last executing test programs: 4m41.009781128s ago: executing program 4 (id=114): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x500006) 4m40.777498087s ago: executing program 4 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4m38.743785389s ago: executing program 4 (id=122): getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 4m38.637099159s ago: executing program 4 (id=125): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$eJzs271u2lAUwPFj7GKgX7S0HapKRerQLsVAW6Ru7aNQcBGqaaKQBcRA8gJ5hrxfGKIsmULk648oBoNCAIP8/w3Y3HM/zgWudIRkAZBav6QsmmiScd98yBXPSlrSKQHYkql/vZkCSB/92ruWk04EwJZNfouq/S8uRy3Rs2FdENy58XEQz5gz9cPkROS94ce1nOSj9cW5yOdgvFaIDr9yWwph/GkknFXzf/kUrP9MnssLeSlFeSWvpeSv3w7Hv3to+TO7IQAAUkCTyrJ4TIcn6jUvf7uOXVU9I/58V73ceC12/qyK1xfG9Y/x+ZlqfKV14LQX7gPArMzK59+jh+d/PmPJ+QeQnP5g+K/pOPbRDtzk7uczNUU2uKi5C1ve3xtToi3GWmbOx4ZOZV7I/dGsc18j/2Bs9jMcR1vcajrJ79TwVtf9NPhfDEgB67h3aPUHw6/dXrNjd+z/9Wr1Z+PHt1qjbqnK3lpc3wPYX3dlQNKZAAAAAAAAAAAAAACAVb2Rt0mnAAAAAGBLlj4YJIbX8REPGCW9RwAAds5tAAAA//8YBw3V") syz_clone(0x82040200, &(0x7f0000000300)="f703e9bfa19e35776e68a8cbb71a09007d6fbdca094016038069cd30081c71e7766bce65daed1f0b945aac542c8ee0a31b028ed2adc622bbec4af8b32d2647d9056747a1a0b2181d9df3e814a953731f7df9db8f8ddb760a", 0x58, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101800, 0x10c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 4m38.305409127s ago: executing program 4 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 4m35.329643636s ago: executing program 4 (id=145): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0xffffffffffffff52}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 4m34.379177462s ago: executing program 32 (id=145): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}]}, {0xffffffffffffff52}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 3m17.393641292s ago: executing program 0 (id=409): eventfd2(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 3m16.91089818s ago: executing program 3 (id=416): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000340)=ANY=[@ANYRES64=r1], &(0x7f00000003c0)='GPL\x00', 0x5, 0xc7, &(0x7f0000000500)=""/199, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x0, 0x6}) r7 = memfd_create(&(0x7f0000001140)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\x061] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16\x00\x00\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r7, 0x409, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1ab, 0x110, r7, 0x2000) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0) sched_setscheduler(r3, 0x0, &(0x7f00000001c0)=0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x8, 0x0, &(0x7f00007d0000)) 3m14.960560142s ago: executing program 3 (id=422): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) 3m14.806614892s ago: executing program 3 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m14.57764294s ago: executing program 0 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "90737f000000009cf8dc420f2b1e277fffffeb"}) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x82fb}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0xb5, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x7f, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [{0x0, 0xa, "e6b128f1f07453ed8e501a180f87875cfd93599c7b7c7b7d463ebbf31ccd5f74e3a7bd3733a8d38f0021f7f22a63a326918b97acaf2687d503915f0120fc9cea280f423304842e5f2304bc7b1b47d8c6a318e45783"}]}}}}}}, 0x0) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r5, 0xee01, r6) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 3m11.979666991s ago: executing program 3 (id=430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 3m11.82973719s ago: executing program 0 (id=431): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 3m11.488858569s ago: executing program 0 (id=434): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f303160000000000000000000000020009"], 0xb0}, 0x1, 0x7}, 0x0) 3m10.407003924s ago: executing program 0 (id=435): getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x2a02) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f00000000c0)=""/226, 0xe2) 3m10.337603754s ago: executing program 3 (id=438): r0 = syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0xf, 0x1, 0x2, 0x0, 0xe}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000100)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) 3m7.906412955s ago: executing program 3 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 3m7.769718694s ago: executing program 0 (id=442): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 2m52.259056714s ago: executing program 33 (id=442): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 2m52.171332573s ago: executing program 34 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 38.608875268s ago: executing program 1 (id=937): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 38.390081757s ago: executing program 1 (id=938): r0 = socket(0x1, 0x80802, 0x0) r1 = epoll_create1(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000900c0000000000000000000118010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r1, &(0x7f0000000180)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r0, 0x0) 38.302764906s ago: executing program 6 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0xe020600) unshare(0x4020000) 38.272264186s ago: executing program 1 (id=940): syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2055891, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000050000009f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) 38.145994195s ago: executing program 1 (id=941): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f0000000740)={[{@bh}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x3000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 37.645814683s ago: executing program 1 (id=946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000340)=ANY=[@ANYRES64=r1], &(0x7f00000003c0)='GPL\x00', 0x5, 0xc7, &(0x7f0000000500)=""/199, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x0, 0x6}) r6 = memfd_create(&(0x7f0000001140)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\x061] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16\x00\x00\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r6, 0x409, 0x19) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1ab, 0x110, r6, 0x2000) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0) sched_setscheduler(r3, 0x0, &(0x7f00000001c0)=0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x8, 0x0, &(0x7f00007d0000)) 37.529559652s ago: executing program 6 (id=949): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendto$packet(r0, &(0x7f0000000240)="163c8f3f8a5d66571e583e7c88a8", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 37.399518712s ago: executing program 6 (id=951): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlockall(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 36.93820021s ago: executing program 1 (id=955): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 36.639519038s ago: executing program 35 (id=955): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 35.909935245s ago: executing program 6 (id=958): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x404, &(0x7f0000000740)={[{@bh}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@minixdf}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x3000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 35.481610703s ago: executing program 6 (id=960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 34.62593815s ago: executing program 6 (id=964): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x12800, 0x0) r1 = openat(r0, &(0x7f0000000000)='.\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/4096, 0x1000) gettid() setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000002b00)=0x7, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000002c80)='./file2\x00', 0x0, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r4 = eventfd2(0x0, 0x0) ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="87000000000000000000a88a475c065e0cf63900000000000a8085d800", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002bc0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r4, @ANYRES32=r4, @ANYRES8, @ANYRES64=0x0, @ANYBLOB="4f3436d70b2f4a9f76d018f65af92d860f28c5377c3e505d8247a2842c8118c5e86bafca62f82b429fda96a97d400f218d6361e3da65"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000a40)={0x2020}, 0x2) 34.420620348s ago: executing program 36 (id=964): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x12800, 0x0) r1 = openat(r0, &(0x7f0000000000)='.