7695593232858009d6"}}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 7.07320595s ago: executing program 1 (id=446): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r5, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000200001030000000000000000020000000000790f00000000"], 0x1c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000200)={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) 6.984135332s ago: executing program 6 (id=447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x800) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.142761854s ago: executing program 4 (id=448): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) sync_file_range(0xffffffffffffffff, 0x6, 0x10000000000000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mkdir(0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) close(0xffffffffffffffff) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x39, 0x0, 0x0) 5.952073096s ago: executing program 1 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.861944618s ago: executing program 6 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 4.882894331s ago: executing program 4 (id=452): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x168, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x10001}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7}]}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x4, 0xffffffff, 0x0, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0x7ff, 0x3, 0x3]}}, {{0x1c, 0x1, {0x5, 0x6, 0x4007, 0x7, 0x2, 0x9, 0x80000, 0x6}}, {0x10, 0x2, [0x8, 0x2, 0x3, 0x1, 0xf36, 0x4]}}, {{0x1c, 0x1, {0x8, 0x10, 0x4, 0x6, 0x2, 0x10000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x40, 0x0, 0x0, 0x1, 0x61dd, 0x7, 0x2}}, {0x8, 0x2, [0x2, 0x7]}}, {{0x1c, 0x1, {0x30, 0x9, 0x0, 0xfffffffb, 0x1, 0xf, 0x7fffffff, 0x5}}, {0xe, 0x2, [0x3, 0xe7ff, 0x1, 0x4, 0x4]}}, {{0x1c, 0x1, {0x6, 0xff, 0x0, 0x4e9, 0x1, 0x6, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x5, 0x7e2, 0x3, 0x0, 0xfffffcd1, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x168}}, 0x0) 4.814096752s ago: executing program 6 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000200)={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) 4.797524483s ago: executing program 2 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xb8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(0x0, 0x189242, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) 4.689261074s ago: executing program 1 (id=455): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 3.385405802s ago: executing program 2 (id=456): pipe2$9p(0x0, 0x80000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x558, 0x9, 0x2, 0x800, 0x2, 0x9]}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 3.222199005s ago: executing program 4 (id=457): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) unshare(0x40020000) 3.181521345s ago: executing program 1 (id=458): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r5, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000200001030000000000000000020000000000790f00000000"], 0x1c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000200)={@multicast2, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) 2.412945057s ago: executing program 2 (id=459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x800) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.347541087s ago: executing program 6 (id=460): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESDEC, @ANYRESHEX, @ANYBLOB="b390fc4b51336f88fee19f4c3d2b26bd860138d1e3243b51df2539f9845a303cbbf29f76e2c26688d054b07eaad9e7cb19a36ef5a8e50b6683228a8403aca9ad8d3114fbabb04f515264006d588d7d49bae9a280e3e3f962c9aece93e790ed6f9c9bc835a7dfc76b44961f9f7f8e749f2d59cb356e21dd55810b92916da33fed4c06ac710abb73c21a8cea3204f6301c8ed1ff6c7939719bac51d7c9cee464b9a1cdf38fbb67ff89cf84208df4937fd71dd9ab6aaa934581b1837c9695c57ebde4e937f9df63d439668279664a3e3ba32c76119d07869215c9aa0f8aa277f3d2d745509fc8687d718a99e8a733efd895f52203370d000000000000f15e6c00b3000000000000bc7f55a6ee7c4b2c6f7a8b0a72e6b4b49d7b6757ce22c6201ea8c345a066c71484fc51f6f42726d6631c2ab583d10052d40a17cf3eda4e19bf4a8be1d395e5ffca76585f71ab766c58d7aa250e669374fbb4f03b6f54f1185f8acec38892", @ANYRES8=0x0, @ANYRESHEX, @ANYRES16, @ANYRES64=0x0], 0x81, 0x151a, &(0x7f0000002a80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') 2.213605449s ago: executing program 4 (id=461): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x97, 0x8000000003ff, 0x4, 0x100}) 1.883450104s ago: executing program 2 (id=462): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000050) 1.624224707s ago: executing program 6 (id=463): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000b}) socket$pptp(0x18, 0x1, 0x2) gettid() tkill(r0, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce53b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000300), 0x10) connect$vsock_stream(r9, &(0x7f0000000280)={0x28, 0x0, 0x2710, @hyper}, 0x10) 1.614221698s ago: executing program 2 (id=464): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) sync_file_range(0xffffffffffffffff, 0x6, 0x10000000000000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) mkdir(0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, 0x0, 0x0) 1.596549338s ago: executing program 4 (id=465): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001580), 0x88000, 0x0) lseek(r0, 0x80000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x9a, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b9efd85c8d40fef4b447698ae8053"], 0x0) 1.342892442s ago: executing program 1 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xb8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(0x0, 0x189242, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x187842, 0x3) 553.280072ms ago: executing program 2 (id=467): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x168, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x10001}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x3}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7}]}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x4, 0xffffffff, 0x0, 0x6, 0x7, 0x3}}, {0xa, 0x2, [0x7ff, 0x3, 0x3]}}, {{0x1c, 0x1, {0x5, 0x6, 0x4007, 0x7, 0x2, 0x9, 0x80000, 0x6}}, {0x10, 0x2, [0x8, 0x2, 0x3, 0x1, 0xf36, 0x4]}}, {{0x1c, 0x1, {0x8, 0x10, 0x4, 0x6, 0x2, 0x10000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x40, 0x0, 0x0, 0x1, 0x61dd, 0x7, 0x2}}, {0x8, 0x2, [0x2, 0x7]}}, {{0x1c, 0x1, {0x30, 0x9, 0x0, 0xfffffffb, 0x1, 0xf, 0x7fffffff, 0x5}}, {0xe, 0x2, [0x3, 0xe7ff, 0x1, 0x4, 0x4]}}, {{0x1c, 0x1, {0x6, 0xff, 0x0, 0x4e9, 0x1, 0x6, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x5, 0x7e2, 0x3, 0x0, 0xfffffcd1, 0x6, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x168}}, 0x0) 0s ago: executing program 1 (id=468): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_dev$vcsn(0x0, 0x4da, 0x1813c0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") kernel console output (not intermixed with test programs): : veth1_to_bridge: link becomes ready [ 56.586063][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.596110][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.603246][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.611067][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.619422][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.628226][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.632894][ T4217] Bluetooth: hci3: command 0x041b tx timeout [ 56.642140][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.652619][ T4217] Bluetooth: hci2: command 0x041b tx timeout [ 56.663243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.703406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.712284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.751815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.772239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.793819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.805284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.821281][ T4173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.832144][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.852535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.864410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.881089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.891059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.906130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.916660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.925532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.952078][ T4172] device veth0_vlan entered promiscuous mode [ 56.966872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.976615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.985789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.997334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.029440][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.046320][ T4168] device veth0_vlan entered promiscuous mode [ 57.055981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.064044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.071569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.079625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.088458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.096970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.105708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.115109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.123419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.131451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.141949][ T4172] device veth1_vlan entered promiscuous mode [ 57.157365][ T4168] device veth1_vlan entered promiscuous mode [ 57.167162][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.194554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.202616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.216371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.224987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.232424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.259925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.269134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.278624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.288025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.296647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.318779][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.331048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.340750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.350308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.359776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.374906][ T4172] device veth0_macvtap entered promiscuous mode [ 57.382474][ T4168] device veth0_macvtap entered promiscuous mode [ 57.422976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.431601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.441547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.450403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.459691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.468317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.481786][ T4176] device veth0_vlan entered promiscuous mode [ 57.493242][ T4172] device veth1_macvtap entered promiscuous mode [ 57.502470][ T4177] device veth0_vlan entered promiscuous mode [ 57.511517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.520344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.528400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.536758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.545423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.555120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.563615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.586981][ T4173] device veth0_vlan entered promiscuous mode [ 57.596699][ T4168] device veth1_macvtap entered promiscuous mode [ 57.608746][ T4177] device veth1_vlan entered promiscuous mode [ 57.616104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.625666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.634133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.641733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.650091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.657821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.674479][ T4176] device veth1_vlan entered promiscuous mode [ 57.704394][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.717888][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.729102][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.740921][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.754484][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.763147][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.771338][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.779844][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.788605][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.797133][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.805933][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.815234][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.825579][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.836216][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.849968][ T4173] device veth1_vlan entered promiscuous mode [ 57.863812][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.874668][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.886480][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.897396][ T4168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.907540][ T4168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.916482][ T4168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.925421][ T4168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.944729][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.953129][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.961156][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.970130][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.981347][ T4172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.990854][ T4172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.001900][ T4172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.010857][ T4172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.023619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.032195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.043326][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.051877][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.077732][ T4177] device veth0_macvtap entered promiscuous mode [ 58.098096][ T4176] device veth0_macvtap entered promiscuous mode [ 58.130359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.139246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.147777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.157454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.175344][ T4173] device veth0_macvtap entered promiscuous mode [ 58.183678][ T4176] device veth1_macvtap entered promiscuous mode [ 58.191621][ T4177] device veth1_macvtap entered promiscuous mode [ 58.210521][ T4173] device veth1_macvtap entered promiscuous mode [ 