last executing test programs: 49.616508606s ago: executing program 1 (id=174): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x9, 0x6, 0x6}}, 0xa) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000001500)='ext4\x00', &(0x7f00000015c0)='./mnt\x00', 0x14, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) bind$inet(r0, 0x0, 0x0) 49.447473241s ago: executing program 1 (id=176): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) tkill(0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) 48.468899572s ago: executing program 1 (id=177): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0), 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$char_usb(r0, &(0x7f0000000180)="c101cc1c87209d9fa888eb3ae0b3de11175be4d0762c0255764397c9d81063c2fb37", 0x22) r2 = dup(r1) ftruncate(r2, 0x400f80) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=@ocfs2={0xc, 0xfe}, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) 45.882777131s ago: executing program 1 (id=181): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000100000000fe44000000f10100000000000000", @ANYRES32=0x1, @ANYBLOB="98e500000000000000000000040000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0xa0, 0x1d}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, {0x2}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010102}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000004c0)='./file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 43.920225483s ago: executing program 2 (id=186): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x9, 0x6, 0x6}}, 0xa) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000001500)='ext4\x00', &(0x7f00000015c0)='./mnt\x00', 0x14, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) bind$inet(r0, 0x0, 0x0) 42.588575346s ago: executing program 2 (id=189): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0), 0x10, 0x4d2, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$char_usb(r0, &(0x7f0000000180)="c101cc1c87209d9fa888eb3ae0b3de11175be4d0762c0255764397c9d81063c2fb37", 0x22) r2 = dup(r1) ftruncate(r2, 0x400f80) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=@ocfs2={0xc, 0xfe}, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) 42.382601065s ago: executing program 1 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB="160000001a00210103eb33d3c01940330a"], 0x1c}}, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 41.500579237s ago: executing program 2 (id=192): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-cp'], 0x5) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) timerfd_create(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 40.368496892s ago: executing program 2 (id=194): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x9, 0x6, 0x6}}, 0xa) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000001500)='ext4\x00', &(0x7f00000015c0)='./mnt\x00', 0x14, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) bind$inet(r0, 0x0, 0x0) 40.197399168s ago: executing program 2 (id=195): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, 0x0) tkill(0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) 12.711962893s ago: executing program 4 (id=228): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff45) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084) 11.88497481s ago: executing program 4 (id=229): socket$inet(0x2, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6f, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020020031c0007006000000002000020d3", @ANYRESDEC, @ANYRES64]) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r5, @ANYRES64, @ANYRESOCT], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 10.572118632s ago: executing program 4 (id=231): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0), 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$char_usb(r0, &(0x7f0000000180)="c101cc1c87209d9fa888eb3ae0b3de11175be4d0762c0255764397c9d81063c2fb37", 0x22) r2 = dup(r1) ftruncate(r2, 0x400f80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=@ocfs2={0xc, 0xfe}, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) 10.216554005s ago: executing program 3 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000100000000fe44000000f10100000000000000", @ANYRES32=0x1, @ANYBLOB="98e500000000000000000000040000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0xa0, 0x1d}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, {0x2}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010102}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000004c0)='./file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 9.128153715s ago: executing program 3 (id=234): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-cp'], 0x5) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) timerfd_create(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 8.181240283s ago: executing program 0 (id=235): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) tkill(0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) 7.367642488s ago: executing program 3 (id=236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040)={[{@stripe={'stripe', 0x3d, 0x401}}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)='max_dir_size_kb', 0x0) r5 = inotify_init1(0x80800) fcntl$setown(r5, 0x8, 0xffffffffffffffff) setpgid(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @rand_addr, {[@end, @generic={0x0, 0x6, "54120b71"}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@empty}, {@dev}]}, @generic={0x0, 0x4, "d630"}, @ssrr={0x89, 0xf, 0x0, [@dev, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@multicast2, @broadcast, @rand_addr]}]}}}}}) 7.249502359s ago: executing program 0 (id=237): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff45) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084) 5.197800549s ago: executing program 0 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[@ANYBLOB="160000001a00210103eb33d3c01940330a"], 0x1c}}, 0x0) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x401}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000081) close(r1) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r8 = dup(r2) write$uinput_user_dev(r8, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [], [0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r9, 0x107, 0xc, &(0x7f0000000180), 0x4) 5.092631859s ago: executing program 4 (id=239): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getpid() recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380"], 0x44}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) 4.799758976s ago: executing program 3 (id=240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x9, 0x6, 0x6}}, 0xa) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000001500)='ext4\x00', &(0x7f00000015c0)='./mnt\x00', 0x14, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) bind$inet(r0, 0x0, 0x0) 4.193514872s ago: executing program 0 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000100000000fe44000000f10100000000000000", @ANYRES32=0x1, @ANYBLOB="98e500000000000000000000040000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0xa0, 0x1d}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, {0x2}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010102}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000004c0)='./file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 3.803291528s ago: executing program 1 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000100000000fe44000000f10100000000000000", @ANYRES32=0x1, @ANYBLOB="98e500000000000000000000040000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0xa0, 0x1d}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, {0x2}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010102}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000004c0)='./file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 3.801421988s ago: executing program 3 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000100000000fe44000000f10100000000000000", @ANYRES32=0x1, @ANYBLOB="98e500000000000000000000040000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0xf9b7, 0x0, 0xa0, 0xa0, 0x1d}, {0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, {0x2}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010102}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000004c0)='./file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 2.994652713s ago: executing program 0 (id=243): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-cp'], 0x5) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) timerfd_create(0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 2.193374938s ago: executing program 2 (id=206): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000140)={0xa, {0x9, 0x6, 0x6}}, 0xa) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000001500)='ext4\x00', &(0x7f00000015c0)='./mnt\x00', 0x14, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) bind$inet(r0, 0x0, 0x0) 2.187523438s ago: executing program 3 (id=244): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-cp'], 0x5) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) timerfd_create(0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 2.001918135s ago: executing program 0 (id=245): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000000c0)=0xeb03, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) tkill(0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) 1.024297646s ago: executing program 4 (id=246): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff45) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084) 0s ago: executing program 4 (id=247): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0), 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$char_usb(r0, &(0x7f0000000180)="c101cc1c87209d9fa888eb3ae0b3de11175be4d0762c0255764397c9d81063c2fb37", 0x22) r2 = dup(r1) ftruncate(r2, 0x400f80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=@ocfs2={0xc, 0xfe}, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40c000}) kernel console output (not intermixed with test programs): 2] Bluetooth: hci3: command tx timeout [ 44.775435][ T4302] Bluetooth: hci2: command tx timeout [ 44.776906][ T4302] Bluetooth: hci4: command tx timeout [ 44.908602][ T4400] loop3: detected capacity change from 0 to 512 [ 44.931832][ T4400] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.018119][ T4400] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.8: iget: bad extended attribute block 128 [ 45.022710][ T4400] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.8: couldn't read orphan inode 16 (err -117) [ 45.050320][ T4400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.136651][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 45.241545][ T4421] loop0: detected capacity change from 0 to 512 [ 45.287713][ T4421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.342957][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 45.486329][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 47.278630][ T4423] netlink: 'syz.1.9': attribute type 10 has an invalid length. [ 47.280804][ T4423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 47.299452][ T4430] futex_wake_op: syz.4.14 tries to shift op by 32; fix this program [ 47.314574][ T4423] device team0 entered promiscuous mode [ 47.316088][ T4423] device team_slave_0 entered promiscuous mode [ 47.317933][ T4423] device team_slave_1 entered promiscuous mode [ 47.325736][ T4307] EXT4-fs (loop0): unmounting filesystem. [ 47.356341][ T4423] bridge0: port 3(team0) entered blocking state [ 47.365049][ T4423] bridge0: port 3(team0) entered disabled state [ 47.384253][ T4423] bridge0: port 3(team0) entered blocking state [ 47.386452][ T4423] bridge0: port 3(team0) entered forwarding state [ 48.207179][ T4433] loop3: detected capacity change from 0 to 128 [ 48.270241][ T4433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.315155][ T4440] loop0: detected capacity change from 0 to 2048 [ 48.804332][ T4449] loop2: detected capacity change from 0 to 2048 [ 49.132945][ T4440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.163192][ T4449] loop2: unable to read partition table [ 49.165002][ T4449] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 49.247164][ T3909] Alternate GPT is invalid, using primary GPT. [ 49.248972][ T3909] loop2: p1 p2 p3 [ 49.277993][ T4433] fscrypt: Error allocating hmac(sha512): -2 [ 49.279797][ T4456] overlayfs: failed to resolve './file1': -2 [ 49.340273][ T4457] loop1: detected capacity change from 0 to 1024 [ 49.392986][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 49.439046][ T4467] loop3: detected capacity change from 0 to 128 [ 49.446405][ T4452] smb3: Unknown parameter 'rdma ' [ 49.448670][ T4452] netlink: 'syz.4.17': attribute type 15 has an invalid length. [ 49.676511][ T4472] mmap: syz.1.19 (4472) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.818489][ T4475] syz.3.20 (4475): /proc/4466/oom_adj is deprecated, please use /proc/4466/oom_score_adj instead. [ 50.792028][ T4307] EXT4-fs (loop0): unmounting filesystem. [ 50.824414][ T4293] udevd[4293]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 50.890653][ T4291] udevd[4291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.945317][ T4482] loop4: detected capacity change from 0 to 1024 [ 50.950948][ T4482] hfsplus: failed to load catalog file [ 51.023987][ T4490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.056208][ T4479] udevd[4479]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.128933][ T4490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.030101][ T4479] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.525401][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'. [ 52.550180][ T4495] loop3: detected capacity change from 0 to 1024 [ 52.644661][ T4495] hfsplus: request for non-existent node 3 in B*Tree [ 52.646714][ T4495] hfsplus: request for non-existent node 3 in B*Tree [ 52.728307][ T4311] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 52.732742][ T4507] loop4: detected capacity change from 0 to 2048 [ 52.909476][ T4493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 