\x00', 0x0, 0x0) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/4096, 0x1000) gettid() setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000002b00)=0x7, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000002c80)='./file2\x00', 0x0, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r4 = eventfd2(0x0, 0x0) ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="87000000000000000000a88a475c065e0cf63900000000000a8085d800", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002bc0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r4, @ANYRES32=r4, @ANYRES8, @ANYRES64=0x0, @ANYBLOB="4f3436d70b2f4a9f76d018f65af92d860f28c5377c3e505d8247a2842c8118c5e86bafca62f82b429fda96a97d400f218d6361e3da65"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000a40)={0x2020}, 0x2) 6.55365912s ago: executing program 8 (id=956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 6.42630057s ago: executing program 8 (id=1060): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1ea) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x9}}, {@noblock_validity}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") 5.998176437s ago: executing program 8 (id=1062): r0 = socket$inet6(0x10, 0x2, 0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x16}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) 5.785816187s ago: executing program 8 (id=1063): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x5004, 0x8, '9P2000.u'}, 0x15) r2 = socket$netlink(0x10, 0x3, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r4 = dup(r1) socket$xdp(0x2c, 0x3, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0xfffffffc, 0xb09a547, 0xfffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0x50) mount$9p_fd(0x0, &(0x7f0000004280)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 5.551398786s ago: executing program 8 (id=1066): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 4.294064079s ago: executing program 8 (id=1074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r1, r2, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/27, 0x1b}], 0x2) ftruncate(r0, 0xc17a) 4.060474228s ago: executing program 37 (id=1074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r1, r2, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000340)=""/48, 0x30}, {&(0x7f0000000380)=""/27, 0x1b}], 0x2) ftruncate(r0, 0xc17a) 2.508682791s ago: executing program 9 (id=1089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) write$ppp(r2, &(0x7f00000010c0)="1e00", 0x2) 2.26590034s ago: executing program 9 (id=1092): set_mempolicy(0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000000480)={0x21000000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) 2.069170349s ago: executing program 9 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r3, &(0x7f00000bd000), 0x100, 0x0) 1.926237218s ago: executing program 9 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe5, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) 1.785902518s ago: executing program 9 (id=1101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x18, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 1.785565108s ago: executing program 7 (id=1103): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000bdff5aa86e1eace0000000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x8f, &(0x7f00000005c0)=""/143, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x80100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcbf5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x2, r1}, 0x38) 1.636228747s ago: executing program 5 (id=1104): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{}, {@nobh}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@nodelalloc}, {@journal_async_commit}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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") 1.573945947s ago: executing program 9 (id=1105): socket$inet_dccp(0x2, 0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb9, 0xd, 0x4, 0x0, 0x4}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000340)=0x402, 0x4) 1.486111207s ago: executing program 5 (id=1106): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\\///\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 1.177987796s ago: executing program 5 (id=1113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.090571485s ago: executing program 7 (id=1114): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000100)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000400)={0x0, 0xfffffffa, 0xb8, 0x9, 0x1, "12c72b8e4bfb7015579958cb16377c414a42f0"}) 1.083050095s ago: executing program 5 (id=1115): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4004, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) 914.759334ms ago: executing program 2 (id=1117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r2, 0x14) 830.417874ms ago: executing program 7 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0x1) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_io_uring_setup(0x2138, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 766.057223ms ago: executing program 2 (id=1119): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$packet(r1, 0x0, 0x0) 689.827513ms ago: executing program 2 (id=1120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x5]}]}}}}}}}}, 0x0) 565.590142ms ago: executing program 2 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0xba01}, 0x0) 174.058051ms ago: executing program 2 (id=1122): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x30e, &(0x7f0000000e40)="$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") mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 97.62215ms ago: executing program 5 (id=1123): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 0s ago: executing program 2 (id=1124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 118.060854][ T4351] device veth0_vlan left promiscuous mode [ 118.120204][ T5199] XFS (loop3): Ending clean mount [ 118.126258][ T5199] XFS (loop3): Quotacheck needed: Please wait. [ 118.193297][ T5199] XFS (loop3): Quotacheck: Done. [ 118.337136][ T4298] XFS (loop3): Unmounting Filesystem [ 120.167333][ T5250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.172643][ T5250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.899771][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 122.260053][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 122.932976][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.139410][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.040575][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 126.063826][ T4351] bond0 (unregistering): Released all slaves [ 126.311520][ T5197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.225'. [ 126.336312][ T4931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.379193][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.381360][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.390611][ T4931] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.220324][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.222670][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.224602][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.226559][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.238026][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 128.308848][ T4931] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.317062][ T4931] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.401351][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.403370][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 128.405490][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 128.407397][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.408854][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.431446][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 128.444274][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 128.457689][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 128.516103][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.217177][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.319198][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.328741][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.352190][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.370180][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.505116][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.519932][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.526851][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.792741][ T5336] loop3: detected capacity change from 0 to 8 [ 129.870408][ T5336] SQUASHFS error: Failed to read block 0x260685: -5 [ 129.888846][ T5336] SQUASHFS error: Unable to read metadata cache entry [260685] [ 129.890638][ T5336] SQUASHFS error: Unable to read directory block [260685:0] [ 130.062094][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.063997][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.072968][ T4931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.086498][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.091775][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.839960][ T5360] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 132.813053][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 132.907353][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.910457][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.922976][ T5390] loop3: detected capacity change from 0 to 512 [ 132.953564][ T5390] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.959979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.962369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.978602][ T5390] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 133.018824][ T4931] device veth0_vlan entered promiscuous mode [ 133.020845][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.022959][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.045753][ T5390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e12c, mo2=0002] [ 133.049615][ T5390] EXT4-fs (loop3): orphan cleanup on readonly fs [ 133.066424][ T5390] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.267: bg 0: block 361: padding at end of block