58.285932][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.300134][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.310627][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.321109][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.332456][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.343627][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.355703][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.365852][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.376314][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.386773][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.397618][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.409516][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.421453][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.432044][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.443062][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.454236][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.464954][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.476782][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.486824][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.497474][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.508608][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.522931][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.531444][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.542106][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.550711][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.558905][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.568045][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.576851][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.586296][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.595678][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.604570][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.616460][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.627931][ T4217] Bluetooth: hci4: command 0x040f tx timeout [ 58.632024][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.634810][ T4217] Bluetooth: hci0: command 0x040f tx timeout [ 58.649778][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.650513][ T4217] Bluetooth: hci1: command 0x040f tx timeout [ 58.660759][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.678273][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.689137][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.700751][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.708418][ T26] Bluetooth: hci2: command 0x040f tx timeout [ 58.711025][ T4217] Bluetooth: hci3: command 0x040f tx timeout [ 58.717502][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.733779][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.743818][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.754419][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.765215][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.785509][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.794421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.805801][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.810712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.829760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.838827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.848012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.857355][ T4177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.868107][ T4177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.877039][ T4177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.886619][ T4177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.903663][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.914505][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.924628][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.935139][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.945198][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.957451][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.967380][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.977900][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.988951][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.004488][ T4173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.013488][ T4173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.022202][ T4173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.033689][ T4173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.045096][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.054567][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.055368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.070846][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.079993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.114188][ T4176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.123823][ T4176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.132546][ T4176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.141497][ T4176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.203413][ T1223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.211597][ T1223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.224250][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.232185][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.267322][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.275804][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.385172][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.398622][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.409610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.468182][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.484249][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.510653][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.578635][ T4257] loop4: detected capacity change from 0 to 512 [ 59.594234][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.624276][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.659017][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.686633][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.708495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.717712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.755594][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.818034][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.184281][ T4257] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.197027][ T4257] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.158781][ T4216] Bluetooth: hci1: command 0x0419 tx timeout [ 61.186027][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 61.237945][ T4216] Bluetooth: hci4: command 0x0419 tx timeout [ 61.274384][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.292746][ T4216] Bluetooth: hci3: command 0x0419 tx timeout [ 61.305863][ T4216] Bluetooth: hci2: command 0x0419 tx timeout [ 61.314276][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.462649][ C1] sched: RT throttling activated [ 61.479617][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.488074][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.738242][ T4270] device bridge1 entered promiscuous mode [ 62.173786][ T4282] usb usb8: usbfs: process 4282 (syz.3.4) did not claim interface 0 before use [ 62.291058][ T4286] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.369030][ T4316] loop3: detected capacity change from 0 to 128 [ 66.346740][ T4336] xt_hashlimit: max too large, truncated to 1048576 [ 66.502524][ T4336] device veth1_macvtap left promiscuous mode [ 66.508767][ T4336] device macsec0 entered promiscuous mode [ 68.701510][ T4384] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 69.495564][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 69.577770][ T1336] cfg80211: failed to load regulatory.db [ 69.653024][ T4388] loop0: detected capacity change from 0 to 2048 [ 69.686534][ T4388] EXT4-fs (loop0): Ignoring removed bh option [ 69.693554][ T4388] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 69.729743][ T4388] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 69.757905][ T4388] EXT4-fs (loop0): Ignoring removed orlov option [ 69.766047][ T4388] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.795198][ T4388] EXT4-fs (loop0): can't mount with both data=journal and dax [ 69.992778][ T1336] Bluetooth: hci5: command 0x1003 tx timeout [ 69.999385][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 71.026565][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.035586][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.273893][ T4400] loop3: detected capacity change from 0 to 512 [ 71.371954][ T4404] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure [ 71.394031][ T4400] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.405620][ T4400] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.626843][ T4410] loop2: detected capacity change from 0 to 512 [ 71.644283][ T4410] ======================================================= [ 71.644283][ T4410] WARNING: The mand mount option has been deprecated and [ 71.644283][ T4410] and is ignored by this kernel. Remove the mand [ 71.644283][ T4410] option from the mount to silence this warning. [ 71.644283][ T4410] ======================================================= [ 71.787698][ T4410] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.808685][ T4410] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.30: bg 0: block 248: padding at end of block bitmap is not set [ 71.891200][ T4410] Quota error (device loop2): write_blk: dquota write failed [ 71.900393][ T4410] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 71.917803][ T4410] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.30: Failed to acquire dquot type 1 [ 71.936624][ T4410] EXT4-fs (loop2): 1 truncate cleaned up [ 71.987974][ T4410] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,dioread_nolock,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 72.062726][ T7] Bluetooth: hci5: command 0x1001 tx timeout [ 72.068847][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 72.595411][ T4431] loop3: detected capacity change from 0 to 128 [ 74.453849][ T4433] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 74.475478][ T4215] Bluetooth: hci5: command 0x1009 tx timeout [ 75.991357][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 76.078740][ T4455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 76.584860][ T4455] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 76.594371][ T4455] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 76.599944][ T25] audit: type=1800 audit(1747576842.403:2): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.35" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 76.633854][ T4455] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 78.246775][ T4469] netlink: 96 bytes leftover after parsing attributes in process `syz.4.39'. [ 78.676328][ T4479] loop3: detected capacity change from 0 to 128 [ 79.113470][ T4479] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.125402][ T4479] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.450287][ T4491] loop4: detected capacity change from 0 to 128 [ 83.535596][ T4491] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.547332][ T4491] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.103199][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 86.559289][ T4517] syz.3.50 (4517) used greatest stack depth: 18080 bytes left [ 86.699910][ T4520] fuse: Bad value for 'fd' [ 87.161860][ T4527] loop4: detected capacity change from 0 to 2048 [ 87.401824][ T4527] EXT4-fs (loop4): Ignoring removed bh option [ 88.268897][ T4527] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 88.292765][ T4527] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 88.332860][ T4527] EXT4-fs (loop4): Ignoring removed orlov option [ 88.407703][ T4527] EXT4-fs (loop4): can't mount with both data=journal and dax [ 88.795552][ T4540] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 90.012977][ T4549] loop3: detected capacity change from 0 to 128 [ 90.534489][ T4549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.546403][ T4549] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.058327][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 92.992387][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 95.625078][ T4603] loop4: detected capacity change from 0 to 512 [ 95.701051][ T4603] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 95.732785][ T4603] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.750695][ T4603] EXT4-fs (loop4): invalid inodes per group: 0 [ 95.750695][ T4603] [ 96.084464][ T4608] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 96.618210][ T4617] loop2: detected capacity change from 0 to 128 [ 99.603793][ T4617] EXT4-fs: failed to create workqueue [ 99.609221][ T4617] EXT4-fs (loop2): mount failed [ 100.506953][ T4627] overlayfs: failed to resolve './file0': -2 [ 103.704902][ T4661] xt_hashlimit: max too large, truncated to 1048576 [ 103.718753][ T4662] netlink: 'syz.3.81': attribute type 16 has an invalid length. [ 103.727449][ T4661] device veth1_macvtap left promiscuous mode [ 103.733551][ T4661] device macsec0 entered promiscuous mode [ 103.745652][ T4662] netlink: 'syz.3.81': attribute type 3 has an invalid length. [ 103.844015][ T4662] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.81'. [ 104.890257][ T4675] loop1: detected capacity change from 0 to 256 [ 104.976277][ T4675] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 105.327559][ T4679] loop2: detected capacity change from 0 to 128 [ 106.425653][ T4679] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.436892][ T4679] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.576143][ T4711] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 109.590143][ T4712] xt_hashlimit: max too large, truncated to 1048576 [ 109.613780][ T4712] device veth1_macvtap left promiscuous mode [ 109.619859][ T4712] device macsec0 entered promiscuous mode [ 110.659399][ T4721] loop1: detected capacity change from 0 to 256 [ 110.686550][ T4724] loop4: detected capacity change from 0 to 256 [ 110.754858][ T4724] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 110.834431][ T4721] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 112.621971][ T4737] loop4: detected capacity change from 0 to 128 [ 112.947858][ T4737] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.959295][ T4737] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.257724][ T4752] loop3: detected capacity change from 0 to 512 [ 115.341414][ T4752] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 115.397509][ T4754] loop2: detected capacity change from 0 to 512 [ 115.435770][ T4752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 115.487398][ T4752] System zones: 1-12 [ 115.522354][ T4752] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.106: corrupted in-inode xattr [ 115.602847][ T4754] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.614672][ T4754] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.702766][ T4752] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.106: couldn't read orphan inode 15 (err -117) [ 115.721663][ T4752] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 118.509310][ T4782] xt_hashlimit: max too large, truncated to 1048576 [ 118.531016][ T4782] device veth1_macvtap left promiscuous mode [ 118.537163][ T4782] device macsec0 entered promiscuous mode [ 118.749352][ T4781] loop0: detected capacity change from 0 to 128 [ 119.085908][ T4781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.097431][ T4781] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.648117][ T4496] Bluetooth: hci5: command 0x1003 tx timeout [ 119.663709][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 119.893981][ T4798] loop4: detected capacity change from 0 to 256 [ 119.950622][ T4798] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 121.593159][ T4811] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 122.361828][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 122.399624][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 122.779870][ T4819] loop1: detected capacity change from 0 to 2048 [ 122.851620][ T4819] EXT4-fs (loop1): Ignoring removed bh option [ 122.870529][ T4819] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 122.909735][ T4819] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 122.939224][ T4819] EXT4-fs (loop1): Ignoring removed orlov option [ 122.947224][ T4819] EXT4-fs (loop1): can't mount with both data=journal and dax [ 124.323511][ T4836] xt_hashlimit: max too large, truncated to 1048576 [ 124.543362][ T4838] loop0: detected capacity change from 0 to 128 [ 124.555722][ T21] Bluetooth: hci5: command 0x1009 tx timeout [ 124.620362][ T4838] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.631740][ T4838] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.864475][ T4842] loop0: detected capacity change from 0 to 256 [ 124.915165][ T4842] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 126.595411][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 127.096971][ T4853] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 128.271343][ T4864] binder: 4856:4864 ioctl c0306201 0 returned -14 [ 128.306546][ T4864] binder: BINDER_SET_CONTEXT_MGR already set [ 128.312986][ T4864] binder: 4856:4864 ioctl 4018620d 200000000040 returned -16 [ 129.122462][ T4866] loop0: detected capacity change from 0 to 2048 [ 129.166867][ T4866] EXT4-fs (loop0): Ignoring removed bh option [ 129.191949][ T4866] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 129.226514][ T4866] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 129.297844][ T4866] EXT4-fs (loop0): Ignoring removed orlov option [ 129.362758][ T4866] EXT4-fs (loop0): can't mount with both data=journal and dax [ 131.777565][ T4887] xt_hashlimit: max too large, truncated to 1048576 [ 131.798545][ T4886] loop1: detected capacity change from 0 to 256 [ 131.904718][ T4886] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 132.032509][ T4890] loop3: detected capacity change from 0 to 256 [ 133.009939][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.016326][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.081808][ T4890] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 133.423281][ T4896] loop1: detected capacity change from 0 to 512 [ 134.093613][ T4896] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 134.143133][ T4896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 134.230251][ T4896] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.247960][ T4896] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.146: bg 0: block 361: padding at end of block bitmap is not set [ 134.324978][ T4896] EXT4-fs (loop1): Remounting filesystem read-only [ 134.331765][ T4896] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 134.363013][ T4896] EXT4-fs (loop1): Remounting filesystem read-only [ 134.388560][ T4896] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.146: attempt to clear invalid blocks 33619980 len 1 [ 134.463259][ T4896] EXT4-fs (loop1): Remounting filesystem read-only [ 134.506273][ T4906] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 134.778350][ T4896] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.146: invalid indirect mapped block 1811939328 (level 0) [ 135.157990][ T4896] EXT4-fs (loop1): Remounting filesystem read-only [ 135.182012][ T4909] loop3: detected capacity change from 0 to 1024 [ 135.202786][ T4896] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.146: invalid indirect mapped block 2185560079 (level 1) [ 135.301249][ T4896] EXT4-fs (loop1): Remounting filesystem read-only [ 135.328859][ T4896] EXT4-fs (loop1): 1 truncate cleaned up [ 135.340917][ T4909] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.360678][ T4896] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 135.540059][ T4896] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.146: dx entry: limit 0 != root limit 125 [ 135.583916][ T4896] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.146: Corrupt directory, running e2fsck is recommended [ 135.640848][ T4920] loop2: detected capacity change from 0 to 128 [ 135.913769][ T4920] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.925069][ T4920] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.480907][ T4924] loop0: detected capacity change from 0 to 2048 [ 136.560521][ T4924] EXT4-fs (loop0): Ignoring removed bh option [ 136.596938][ T4924] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 136.641116][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.662876][ T4924] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 136.686835][ T4924] EXT4-fs (loop0): Ignoring removed orlov option [ 136.705904][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.726910][ T4924] EXT4-fs (loop0): can't mount with both data=journal and dax [ 136.751826][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.779809][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.811557][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.849562][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.881543][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.919518][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.943574][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 136.979607][ T4173] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 137.668627][ T4929] loop4: detected capacity change from 0 to 256 [ 137.819993][ T4929] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 139.502176][ T4946] xt_hashlimit: max too large, truncated to 1048576 [ 141.305269][ T4346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.424418][ T4959] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 142.194397][ T1336] Bluetooth: hci2: command 0x0409 tx timeout [ 142.349000][ T4346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.422348][ T4968] loop1: detected capacity change from 0 to 2048 [ 142.455248][ T4968] EXT4-fs (loop1): Ignoring removed bh option [ 142.480696][ T4968] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 142.502270][ T4968] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 142.520240][ T4968] EXT4-fs (loop1): Ignoring removed orlov option [ 142.542232][ T4968] EXT4-fs (loop1): can't mount with both data=journal and dax [ 142.615321][ T4346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.693643][ T4971] loop4: detected capacity change from 0 to 128 [ 142.993488][ T4971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.004735][ T4971] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.457777][ T4947] chnl_net:caif_netlink_parms(): no params data found [ 143.659529][ T4346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.844357][ T4977] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 144.121898][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.161375][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.212435][ T4947] device bridge_slave_0 entered promiscuous mode [ 144.244063][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.300917][ T1336] Bluetooth: hci2: command 0x041b tx timeout [ 144.307904][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.317039][ T4947] device bridge_slave_1 entered promiscuous mode [ 144.634592][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.669971][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.955866][ T4947] team0: Port device team_slave_0 added [ 145.031105][ T4947] team0: Port device team_slave_1 added [ 145.219646][ T4994] xt_hashlimit: max too large, truncated to 1048576 [ 145.491416][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.546778][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.732508][ T4947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.831315][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.892470][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.163167][ T4947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.440372][ T4947] device hsr_slave_0 entered promiscuous mode [ 146.490373][ T4947] device hsr_slave_1 entered promiscuous mode [ 146.539398][ T4947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.582751][ T4947] Cannot create hsr debugfs directory [ 146.849990][ T5007] loop4: detected capacity change from 0 to 256 [ 146.951398][ T4179] Bluetooth: hci2: command 0x040f tx timeout [ 147.041418][ T5007] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 147.874363][ T5025] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 148.266679][ T4947] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.392233][ T4947] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.460354][ T4947] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.488565][ T4947] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.494337][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 149.662125][ T5038] loop2: detected capacity change from 0 to 40427 [ 149.766391][ T5038] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.801571][ T5038] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 149.849615][ T5038] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.898756][ T25] audit: type=1800 audit(1747576915.713:3): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.177" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 149.932748][ T5037] attempt to access beyond end of device [ 149.932748][ T5037] loop2: rw=10241, want=53256, limit=40427 [ 150.071162][ T5046] tipc: Started in network mode [ 150.076581][ T5046] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 150.215408][ T5046] tipc: Enabling of bearer rejected, failed to enable media [ 150.278402][ T4177] attempt to access beyond end of device [ 150.278402][ T4177] loop2: rw=2049, want=45104, limit=40427 [ 150.327292][ T4346] device hsr_slave_0 left promiscuous mode [ 150.360065][ T4346] device hsr_slave_1 left promiscuous mode [ 150.391534][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.405454][ T5055] loop0: detected capacity change from 0 to 128 [ 150.441682][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.507586][ T5055] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.518419][ T5055] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.559228][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.601225][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.674744][ T4346] device bridge_slave_1 left promiscuous mode [ 150.731878][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.138114][ T4346] device bridge_slave_0 left promiscuous mode [ 151.439906][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.604896][ T4346] device veth1_macvtap left promiscuous mode [ 151.661685][ T4346] device veth0_macvtap left promiscuous mode [ 151.679604][ T4346] device veth1_vlan left promiscuous mode [ 151.694712][ T4346] device veth0_vlan left promiscuous mode [ 152.894964][ T5077] xt_hashlimit: max too large, truncated to 1048576 [ 153.050677][ T4346] team0 (unregistering): Port device team_slave_1 removed [ 153.078266][ T4346] team0 (unregistering): Port device team_slave_0 removed [ 153.110623][ T4346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.139518][ T4346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.301426][ T4346] bond0 (unregistering): Released all slaves [ 153.775088][ T5081] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 153.912109][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.965077][ T5084] loop1: detected capacity change from 0 to 256 [ 153.994332][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.010837][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.025708][ T5084] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 154.061952][ T4947] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.085338][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.111984][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.141548][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.148752][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.194237][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.237963][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.298353][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.641175][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.648357][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.746632][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.949423][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.976239][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.077197][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.118173][ T25] audit: type=1326 audit(1747576920.933:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5099 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4a11c969 code=0x7ffc0000 [ 155.151407][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.364278][ T25] audit: type=1326 audit(1747576920.963:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5099 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4a11c969 code=0x7ffc0000 [ 155.487152][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.495079][ T25] audit: type=1326 audit(1747576920.963:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5099 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fca4a11c969 code=0x7ffc0000 [ 155.605760][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.638875][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.656256][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.692340][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.716464][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.744439][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.358745][ T5123] Zero length message leads to an empty skb [ 157.116521][ T5130] xt_hashlimit: max too large, truncated to 1048576 [ 157.309656][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.323464][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.357527][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.072057][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.097703][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.119358][ T5120] loop1: detected capacity change from 0 to 40427 [ 158.208622][ T4947] device veth0_vlan entered promiscuous mode [ 158.273663][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.295171][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.333954][ T5120] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.349070][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.401021][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.426999][ T4947] device veth1_vlan entered promiscuous mode [ 158.530310][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.549604][ T5120] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.563350][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.622268][ T4947] device veth0_macvtap entered promiscuous mode [ 158.641303][ T4947] device veth1_macvtap entered promiscuous mode [ 158.738723][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.780897][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.812373][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.833493][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.872646][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.909015][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.929533][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.950593][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.985275][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.022740][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.077737][ T5168] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 159.215834][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.305449][ T5171] loop2: detected capacity change from 0 to 128 [ 159.313478][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.368741][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.424999][ T5171] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none. [ 159.510973][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.536887][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.546975][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.557474][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.576576][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.632910][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.667613][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.692635][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.725129][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.753494][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.775676][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.825156][ T4947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.857519][ T5174] loop4: detected capacity change from 0 to 256 [ 159.867305][ T4947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.909072][ T4947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.948751][ T4947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.962874][ T5179] loop1: detected capacity change from 0 to 1024 [ 159.969556][ T5176] loop2: detected capacity change from 0 to 2048 [ 160.035029][ T5179] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 160.045025][ T5176] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 160.075056][ T5174] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 160.200408][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.228836][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.263574][ T5179] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 160.310999][ T25] audit: type=1800 audit(1747576926.123:7): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.197" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 160.394778][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.655038][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.710776][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.032368][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.730018][ T5212] xt_hashlimit: max too large, truncated to 1048576 [ 161.734820][ T5210] loop5: detected capacity change from 0 to 512 [ 161.893469][ T5210] EXT4-fs (loop5): 1 orphan inode deleted [ 161.899348][ T5210] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.910551][ T5210] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.086389][ T5214] loop4: detected capacity change from 0 to 256 [ 163.072092][ T5234] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 163.602349][ T5232] loop4: detected capacity change from 0 to 256 [ 163.823718][ T5232] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 164.920557][ T5256] loop4: detected capacity change from 0 to 2048 [ 164.990246][ T5256] EXT4-fs (loop4): Ignoring removed bh option [ 165.038434][ T5256] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 165.082739][ T5256] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 165.090140][ T5256] EXT4-fs (loop4): Ignoring removed orlov option [ 165.141752][ T5262] loop2: detected capacity change from 0 to 512 [ 165.162822][ T5256] EXT4-fs (loop4): can't mount with both data=journal and dax [ 165.212231][ T5262] EXT4-fs (loop2): Test dummy encryption mode enabled [ 165.336445][ T5262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.877536][ T5262] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.215: bad orphan inode 131083 [ 165.893234][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.209'. [ 165.948791][ T5262] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,minixdf,,errors=continue. Quota mode: none. [ 166.142000][ T5279] xt_hashlimit: max too large, truncated to 1048576 [ 166.323503][ T5262] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 166.819273][ T5292] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 167.335447][ T25] audit: type=1326 audit(1747576933.153:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 167.414683][ T25] audit: type=1326 audit(1747576933.153:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 167.510114][ T25] audit: type=1326 audit(1747576933.173:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 167.541297][ T5310] netlink: 104 bytes leftover after parsing attributes in process `syz.2.221'. [ 167.602685][ T25] audit: type=1326 audit(1747576933.173:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 167.708335][ T25] audit: type=1326 audit(1747576933.173:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 167.834178][ T25] audit: type=1326 audit(1747576933.173:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 167.915070][ T25] audit: type=1326 audit(1747576933.173:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 168.025443][ T25] audit: type=1326 audit(1747576933.173:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 168.092794][ T4597] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 168.111907][ T25] audit: type=1326 audit(1747576933.173:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 168.187623][ T25] audit: type=1326 audit(1747576933.173:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5305 comm="syz.2.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 168.383104][ T4597] usb 3-1: Using ep0 maxpacket: 16 [ 168.508434][ T5298] loop4: detected capacity change from 0 to 40427 [ 168.515577][ T4597] usb 3-1: config 0 has no interfaces? [ 168.521457][ T4597] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 168.570263][ T5298] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 168.591091][ T4597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.638466][ T5298] F2FS-fs (loop4): invalid crc value [ 168.657858][ T4597] usb 3-1: config 0 descriptor?? [ 168.680328][ T5298] F2FS-fs (loop4): Found nat_bits in checkpoint [ 168.991993][ T5331] loop5: detected capacity change from 0 to 512 [ 169.002447][ T4250] usb 3-1: USB disconnect, device number 2 [ 169.008382][ T5298] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.165232][ T5331] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.176511][ T5331] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.452723][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 169.691400][ T5347] loop2: detected capacity change from 0 to 1024 [ 169.842797][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.893025][ T13] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.904541][ T5347] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,barrier=0x000000000000004c,lazytime,init_itable=0x0000000000000005,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 169.922641][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.078545][ T13] usb 5-1: config 0 descriptor?? [ 170.133208][ T13] usb 5-1: can't set config #0, error -71 [ 170.183206][ T13] usb 5-1: USB disconnect, device number 2 [ 171.778906][ T5370] loop4: detected capacity change from 0 to 2048 [ 171.825898][ T5370] EXT4-fs (loop4): Ignoring removed bh option [ 171.874207][ T5370] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 171.904508][ T5370] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 171.921784][ T5370] EXT4-fs (loop4): Ignoring removed orlov option [ 171.977151][ T5370] EXT4-fs (loop4): can't mount with both data=journal and dax [ 172.427733][ T5385] loop4: detected capacity change from 0 to 512 [ 172.521767][ T5385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.533003][ T5385] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.749440][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 175.983339][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 175.991607][ T26] Bluetooth: hci1: command 0x0406 tx timeout [ 176.036737][ T26] Bluetooth: hci3: command 0x0406 tx timeout [ 176.062968][ T26] Bluetooth: hci4: command 0x0406 tx timeout [ 177.880267][ T5450] loop4: detected capacity change from 0 to 512 [ 178.469847][ T5450] EXT4-fs (loop4): 1 orphan inode deleted [ 178.475767][ T5450] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 178.486912][ T5450] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.047051][ T5473] xt_hashlimit: max too large, truncated to 1048576 [ 179.895379][ T5481] loop2: detected capacity change from 0 to 512 [ 180.078414][ T5491] xt_hashlimit: max too large, truncated to 1048576 [ 180.172748][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 180.671769][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.831689][ T5481] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.255: casefold flag without casefold feature [ 180.856561][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.887926][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.901387][ T5481] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.255: couldn't read orphan inode 15 (err -117) [ 180.925056][ T5481] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 180.952714][ T26] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.997857][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.034824][ T26] usb 5-1: config 0 descriptor?? [ 182.055633][ T26] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 182.078191][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 182.078207][ T25] audit: type=1326 audit(1747576947.893:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4a11c969 code=0x7ffc0000 [ 182.203029][ T25] audit: type=1326 audit(1747576947.893:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4a11c969 code=0x7ffc0000 [ 182.203514][ T26] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 182.280557][ T25] audit: type=1326 audit(1747576947.893:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fca4a11c969 code=0x7ffc0000 [ 182.320537][ T5516] loop2: detected capacity change from 0 to 256 [ 182.350309][ T26] usb 5-1: USB disconnect, device number 3 [ 182.666974][ T5527] fido_id[5527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 183.471483][ T5549] loop2: detected capacity change from 0 to 2048 [ 183.537832][ T5549] EXT4-fs (loop2): Ignoring removed bh option [ 183.568402][ T5549] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 183.584681][ T5552] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 183.609028][ T5549] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 183.651763][ T5549] EXT4-fs (loop2): Ignoring removed orlov option [ 183.689088][ T5549] EXT4-fs (loop2): can't mount with both data=journal and dax [ 184.265353][ T5566] loop2: detected capacity change from 0 to 128 [ 184.398670][ T5565] device pim6reg1 entered promiscuous mode [ 184.535955][ T5566] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.547497][ T5566] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.935059][ T5566] device bridge0 entered promiscuous mode [ 184.944966][ T5566] bridge0: port 3(macsec1) entered blocking state [ 184.951603][ T5566] bridge0: port 3(macsec1) entered disabled state [ 184.998054][ T5566] device bridge0 left promiscuous mode [ 185.576713][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 185.586306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 185.602623][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 185.611529][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 185.620446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 185.629361][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 185.638269][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 185.647184][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 185.656096][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 185.665011][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 187.760329][ T5591] loop4: detected capacity change from 0 to 128 [ 187.914312][ T25] audit: type=1800 audit(1747576953.733:22): pid=5593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.272" name="bus" dev="loop4" ino=1048598 res=0 errno=0 [ 188.862971][ T5604] capability: warning: `syz.4.274' uses 32-bit capabilities (legacy support in use) [ 189.603635][ T5612] loop5: detected capacity change from 0 to 2048 [ 189.815634][ T5612] EXT4-fs (loop5): Ignoring removed bh option [ 189.821797][ T5612] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 190.612782][ T5612] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 190.620177][ T5612] EXT4-fs (loop5): Ignoring removed orlov option [ 190.672716][ T5612] EXT4-fs (loop5): can't mount with both data=journal and dax [ 191.144416][ T5634] loop2: detected capacity change from 0 to 128 [ 192.283632][ T5634] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.294937][ T5634] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.396912][ T5634] device bridge0 entered promiscuous mode [ 192.407628][ T5634] bridge0: port 3(macsec1) entered blocking state [ 192.414260][ T5634] bridge0: port 3(macsec1) entered disabled state [ 192.452016][ T5634] device bridge0 left promiscuous mode [ 192.984931][ T5646] loop1: detected capacity change from 0 to 256 [ 193.025920][ T5644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.284'. [ 193.103605][ T5644] netlink: 104 bytes leftover after parsing attributes in process `syz.5.284'. [ 193.150828][ T5646] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 194.544172][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550508][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.901375][ T5661] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 196.122561][ T5675] loop1: detected capacity change from 0 to 1024 [ 196.177033][ T5675] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.311202][ T5675] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none. [ 196.326893][ T5675] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.301189][ T5681] chnl_net:caif_netlink_parms(): no params data found [ 198.622929][ T26] Bluetooth: hci5: command 0x0409 tx timeout [ 