52.912227][ T4493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 53.570637][ T4507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.075776][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 56.353226][ T4542] loop0: detected capacity change from 0 to 512 [ 57.588004][ T4542] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 57.963002][ T4541] EXT2-fs (loop0): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 57.966601][ T4541] EXT2-fs (loop0): error: ext2_new_blocks: Allocating block in system zone - blocks from 1, length 12 [ 58.098993][ T4549] loop4: detected capacity change from 0 to 2048 [ 58.227762][ T4549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 59.590505][ T4574] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 60.436060][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 61.403211][ T4580] loop2: detected capacity change from 0 to 256 [ 61.509009][ T4580] FAT-fs (loop2): Directory bread(block 64) failed [ 61.511173][ T4580] FAT-fs (loop2): Directory bread(block 65) failed [ 61.513456][ T4580] FAT-fs (loop2): Directory bread(block 66) failed [ 61.515249][ T4580] FAT-fs (loop2): Directory bread(block 67) failed [ 61.529818][ T4580] FAT-fs (loop2): Directory bread(block 68) failed [ 61.551155][ T4580] FAT-fs (loop2): Directory bread(block 69) failed [ 61.568254][ T4580] FAT-fs (loop2): Directory bread(block 70) failed [ 61.570077][ T4580] FAT-fs (loop2): Directory bread(block 71) failed [ 61.609954][ T4580] FAT-fs (loop2): Directory bread(block 72) failed [ 61.619239][ T4580] FAT-fs (loop2): Directory bread(block 73) failed [ 63.976318][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.979766][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.981970][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.994764][ T4594] Zero length message leads to an empty skb [ 64.177524][ T4608] netlink: 'syz.1.49': attribute type 4 has an invalid length. [ 64.186206][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 64.202575][ T27] audit: type=1326 audit(64.180:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4609 comm="syz.4.48" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff801499e8 code=0x0 [ 64.868974][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.869071][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.020156][ T4608] netlink: 'syz.1.49': attribute type 2 has an invalid length. [ 65.150869][ T4620] loop3: detected capacity change from 0 to 512 [ 65.213263][ T4620] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 65.227551][ T4620] EXT4-fs (loop3): orphan cleanup on readonly fs [ 65.273795][ T4620] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 65.293622][ T4620] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 65.320320][ T4620] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.51: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.334743][ T4620] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.51: couldn't read orphan inode 13 (err -117) [ 65.338915][ T4625] loop1: detected capacity change from 0 to 2048 [ 65.349589][ T4620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 65.455649][ T4620] netlink: 52 bytes leftover after parsing attributes in process `syz.3.51'. [ 65.492298][ T4620] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz.3.51: deleted inode referenced: 12 [ 66.396213][ T4620] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 66.704858][ T27] audit: type=1326 audit(66.680:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4640 comm="syz.0.55" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81f499e8 code=0x0 [ 66.735881][ T4620] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 66.741055][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 66.765596][ T4620] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 69.742770][ T7] cfg80211: failed to load regulatory.db [ 69.847732][ T4717] loop4: detected capacity change from 0 to 128 [ 70.722126][ T4727] syz.0.59 sent an empty control message without MSG_MORE. [ 71.000494][ T4717] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 71.013921][ T4717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.035431][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 71.210350][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 71.392986][ T4770] loop3: detected capacity change from 0 to 128 [ 72.180841][ T4780] loop4: detected capacity change from 0 to 2048 [ 73.432217][ T4783] binder: 4776:4783 ioctl 4b49 0 returned -22 [ 73.437016][ T4783] loop2: detected capacity change from 0 to 16 [ 74.318313][ T4784] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 74.370115][ T4783] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.377220][ T4785] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.379538][ T4785] FAT-fs (loop3): Filesystem has been set read-only [ 74.381448][ T4785] syz.3.62: attempt to access beyond end of device [ 74.381448][ T4785] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 74.385911][ T4785] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.388199][ T4785] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.414514][ T4785] syz.3.62: attempt to access beyond end of device [ 74.414514][ T4785] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 74.418294][ T4785] syz.3.62: attempt to access beyond end of device [ 74.418294][ T4785] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 74.446607][ T4785] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 74.485890][ T4780] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 74.698930][ T4780] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 74.701848][ T4780] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 74.703908][ T4780] UDF-fs: Scanning with blocksize 512 failed [ 74.709501][ T4780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.131468][ T4303] UDF-fs: error (device loop4): udf_read_inode: (ino 834) failed !bh [ 75.134502][ T4303] UDF-fs: error (device loop4): udf_read_inode: (ino 834) failed !bh [ 75.514096][ T4799] MTD: Attempt to mount non-MTD device "./file0" [ 75.710306][ T4799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.092300][ T110] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 77.094956][ T110] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 [ 77.107009][ T27] audit: type=1326 audit(77.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4786 comm="syz.2.66" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff905499e8 code=0x0 [ 77.266717][ T4794] binder: 4786:4794 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 77.270589][ T4794] binder: 4786:4794 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 77.278892][ T4794] binder: 4786:4794 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 77.281101][ T4794] binder: 4786:4794 BC_INCREFS_DONE u0000000000000003 no match [ 77.328311][ T4794] binder: 4786:4794 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 77.428329][ T4789] binder: 4786:4789 Acquire 1 refcount change on invalid ref 0 ret -22 [ 77.440028][ T4789] binder: 4786:4789 ioctl 400454ca 20000300 returned -22 [ 77.766242][ T4789] binder: 4786:4789 ioctl 4b3b 20000040 returned -22 [ 77.771926][ T4803] loop3: detected capacity change from 0 to 1764 [ 80.826937][ T4470] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.795803][ T4823] loop2: detected capacity change from 0 to 512 [ 81.837406][ T4829] ======================================================= [ 81.837406][ T4829] WARNING: The mand mount option has been deprecated and [ 81.837406][ T4829] and is ignored by this kernel. Remove the mand [ 81.837406][ T4829] option from the mount to silence this warning. [ 81.837406][ T4829] ======================================================= [ 82.060249][ T4823] ext4: Bad value for 'min_batch_time' [ 82.065117][ T4840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.111076][ T4840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.412835][ T4844] xt_hashlimit: overflow, try lower: 0/0 [ 83.142874][ T4302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.147213][ T4302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.150328][ T4302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.156477][ T4302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.158767][ T4302] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.160827][ T4302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.326744][ T4732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.474322][ T4732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.478758][ T4853] loop2: detected capacity change from 0 to 256 [ 84.464787][ T4732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.686221][ T4732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.752691][ T4311] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.759733][ T4311] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.763224][ T4311] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.767577][ T4845] chnl_net:caif_netlink_parms(): no params data found [ 84.767997][ T4311] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.785182][ T4311] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.787713][ T4311] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.848605][ T4302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.852799][ T4302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.854335][ T4845] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.856911][ T4845] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.858972][ T4302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.859563][ T4845] device bridge_slave_0 entered promiscuous mode [ 84.862942][ T4302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.865314][ T4302] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.867314][ T4302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.899058][ T4845] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.901222][ T4845] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.904068][ T4845] device bridge_slave_1 entered promiscuous mode [ 84.956759][ T4845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.962740][ T4845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.002716][ T4845] team0: Port device team_slave_0 added [ 85.018707][ T4845] team0: Port device team_slave_1 added [ 85.226404][ T4311] Bluetooth: hci1: command tx timeout [ 85.269748][ T4845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.271960][ T4845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.278756][ T4845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.284501][ T4845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.286122][ T4845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.295778][ T4845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.476454][ T4890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.88'. [ 85.489560][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.504901][ T27] audit: type=1326 audit(85.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.2.87" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff905499e8 code=0x7fc00000 [ 85.529460][ T4865] chnl_net:caif_netlink_parms(): no params data found [ 85.544092][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.582830][ T4845] device hsr_slave_0 entered promiscuous mode [ 85.813888][ T4845] device hsr_slave_1 entered promiscuous mode [ 85.851456][ T4845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.853784][ T4845] Cannot create hsr debugfs directory [ 86.351766][ T4900] loop2: detected capacity change from 0 to 1024 [ 86.358775][ T4900] ext4: Unknown parameter 'noacl' [ 86.653641][ T4870] chnl_net:caif_netlink_parms(): no params data found [ 86.821402][ T4311] Bluetooth: hci0: command tx timeout [ 86.826375][ T4903] loop2: detected capacity change from 0 to 512 [ 86.901438][ T4311] Bluetooth: hci4: command tx timeout [ 86.907788][ T4903] EXT4-fs (loop2): Test dummy encryption mode enabled [ 86.927275][ T4903] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.90: invalid block [ 86.930393][ T4903] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.90: couldn't read orphan inode 11 (err -117) [ 86.941871][ T4903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.331479][ T4311] Bluetooth: hci1: command tx timeout [ 87.852817][ T4865] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.854737][ T4865] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.857401][ T4865] device bridge_slave_0 entered promiscuous mode [ 87.908518][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 87.985362][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 88.088402][ T4865] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.090253][ T4865] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.093295][ T4865] device bridge_slave_1 entered promiscuous mode [ 88.211252][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.213318][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.215843][ T4940] process 'syz.2.91' launched './file1' with NULL argv: empty string added [ 88.220117][ T4870] device bridge_slave_0 entered promiscuous mode [ 88.245360][ T4865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.251240][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.253232][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.255732][ T4870] device bridge_slave_1 entered promiscuous mode [ 88.328472][ T4865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.376923][ T4870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.498745][ T4870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.539766][ T4865] team0: Port device team_slave_0 added [ 88.965049][ T4302] Bluetooth: hci0: command tx timeout [ 89.049825][ T4302] Bluetooth: hci4: command tx timeout [ 89.367239][ T4870] team0: Port device team_slave_0 added [ 89.373135][ T4865] team0: Port device team_slave_1 added [ 89.453098][ T4947] loop2: detected capacity change from 0 to 2048 [ 89.463728][ T4947] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.466469][ T4302] Bluetooth: hci1: command tx timeout [ 89.745534][ T4870] team0: Port device team_slave_1 added [ 89.758303][ T4870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.760285][ T4870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.772388][ T4870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.870224][ T4870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.872110][ T4870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.883397][ T4870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.889321][ T4865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.891231][ T4865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.915369][ T4865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.928915][ T4865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.936803][ T4865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.949246][ T4865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.391229][ T4870] device hsr_slave_0 entered promiscuous mode [ 90.539672][ T4870] device hsr_slave_1 entered promiscuous mode [ 90.588939][ T4870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.591324][ T4870] Cannot create hsr debugfs directory [ 91.198260][ T4311] Bluetooth: hci0: command tx timeout [ 91.262496][ T4302] Bluetooth: hci4: command tx timeout [ 91.283013][ T4865] device hsr_slave_0 entered promiscuous mode [ 91.369676][ T4865] device hsr_slave_1 entered promiscuous mode [ 91.390685][ T4865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.392799][ T4865] Cannot create hsr debugfs directory [ 91.414334][ T4732] device hsr_slave_0 left promiscuous mode [ 91.454352][ T4732] device hsr_slave_1 left promiscuous mode [ 91.572646][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.574906][ T4732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.579675][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.581725][ T4732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.593108][ T4732] device bridge_slave_1 left promiscuous mode [ 91.596551][ T4732] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.647409][ T4975] loop3: detected capacity change from 0 to 32768 [ 91.649648][ T4975] XFS: attr2 mount option is deprecated. [ 91.651212][ T4975] XFS: noikeep mount option is deprecated. [ 91.659724][ T4732] device bridge_slave_0 left promiscuous mode [ 91.661459][ T4732] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.693407][ T4975] XFS (loop3): Mounting V5 Filesystem [ 91.729692][ T4302] Bluetooth: hci1: command tx timeout [ 91.795035][ T4975] XFS (loop3): Ending clean mount [ 91.805636][ T4975] XFS (loop3): Quotacheck needed: Please wait. [ 91.852600][ T4975] XFS (loop3): Quotacheck: Done. [ 91.973306][ T4988] netlink: 3 bytes leftover after parsing attributes in process `syz.2.99'. [ 92.138556][ T4732] device veth1_macvtap left promiscuous mode [ 92.141707][ T4732] device veth0_macvtap left promiscuous mode [ 92.173935][ T4732] device veth1_vlan left promiscuous mode [ 92.231885][ T4732] device veth0_vlan left promiscuous mode [ 92.547712][ T4311] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 92.551143][ T4311] Bluetooth: hci2: Injecting HCI hardware error event [ 92.558521][ T4311] Bluetooth: hci2: hardware error 0x00 [ 92.740844][ T4990] loop2: detected capacity change from 0 to 512 [ 92.763736][ T4990] EXT4-fs: Ignoring removed orlov option [ 92.822958][ T4990] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.827495][ T4990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 92.829864][ T4990] System zones: 1-12 [ 92.833729][ T4990] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.100: casefold flag without casefold feature [ 92.837423][ T4990] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.100: couldn't read orphan inode 15 (err -117) [ 92.840539][ T4990] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.268135][ T47] Bluetooth: hci4: command tx timeout [ 94.269669][ T4302] Bluetooth: hci0: command tx timeout [ 94.279295][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 94.600520][ T4308] XFS (loop3): Unmounting Filesystem [ 94.880580][ T5000] loop2: detected capacity change from 0 to 8192 [ 94.907563][ T5000] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.229639][ T4732] team0 (unregistering): Port device team_slave_1 removed [ 96.480273][ T4311] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 96.968754][ T4732] team0 (unregistering): Port device team_slave_0 removed [ 97.051183][ T5010] loop2: detected capacity change from 0 to 512 [ 97.076742][ T5010] ext3: Unknown parameter '"' [ 97.398170][ T5014] loop3: detected capacity change from 0 to 256 [ 99.362016][ T4732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.496131][ T5025] loop2: detected capacity change from 0 to 8 [ 99.624935][ T5025] SQUASHFS error: Unknown inode type 511 in squashfs_iget! [ 99.928827][ T4732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.141639][ T5027] loop3: detected capacity change from 0 to 2048 [ 100.152365][ T5027] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.181934][ T5027] syz.3.108: attempt to access beyond end of device [ 100.181934][ T5027] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 100.187091][ T5028] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.377145][ T5030] netlink: 104 bytes leftover after parsing attributes in process `syz.2.109'. [ 100.600096][ T4311] Bluetooth: hci3: SCO packet for unknown connection handle 137 [ 102.616503][ T5047] loop3: detected capacity change from 0 to 4096 [ 104.835458][ T5057] binder: 5055:5057 ERROR: BC_REGISTER_LOOPER called without request [ 104.838043][ T5057] binder: 5057 RLIMIT_NICE not set [ 104.899679][ T5058] binder: 5055:5058 tried to acquire reference to desc 0, got 1 instead [ 104.902526][ T5057] binder: 5057 RLIMIT_NICE not set [ 104.906703][ T5057] syz.3.115 uses obsolete (PF_INET,SOCK_PACKET) [ 105.431977][ T4732] bond0 (unregistering): Released all slaves [ 105.656527][ T4289] binder: release 5055:5058 transaction 5 out, still active [ 105.658898][ T4289] binder: undelivered TRANSACTION_COMPLETE [ 105.690309][ T4845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.757847][ T22] binder: release 5055:5057 transaction 5 in, still active [ 105.760480][ T22] binder: send failed reply for transaction 5, target dead [ 105.785511][ T4845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.814884][ T5062] loop3: detected capacity change from 0 to 1024 [ 105.827297][ T4845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.854818][ T5062] hfsplus: unable to parse mount options [ 105.933707][ T4845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.947199][ T5062] loop3: detected capacity change from 0 to 512 [ 106.043029][ T5068] loop2: detected capacity change from 0 to 2048 [ 106.068039][ T5062] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.106764][ T5062] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.116: Directory hole found for htree leaf block 0 [ 106.141945][ T5068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.169044][ T4865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.169746][ T5062] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.116: Directory hole found for htree leaf block 0 [ 106.333426][ T4845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.343977][ T4845] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.383607][ T5079] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.116: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 106.728284][ T4865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.148044][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.151195][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.153857][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.165496][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.168156][ T4630] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.170167][ T4630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.174842][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.177872][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.180461][ T4630] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.182717][ T4630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.185268][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.188050][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.190954][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.198300][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.201961][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.211303][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 107.213386][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.216532][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.219161][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.239573][ T4845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.242409][ T4845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.279752][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 107.324677][ T5091] loop2: detected capacity change from 0 to 16 [ 107.326823][ T5091] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 107.388762][ T4865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.504019][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.504607][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.505175][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.505555][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.505990][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.808716][ T4865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.265732][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.267962][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.296706][ T4845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.575588][ T5114] loop3: detected capacity change from 0 to 256 [ 108.607393][ T4870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.635296][ T4470] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.671761][ T5113] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 108.786598][ T4870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.848645][ T27] audit: type=1326 audit(107.455:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.3.121" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89499e8 code=0x0 [ 108.957412][ T4870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.070616][ T4870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.145652][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.150912][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.268940][ T4845] device veth0_vlan entered promiscuous mode [ 110.333326][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.336568][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.366642][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.370061][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.408810][ T4845] device veth1_vlan entered promiscuous mode [ 110.418762][ T5129] loop3: detected capacity change from 0 to 256 [ 110.641251][ T4870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.689801][ T4870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.732314][ T4870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.976607][ T4870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.721208][ T4845] device veth0_macvtap entered promiscuous mode [ 111.726089][ T4845] device veth1_macvtap entered promiscuous mode [ 111.758172][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.760953][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.763817][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.829503][ T5141] loop2: detected capacity change from 0 to 256 [ 111.859291][ T5141] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 111.882573][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.902205][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.906957][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.911217][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.002601][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.005306][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.007947][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.010712][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.036015][ T4845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.065680][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.070712][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.073512][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.189427][ T27] audit: type=1326 audit(110.607:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5139 comm="syz.3.128" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa89499e8 code=0x0 [ 112.871386][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.874489][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.880700][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.886909][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.893011][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.895911][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.898575][ T4845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.912798][ T4845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.920694][ T4845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.936559][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.942378][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.133292][ T4845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.135920][ T4845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.138278][ T4845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.140621][ T4845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.145076][ T4865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.179875][ T4865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.341046][ T5154] loop2: detected capacity change from 0 to 1764 [ 114.027649][ T4865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.073093][ T4865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.841534][ T5163] loop3: detected capacity change from 0 to 512 [ 115.178395][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.419766][ T4870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.440687][ T4870] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.463617][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.466588][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.469451][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.471133][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 115.472262][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.475897][ T4739] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.477981][ T4739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.490633][ T4722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.498534][ T4722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.532280][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.535130][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.560543][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.564006][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.566481][ T4739] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.568433][ T4739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.570701][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.578662][ T4865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.902479][ T4739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.904773][ T4739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.906789][ T4865] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.910655][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.913591][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.917726][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.920405][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.983150][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.986251][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.991063][ T4752] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.992998][ T4752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.995443][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.007949][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.013722][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.016733][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.019490][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.022569][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.024523][ T4752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.027018][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.030145][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.404404][ T5179] loop2: detected capacity change from 0 to 128 [ 116.426585][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.440780][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.448089][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.452534][ T5179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 116.454122][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.464698][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.467700][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.473312][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.475924][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.479594][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.482830][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.488847][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.491584][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.559667][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.598225][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.604757][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.614171][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.618200][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.628034][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.751032][ T5189] loop4: detected capacity change from 0 to 128 [ 116.810414][ T5189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.177940][ T4750] device hsr_slave_0 left promiscuous mode [ 117.219868][ T4750] device hsr_slave_1 left promiscuous mode [ 117.264068][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 117.326926][ T5196] loop3: detected capacity change from 0 to 2048 [ 117.358278][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.365080][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.377053][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.379278][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.391449][ T5196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 117.413371][ T4750] bridge0: port 3(team0) entered disabled state [ 117.477135][ T4750] device bridge_slave_1 left promiscuous mode [ 117.478969][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.686931][ T5203] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 117.812232][ T4750] device bridge_slave_0 left promiscuous mode [ 117.834137][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.089678][ T4750] device hsr_slave_0 left promiscuous mode [ 118.114420][ T4845] EXT4-fs (loop4): unmounting filesystem. [ 118.143349][ T4750] device hsr_slave_1 left promiscuous mode [ 118.245606][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.247840][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.265403][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.268077][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.274211][ T4750] device bridge_slave_1 left promiscuous mode [ 118.276074][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.343343][ T4750] device bridge_slave_0 left promiscuous mode [ 118.345212][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.608579][ T5211] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.612034][ T5211] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 118.620100][ T4750] device veth1_macvtap left promiscuous mode [ 118.621867][ T4750] device veth0_macvtap left promiscuous mode [ 118.623512][ T4750] device veth1_vlan left promiscuous mode [ 118.628266][ T4750] device veth0_vlan left promiscuous mode [ 118.744422][ T4750] device veth1_macvtap left promiscuous mode [ 118.746327][ T4750] device veth0_macvtap left promiscuous mode [ 118.748350][ T4750] device veth1_vlan left promiscuous mode [ 118.750095][ T4750] device veth0_vlan left promiscuous mode [ 119.436176][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 120.415113][ T5218] loop2: detected capacity change from 0 to 1024 [ 120.481661][ T5220] loop3: detected capacity change from 0 to 2048 [ 120.544424][ T5220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.444005][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 121.600612][ T5231] loop3: detected capacity change from 0 to 512 [ 121.640985][ T5231] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 121.644006][ T5231] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 121.647836][ T5231] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.143: Failed to acquire dquot type 0 [ 121.658824][ T5231] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 121.661657][ T5231] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 121.664188][ T5231] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.143: Failed to acquire dquot type 0 [ 121.671730][ T5231] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 121.674900][ T5231] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 121.680882][ T5231] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.143: Failed to acquire dquot type 0 [ 121.686340][ T5231] EXT4-fs (loop3): 1 orphan inode deleted [ 121.699162][ T5231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.711003][ T5231] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 121.714093][ T5231] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 121.716637][ T5231] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.143: Failed to acquire dquot type 0 [ 121.746056][ T5231] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 121.749002][ T5231] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 121.751454][ T5231] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.143: Failed to acquire dquot type 0 [ 122.914415][ T4308] EXT4-fs (loop3): unmounting filesystem. [ 122.950976][ T4750] device team_slave_1 left promiscuous mode [ 122.959321][ T4750] team0 (unregistering): Port device team_slave_1 removed [ 123.296182][ T4750] device team_slave_0 left promiscuous mode [ 123.315964][ T4750] team0 (unregistering): Port device team_slave_0 removed [ 123.720010][ T4750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.810838][ T5247] loop2: detected capacity change from 0 to 128 [ 123.833958][ T5247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 123.965699][ T4750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.678386][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 124.846962][ T5253] loop2: detected capacity change from 0 to 128 [ 124.871714][ T5253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.691091][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 126.496854][ T4750] bond0 (unregistering): Released all slaves [ 128.554688][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.556877][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.832546][ T47] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.838919][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.841787][ T47] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.844275][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.848825][ T47] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 129.852048][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.958568][ T5280] loop2: detected capacity change from 0 to 512 [ 129.979504][ T5280] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 129.982694][ T5280] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 129.986567][ T5280] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.155: Failed to acquire dquot type 0 [ 129.990302][ T5280] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 129.992843][ T5280] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 129.996151][ T5280] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.155: Failed to acquire dquot type 0 [ 130.001255][ T5280] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 130.003974][ T5280] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 130.007287][ T5280] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.155: Failed to acquire dquot type 0 [ 130.026674][ T5280] EXT4-fs (loop2): 1 orphan inode deleted [ 130.028248][ T5280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.050644][ T5280] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 130.053516][ T5280] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 130.056095][ T5280] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.155: Failed to acquire dquot type 0 [ 130.060573][ T5280] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 130.062972][ T5280] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 130.065371][ T5280] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.155: Failed to acquire dquot type 0 [ 130.341557][ T4750] team0 (unregistering): Port device team_slave_1 removed [ 130.597025][ T4750] team0 (unregistering): Port device team_slave_0 removed [ 130.853402][ T4750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.051077][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 131.108816][ T4750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.145666][ T5288] loop2: detected capacity change from 0 to 128 [ 131.158933][ T5288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.028001][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 132.057974][ T47] Bluetooth: hci5: command tx timeout [ 132.204029][ T5293] loop2: detected capacity change from 0 to 128 [ 132.219283][ T5293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 133.071734][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 133.739912][ T4750] bond0 (unregistering): Released all slaves [ 133.997581][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.999841][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.055539][ T4870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.126314][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.129211][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.232000][ T4870] device veth0_vlan entered promiscuous mode [ 134.261295][ T4865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.271704][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.273986][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.276058][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.281767][ T47] Bluetooth: hci5: command tx timeout [ 134.293032][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.338541][ T4870] device veth1_vlan entered promiscuous mode [ 134.347343][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.349636][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.352200][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.366101][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.376619][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.380439][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.384412][ T4314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.387540][ T4314] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 134.391476][ T4314] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 134.420218][ T4865] device veth0_vlan entered promiscuous mode [ 134.453470][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.457533][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.460383][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.496005][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.503501][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.543234][ T4865] device veth1_vlan entered promiscuous mode [ 134.549176][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.551774][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.553928][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.556478][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.729244][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.733096][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.742556][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.750733][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.912669][ T4870] device veth0_macvtap entered promiscuous mode [ 134.917027][ T4865] device veth0_macvtap entered promiscuous mode [ 134.921200][ T4865] device veth1_macvtap entered promiscuous mode [ 134.939011][ T4870] device veth1_macvtap entered promiscuous mode [ 134.952672][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.959303][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.961867][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.964464][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.970304][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.973166][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.990379][ T4870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.698934][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.702225][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.710057][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.713257][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.725703][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.738853][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.741589][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.744288][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.770134][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.780400][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.783170][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.785799][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.788532][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.809936][ T4870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.813170][ T4870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.832587][ T4870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.834831][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.838320][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.841060][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 135.855043][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.870727][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.873178][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.877858][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.891851][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.897596][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.913101][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.042445][ T5304] chnl_net:caif_netlink_parms(): no params data found [ 136.049555][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.052490][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.055205][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.067008][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.069718][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.072544][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.075095][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.087226][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.091462][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.095253][ T4870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.097381][ T4870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.109498][ T4870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.112207][ T4870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.170990][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.185373][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.190351][ T4865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.192156][ T4865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.194314][ T4865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.204952][ T4865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.260881][ T5274] chnl_net:caif_netlink_parms(): no params data found [ 136.403947][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.406104][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.409988][ T5304] device bridge_slave_0 entered promiscuous mode [ 136.464403][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.466463][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.469730][ T5304] device bridge_slave_1 entered promiscuous mode [ 136.505342][ T4314] Bluetooth: hci5: command tx timeout [ 136.548097][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.557857][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.565375][ T5274] device bridge_slave_0 entered promiscuous mode [ 136.574954][ T5304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.590791][ T4311] Bluetooth: hci6: command tx timeout [ 136.620126][ T5304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.632879][ T382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.635321][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.637435][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.641727][ T5274] device bridge_slave_1 entered promiscuous mode [ 136.662943][ T382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.697767][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.700079][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.702380][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.707881][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.767745][ T5304] team0: Port device team_slave_0 added [ 136.771335][ T5304] team0: Port device team_slave_1 added [ 136.785319][ T5274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.815543][ T5274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.829413][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.831701][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.847677][ T5304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.851601][ T382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.854611][ T4732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.856974][ T4732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.862632][ T382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.901084][ T5274] team0: Port device team_slave_0 added [ 136.906023][ T5274] team0: Port device team_slave_1 added [ 136.924096][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.927052][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.940748][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.942749][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.954176][ T5304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.142466][ T5274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.144473][ T5274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.157258][ T5274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.250093][ T5327] loop0: detected capacity change from 0 to 2048 [ 137.539459][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 138.008146][ T5274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.010538][ T5274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.042740][ T5274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.199031][ T5304] device hsr_slave_0 entered promiscuous mode [ 138.245490][ T5333] loop1: detected capacity change from 0 to 512 [ 138.258787][ T5304] device hsr_slave_1 entered promiscuous mode [ 138.489892][ T5333] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 138.492742][ T5333] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 138.500660][ T5333] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.163: Failed to acquire dquot type 0 [ 138.505526][ T5333] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 138.512352][ T5333] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 138.515445][ T5333] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.163: Failed to acquire dquot type 0 [ 138.520236][ T5274] device hsr_slave_0 entered promiscuous mode [ 138.537398][ T5333] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 138.543810][ T5333] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 138.546538][ T5333] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.163: Failed to acquire dquot type 0 [ 138.552711][ T5274] device hsr_slave_1 entered promiscuous mode [ 138.554302][ T5333] EXT4-fs (loop1): 1 orphan inode deleted [ 138.555987][ T5333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.578096][ T5333] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 138.581282][ T5333] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 138.584130][ T5333] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.163: Failed to acquire dquot type 0 [ 138.588561][ T5333] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 138.593421][ T5274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.595464][ T5274] Cannot create hsr debugfs directory [ 138.608057][ T5346] loop0: detected capacity change from 0 to 128 [ 138.631675][ T5333] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 138.635585][ T5346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 138.658879][ T5333] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.163: Failed to acquire dquot type 0 [ 138.675579][ T5345] loop2: detected capacity change from 0 to 128 [ 138.739621][ T4311] Bluetooth: hci5: command tx timeout [ 138.825252][ T4314] Bluetooth: hci6: command tx timeout [ 138.846910][ T5345] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.374000][ T4750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.469387][ T4870] EXT4-fs (loop0): unmounting filesystem. [ 139.511128][ T4750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.563545][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 139.899672][ T5304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.387957][ T5304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.538139][ T4750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.672810][ T4865] EXT4-fs (loop1): unmounting filesystem. [ 141.085841][ T5304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.386469][ T4314] Bluetooth: hci6: command tx timeout [ 141.523024][ T4750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.601978][ T5304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.689127][ T5371] input: syz0 as /devices/virtual/input/input6 [ 142.648993][ T5394] loop1: detected capacity change from 0 to 128 [ 142.679365][ T5394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 142.779405][ T4865] EXT4-fs (loop1): unmounting filesystem. [ 143.183958][ T5403] loop0: detected capacity change from 0 to 128 [ 143.616725][ T4311] Bluetooth: hci6: command tx timeout [ 143.645629][ T5403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 143.747484][ T5410] loop1: detected capacity change from 0 to 512 [ 143.832719][ T5410] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.177: Failed to acquire dquot type 0 [ 143.846472][ T5410] __quota_error: 2 callbacks suppressed [ 143.846488][ T5410] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 143.875237][ T5410] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 143.878537][ T4870] EXT4-fs (loop0): unmounting filesystem. [ 143.880718][ T5410] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.177: Failed to acquire dquot type 0 [ 143.939806][ T5410] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 143.942674][ T5410] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 143.945323][ T5410] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.177: Failed to acquire dquot type 0 [ 144.071111][ T5410] EXT4-fs (loop1): 1 orphan inode deleted [ 144.072671][ T5410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.083068][ T5274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.118248][ T5410] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 144.121138][ T5410] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 144.123485][ T5410] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.177: Failed to acquire dquot type 0 [ 144.140792][ T5274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.150131][ T5410] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 144.152778][ T5410] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 144.166512][ T5410] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.177: Failed to acquire dquot type 0 [ 144.413533][ T5274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.450066][ T5274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.777514][ T5304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.965930][ T5304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.006081][ T5304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.038949][ T5304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.321745][ T4865] EXT4-fs (loop1): unmounting filesystem. [ 146.408936][ T5274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.868859][ T5304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.893275][ T5304] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.948012][ T5304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.954914][ T5304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.101942][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.113785][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.116552][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.123897][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.130027][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.131983][ T4690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.136129][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.139051][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.141347][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.143415][ T4690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.146293][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.149430][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.152427][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.157482][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.160710][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.165238][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.168439][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.171560][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.174753][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.177756][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.181512][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.184363][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.186889][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.494696][ T5474] loop2: detected capacity change from 0 to 128 [ 147.792548][ T5474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.282551][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 148.343924][ T5274] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.375226][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.377824][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.397271][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.400380][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.402941][ T4732] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.405014][ T4732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.408209][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.411075][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.413640][ T4732] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.415474][ T4732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.419132][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.573154][ T5484] loop2: detected capacity change from 0 to 128 [ 149.366538][ T5484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 149.415669][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.417965][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.424542][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.431198][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.437718][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.453311][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.470562][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.488090][ T5490] input: syz0 as /devices/virtual/input/input8 [ 149.551399][ T4750] device hsr_slave_0 left promiscuous mode [ 149.605119][ T4750] device hsr_slave_1 left promiscuous mode [ 149.633747][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 149.691296][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.693452][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.696064][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.713809][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.718285][ T4750] device bridge_slave_1 left promiscuous mode [ 149.722075][ T5493] loop2: detected capacity change from 0 to 512 [ 149.736181][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.767590][ T5493] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 149.770295][ T5493] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 149.774431][ T5493] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.189: Failed to acquire dquot type 0 [ 149.777980][ T5493] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 149.780422][ T4750] device bridge_slave_0 left promiscuous mode [ 149.780807][ T5493] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 149.782525][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.785046][ T5493] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.189: Failed to acquire dquot type 0 [ 149.790541][ T5493] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 149.793073][ T5493] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 149.799465][ T5493] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.189: Failed to acquire dquot type 0 [ 149.803183][ T5493] EXT4-fs (loop2): 1 orphan inode deleted [ 149.814978][ T5493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.824906][ T5493] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 149.828507][ T5493] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 149.831061][ T5493] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.189: Failed to acquire dquot type 0 [ 149.837751][ T4750] device hsr_slave_0 left promiscuous mode [ 149.847853][ T5493] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 149.850771][ T5493] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 149.853259][ T5493] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.189: Failed to acquire dquot type 0 [ 149.890289][ T4750] device hsr_slave_1 left promiscuous mode [ 149.986021][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.988355][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.990923][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.993023][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.995651][ T4750] device bridge_slave_1 left promiscuous mode [ 149.998912][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.052010][ T4750] device bridge_slave_0 left promiscuous mode [ 150.053714][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.360813][ T4750] device veth1_macvtap left promiscuous mode [ 150.363372][ T4750] device veth0_macvtap left promiscuous mode [ 150.365365][ T4750] device veth1_vlan left promiscuous mode [ 150.367271][ T4750] device veth0_vlan left promiscuous mode [ 150.478287][ T4750] device veth1_macvtap left promiscuous mode [ 150.480906][ T4750] device veth0_macvtap left promiscuous mode [ 150.482847][ T4750] device veth1_vlan left promiscuous mode [ 150.484760][ T4750] device veth0_vlan left promiscuous mode [ 150.701942][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 151.870742][ T5512] loop2: detected capacity change from 0 to 128 [ 151.919824][ T5512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.993238][ T4306] EXT4-fs (loop2): unmounting filesystem. [ 153.915755][ T5533] loop0: detected capacity change from 0 to 128 [ 153.955792][ T5533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 154.229040][ T4750] team0 (unregistering): Port device team_slave_1 removed [ 154.437421][ T4750] team0 (unregistering): Port device team_slave_0 removed [ 154.626998][ T4750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.750901][ T4870] EXT4-fs (loop0): unmounting filesystem. [ 154.861650][ T4750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.040228][ T5545] loop0: detected capacity change from 0 to 512 [ 157.076933][ T5545] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.079701][ T5545] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 157.082191][ T5545] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.200: Failed to acquire dquot type 0 [ 157.089382][ T5545] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.092041][ T5545] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 157.094662][ T5545] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.200: Failed to acquire dquot type 0 [ 157.102177][ T5545] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.105011][ T5545] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 157.107655][ T5545] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.200: Failed to acquire dquot type 0 [ 157.111168][ T5545] EXT4-fs (loop0): 1 orphan inode deleted [ 157.112605][ T5545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.120211][ T5545] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.122824][ T5545] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 157.132614][ T5545] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.200: Failed to acquire dquot type 0 [ 157.136639][ T5545] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 157.141955][ T5545] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 157.144303][ T5545] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.200: Failed to acquire dquot type 0 [ 157.760811][ T4750] bond0 (unregistering): Released all slaves [ 157.983585][ T4870] EXT4-fs (loop0): unmounting filesystem. [ 160.092752][ T4750] team0 (unregistering): Port device team_slave_1 removed [ 160.222106][ T5561] loop0: detected capacity change from 0 to 128 [ 160.227309][ T5561] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.264087][ T4750] team0 (unregistering): Port device team_slave_0 removed [ 160.433337][ T4750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.656695][ T4750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.054235][ T4870] EXT4-fs (loop0): unmounting filesystem. [ 161.154718][ T4311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.158558][ T4311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.161588][ T4311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.164992][ T4311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.168102][ T4311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.177517][ T4311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.310447][ T5571] input: syz0 as /devices/virtual/input/input10 [ 163.259229][ T4750] bond0 (unregistering): Released all slaves [ 163.360424][ T4311] Bluetooth: hci1: command tx timeout [ 163.366295][ T4311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.371630][ T4311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.375070][ T4311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.377855][ T4311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.381377][ T4311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.383575][ T4311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.485334][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.488698][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.491430][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.549217][ T5304] device veth0_vlan entered promiscuous mode [ 163.566740][ T5304] device veth1_vlan entered promiscuous mode [ 163.586494][ T5304] device veth0_macvtap entered promiscuous mode [ 163.590791][ T5304] device veth1_macvtap entered promiscuous mode [ 163.675661][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.678600][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.702413][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.705269][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.707850][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.710615][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.725021][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.727912][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.730793][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.733620][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.737851][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.745628][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.748434][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.756439][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.766970][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.780891][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.783583][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.786212][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.791753][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.794588][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.797385][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.806361][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.810038][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.829803][ T5274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.836832][ T5274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.842007][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.845847][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.848496][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.851300][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.853919][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.856845][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.860566][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.870138][ T5304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.872568][ T5304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.878204][ T5304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.880546][ T5304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.884709][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.887527][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.892404][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.896292][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.124650][ T4756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.127076][ T4756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.151518][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.197020][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.199196][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.207617][ T4739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.210385][ T4739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.217667][ T5567] chnl_net:caif_netlink_parms(): no params data found [ 164.225414][ T5274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.231305][ T5573] chnl_net:caif_netlink_parms(): no params data found [ 164.238386][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.378587][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.382472][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.385429][ T5567] device bridge_slave_0 entered promiscuous mode [ 164.440187][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.442156][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.445451][ T5573] device bridge_slave_0 entered promiscuous mode [ 164.460222][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.478782][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.481479][ T5573] device bridge_slave_1 entered promiscuous mode [ 164.522541][ T5573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.540576][ T5573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.552940][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.554956][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.566611][ T5567] device bridge_slave_1 entered promiscuous mode [ 165.469523][ T5567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.474203][ T5567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.537565][ T5567] team0: Port device team_slave_0 added [ 165.543954][ T5573] team0: Port device team_slave_0 added [ 165.548529][ T5573] team0: Port device team_slave_1 added [ 165.568515][ T5567] team0: Port device