bitmap is not set [ 133.190806][ T4931] device veth1_vlan entered promiscuous mode [ 133.216598][ T5390] EXT4-fs (loop3): Remounting filesystem read-only [ 133.216679][ T5390] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 133.221893][ T5390] EXT4-fs (loop3): Remounting filesystem read-only [ 133.221932][ T5390] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.267: invalid indirect mapped block 2185560079 (level 1) [ 133.222258][ T5390] EXT4-fs (loop3): Remounting filesystem read-only [ 133.223149][ T5390] EXT4-fs (loop3): 1 truncate cleaned up [ 133.223192][ T5390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.299520][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.299998][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.300546][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.301009][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.311238][ T4931] device veth0_macvtap entered promiscuous mode [ 133.320992][ T4931] device veth1_macvtap entered promiscuous mode [ 133.357540][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.357560][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.357571][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.357582][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.357592][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.357603][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.357612][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.357623][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.369607][ T4931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.369903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.370423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.370914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.371355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.379533][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.379553][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.379563][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.379574][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.379584][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.379595][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.379605][ T4931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.379615][ T4931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.381151][ T4931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.381373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.381950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.390671][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 133.392166][ T4931] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.395915][ T4931] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.395937][ T4931] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.395959][ T4931] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.490970][ T5375] loop0: detected capacity change from 0 to 32768 [ 133.522090][ T5375] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.265 (5375) [ 133.542433][ T5375] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 133.555069][ T5375] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 133.555115][ T5375] BTRFS info (device loop0): enabling ssd optimizations [ 133.555130][ T5375] BTRFS info (device loop0): using spread ssd allocation scheme [ 133.555146][ T5375] BTRFS info (device loop0): not using spread ssd allocation scheme [ 133.555162][ T5375] BTRFS info (device loop0): disabling tree log [ 133.555186][ T5375] BTRFS info (device loop0): turning on sync discard [ 133.555204][ T5375] BTRFS info (device loop0): setting nodatacow, compression disabled [ 133.555219][ T5375] BTRFS info (device loop0): force clearing of disk cache [ 133.555234][ T5375] BTRFS info (device loop0): using spread ssd allocation scheme [ 133.555249][ T5375] BTRFS info (device loop0): setting datasum, datacow enabled [ 133.555263][ T5375] BTRFS info (device loop0): using free space tree [ 133.626493][ T4452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.626536][ T4452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.629507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.763625][ T1576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.763669][ T1576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.816168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.870464][ T5375] BTRFS info (device loop0): rebuilding free space tree [ 133.883329][ T5430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.883505][ T5430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.198912][ T27] audit: type=1326 audit(647.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb53aa8 code=0x7fc00000 [ 135.015982][ T4294] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 135.058103][ T27] audit: type=1326 audit(647.970:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffabb53aa8 code=0x7fc00000 [ 136.545397][ T5466] virtio-fs: tag <(null)> not found [ 138.171402][ T5486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.282'. [ 138.178443][ T5486] loop3: detected capacity change from 0 to 512 [ 139.092203][ T5486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 139.339029][ T4298] EXT4-fs (loop3): unmounting filesystem. [ 139.378277][ T5474] sctp: failed to load transform for md5: -2 [ 140.318084][ T4307] Bluetooth: hci2: command 0x0405 tx timeout [ 151.671013][ T5655] capability: warning: `syz.3.322' uses deprecated v2 capabilities in a way that may be insecure [ 151.731578][ T5659] loop3: detected capacity change from 0 to 512 [ 151.753789][ T5659] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 12 [ 151.788094][ T5622] loop5: detected capacity change from 0 to 32768 [ 151.806746][ T5622] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.312 (5622) [ 151.831964][ T5622] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.846263][ T5622] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 151.850403][ T5622] BTRFS info (device loop5): using free space tree [ 152.168016][ T5622] BTRFS info (device loop5): enabling ssd optimizations [ 152.307980][ T4515] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 152.393842][ T4931] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.184560][ T5726] rdma_op 0000000098b1cc40 conn xmit_rdma 0000000000000000 [ 153.743901][ T5732] loop1: detected capacity change from 0 to 4096 [ 153.746868][ T5732] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 153.775489][ T5732] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 153.784190][ T5741] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.465983][ T5732] ntfs: volume version 3.1. [ 155.857198][ T5770] loop2: detected capacity change from 0 to 2048 [ 156.633027][ T5778] input: syz1 as /devices/virtual/input/input3 [ 157.445250][ T5783] syz.3.348 uses obsolete (PF_INET,SOCK_PACKET) [ 157.498409][ T5770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 157.521936][ T5783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4 [ 157.844932][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 159.286926][ T5799] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 159.720670][ T5813] fuse: Bad value for 'fd' [ 161.933428][ T5853] loop2: detected capacity change from 0 to 2048 [ 162.085682][ T5853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.108324][ T4307] Bluetooth: hci2: link tx timeout [ 163.110029][ T4307] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.576409][ T4307] Bluetooth: hci2: link tx timeout [ 163.577548][ T4307] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.695615][ T5849] loop3: detected capacity change from 0 to 32768 [ 163.712325][ T5849] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.368 (5849) [ 163.774724][ T5849] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.777074][ T5849] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 163.781843][ T5849] BTRFS info (device loop3): enabling auto defrag [ 163.802520][ T5849] BTRFS info (device loop3): doing ref verification [ 163.804096][ T5849] BTRFS info (device loop3): use no compression [ 163.805426][ T5849] BTRFS info (device loop3): force clearing of disk cache [ 163.807031][ T5849] BTRFS info (device loop3): setting nodatacow, compression disabled [ 163.837884][ T4304] Bluetooth: hci3: command 0x0406 tx timeout [ 163.839338][ T4304] Bluetooth: hci1: command 0x0406 tx timeout [ 163.840633][ T4304] Bluetooth: hci4: command 0x0406 tx timeout [ 163.857703][ T5849] BTRFS info (device loop3): disabling free space tree [ 164.854272][ T5849] BTRFS error (device loop3): open_ctree failed [ 165.128199][ T4307] Bluetooth: hci2: command 0x0406 tx timeout [ 165.313029][ T5877] loop0: detected capacity change from 0 to 32768 [ 165.330837][ T5877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.377 (5877) [ 165.342715][ T5917] netlink: 'syz.5.384': attribute type 2 has an invalid length. [ 165.346653][ T5877] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.354592][ T5877] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 165.356417][ T5877] BTRFS info (device loop0): disabling tree log [ 165.359092][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.5.384'. [ 165.364324][ T5877] BTRFS info (device loop0): using free space tree [ 165.387267][ T5917] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 165.395119][ T5917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.436580][ T4304] Bluetooth: hci2: link tx timeout [ 166.437722][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.440066][ T4304] Bluetooth: hci2: link tx timeout [ 166.441113][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.442790][ T4304] Bluetooth: hci2: link tx timeout [ 166.443860][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.445792][ T4304] Bluetooth: hci2: link tx timeout [ 166.446906][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.449254][ T4304] Bluetooth: hci2: link tx timeout [ 166.450306][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.451885][ T4304] Bluetooth: hci2: link tx timeout [ 166.452869][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.454536][ T4304] Bluetooth: hci2: link tx timeout [ 166.455530][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.513744][ T4304] Bluetooth: hci2: link tx timeout [ 166.514869][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.555126][ T5877] BTRFS info (device loop0): enabling ssd optimizations [ 166.756700][ T4294] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.339817][ T5989] netlink: 312 bytes leftover after parsing attributes in process `syz.0.394'. [ 169.095227][ T27] audit: type=1326 audit(682.070:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b53aa8 code=0x7ffc0000 [ 169.107676][ T27] audit: type=1326 audit(682.080:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffffb5b53aa8 code=0x7ffc0000 [ 169.131154][ T27] audit: type=1326 audit(682.100:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b53aa8 code=0x7ffc0000 [ 169.219377][ T27] audit: type=1326 audit(682.100:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b53aa8 code=0x7ffc0000 [ 169.481130][ T6006] loop1: detected capacity change from 0 to 1024 [ 169.542307][ T6006] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 169.701038][ T6016] binder: 6003:6016 tried to acquire reference to desc 0, got 1 instead [ 169.711621][ T6016] binder: 6003:6016 got transaction with invalid parent offset [ 169.713465][ T6016] binder: 6016:6003 failed to fixup parent [ 169.714806][ T6016] binder: 6003:6016 transaction async to 6003:0 failed 10/29201/-22, size 120-24 line 3549 [ 169.764648][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 170.451154][ T1515] binder: undelivered TRANSACTION_ERROR: 29201 [ 170.498056][ T4304] Bluetooth: Wrong link type (-71) [ 170.552375][ T6021] loop5: detected capacity change from 0 to 512 [ 170.573406][ T6021] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.595330][ T6021] EXT4-fs (loop5): 1 orphan inode deleted [ 170.596810][ T6021] EXT4-fs (loop5): 1 truncate cleaned up [ 170.604093][ T6021] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 170.671497][ T5997] loop0: detected capacity change from 0 to 32768 [ 170.679941][ T5997] XFS: ikeep mount option is deprecated. [ 170.781114][ T5997] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 170.783416][ T5997] XFS (loop0): Mounting V5 Filesystem [ 170.842401][ T4304] Bluetooth: hci2: link tx timeout [ 170.843524][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.845178][ T4304] Bluetooth: hci2: link tx timeout [ 170.846217][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.847945][ T4304] Bluetooth: hci2: link tx timeout [ 170.848931][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.850547][ T4304] Bluetooth: hci2: link tx timeout [ 170.851641][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.853407][ T4304] Bluetooth: hci2: link tx timeout [ 170.854453][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.856107][ T4304] Bluetooth: hci2: link tx timeout [ 170.857191][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.858961][ T4304] Bluetooth: hci2: link tx timeout [ 170.860078][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.861906][ T4304] Bluetooth: hci2: link tx timeout [ 170.862998][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.864686][ T4304] Bluetooth: hci2: link tx timeout [ 170.865696][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.867352][ T4304] Bluetooth: hci2: link tx timeout [ 170.868506][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.870176][ T4304] Bluetooth: hci2: link tx timeout [ 170.871398][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.873174][ T4304] Bluetooth: hci2: link tx timeout [ 170.874258][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.875928][ T4304] Bluetooth: hci2: link tx timeout [ 170.877167][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.879008][ T4304] Bluetooth: hci2: link tx timeout [ 170.880179][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.881902][ T4304] Bluetooth: hci2: link tx timeout [ 170.883075][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.888771][ T4304] Bluetooth: hci2: link tx timeout [ 170.890104][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.893987][ T4304] Bluetooth: hci2: link tx timeout [ 170.895194][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.897920][ T4304] Bluetooth: hci2: link tx timeout [ 170.899186][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.902052][ T4304] Bluetooth: hci2: link tx timeout [ 170.903229][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.906159][ T4304] Bluetooth: hci2: link tx timeout [ 170.907404][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.910494][ T4304] Bluetooth: hci2: link tx timeout [ 170.911723][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.915228][ T4304] Bluetooth: hci2: link tx timeout [ 170.916392][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.919367][ T4304] Bluetooth: hci2: link tx timeout [ 170.920561][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.924383][ T4304] Bluetooth: hci2: link tx timeout [ 170.925505][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.928656][ T4304] Bluetooth: hci2: link tx timeout [ 170.929870][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.932942][ T4304] Bluetooth: hci2: link tx timeout [ 170.934220][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.980930][ T4304] Bluetooth: hci2: link tx timeout [ 170.982523][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.987512][ T4304] Bluetooth: hci2: link tx timeout [ 170.989118][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.993152][ T4304] Bluetooth: hci2: link tx timeout [ 170.994626][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.998317][ T4304] Bluetooth: hci2: link tx timeout [ 170.999675][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.003366][ T4304] Bluetooth: hci2: link tx timeout [ 171.004805][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.008669][ T4304] Bluetooth: hci2: link tx timeout [ 171.010114][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.013500][ T4304] Bluetooth: hci2: link tx timeout [ 171.014904][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.018985][ T4304] Bluetooth: hci2: link tx timeout [ 171.020462][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.024093][ T4304] Bluetooth: hci2: link tx timeout [ 171.025567][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.028854][ T4304] Bluetooth: hci2: link tx timeout [ 171.030159][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.033669][ T4304] Bluetooth: hci2: link tx timeout [ 171.035047][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.039448][ T4304] Bluetooth: hci2: link tx timeout [ 171.041021][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.044762][ T4304] Bluetooth: hci2: link tx timeout [ 171.046232][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.049473][ T4304] Bluetooth: hci2: link tx timeout [ 171.050879][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.054787][ T4304] Bluetooth: hci2: link tx timeout [ 171.056230][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.060265][ T4304] Bluetooth: hci2: link tx timeout [ 171.061811][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.065087][ T4304] Bluetooth: hci2: link tx timeout [ 171.066448][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.069737][ T4304] Bluetooth: hci2: link tx timeout [ 171.071122][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.074580][ T4304] Bluetooth: hci2: link tx timeout [ 171.075929][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.079659][ T4304] Bluetooth: hci2: link tx timeout [ 171.081052][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.084648][ T4304] Bluetooth: hci2: link tx timeout [ 171.086079][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.089812][ T4304] Bluetooth: hci2: link tx timeout [ 171.091228][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.094642][ T4304] Bluetooth: hci2: link tx timeout [ 171.096075][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.099454][ T4304] Bluetooth: hci2: link tx timeout [ 171.100786][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.104663][ T4304] Bluetooth: hci2: link tx timeout [ 171.106071][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.109567][ T4304] Bluetooth: hci2: link tx timeout [ 171.110968][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.114813][ T4304] Bluetooth: hci2: link tx timeout [ 171.116255][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.120006][ T4304] Bluetooth: hci2: link tx timeout [ 171.121461][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.125251][ T4304] Bluetooth: hci2: link tx timeout [ 171.126677][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.130493][ T4304] Bluetooth: hci2: link tx timeout [ 171.131910][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.135495][ T4304] Bluetooth: hci2: link tx timeout [ 171.137007][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.141125][ T4304] Bluetooth: hci2: link tx timeout [ 171.142960][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.146853][ T4304] Bluetooth: hci2: link tx timeout [ 171.148401][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.151799][ T4304] Bluetooth: hci2: link tx timeout [ 171.153182][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.157954][ T4304] Bluetooth: hci2: link tx timeout [ 171.159513][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.165170][ T4304] Bluetooth: hci2: link tx timeout [ 171.166669][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.170448][ T4304] Bluetooth: hci2: link tx timeout [ 171.171913][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.175361][ T4304] Bluetooth: hci2: link tx timeout [ 171.176771][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.180381][ T4304] Bluetooth: hci2: link tx timeout [ 171.181719][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.185079][ T4304] Bluetooth: hci2: link tx timeout [ 171.186498][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.190025][ T4304] Bluetooth: hci2: link tx timeout [ 171.191428][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.194978][ T4304] Bluetooth: hci2: link tx timeout [ 171.196369][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.201365][ T4304] Bluetooth: hci2: link tx timeout [ 171.202779][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.206569][ T4304] Bluetooth: hci2: link tx timeout [ 171.207946][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.211378][ T4304] Bluetooth: hci2: link tx timeout [ 171.212818][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.216497][ T4304] Bluetooth: hci2: link tx timeout [ 171.217926][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.221615][ T4304] Bluetooth: hci2: link tx timeout [ 171.223168][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.227159][ T4304] Bluetooth: hci2: link tx timeout [ 171.228679][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.231896][ T4304] Bluetooth: hci2: link tx timeout [ 171.233305][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.237035][ T4304] Bluetooth: hci2: link tx timeout [ 171.238394][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.241787][ T4304] Bluetooth: hci2: link tx timeout [ 171.243117][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.246487][ T4304] Bluetooth: hci2: link tx timeout [ 171.247929][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.251189][ T4304] Bluetooth: hci2: link tx timeout [ 171.252788][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.256033][ T4304] Bluetooth: hci2: link tx timeout [ 171.257489][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.261077][ T4304] Bluetooth: hci2: link tx timeout [ 171.262478][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.265784][ T4304] Bluetooth: hci2: link tx timeout [ 171.267234][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.270526][ T4304] Bluetooth: hci2: link tx timeout [ 171.271955][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.275447][ T4304] Bluetooth: hci2: link tx timeout [ 171.276819][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.280175][ T4304] Bluetooth: hci2: link tx timeout [ 171.281579][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.284921][ T4304] Bluetooth: hci2: link tx timeout [ 171.286353][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.290035][ T4304] Bluetooth: hci2: link tx timeout [ 171.291510][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.294894][ T4304] Bluetooth: hci2: link tx timeout [ 171.296274][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.299452][ T4304] Bluetooth: hci2: link tx timeout [ 171.300845][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.304206][ T4304] Bluetooth: hci2: link tx timeout [ 171.305613][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.309079][ T4304] Bluetooth: hci2: link tx timeout [ 171.310507][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.314716][ T4304] Bluetooth: hci2: link tx timeout [ 171.316427][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.320070][ T4304] Bluetooth: hci2: link tx timeout [ 171.321433][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.325556][ T4304] Bluetooth: hci2: link tx timeout [ 171.327090][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.331029][ T4304] Bluetooth: hci2: link tx timeout [ 171.332537][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.335970][ T4304] Bluetooth: hci2: link tx timeout [ 171.337463][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.340827][ T4304] Bluetooth: hci2: link tx timeout [ 171.342233][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.431419][ T4304] Bluetooth: hci2: link tx timeout [ 171.432580][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.434436][ T4304] Bluetooth: hci2: link tx timeout [ 171.435538][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.437219][ T4304] Bluetooth: hci2: link tx timeout [ 171.438422][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.440046][ T4304] Bluetooth: hci2: link tx timeout [ 171.441145][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.442791][ T4304] Bluetooth: hci2: link tx timeout [ 171.443890][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.445618][ T4304] Bluetooth: hci2: link tx timeout [ 171.446662][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.448449][ T4304] Bluetooth: hci2: link tx timeout [ 171.449556][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.451455][ T4304] Bluetooth: hci2: link tx timeout [ 171.452592][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.454255][ T4304] Bluetooth: hci2: link tx timeout [ 171.455326][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.457041][ T4304] Bluetooth: hci2: link tx timeout [ 171.458248][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.459902][ T4304] Bluetooth: hci2: link tx timeout [ 171.461017][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.462661][ T4304] Bluetooth: hci2: link tx timeout [ 171.463758][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.465418][ T4304] Bluetooth: hci2: link tx timeout [ 171.466413][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.468140][ T4304] Bluetooth: hci2: link tx timeout [ 171.469174][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.470859][ T4304] Bluetooth: hci2: link tx timeout [ 171.471833][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.473485][ T4304] Bluetooth: hci2: link tx timeout [ 171.474565][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.476181][ T4304] Bluetooth: hci2: link tx timeout [ 171.477237][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.478942][ T4304] Bluetooth: hci2: link tx timeout [ 171.479975][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.481622][ T4304] Bluetooth: hci2: link tx timeout [ 171.482646][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.484248][ T4304] Bluetooth: hci2: link tx timeout [ 171.485273][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.486915][ T4304] Bluetooth: hci2: link tx timeout [ 171.487942][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.489557][ T4304] Bluetooth: hci2: link tx timeout [ 171.490580][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.492177][ T4304] Bluetooth: hci2: link tx timeout [ 171.493267][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.494855][ T4304] Bluetooth: hci2: link tx timeout [ 171.495923][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.497486][ T4304] Bluetooth: hci2: link tx timeout [ 171.498565][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.500159][ T4304] Bluetooth: hci2: link tx timeout [ 171.501180][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.502791][ T4304] Bluetooth: hci2: link tx timeout [ 171.503801][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.505421][ T4304] Bluetooth: hci2: link tx timeout [ 171.506437][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.512309][ T4304] Bluetooth: hci2: link tx timeout [ 171.513333][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.514860][ T4304] Bluetooth: hci2: link tx timeout [ 171.515913][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.517482][ T4304] Bluetooth: hci2: link tx timeout [ 171.518603][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.535671][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 171.539201][ T4304] Bluetooth: hci2: link tx timeout [ 171.540270][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.541808][ T4304] Bluetooth: hci2: link tx timeout [ 171.542800][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.554204][ T4304] Bluetooth: hci2: link tx timeout [ 171.555346][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.556850][ T4304] Bluetooth: hci2: link tx timeout [ 171.557856][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.559330][ T4304] Bluetooth: hci2: link tx timeout [ 171.560320][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.563742][ T4304] Bluetooth: hci2: link tx timeout [ 171.564751][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.566391][ T4304] Bluetooth: hci2: link