198.754054][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.782964][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.905085][ T5681] device bridge_slave_0 entered promiscuous mode [ 199.313815][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.321185][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.374349][ T5681] device bridge_slave_1 entered promiscuous mode [ 199.562847][ T393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.657695][ T393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.692422][ T5681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.750828][ T5681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.760602][ T5716] loop5: detected capacity change from 0 to 128 [ 199.805460][ T393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.876110][ T5737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 200.027588][ T5681] team0: Port device team_slave_0 added [ 200.152795][ T5716] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.182080][ T393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.192764][ T5716] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.707738][ T26] Bluetooth: hci5: command 0x041b tx timeout [ 200.740547][ T5681] team0: Port device team_slave_1 added [ 200.969923][ T5744] loop4: detected capacity change from 0 to 8192 [ 201.155688][ T5744] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.765601][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.883320][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.218368][ T5681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.241535][ T5681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.282559][ T5681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.324207][ T25] audit: type=1326 audit(1747576968.143:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 202.414693][ T5681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.443195][ T25] audit: type=1326 audit(1747576968.173:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 202.582186][ T25] audit: type=1326 audit(1747576968.193:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 202.830116][ T25] audit: type=1326 audit(1747576968.193:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 202.854158][ T25] audit: type=1326 audit(1747576968.193:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 203.343334][ T4218] Bluetooth: hci5: command 0x040f tx timeout [ 203.594695][ T25] audit: type=1326 audit(1747576968.203:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 203.622373][ T5781] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 203.637873][ T5681] device hsr_slave_0 entered promiscuous mode [ 203.653488][ T5681] device hsr_slave_1 entered promiscuous mode [ 203.672653][ T5681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.680261][ T5681] Cannot create hsr debugfs directory [ 203.685865][ T25] audit: type=1326 audit(1747576968.203:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 203.809004][ T25] audit: type=1326 audit(1747576968.203:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 203.943296][ T5786] loop1: detected capacity change from 0 to 128 [ 203.964000][ T25] audit: type=1326 audit(1747576968.203:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 204.072923][ T5788] loop2: detected capacity change from 0 to 128 [ 204.145305][ T25] audit: type=1326 audit(1747576968.203:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd509c68969 code=0x7ffc0000 [ 204.245955][ T5788] FAT-fs (loop2): bogus number of reserved sectors [ 204.261575][ T5788] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 204.612833][ T5788] FAT-fs (loop2): Can't find a valid FAT filesystem [ 205.003215][ T5681] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 205.107852][ T5798] loop1: detected capacity change from 0 to 2048 [ 205.115272][ T5681] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 205.296330][ T5681] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.322314][ T5681] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 205.433423][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 207.380517][ T5812] loop2: detected capacity change from 0 to 2048 [ 207.520145][ T5681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.575670][ T5812] EXT4-fs (loop2): Ignoring removed bh option [ 207.581820][ T5812] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 207.662900][ T5812] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 207.670285][ T5812] EXT4-fs (loop2): Ignoring removed orlov option [ 207.692759][ T5812] EXT4-fs (loop2): can't mount with both data=journal and dax [ 208.611348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.630243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.651124][ T5681] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.704761][ T5681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.725802][ T5681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.834513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.857606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.971122][ T5833] loop1: detected capacity change from 0 to 512 [ 209.233605][ T5833] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none. [ 209.364431][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.371592][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.623074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.683576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.750385][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.757574][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.818638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.849556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.862850][ T4218] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 209.943619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.009640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.052068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.112688][ T4218] usb 3-1: Using ep0 maxpacket: 16 [ 210.124064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.171901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.229471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.238982][ T4218] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.268497][ T4218] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.289954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.315871][ T4218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.337036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.356308][ T4218] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 210.380491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.408780][ T4218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.424983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.471056][ T4218] usb 3-1: config 0 descriptor?? [ 210.484364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.677841][ T5843] loop4: detected capacity change from 0 to 128 [ 210.963507][ T4218] hid (null): report_id 0 is invalid [ 210.971643][ T4218] hid (null): global environment stack underflow [ 212.093283][ T4218] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 212.100898][ T4218] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 212.108292][ T4218] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 212.115497][ T4218] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 212.122455][ T4218] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 212.129754][ T4218] cougar 0003:060B:500A.0002: unknown main item tag 0x0 [ 212.136947][ T4218] cougar 0003:060B:500A.0002: unexpected long global item [ 212.144902][ T4218] cougar 0003:060B:500A.0002: parse failed [ 212.150739][ T4218] cougar: probe of 0003:060B:500A.0002 failed with error -22 [ 212.209797][ T1111] usb 3-1: USB disconnect, device number 3 [ 213.586044][ T393] device hsr_slave_0 left promiscuous mode [ 213.833158][ T393] device hsr_slave_1 left promiscuous mode [ 215.326012][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.352764][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.395977][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.462656][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.027566][ T5884] loop4: detected capacity change from 0 to 256 [ 217.213466][ T393] device bridge_slave_1 left promiscuous mode [ 217.227382][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.266381][ T393] device bridge_slave_0 left promiscuous mode [ 217.274807][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.298816][ T393] device veth0_macvtap left promiscuous mode [ 217.315399][ T393] device veth1_vlan left promiscuous mode [ 217.335642][ T393] device veth0_vlan left promiscuous mode [ 218.079879][ T5897] loop1: detected capacity change from 0 to 2048 [ 218.156251][ T5897] EXT4-fs (loop1): Ignoring removed bh option [ 218.210831][ T5897] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 218.282966][ T5897] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 218.290547][ T5897] EXT4-fs (loop1): Ignoring removed orlov option [ 218.366330][ T5897] EXT4-fs (loop1): can't mount with both data=journal and dax [ 218.753949][ T393] team0 (unregistering): Port device team_slave_1 removed [ 218.822957][ T393] team0 (unregistering): Port device team_slave_0 removed [ 218.863754][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.881133][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.933363][ T5907] loop4: detected capacity change from 0 to 1024 [ 218.970635][ T5907] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 218.991291][ T5907] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 219.001475][ T5907] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: comm syz.4.334: inode #1: comm syz.4.334: iget: illegal inode # [ 219.015056][ T5907] EXT4-fs (loop4): no journal found [ 219.070823][ T393] bond0 (unregistering): Released all slaves [ 219.462535][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.486346][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.539044][ T5681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.582691][ T4218] Bluetooth: hci4: command 0x0409 tx timeout [ 221.819580][ T26] Bluetooth: hci4: command 0x041b tx timeout [ 222.258601][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 223.008472][ T5964] netlink: 104 bytes leftover after parsing attributes in process `syz.2.345'. [ 223.270390][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.290569][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.330142][ T5891] device bridge_slave_0 entered promiscuous mode [ 223.376889][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.413691][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.449193][ T5891] device bridge_slave_1 entered promiscuous mode [ 223.537439][ T5980] loop2: detected capacity change from 0 to 256 [ 223.601068][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.633704][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.655417][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.661454][ T5980] FAT-fs (loop2): Directory bread(block 64) failed [ 223.672465][ T5980] FAT-fs (loop2): Directory bread(block 65) failed [ 223.679196][ T5980] FAT-fs (loop2): Directory bread(block 66) failed [ 223.685923][ T5980] FAT-fs (loop2): Directory bread(block 67) failed [ 223.691256][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.692788][ T5980] FAT-fs (loop2): Directory bread(block 68) failed [ 223.708568][ T5980] FAT-fs (loop2): Directory bread(block 69) failed [ 223.716180][ T5980] FAT-fs (loop2): Directory bread(block 70) failed [ 223.722830][ T5980] FAT-fs (loop2): Directory bread(block 71) failed [ 223.729443][ T5980] FAT-fs (loop2): Directory bread(block 72) failed [ 223.736065][ T5980] FAT-fs (loop2): Directory bread(block 73) failed [ 223.856265][ T5891] team0: Port device team_slave_0 added [ 223.886272][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.902887][ T4597] Bluetooth: hci4: command 0x040f tx timeout [ 223.962511][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.979478][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.077765][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.119659][ T5681] device veth0_vlan entered promiscuous mode [ 224.135593][ T5891] team0: Port device team_slave_1 added [ 225.010486][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.135503][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.209454][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.234572][ T5681] device veth1_vlan entered promiscuous mode [ 225.264312][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.271326][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.360571][ T6007] binder: 5995:6007 ioctl c0306201 0 returned -14 [ 225.390797][ T6007] binder: BINDER_SET_CONTEXT_MGR already set [ 225.396928][ T6007] binder: 5995:6007 ioctl 4018620d 200000000040 returned -16 [ 226.106543][ T6004] loop4: detected capacity change from 0 to 256 [ 226.185116][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.220703][ T4218] Bluetooth: hci4: command 0x0419 tx timeout [ 227.157312][ T5681] device veth0_macvtap entered promiscuous mode [ 227.213299][ T5681] device veth1_macvtap entered promiscuous mode [ 227.362241][ T5891] device hsr_slave_0 entered promiscuous mode [ 227.423098][ T5891] device hsr_slave_1 entered promiscuous mode [ 227.459916][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.482368][ T5891] Cannot create hsr debugfs directory [ 227.686981][ T6025] loop4: detected capacity change from 0 to 2048 [ 227.702315][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.729591][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.763968][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.797086][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.803022][ T4263] loop4: p1 < > p3 [ 227.835767][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.857115][ T4263] loop4: p3 size 134217728 extends beyond EOD, truncated [ 227.866578][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.919048][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.940026][ T6025] loop4: p1 < > p3 [ 227.946925][ T6033] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 227.950219][ T6032] loop1: detected capacity change from 0 to 512 [ 227.964964][ T6025] loop4: p3 size 134217728 extends beyond EOD, truncated [ 227.990106][ T6033] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 228.000002][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.033888][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.095210][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.102888][ T6032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.122702][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.144426][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.171664][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.227957][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.261291][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.349435][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.413255][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.482598][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.531725][ T6032] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.355: corrupted in-inode xattr [ 228.551254][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.581375][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.602614][ T6032] EXT4-fs (loop1): Remounting filesystem read-only [ 228.609450][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.632626][ T6032] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 228.645773][ T5681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.672598][ T5681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.694432][ T5681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.711982][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.760143][ T6032] EXT4-fs (loop1): 1 truncate cleaned up [ 228.767620][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.782430][ T6032] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,quota,errors=remount-ro,barrier,. Quota mode: writeback. [ 228.828024][ T4246] udevd[4246]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 228.846846][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 228.883159][ T5681] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.912926][ T4246] udevd[4246]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 228.925078][ T5681] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.963929][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 228.964128][ T5681] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.012676][ T5681] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.053118][ T4215] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 229.090832][ T4246] udevd[4246]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 229.126898][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 229.290653][ T5891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 229.325062][ T5891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 229.377686][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.391030][ T5891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 229.431729][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.444509][ T5891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.452873][ T4215] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 229.470113][ T4215] usb 5-1: config 0 has no interface number 0 [ 229.486830][ T4215] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 229.510359][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 229.546718][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.565606][ T4215] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.582712][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.611475][ T4215] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.643684][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.672501][ T4215] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 229.728018][ T4215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.757140][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.769784][ T6042] loop2: detected capacity change from 0 to 40427 [ 229.788503][ T4215] usb 5-1: config 0 descriptor?? [ 229.811937][ T6042] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 229.815977][ T393] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.835381][ T4215] gspca_main: spca561-2.14.0 probing abcd:cdee [ 229.854897][ T6042] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 229.927690][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.961006][ T6042] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.981230][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.993521][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.035025][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 230.035040][ T25] audit: type=1326 audit(1747576995.853:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f20a4a969 code=0x7ffc0000 [ 230.063730][ T6042] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 230.084042][ T393] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.093016][ T6042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 230.144108][ T4215] spca561: probe of 5-1:0.156 failed with error -22 [ 230.165032][ T4215] usb 5-1: MIDIStreaming interface descriptor not found [ 230.175883][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.201341][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.222233][ T25] audit: type=1326 audit(1747576995.853:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f20a4a969 code=0x7ffc0000 [ 230.253320][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.260466][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.336267][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.392917][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.403045][ T4215] usb 5-1: USB disconnect, device number 4 [ 230.445209][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.452351][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.500389][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.520639][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.579452][ T393] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.680857][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.704525][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.726404][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.746011][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.826485][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.847426][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.883720][ T393] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.930469][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.949094][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.988917][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.021539][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.201821][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.897748][ T6085] loop4: detected capacity change from 0 to 256 [ 232.961830][ T6085] FAT-fs (loop4): bogus number of FAT sectors [ 233.023332][ T6085] FAT-fs (loop4): Can't find a valid FAT filesystem [ 233.392792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.405632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.447223][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.469001][ T6096] loop2: detected capacity change from 0 to 512 [ 233.503918][ T6098] overlayfs: missing 'lowerdir' [ 233.635930][ T6096] EXT4-fs (loop2): 1 truncate cleaned up [ 233.662076][ T6096] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 235.049734][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.078045][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.156192][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.162745][ T4218] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 235.166223][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.205589][ T5891] device veth0_vlan entered promiscuous mode [ 235.219468][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.238588][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.311675][ T5891] device veth1_vlan entered promiscuous mode [ 235.425274][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.435849][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.563764][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.602888][ T4218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.613020][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.629774][ T5891] device veth0_macvtap entered promiscuous mode [ 235.662669][ T4218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.676263][ T393] device hsr_slave_0 left promiscuous mode [ 235.694680][ T4218] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 235.733291][ T4218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.741576][ T393] device hsr_slave_1 left promiscuous mode [ 235.754806][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.774503][ T4218] usb 3-1: config 0 descriptor?? [ 235.785034][ T6136] loop6: detected capacity change from 0 to 1024 [ 235.789466][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.810881][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.854655][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.873904][ T393] device bridge_slave_1 left promiscuous mode [ 235.880169][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.940475][ T6136] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.372: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 236.020961][ T393] device bridge_slave_0 left promiscuous mode [ 236.052999][ T6136] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.372: couldn't read orphan inode 11 (err -117) [ 236.060358][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.102826][ T6136] EXT4-fs (loop6): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 236.147242][ T393] device veth1_macvtap left promiscuous mode [ 236.169904][ T393] device veth0_macvtap left promiscuous mode [ 236.176087][ T6130] loop4: detected capacity change from 0 to 40427 [ 236.180058][ T393] device veth1_vlan left promiscuous mode [ 236.212313][ T6136] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.372: Invalid block bitmap block 0 in block_group 0 [ 236.237803][ T393] device veth0_vlan left promiscuous mode [ 236.260594][ T4218] steelseries_srws1 0003:1038:1410.0003: unbalanced delimiter at end of report description [ 236.266878][ T6136] Quota error (device loop6): write_blk: dquota write failed [ 236.301540][ T6130] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 236.305098][ T4218] steelseries_srws1 0003:1038:1410.0003: parse failed [ 236.324170][ T6136] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 236.336458][ T4218] steelseries_srws1: probe of 0003:1038:1410.0003 failed with error -22 [ 236.350388][ T6130] F2FS-fs (loop4): invalid crc value [ 236.357659][ T6136] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.372: Failed to acquire dquot type 0 [ 236.397819][ T6130] F2FS-fs (loop4): Found nat_bits in checkpoint [ 236.528873][ T4215] usb 3-1: USB disconnect, device number 4 [ 236.545914][ T6130] F2FS-fs (loop4): Start checkpoint disabled! [ 236.574979][ T4337] Quota error (device loop6): remove_tree: Getting block too big (0 >= 9) [ 236.586856][ T6130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 236.606243][ T4337] EXT4-fs error (device loop6): ext4_release_dquot:6240: comm kworker/u4:9: Failed to release dquot type 0 [ 239.143534][ T4359] attempt to access beyond end of device [ 239.143534][ T4359] loop4: rw=2049, want=45104, limit=40427 [ 239.452048][ T393] team0 (unregistering): Port device team_slave_1 removed [ 239.492329][ T393] team0 (unregistering): Port device team_slave_0 removed [ 239.542767][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.583705][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.913644][ T393] bond0 (unregistering): Released all slaves [ 239.959064][ T6168] loop4: detected capacity change from 0 to 512 [ 240.003967][ T5891] device veth1_macvtap entered promiscuous mode [ 240.041780][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.064052][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.078273][ T6168] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.193490][ T6168] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.274648][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.333851][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.371939][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.398926][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.409290][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.474328][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.486765][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.497946][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.529875][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.550311][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.578072][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.625575][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.671217][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.713386][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.731174][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.743776][ T6185] loop2: detected capacity change from 0 to 128 [ 240.751396][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.772704][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.790026][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.801047][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.832621][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.071442][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.103538][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.383171][ T5891] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.464137][ T5891] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.528833][ T5891] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.749822][ T5891] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.042043][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.086768][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.123135][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.145342][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.153110][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.236207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.403490][ T6206] loop6: detected capacity change from 0 to 512 [ 242.824436][ T6206] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.385: corrupted inode contents [ 242.847199][ T6206] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #3: comm syz.6.385: mark_inode_dirty error [ 242.879594][ T6206] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.385: corrupted inode contents [ 242.895655][ T6206] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.385: mark_inode_dirty error [ 242.916343][ T6206] Quota error (device loop6): write_blk: dquota write failed [ 242.925408][ T6206] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 242.935542][ T6206] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.385: Failed to acquire dquot type 0 [ 242.976971][ T6206] EXT4-fs (loop6): 1 orphan inode deleted [ 242.982895][ T6206] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.994510][ T6206] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.028325][ T6215] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 245.508772][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 246.782028][ T6256] loop6: detected capacity change from 0 to 128 [ 247.052764][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 247.082669][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 248.743273][ T25] audit: type=1800 audit(1747577014.553:37): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.396" name="bus" dev="loop6" ino=1048612 res=0 errno=0 [ 249.923363][ T6268] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 250.639739][ T13] usb 3-1: string descriptor 0 read error: -71 [ 250.646105][ T13] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.655211][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.878918][ T13] usb 3-1: config 0 descriptor?? [ 251.699714][ T13] usb 3-1: can't set config #0, error -71 [ 251.713427][ T13] usb 3-1: USB disconnect, device number 5 [ 251.897082][ T25] audit: type=1326 audit(1747577017.713:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 252.007570][ T25] audit: type=1326 audit(1747577017.713:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 