team_slave_1 added [ 165.586876][ T4314] Bluetooth: hci3: command tx timeout [ 165.589187][ T4314] Bluetooth: hci1: command tx timeout [ 165.603388][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.607235][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.614628][ T5573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.633147][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.635113][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.643941][ T5567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.657672][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.683186][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.692253][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.694081][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.704621][ T5573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.708311][ T5567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.710148][ T5567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.722651][ T5567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.799176][ T5567] device hsr_slave_0 entered promiscuous mode [ 165.840463][ T5567] device hsr_slave_1 entered promiscuous mode [ 165.884265][ T5567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.886247][ T5567] Cannot create hsr debugfs directory [ 165.887779][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 165.890809][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.903686][ T5274] device veth0_vlan entered promiscuous mode [ 165.943472][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.946270][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.972795][ T5274] device veth1_vlan entered promiscuous mode [ 166.023624][ T5573] device hsr_slave_0 entered promiscuous mode [ 166.065122][ T5573] device hsr_slave_1 entered promiscuous mode [ 166.116742][ T5573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.119080][ T5573] Cannot create hsr debugfs directory [ 166.232387][ T5274] device veth0_macvtap entered promiscuous mode [ 166.259349][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 166.262113][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 166.269983][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 166.276287][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.292038][ T5274] device veth1_macvtap entered promiscuous mode [ 166.302803][ T5274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.305748][ T5274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.308324][ T5274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.333112][ T5274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.336181][ T5274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.338958][ T5274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.341484][ T5274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.353214][ T5274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.366568][ T5274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.384579][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 166.387828][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 166.390565][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 166.401520][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.412193][ T5274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.415158][ T5274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.428386][ T5274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.431264][ T5274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.433861][ T5274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.436585][ T5274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.460123][ T5274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.463887][ T5274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.467792][ T5274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.477973][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 166.480914][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.496754][ T5274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.499198][ T5274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.501525][ T5274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.513953][ T5274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.688577][ T5567] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.833503][ T5567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.946711][ T5608] loop0: detected capacity change from 0 to 512 [ 166.974581][ T5608] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 166.977080][ T5608] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 166.979592][ T5608] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.209: Failed to acquire dquot type 0 [ 166.983175][ T5608] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 166.986160][ T5608] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 166.988290][ T5608] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.209: Failed to acquire dquot type 0 [ 167.001434][ T5608] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 167.004294][ T5608] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 167.011664][ T5608] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.209: Failed to acquire dquot type 0 [ 167.015521][ T5608] EXT4-fs (loop0): 1 orphan inode deleted [ 167.021977][ T5608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.066017][ T5608] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 167.068913][ T5608] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 167.077718][ T5608] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.209: Failed to acquire dquot type 0 [ 167.085687][ T5608] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 167.088216][ T5608] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 167.096353][ T5608] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.209: Failed to acquire dquot type 0 [ 167.227605][ T5567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.238536][ T4708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.241187][ T4708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.246178][ T4722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.390116][ T4711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.393568][ T4711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.405162][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 167.617084][ T5567] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.807459][ T4311] Bluetooth: hci1: command tx timeout [ 167.810367][ T4314] Bluetooth: hci3: command tx timeout [ 167.988031][ T4870] EXT4-fs (loop0): unmounting filesystem. [ 168.145864][ T5626] loop3: detected capacity change from 0 to 128 [ 168.164251][ T5573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.200337][ T5626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.336089][ T5573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.472036][ T5573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.622940][ T5573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.965681][ T5304] EXT4-fs (loop3): unmounting filesystem. [ 169.855054][ T5567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.883254][ T5567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.997332][ T5567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.031172][ T47] Bluetooth: hci3: command tx timeout [ 170.032847][ T47] Bluetooth: hci1: command tx timeout [ 170.064675][ T5567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.187495][ T5637] input: syz0 as /devices/virtual/input/input11 [ 171.220097][ T5573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.344768][ T4750] device hsr_slave_0 left promiscuous mode [ 171.388942][ T4750] device hsr_slave_1 left promiscuous mode [ 171.485054][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.487140][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.490300][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.492441][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.495123][ T4750] device bridge_slave_1 left promiscuous mode [ 171.500692][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.541479][ T4750] device bridge_slave_0 left promiscuous mode [ 171.545767][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.709571][ T4750] device veth1_macvtap left promiscuous mode [ 171.711598][ T4750] device veth0_macvtap left promiscuous mode [ 171.713582][ T4750] device veth1_vlan left promiscuous mode [ 171.715664][ T4750] device veth0_vlan left promiscuous mode [ 172.255699][ T4314] Bluetooth: hci3: command tx timeout [ 172.357632][ T5655] loop0: detected capacity change from 0 to 256 [ 172.394060][ T4470] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.457404][ T27] audit: type=1326 audit(2214.974:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.219" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff943499e8 code=0x0 [ 173.279304][ T5658] loop3: detected capacity change from 0 to 512 [ 173.331969][ T5658] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 173.344063][ T5658] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 173.346918][ T5658] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.220: Failed to acquire dquot type 0 [ 173.351137][ T5658] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 173.354034][ T5658] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 173.357151][ T5658] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.220: Failed to acquire dquot type 0 [ 173.362197][ T5658] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 173.364863][ T5658] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 173.372112][ T5658] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.220: Failed to acquire dquot type 0 [ 173.376459][ T5658] EXT4-fs (loop3): 1 orphan inode deleted [ 173.378461][ T5658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.393611][ T5658] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 173.396507][ T5658] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 173.399394][ T5658] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.220: Failed to acquire dquot type 0 [ 173.403415][ T5658] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 173.406081][ T5658] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.220: Failed to acquire dquot type 0 [ 173.420635][ T5665] loop0: detected capacity change from 0 to 128 [ 173.458511][ T5665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 174.130567][ T4750] team0 (unregistering): Port device team_slave_1 removed [ 174.293256][ T4870] EXT4-fs (loop0): unmounting filesystem. [ 174.341243][ T4750] team0 (unregistering): Port device team_slave_0 removed [ 174.946730][ T4750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.253962][ T5304] EXT4-fs (loop3): unmounting filesystem. [ 175.282288][ T4750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.375931][ T5689] input: syz0 as /devices/virtual/input/input12 [ 179.172515][ T4750] bond0 (unregistering): Released all slaves [ 179.400656][ T5573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.464722][ T5573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.526408][ T5573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.976797][ T5567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.995211][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.998168][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.007122][ T5567] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.013362][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.028685][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.031749][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.034376][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.036328][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.066388][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.073935][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.077039][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.091615][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.093593][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.095936][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.109662][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.116464][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.133066][ T5573] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.161897][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.167899][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.172279][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.203062][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.205957][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.216790][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.220027][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.222007][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.224713][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.227326][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.239719][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.241768][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.244809][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.247829][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.250859][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.264377][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.267515][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.302882][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.313201][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.323508][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.332215][ T5567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.335560][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.350921][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.353789][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.357559][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.371897][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.375553][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.387450][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.398080][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.401859][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.422971][ T5573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.426555][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.435100][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.466097][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.708740][ T5567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.723598][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.725909][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.767858][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.780796][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.801140][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.803395][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.816164][ T5573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.823472][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.826697][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.830115][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.832655][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.836487][ T5567] device veth0_vlan entered promiscuous mode [ 180.853665][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.856390][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.103352][ T5697] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.275453][ T5567] device veth1_vlan entered promiscuous mode [ 181.554490][ T5567] device veth0_macvtap entered promiscuous mode [ 181.580888][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.586906][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.594058][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.600905][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.609950][ T5567] device veth1_macvtap entered promiscuous mode [ 181.645328][ T5717] loop4: detected capacity change from 0 to 512 [ 181.684529][ T5715] loop3: detected capacity change from 0 to 128 [ 181.697216][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.699917][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.716005][ T5717] __quota_error: 1 callbacks suppressed [ 181.716020][ T5717] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 181.721073][ T5717] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 181.723584][ T5717] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.231: Failed to acquire dquot type 0 [ 181.724392][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.732450][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.735922][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.738181][ T5717] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 181.740799][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.744025][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.744786][ T5717] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 181.747075][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.755098][ T5715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.761776][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.764490][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.768352][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.774523][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.777265][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.779655][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.782959][ T5717] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.231: Failed to acquire dquot type 0 [ 181.786405][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.791058][ T5573] device veth0_vlan entered promiscuous mode [ 181.798175][ T5717] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 181.799003][ T5573] device veth1_vlan entered promiscuous mode [ 181.807376][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.809903][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.813335][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.816362][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.819032][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.821627][ T5717] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 181.821728][ T5717] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.231: Failed to acquire dquot type 0 [ 181.825006][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.830403][ T5567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.832956][ T5567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.838381][ T5567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.843110][ T5567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.845932][ T5567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.848285][ T5567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.850638][ T5567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.856727][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.860393][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.866394][ T5717] EXT4-fs (loop4): 1 orphan inode deleted [ 181.868088][ T5717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.880106][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.885895][ T5717] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 181.888833][ T5717] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 181.891955][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.895489][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.897845][ T5717] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.231: Failed to acquire dquot type 0 [ 181.939735][ T5722] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 181.944254][ T5722] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 181.946857][ T5722] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.231: Failed to acquire dquot type 0 [ 181.962461][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.965183][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.967941][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.997038][ T5304] EXT4-fs (loop3): unmounting filesystem. [ 182.021507][ T5573] device veth0_macvtap entered promiscuous mode [ 182.059217][ T5573] device veth1_macvtap entered promiscuous mode [ 182.098451][ T4690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.101352][ T4690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.106615][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.110360][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.121535][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.134837][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.137778][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.141531][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.147287][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.149856][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.152692][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.156540][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.159278][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.162007][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.165409][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.169265][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.540273][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.543397][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.607528][ T4708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.615378][ T4708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.656955][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.837515][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.840513][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.842997][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.845687][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.848923][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.851618][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.854220][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.856766][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.859216][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.862124][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.866207][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.873229][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.878484][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.895366][ T5573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.898094][ T5573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.900473][ T5573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.903782][ T5573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.887712][ T5740] loop3: detected capacity change from 0 to 2048 [ 184.909940][ T4708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.912557][ T4708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.953966][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.985661][ T5740] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.007671][ T5746] sched: RT throttling activated [ 187.059866][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.064642][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.076435][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.101917][ T5751] input: syz0 as /devices/virtual/input/input13 [ 187.113987][ T5274] EXT4-fs (loop4): unmounting filesystem. [ 187.401026][ T5304] EXT4-fs (loop3): unmounting filesystem. [ 187.558038][ T5761] loop3: detected capacity change from 0 to 128 [ 187.630145][ T5761] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 187.737545][ T5762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.239'. [ 187.751061][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.799975][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.426607][ T5304] EXT4-fs (loop3): unmounting filesystem. [ 189.435378][ T4750] device hsr_slave_0 left promiscuous mode [ 189.477249][ T4750] device hsr_slave_1 left promiscuous mode [ 189.562910][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.565428][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.587763][ T4750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.593278][ T4750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.599272][ T4750] device bridge_slave_1 left promiscuous mode [ 189.601104][ T4750] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.649316][ T4750] device bridge_slave_0 left promiscuous mode [ 189.651207][ T4750] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.809205][ T4750] device veth1_macvtap left promiscuous mode [ 189.812521][ T4750] device veth0_macvtap left promiscuous mode [ 189.815513][ T4750] device veth1_vlan left promiscuous mode [ 189.818371][ T4750] device veth0_vlan left promiscuous mode [ 192.229432][ T5817] loop4: detected capacity change from 0 to 512 [ 192.301889][ T5817] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 192.304992][ T5817] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 192.307458][ T5817] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.247: Failed to acquire dquot type 0 [ 192.319161][ T5817] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 192.333571][ T5817] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 192.336224][ T5817] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.247: Failed to acquire dquot type 0 [ 192.357781][ T5817] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 192.361148][ T5817] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 192.375095][ T5817] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.247: Failed to acquire dquot type 0 [ 192.379053][ T5817] EXT4-fs (loop4): 1 orphan inode deleted [ 192.380814][ T5817] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.404363][ T5817] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 192.409599][ T5817] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 192.412462][ T5817] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.247: Failed to acquire dquot type 0 [ 192.445119][ T5817] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 192.456198][ T5817] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 192.458734][ T5817] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.247: Failed to acquire dquot type 0 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=1 req=205 state=1 status=67 (errno 9: Bad file descriptor) [ 193.375019][ T4750] team0 (unregistering): Port device team_slave_1 removed [ 193.574221][ T4750] team0 (unregistering): Port device team_slave_0 removed [ 193.796788][ T4750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.074645][ T4750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.235846][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.237775][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.665391][ T4750] bond0 (unregistering): Released all slaves [ 197.256772][ T5817] EXT4-fs (loop4): unmounting filesystem. [ 199.843519][ T4750] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.950751][ T4750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.052617][ T4750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.141603][ T4750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.398349][ T4750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.491219][ T4750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.609656][ T4750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.715915][ T4750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.007987][ T4750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.121097][ T4750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.207285][ T4750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.299384][ T4750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.550300][ T4750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.639050][ T4750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.730460][ T4750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.819338][ T4750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.053084][ T4750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.153165][ T4750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.246572][ T4750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.319847][ T4750] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0