tx timeout [ 171.567360][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.568935][ T4304] Bluetooth: hci2: link tx timeout [ 171.569920][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.571452][ T4304] Bluetooth: hci2: link tx timeout [ 171.572472][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.573972][ T4304] Bluetooth: hci2: link tx timeout [ 171.574997][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.669360][ T6041] loop2: detected capacity change from 0 to 4096 [ 171.670449][ T5997] XFS (loop0): Ending clean mount [ 171.724571][ T6048] loop3: detected capacity change from 0 to 256 [ 171.842843][ T5997] XFS (loop0): Quotacheck needed: Please wait. [ 171.870082][ T5997] XFS (loop0): Quotacheck: Done. [ 171.959211][ T6051] lo speed is unknown, defaulting to 1000 [ 171.960963][ T6051] lo speed is unknown, defaulting to 1000 [ 171.971825][ T6051] lo speed is unknown, defaulting to 1000 [ 171.988550][ T6051] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.008380][ T6051] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 172.861795][ T6051] lo speed is unknown, defaulting to 1000 [ 172.863721][ T6051] lo speed is unknown, defaulting to 1000 [ 172.865269][ T6051] lo speed is unknown, defaulting to 1000 [ 172.867732][ T6051] lo speed is unknown, defaulting to 1000 [ 172.869501][ T6051] lo speed is unknown, defaulting to 1000 [ 172.969803][ T4294] XFS (loop0): Unmounting Filesystem [ 173.295705][ T6061] loop5: detected capacity change from 0 to 512 [ 173.314103][ T6061] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 173.357558][ T6061] Process accounting resumed [ 175.505030][ T6094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.507177][ T6094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.330061][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 182.577043][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.589702][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.609929][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.625595][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.631958][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.641897][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.689263][ T4304] Bluetooth: hci2: link tx timeout [ 184.690354][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.691962][ T4304] Bluetooth: hci2: link tx timeout [ 184.692995][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.694590][ T4304] Bluetooth: hci2: link tx timeout [ 184.695641][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.697323][ T4304] Bluetooth: hci2: link tx timeout [ 184.698454][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.772802][ T6240] loop2: detected capacity change from 0 to 512 [ 185.774738][ T6240] EXT4-fs: Ignoring removed oldalloc option [ 186.841734][ T6240] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.454: Parent and EA inode have the same ino 15 [ 186.847004][ T6240] EXT4-fs (loop2): Remounting filesystem read-only [ 186.856872][ T6240] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.454: Parent and EA inode have the same ino 15 [ 186.866941][ T6240] EXT4-fs (loop2): Remounting filesystem read-only [ 186.874733][ T6240] EXT4-fs (loop2): 1 orphan inode deleted [ 186.875963][ T6240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.009190][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 188.042489][ T4304] Bluetooth: hci2: link tx timeout [ 188.043645][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.045349][ T4304] Bluetooth: hci2: link tx timeout [ 188.046374][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.048299][ T4304] Bluetooth: hci2: link tx timeout [ 188.049339][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.050893][ T4304] Bluetooth: hci2: link tx timeout [ 188.051875][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.053464][ T4304] Bluetooth: hci2: link tx timeout [ 188.054465][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.056138][ T4304] Bluetooth: hci2: link tx timeout [ 188.057133][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.059524][ T4304] Bluetooth: hci2: link tx timeout [ 188.060950][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.062650][ T4304] Bluetooth: hci2: link tx timeout [ 188.063866][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.065616][ T4304] Bluetooth: hci2: link tx timeout [ 188.066700][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.073401][ T4304] Bluetooth: hci2: link tx timeout [ 188.074412][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.075899][ T4304] Bluetooth: hci2: link tx timeout [ 188.076889][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.078602][ T4304] Bluetooth: hci2: link tx timeout [ 188.079649][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.081097][ T4304] Bluetooth: hci2: link tx timeout [ 188.082078][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.083613][ T4304] Bluetooth: hci2: link tx timeout [ 188.084668][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.092806][ T4304] Bluetooth: hci2: link tx timeout [ 188.093808][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.095402][ T4304] Bluetooth: hci2: link tx timeout [ 188.096344][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.098463][ T4304] Bluetooth: hci2: link tx timeout [ 188.099411][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.100791][ T4304] Bluetooth: hci2: link tx timeout [ 188.101719][ T4304] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 192.948112][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.949669][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.057566][ T6325] loop2: detected capacity change from 0 to 1024 [ 194.071820][ T6325] EXT4-fs: Ignoring removed nobh option [ 194.073084][ T6325] EXT4-fs: Ignoring removed bh option [ 194.074709][ T6325] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.267138][ T6325] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.226556][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 198.351954][ T4307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.359038][ T4307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.361504][ T4307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.372547][ T4295] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 198.372891][ T4311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.377532][ T4295] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 198.380020][ T4295] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 198.382310][ T4311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 198.382851][ T4295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 198.384491][ T4311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.386268][ T4295] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 198.388384][ T4295] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 200.397953][ T4307] Bluetooth: hci5: command 0x0409 tx timeout [ 200.483265][ T4307] Bluetooth: hci6: command 0x0409 tx timeout [ 202.479118][ T4307] Bluetooth: hci5: command 0x041b tx timeout [ 202.558031][ T4295] Bluetooth: hci6: command 0x041b tx timeout [ 204.557965][ T4307] Bluetooth: hci5: command 0x040f tx timeout [ 204.637995][ T4307] Bluetooth: hci6: command 0x040f tx timeout [ 206.594863][ T6382] lo speed is unknown, defaulting to 1000 [ 206.727985][ T4307] Bluetooth: hci5: command 0x0419 tx timeout [ 206.731420][ T4295] Bluetooth: hci6: command 0x0419 tx timeout [ 206.956082][ T6380] lo speed is unknown, defaulting to 1000 [ 207.190640][ T6423] loop2: detected capacity change from 0 to 2048 [ 207.202464][ T6423] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.253674][ T6423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 208.141149][ T6437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.506: bg 0: block 234: padding at end of block bitmap is not set [ 208.175508][ T6437] EXT4-fs (loop2): Remounting filesystem read-only [ 208.196800][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 208.358246][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 209.368664][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.370206][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.372322][ T6382] device bridge_slave_0 entered promiscuous mode [ 209.375153][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.376557][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.399966][ T6382] device bridge_slave_1 entered promiscuous mode [ 210.226076][ T6168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.332287][ T6380] chnl_net:caif_netlink_parms(): no params data found [ 210.430415][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.434205][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.936981][ T6478] netlink: 'syz.1.518': attribute type 29 has an invalid length. [ 212.234931][ T6168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.272892][ T6382] team0: Port device team_slave_0 added [ 212.280790][ T6478] netlink: 'syz.1.518': attribute type 29 has an invalid length. [ 212.282923][ T6479] netlink: 'syz.1.518': attribute type 29 has an invalid length. [ 212.310274][ T6382] team0: Port device team_slave_1 added [ 213.693462][ T6168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.234809][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.236379][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.254792][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.278879][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.280445][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.285666][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.305758][ T6509] loop5: detected capacity change from 0 to 512 [ 214.389306][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.391089][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.393140][ T6380] device bridge_slave_0 entered promiscuous mode [ 214.483431][ T6509] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 215.344186][ T6168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.592175][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.593773][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.595902][ T6380] device bridge_slave_1 entered promiscuous mode [ 215.738049][ T6382] device hsr_slave_0 entered promiscuous mode [ 215.788352][ T6382] device hsr_slave_1 entered promiscuous mode [ 215.843889][ T4931] EXT4-fs (loop5): unmounting filesystem. [ 215.869839][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.871550][ T6382] Cannot create hsr debugfs directory [ 215.970822][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.974568][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.036095][ T6380] team0: Port device team_slave_0 added [ 216.044825][ T6380] team0: Port device team_slave_1 added [ 216.154521][ T6537] ptrace attach of "./syz-executor exec"[4303] was attempted by " \x0c ¢ã­!OÇRù\x1b#\x09‡÷Ð8çÿÆåS›2K\x07‹›8K\x09à‡Æç›3M•›rš$\x0d[gó˜~óRÀÿèÑxpŒR<’\x1b\x1b]P\x0d0\x09\x096Í;x\x0dªaØè\x09êˆ/X·\x07\x22r'·ºgàç†i¦õ¨tæ*œÍÀÓ\x0cŸ1Œ\x0d¡™;Ñ`â3ßJbœo0àeÍ[‘Í\x0aá“—75³m[\x1bcÝ 0]?Fc^°ձݩŽ-t›ç½ñû;#ÜÛPu©ª¡´iÃ\x09 3Xu'\x1b(c)Ñi“Bˆýxš£}n˜²$ýD¶[13OüUÌ‚Í:Ã.Í°Œío´Ý\x0d‹8óÍD˜¾è IA½±ö·cƒp\x5cUC*ŸÚšìT¡#n€ö¨«­êvbIkÝ»B¾kû/•é\x0aVÇ\x1b1‡bõè’BÊkü‚~}¯$QŽd[¸\x0cav ¾pÞ˜ìv©ä\x0d­GóoÙ÷ÐÔ*K_…ÌÜñoôb•Ø úq–9áõœÞ&Ƶ×K\x07Š^Ã4å®\x09Œéîpwªš†~ˆ3Iué÷4ƒ¶È/¦xÊÿÙùÛ*xiØXde&ø‰¯C¦`€W\x22†R$IßFlc+5p$?˜œÎ8ôeäa\x0c !ÖS¥R ‚·¥ Žùñºéy\x09PpAØ`B\x0cVd²y!±MÁÛˆ’ý2Ð [ 217.556757][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.585571][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.603287][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.714618][ T6382] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 217.770507][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.772064][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.777552][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.784329][ T6382] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 219.731406][ T6382] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 219.852629][ T6382] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 221.031141][ T6380] device hsr_slave_0 entered promiscuous mode [ 221.094922][ T6380] device hsr_slave_1 entered promiscuous mode [ 221.118373][ T6380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.119982][ T6380] Cannot create hsr debugfs directory [ 221.944753][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.859007][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.861093][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.920006][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.951036][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.960158][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.978245][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.979858][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.988732][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.990953][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.998388][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.999865][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.064841][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.066946][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.100825][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.272415][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.278250][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.287165][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.295976][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.315058][ T6382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.317205][ T6382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.374745][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.377033][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.379587][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.388545][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.392497][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.394599][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.498139][ T6380] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.539805][ T6380] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.846616][ T6380] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.639445][ T6380] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.943577][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.945260][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.994541][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.038058][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.074644][ T6380] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.245536][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.247726][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.253917][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.256937][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.267502][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.269027][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.276308][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.289758][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.295995][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.297510][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.312577][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.320885][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.329618][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.337607][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.345945][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.356364][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.366828][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.372107][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.376529][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.381721][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.339652][ T6380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.346817][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.349864][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.014485][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.016822][ T6522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.213542][ T6168] device hsr_slave_0 left promiscuous mode [ 232.228696][ T6168] device hsr_slave_1 left promiscuous mode [ 232.307950][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.309587][ T6168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.314393][ T6168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.315888][ T6168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.321142][ T6168] device bridge_slave_1 left promiscuous mode [ 232.327131][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.409664][ T6168] device bridge_slave_0 left promiscuous mode [ 232.411052][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.618051][ T6168] device veth1_macvtap left promiscuous mode [ 232.619393][ T6168] device veth0_macvtap left promiscuous mode [ 232.620697][ T6168] device veth1_vlan left promiscuous mode [ 232.621981][ T6168] device veth0_vlan left promiscuous mode [ 235.965513][ T6735] loop5: detected capacity change from 0 to 32768 [ 239.333474][ T6168] team0 (unregistering): Port device team_slave_1 removed [ 239.569125][ T6168] team0 (unregistering): Port device team_slave_0 removed [ 239.778840][ T6168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.820669][ T6785] loop2: detected capacity change from 0 to 32768 [ 239.845620][ T6785] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 scanned by syz.2.593 (6785) [ 239.863435][ T6785] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 239.867744][ T6785] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 239.871946][ T6785] BTRFS info (device loop2): using free space tree [ 239.934113][ T6785] BTRFS info (device loop2): enabling ssd optimizations [ 240.047063][ T6806] loop1: detected capacity change from 0 to 128 [ 240.070288][ T6168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.233684][ T4303] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 245.628206][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.630255][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.039720][ T6168] bond0 (unregistering): Released all slaves [ 247.736267][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.757621][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.773680][ T4304] Bluetooth: Unexpected continuation frame (len 10) [ 247.786901][ T6382] device veth0_vlan entered promiscuous mode [ 247.807176][ T6382] device veth1_vlan entered promiscuous mode [ 247.829556][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.831932][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.838847][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.843766][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 