252.874181][ T25] audit: type=1326 audit(1747577017.743:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 252.923968][ T25] audit: type=1326 audit(1747577017.743:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 253.029949][ T25] audit: type=1326 audit(1747577017.743:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 253.091732][ T6308] loop4: detected capacity change from 0 to 128 [ 253.203339][ T25] audit: type=1326 audit(1747577017.743:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 253.407038][ T6312] loop1: detected capacity change from 0 to 512 [ 254.779638][ T25] audit: type=1326 audit(1747577017.743:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 255.546368][ T25] audit: type=1326 audit(1747577017.743:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 255.757604][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.764013][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.008971][ T6312] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #3: comm syz.1.409: corrupted inode contents [ 256.023186][ T6312] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #3: comm syz.1.409: mark_inode_dirty error [ 256.046258][ T6312] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #3: comm syz.1.409: corrupted inode contents [ 256.062746][ T6312] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.409: mark_inode_dirty error [ 256.081042][ T6312] Quota error (device loop1): write_blk: dquota write failed [ 256.089041][ T6312] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 256.099251][ T6312] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.409: Failed to acquire dquot type 0 [ 256.127311][ T6312] EXT4-fs (loop1): 1 orphan inode deleted [ 256.133780][ T6312] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.145439][ T6312] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.768086][ T25] audit: type=1326 audit(1747577017.743:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 256.790358][ T25] audit: type=1326 audit(1747577017.743:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 256.939400][ T25] audit: type=1326 audit(1747577017.743:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 257.192962][ T25] audit: type=1326 audit(1747577017.743:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 257.349057][ T25] audit: type=1326 audit(1747577017.753:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 257.371976][ T25] audit: type=1326 audit(1747577017.753:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.6.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cf2a89969 code=0x7ffc0000 [ 258.837554][ T6341] loop4: detected capacity change from 0 to 256 [ 258.976784][ T6341] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 260.376980][ T6363] loop1: detected capacity change from 0 to 128 [ 260.818868][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 260.818906][ T25] audit: type=1800 audit(1747577026.613:56): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.421" name="bus" dev="loop1" ino=1048617 res=0 errno=0 [ 261.384165][ T6371] loop4: detected capacity change from 0 to 16 [ 261.514349][ T6371] erofs: (device loop4): mounted with root inode @ nid 36. [ 261.656327][ T6371] erofs: (device loop4): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 261.713498][ T6371] erofs: (device loop4): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 261.766281][ T6371] erofs: (device loop4): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 261.847751][ T6371] attempt to access beyond end of device [ 261.847751][ T6371] loop4: rw=524288, want=32, limit=16 [ 261.902870][ T6371] attempt to access beyond end of device [ 261.902870][ T6371] loop4: rw=524288, want=24, limit=16 [ 264.754478][ T6404] loop2: detected capacity change from 0 to 256 [ 264.987879][ T6404] FAT-fs (loop2): Directory bread(block 64) failed [ 265.049181][ T6404] FAT-fs (loop2): Directory bread(block 65) failed [ 265.092688][ T6404] FAT-fs (loop2): Directory bread(block 66) failed [ 265.112618][ T6404] FAT-fs (loop2): Directory bread(block 67) failed [ 265.119261][ T6404] FAT-fs (loop2): Directory bread(block 68) failed [ 265.256592][ T6404] FAT-fs (loop2): Directory bread(block 69) failed [ 266.674596][ T4597] Bluetooth: hci2: command 0x0409 tx timeout [ 266.688992][ T6404] FAT-fs (loop2): Directory bread(block 70) failed [ 266.862896][ T6404] FAT-fs (loop2): Directory bread(block 71) failed [ 266.869562][ T6404] FAT-fs (loop2): Directory bread(block 72) failed [ 266.941722][ T6421] loop1: detected capacity change from 0 to 128 [ 266.951018][ T6404] FAT-fs (loop2): Directory bread(block 73) failed [ 267.552272][ T25] audit: type=1800 audit(1747577033.343:57): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.435" name="bus" dev="loop1" ino=1048619 res=0 errno=0 [ 267.963702][ T6427] netlink: 'syz.4.436': attribute type 27 has an invalid length. [ 269.176041][ T4597] Bluetooth: hci2: command 0x041b tx timeout [ 269.768209][ T6444] loop1: detected capacity change from 0 to 2048 [ 269.956162][ T4263] loop1: p1 < > p3 [ 269.966213][ T4263] loop1: p3 size 134217728 extends beyond EOD, truncated [ 270.033210][ T6444] loop1: p1 < > p3 [ 270.065316][ T6444] loop1: p3 size 134217728 extends beyond EOD, truncated [ 270.212860][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.222665][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.467348][ T4246] udevd[4246]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 270.515730][ T4263] udevd[4263]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 271.013832][ T6446] loop2: detected capacity change from 0 to 40427 [ 271.073527][ T6446] F2FS-fs (loop2): invalid crc value [ 271.110183][ T6446] F2FS-fs (loop2): Found nat_bits in checkpoint [ 271.272933][ T6446] F2FS-fs (loop2): Start checkpoint disabled! [ 271.334121][ T6446] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 271.396089][ T6446] attempt to access beyond end of device [ 271.396089][ T6446] loop2: rw=2049, want=45104, limit=40427 [ 271.422720][ T4597] Bluetooth: hci2: command 0x040f tx timeout [ 271.467820][ T6446] attempt to access beyond end of device [ 271.467820][ T6446] loop2: rw=0, want=45104, limit=40427 [ 271.766382][ T4348] attempt to access beyond end of device [ 271.766382][ T4348] loop2: rw=2049, want=40976, limit=40427 [ 272.049249][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.212307][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.764483][ T4218] Bluetooth: hci2: command 0x0419 tx timeout [ 273.943580][ T6427] device macsec0 left promiscuous mode [ 273.986346][ T6464] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.044241][ T6464] exFAT-fs (loop2): unable to read boot sector [ 274.052153][ T6427] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.064462][ T6427] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.072657][ T6464] exFAT-fs (loop2): failed to read boot sector [ 274.079989][ T6427] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.089248][ T6464] exFAT-fs (loop2): failed to recognize exfat type [ 274.096045][ T6427] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.397474][ T6427] device bridge1 left promiscuous mode [ 274.477497][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 274.503249][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.521322][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.542182][ T6431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 274.753550][ T6469] loop4: detected capacity change from 0 to 512 [ 274.868038][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 275.158194][ T6469] EXT4-fs (loop4): Ignoring removed nobh option [ 275.726448][ T6469] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #16: comm syz.4.444: corrupted inode contents [ 275.865462][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 275.872037][ T6469] EXT4-fs error (device loop4): ext4_dirty_inode:6039: inode #16: comm syz.4.444: mark_inode_dirty error [ 275.992932][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 276.022840][ T6469] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #16: comm syz.4.444: corrupted inode contents [ 276.072828][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 276.092814][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.100325][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.115975][ T6469] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.444: mark_inode_dirty error [ 276.276777][ T6398] device bridge_slave_0 entered promiscuous mode [ 276.312123][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 276.350599][ T6469] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #16: comm syz.4.444: corrupted inode contents [ 276.624178][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.765460][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 276.800680][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.952713][ T6469] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 277.003800][ T6398] device bridge_slave_1 entered promiscuous mode [ 277.004515][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 277.063312][ T6469] EXT4-fs error (device loop4): ext4_do_update_inode:5203: inode #16: comm syz.4.444: corrupted inode contents [ 277.173542][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 277.180301][ T6469] EXT4-fs error (device loop4): ext4_truncate:4273: inode #16: comm syz.4.444: mark_inode_dirty error [ 277.273255][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 277.299761][ T6469] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 277.369650][ T6469] EXT4-fs (loop4): Remounting filesystem read-only [ 277.392711][ T6469] EXT4-fs (loop4): 1 truncate cleaned up [ 277.398420][ T6469] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 277.423749][ T6469] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.160775][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.353370][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.010481][ T6398] team0: Port device team_slave_0 added [ 279.547492][ T6398] team0: Port device team_slave_1 added [ 280.676140][ T6530] IPv4: Oversized IP packet from 127.202.26.0 [ 280.796378][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.819164][ T6534] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 280.838674][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.873070][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.131600][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.141101][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.499033][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.787225][ T6551] loop6: detected capacity change from 0 to 256 [ 281.855164][ T6554] loop4: detected capacity change from 0 to 1024 [ 281.878547][ T6398] device hsr_slave_0 entered promiscuous mode [ 281.973290][ T6398] device hsr_slave_1 entered promiscuous mode [ 281.991704][ T6554] EXT4-fs (loop4): inline encryption not supported [ 282.022433][ T6551] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 282.038725][ T6554] EXT4-fs (loop4): Ignoring removed bh option [ 282.097203][ T6398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.133847][ T6398] Cannot create hsr debugfs directory [ 282.220472][ T25] audit: type=1107 audit(1747577048.033:58): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 282.233698][ T6554] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 283.423148][ T6580] xt_hashlimit: size too large, truncated to 1048576 [ 284.225281][ T6398] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 284.280506][ T6595] loop1: detected capacity change from 0 to 512 [ 284.574664][ T6595] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #3: comm syz.1.468: corrupted inode contents [ 284.588760][ T6595] EXT4-fs error (device loop1): ext4_dirty_inode:6039: inode #3: comm syz.1.468: mark_inode_dirty error [ 284.611953][ T6595] EXT4-fs error (device loop1): ext4_do_update_inode:5203: inode #3: comm syz.1.468: corrupted inode contents [ 284.626516][ T6595] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.468: mark_inode_dirty error [ 284.646099][ T6595] Quota error (device loop1): write_blk: dquota write failed [ 284.654117][ T6595] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 284.664271][ T6595] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.468: Failed to acquire dquot type 0 [ 284.698302][ T6595] [ 284.700674][ T6595] ====================================================== [ 284.707684][ T6595] WARNING: possible circular locking dependency detected [ 284.714699][ T6595] 5.15.183-syzkaller #0 Not tainted [ 284.719883][ T6595] ------------------------------------------------------ [ 284.726890][ T6595] syz.1.468/6595 is trying to acquire lock: [ 284.732767][ T6595] ffff888064672968 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 284.741641][ T6595] [ 284.741641][ T6595] but task is already holding lock: [ 284.748995][ T6595] ffff888064649668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 284.758297][ T6595] [ 284.758297][ T6595] which lock already depends on the new lock. [ 284.758297][ T6595] [ 284.768689][ T6595] [ 284.768689][ T6595] the existing dependency chain (in reverse order) is: [ 284.777696][ T6595] [ 284.777696][ T6595] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 284.785527][ T6595] down_read+0x44/0x2e0 [ 284.790204][ T6595] ext4_map_blocks+0x32f/0x1b30 [ 284.795571][ T6595] ext4_getblk+0x16d/0x630 [ 284.800502][ T6595] ext4_bread+0x26/0x180 [ 284.805255][ T6595] ext4_quota_read+0x1b3/0x3a0 [ 284.810623][ T6595] find_tree_dqentry+0x188/0xb30 [ 284.816246][ T6595] find_tree_dqentry+0x3eb/0xb30 [ 284.821702][ T6595] find_tree_dqentry+0x3eb/0xb30 [ 284.827155][ T6595] find_tree_dqentry+0x3eb/0xb30 [ 284.832605][ T6595] qtree_read_dquot+0x13c/0x680 [ 284.837967][ T6595] v2_read_dquot+0xc0/0x110 [ 284.842985][ T6595] dquot_acquire+0x152/0x520 [ 284.848094][ T6595] ext4_acquire_dquot+0x2d9/0x4a0 [ 284.853635][ T6595] dqget+0x778/0xeb0 [ 284.858043][ T6595] __dquot_initialize+0x328/0xcb0 [ 284.863584][ T6595] ext4_process_orphan+0x54/0x300 [ 284.869123][ T6595] ext4_orphan_cleanup+0xaa9/0x12e0 [ 284.874927][ T6595] ext4_fill_super+0x9288/0x9a00 [ 284.880464][ T6595] mount_bdev+0x287/0x3c0 [ 284.885308][ T6595] legacy_get_tree+0xe6/0x180 [ 284.890499][ T6595] vfs_get_tree+0x88/0x270 [ 284.895426][ T6595] do_new_mount+0x24a/0xa40 [ 284.900445][ T6595] __se_sys_mount+0x2d6/0x3c0 [ 284.905635][ T6595] do_syscall_64+0x4c/0xa0 [ 284.910567][ T6595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.916983][ T6595] [ 284.916983][ T6595] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 284.925054][ T6595] down_read+0x44/0x2e0 [ 284.929729][ T6595] v2_read_dquot+0x4a/0x110 [ 284.934747][ T6595] dquot_acquire+0x152/0x520 [ 284.939854][ T6595] ext4_acquire_dquot+0x2d9/0x4a0 [ 284.945481][ T6595] dqget+0x778/0xeb0 [ 284.949894][ T6595] __dquot_initialize+0x3b6/0xcb0 [ 284.955432][ T6595] ext4_create+0x8c/0x460 [ 284.960274][ T6595] path_openat+0x11e1/0x2f30 [ 284.965379][ T6595] do_filp_open+0x1b3/0x3e0 [ 284.970396][ T6595] do_sys_openat2+0x142/0x4a0 [ 284.975586][ T6595] __x64_sys_open+0x11b/0x140 [ 284.980774][ T6595] do_syscall_64+0x4c/0xa0 [ 284.985709][ T6595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.992119][ T6595] [ 284.992119][ T6595] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 284.999753][ T6595] __lock_acquire+0x2c33/0x7c60 [ 285.005123][ T6595] lock_acquire+0x197/0x3f0 [ 285.010142][ T6595] __mutex_lock_common+0x1eb/0x2390 [ 285.015854][ T6595] mutex_lock_nested+0x17/0x20 [ 285.021133][ T6595] dquot_commit+0x5a/0x410 [ 285.026070][ T6595] ext4_write_dquot+0x1f0/0x360 [ 285.031446][ T6595] mark_all_dquot_dirty+0xf9/0x400 [ 285.037071][ T6595] __dquot_free_space+0x7ca/0xb90 [ 285.042616][ T6595] ext4_free_blocks+0x1af5/0x2480 [ 285.048151][ T6595] ext4_ext_remove_space+0x1eaa/0x4390 [ 285.054125][ T6595] ext4_ext_truncate+0x192/0x240 [ 285.059576][ T6595] ext4_truncate+0x9f1/0x10d0 [ 285.064769][ T6595] ext4_evict_inode+0xb43/0x1080 [ 285.070219][ T6595] evict+0x485/0x870 [ 285.074627][ T6595] ext4_orphan_cleanup+0xaa9/0x12e0 [ 285.080336][ T6595] ext4_fill_super+0x9288/0x9a00 [ 285.085788][ T6595] mount_bdev+0x287/0x3c0 [ 285.090634][ T6595] legacy_get_tree+0xe6/0x180 [ 285.095823][ T6595] vfs_get_tree+0x88/0x270 [ 285.100848][ T6595] do_new_mount+0x24a/0xa40 [ 285.105869][ T6595] __se_sys_mount+0x2d6/0x3c0 [ 285.111059][ T6595] do_syscall_64+0x4c/0xa0 [ 285.115995][ T6595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.122496][ T6595] [ 285.122496][ T6595] other info that might help us debug this: [ 285.122496][ T6595] [ 285.132713][ T6595] Chain exists of: [ 285.132713][ T6595] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 285.132713][ T6595] [ 285.146352][ T6595] Possible unsafe locking scenario: [ 285.146352][ T6595] [ 285.153788][ T6595] CPU0 CPU1 [ 285.159141][ T6595] ---- ---- [ 285.164492][ T6595] lock(&ei->i_data_sem/2); [ 285.169081][ T6595] lock(&s->s_dquot.dqio_sem); [ 285.176449][ T6595] lock(&ei->i_data_sem/2); [ 285.183553][ T6595] lock(&dquot->dq_lock); [ 285.187963][ T6595] [ 285.187963][ T6595] *** DEADLOCK *** [ 285.187963][ T6595] [ 285.196103][ T6595] 4 locks held by syz.1.468/6595: [ 285.201134][ T6595] #0: ffff888064d560e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 285.211248][ T6595] #1: ffff888064d56650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 285.220736][ T6595] #2: ffff888064649668 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0 [ 285.230487][ T6595] #3: ffffffff8c23fc58 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 285.239527][ T6595] [ 285.239527][ T6595] stack backtrace: [ 285.245402][ T6595] CPU: 0 PID: 6595 Comm: syz.1.468 Not tainted 5.15.183-syzkaller #0 [ 285.253459][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 285.263514][ T6595] Call Trace: [ 285.266795][ T6595] [ 285.269721][ T6595] dump_stack_lvl+0x168/0x230 [ 285.274395][ T6595] ? load_image+0x3b0/0x3b0 [ 285.278891][ T6595] ? show_regs_print_info+0x20/0x20 [ 285.284086][ T6595] ? print_circular_bug+0x12b/0x1a0 [ 285.289275][ T6595] check_noncircular+0x274/0x310 [ 285.294204][ T6595] ? add_chain_block+0x940/0x940 [ 285.299133][ T6595] ? lockdep_lock+0xdc/0x1e0 [ 285.303724][ T6595] ? mark_lock+0x94/0x320 [ 285.308051][ T6595] __lock_acquire+0x2c33/0x7c60 [ 285.312903][ T6595] ? verify_lock_unused+0x140/0x140 [ 285.318100][ T6595] ? mark_lock+0x94/0x320 [ 285.322427][ T6595] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 285.328404][ T6595] ? lock_chain_count+0x20/0x20 [ 285.333250][ T6595] lock_acquire+0x197/0x3f0 [ 285.337750][ T6595] ? dquot_commit+0x5a/0x410 [ 285.342341][ T6595] ? finish_task_switch+0x12f/0x640 [ 285.347533][ T6595] ? __might_sleep+0xf0/0xf0 [ 285.352120][ T6595] ? read_lock_is_recursive+0x10/0x10 [ 285.357488][ T6595] ? __schedule+0x11c0/0x43b0 [ 285.362156][ T6595] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 285.368128][ T6595] ? dquot_commit+0x5a/0x410 [ 285.372714][ T6595] __mutex_lock_common+0x1eb/0x2390 [ 285.377906][ T6595] ? dquot_commit+0x5a/0x410 [ 285.382494][ T6595] ? __might_sleep+0xf0/0xf0 [ 285.387074][ T6595] ? mutex_lock_io_nested+0x60/0x60 [ 285.392272][ T6595] ? preempt_schedule+0xa7/0xb0 [ 285.397121][ T6595] mutex_lock_nested+0x17/0x20 [ 285.401876][ T6595] dquot_commit+0x5a/0x410 [ 285.406284][ T6595] ? __ext4_journal_start_sb+0x1bd/0x360 [ 285.411914][ T6595] ext4_write_dquot+0x1f0/0x360 [ 285.416769][ T6595] mark_all_dquot_dirty+0xf9/0x400 [ 285.421897][ T6595] __dquot_free_space+0x7ca/0xb90 [ 285.426925][ T6595] ext4_free_blocks+0x1af5/0x2480 [ 285.431952][ T6595] ? ext4_mb_discard_preallocations_should_retry+0x690/0x690 [ 285.439321][ T6595] ? ext4_datasem_ensure_credits+0x1f/0x130 [ 285.445211][ T6595] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 285.451295][ T6595] ? ext4_inode_journal_mode+0x18f/0x460 [ 285.456950][ T6595] ext4_ext_remove_space+0x1eaa/0x4390 [ 285.462450][ T6595] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 285.468434][ T6595] ? ext4_es_remove_extent+0x24f/0x3e0 [ 285.473889][ T6595] ext4_ext_truncate+0x192/0x240 [ 285.478824][ T6595] ext4_truncate+0x9f1/0x10d0 [ 285.483494][ T6595] ? __ext4_mark_inode_dirty+0x700/0x700 [ 285.489124][ T6595] ext4_evict_inode+0xb43/0x1080 [ 285.494052][ T6595] ? _raw_spin_unlock+0x24/0x40 [ 285.498902][ T6595] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 285.504792][ T6595] ? preempt_schedule_thunk+0x16/0x18 [ 285.510158][ T6595] ? do_raw_spin_unlock+0x11d/0x230 [ 285.515350][ T6595] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 285.521238][ T6595] evict+0x485/0x870 [ 285.525131][ T6595] ? __lock_acquire+0x7c60/0x7c60 [ 285.530154][ T6595] ? proc_nr_inodes+0x320/0x320 [ 285.534998][ T6595] ? do_raw_spin_unlock+0x11d/0x230 [ 285.540188][ T6595] ? _raw_spin_unlock+0x24/0x40 [ 285.545117][ T6595] ? iput+0x706/0x8a0 [ 285.549094][ T6595] ext4_orphan_cleanup+0xaa9/0x12e0 [ 285.554286][ T6595] ? ext4_orphan_del+0xb90/0xb90 [ 285.559215][ T6595] ? errseq_check_and_advance+0x62/0x120 [ 285.564850][ T6595] ext4_fill_super+0x9288/0x9a00 [ 285.569793][ T6595] ? ext4_mount+0x40/0x40 [ 285.574119][ T6595] ? set_blocksize+0x1f1/0x370 [ 285.578878][ T6595] ? sb_set_blocksize+0xa5/0xe0 [ 285.583809][ T6595] mount_bdev+0x287/0x3c0 [ 285.588133][ T6595] ? ext4_mount+0x40/0x40 [ 285.592454][ T6595] legacy_get_tree+0xe6/0x180 [ 285.597123][ T6595] ? ext4_errno_to_code+0x160/0x160 [ 285.602316][ T6595] vfs_get_tree+0x88/0x270 [ 285.606724][ T6595] do_new_mount+0x24a/0xa40 [ 285.611223][ T6595] __se_sys_mount+0x2d6/0x3c0 [ 285.615895][ T6595] ? __x64_sys_mount+0xc0/0xc0 [ 285.620652][ T6595] ? lockdep_hardirqs_on+0x94/0x140 [ 285.625848][ T6595] ? __x64_sys_mount+0x1c/0xc0 [ 285.630605][ T6595] do_syscall_64+0x4c/0xa0 [ 285.635026][ T6595] ? clear_bhb_loop+0x15/0x70 [ 285.639699][ T6595] ? clear_bhb_loop+0x15/0x70 [ 285.644508][ T6595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.650419][ T6595] RIP: 0033:0x7fca4a11e10a [ 285.654837][ T6595] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.674443][ T6595] RSP: 002b:00007fca47f41e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 285.682853][ T6595] RAX: ffffffffffffffda RBX: 00007fca47f41ef0 RCX: 00007fca4a11e10a [ 285.690820][ T6595] RDX: 0000200000000100 RSI: 0000200000000200 RDI: 00007fca47f41eb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.698784][ T6595] RBP: 0000200000000100 R08: 00007fca47f41ef0 R09: 0000000000000080 [ 285.706759][ T6595] R10: 0000000000000080 R11: 0000000000000246 R12: 0000200000000200 [ 285.714761][ T6595] R13: 00007fca47f41eb0 R14: 000000000000050d R15: 0000200000000240 [ 285.722744][ T6595] [ 285.799142][ T6595] EXT4-fs (loop1): 1 orphan inode deleted [ 285.805103][ T6595] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 285.816476][ T6595] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.030004][ T393] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.116232][ T393] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.172251][ T393] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.219016][ T393] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.360500][ T393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.427009][ T393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.514821][ T393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.547527][ T393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.666201][ T393] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.718391][ T393] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.758023][ T393] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.806667][ T393] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.848726][ T393] device hsr_slave_0 left promiscuous mode [ 289.855667][ T393] device hsr_slave_1 left promiscuous mode [ 289.862040][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.869807][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.878574][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.887690][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.896260][ T393] device bridge_slave_1 left promiscuous mode [ 289.902454][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.913978][ T393] device bridge_slave_0 left promiscuous mode [ 289.920181][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.936819][ T393] device hsr_slave_0 left promiscuous mode [ 289.945161][ T393] device hsr_slave_1 left promiscuous mode [ 289.951446][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.959429][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.969693][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.977504][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.989001][ T393] device bridge_slave_1 left promiscuous mode [ 289.995467][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.006304][ T393] device bridge_slave_0 left promiscuous mode [ 290.012489][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.024110][ T393] device hsr_slave_0 left promiscuous mode [ 290.030864][ T393] device hsr_slave_1 left promiscuous mode [ 290.037295][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.044822][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.052407][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.060303][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.067811][ T393] device bridge_slave_1 left promiscuous mode [ 290.074636][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.082278][ T393] device bridge_slave_0 left promiscuous mode [ 290.088552][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.098829][ T393] device veth0_macvtap left promiscuous mode [ 290.106019][ T393] device veth1_vlan left promiscuous mode [ 290.111766][ T393] device veth0_vlan left promiscuous mode [ 290.118371][ T393] device veth0_macvtap left promiscuous mode [ 290.124539][ T393] device veth1_vlan left promiscuous mode [ 290.130358][ T393] device veth0_vlan left promiscuous mode [ 290.136653][ T393] device veth1_macvtap left promiscuous mode [ 290.142930][ T393] device veth0_macvtap left promiscuous mode [ 290.148934][ T393] device veth1_vlan left promiscuous mode [ 290.155624][ T393] device veth0_vlan left promiscuous mode [ 290.286274][ T393] team0 (unregistering): Port device team_slave_1 removed [ 290.298086][ T393] team0 (unregistering): Port device team_slave_0 removed [ 290.308549][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.320029][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.355910][ T393] bond0 (unregistering): Released all slaves [ 290.439815][ T393] team0 (unregistering): Port device team_slave_1 removed [ 290.449321][ T393] team0 (unregistering): Port device team_slave_0 removed [ 290.459756][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.470317][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.509852][ T393] bond0 (unregistering): Released all slaves [ 290.579654][ T393] team0 (unregistering): Port device team_slave_1 removed [ 290.588873][ T393] team0 (unregistering): Port device team_slave_0 removed [ 290.599681][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.610720][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.648969][ T393] bond0 (unregistering): Released all slaves [ 292.065980][ T393] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.105213][ T393] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.146096][ T393] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.197366][ T393] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.521015][ T393] tipc: Left network mode [ 293.228975][ T393] device hsr_slave_0 left promiscuous mode [ 293.236306][ T393] device hsr_slave_1 left promiscuous mode [ 293.243201][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.250833][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.258756][ T393] device bridge_slave_1 left promiscuous mode [ 293.265378][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.273891][ T393] device bridge_slave_0 left promiscuous mode [ 293.280005][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.289197][ T393] device hsr_slave_0 left promiscuous mode [ 293.295466][ T393] device hsr_slave_1 left promiscuous mode [ 293.301588][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.309321][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.317691][ T393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.325094][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.332454][ T393] device bridge_slave_1 left promiscuous mode [ 293.338662][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.346419][ T393] device bridge_slave_0 left promiscuous mode [ 293.352510][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.361796][ T393] device hsr_slave_0 left promiscuous mode [ 293.368121][ T393] device hsr_slave_1 left promiscuous mode [ 293.374375][ T393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.381670][ T393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.389432][ T393] device bridge_slave_1 left promiscuous mode [ 293.395594][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.403297][ T393] device bridge_slave_0 left promiscuous mode [ 293.409408][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.419385][ T393] device veth1_macvtap left promiscuous mode [ 293.425494][ T393] device veth0_macvtap left promiscuous mode [ 293.431512][ T393] device veth1_vlan left promiscuous mode [ 293.437296][ T393] device veth0_vlan left promiscuous mode [ 293.529102][ T393] team0 (unregistering): Port device team_slave_1 removed [ 293.538456][ T393] team0 (unregistering): Port device team_slave_0 removed [ 293.549205][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.560161][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.592840][ T393] bond0 (unregistering): Released all slaves [ 293.678477][ T393] team0 (unregistering): Port device team_slave_1 removed [ 293.688064][ T393] team0 (unregistering): Port device team_slave_0 removed [ 293.697514][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.708279][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.746920][ T393] bond0 (unregistering): Released all slaves [ 293.824404][ T393] team0 (unregistering): Port device team_slave_1 removed [ 293.834110][ T393] team0 (unregistering): Port device team_slave_0 removed [ 293.844579][ T393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.856079][ T393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.887430][ T393] bond0 (unregistering): Released all slaves