247.852115][ T6806] lo speed is unknown, defaulting to 1000 [ 247.861846][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.866458][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.917271][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.919374][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.927377][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.094377][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.096682][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.103540][ T6382] device veth0_macvtap entered promiscuous mode [ 248.107292][ T6382] device veth1_macvtap entered promiscuous mode [ 248.117759][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.120054][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.121988][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.124206][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.126111][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.128290][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.131530][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.133072][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.162114][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.177722][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.180216][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.191707][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.193785][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.195834][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.203913][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.205936][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.227285][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.234027][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.249293][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.259326][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.261939][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.268966][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.288636][ T6382] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.290563][ T6382] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.292385][ T6382] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.294072][ T6382] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.434898][ T6643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.436778][ T6643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.442219][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.539411][ T6643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.541202][ T6643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.545900][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.768934][ T6380] device veth0_vlan entered promiscuous mode [ 248.850436][ T6380] device veth1_vlan entered promiscuous mode [ 248.861294][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.868497][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.871786][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.875082][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.892280][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.900837][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.911898][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.920447][ T5529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.086902][ T6380] device veth0_macvtap entered promiscuous mode [ 249.091619][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 249.094071][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.099672][ T6380] device veth1_macvtap entered promiscuous mode [ 249.114164][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.116240][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.119799][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.122092][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.124054][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.126051][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.280765][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.295827][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.828080][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.883548][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.885725][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.888972][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.968439][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.036561][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.082168][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.244162][ T6913] process 'syz.1.619' launched './file1' with NULL argv: empty string added [ 251.157013][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.159470][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.161533][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.163642][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.165629][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.167698][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.225266][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.225285][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.227423][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.363822][ T6380] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.363853][ T6380] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.363874][ T6380] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.363895][ T6380] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.704580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.705899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.919386][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.921239][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.925960][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.969522][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.971292][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.976049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.921866][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.924353][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.613017][ T6992] loop1: detected capacity change from 0 to 8 [ 257.951717][ T7003] SQUASHFS error: Failed to read block 0x260685: -5 [ 257.953447][ T7003] SQUASHFS error: Unable to read metadata cache entry [260685] [ 257.955174][ T7003] SQUASHFS error: Unable to read directory block [260685:0] [ 258.334858][ T4304] Bluetooth: Wrong link type (-71) [ 260.773334][ T7035] loop7: detected capacity change from 0 to 4096 [ 260.859056][ T7035] ntfs: (device loop7): ntfs_external_attr_find(): Base inode 0x1 contains corrupt attribute list attribute. Unmount and run chkdsk. [ 260.862066][ T7035] ntfs: (device loop7): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 260.863992][ T7035] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 260.866696][ T7035] ntfs: (device loop7): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 261.182623][ T7035] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing. [ 261.184629][ T7035] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 261.204212][ T7035] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 261.209732][ T4307] Bluetooth: Wrong link type (-71) [ 261.240786][ T7035] ntfs: volume version 3.1. [ 261.254662][ T7035] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 261.273569][ T7035] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x5, attribute type 0xa0, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 261.296828][ T7035] ntfs: (device loop7): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 261.560698][ T7065] loop2: detected capacity change from 0 to 2048 [ 261.584939][ T7065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.787671][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.868231][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.501969][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.503907][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.464400][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 268.464412][ T27] audit: type=1326 audit(781.440:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.5.687" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b53aa8 code=0x0 [ 269.418576][ T7172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.420549][ T7172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.954523][ T7203] loop5: detected capacity change from 0 to 24 [ 271.956997][ T7203] romfs: Unknown parameter './cgroup.net/syz0' [ 272.025023][ T7200] overlayfs: missing 'lowerdir' [ 272.029138][ T6432] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 272.280650][ T7205] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 0, id = 0 [ 276.028772][ T7267] netlink: 60 bytes leftover after parsing attributes in process `syz.2.714'. [ 276.131621][ T7270] netlink: 'syz.1.717': attribute type 10 has an invalid length. [ 276.156550][ T7270] netlink: 40 bytes leftover after parsing attributes in process `syz.1.717'. [ 276.181547][ T7270] batman_adv: batadv0: Adding interface: virt_wifi0 [ 276.183017][ T7270] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.229824][ T7270] batman_adv: batadv0: Interface activated: virt_wifi0 [ 276.866529][ T7289] netlink: 'syz.6.723': attribute type 21 has an invalid length. [ 276.868633][ T7289] netlink: 'syz.6.723': attribute type 1 has an invalid length. [ 282.579853][ T7401] lo speed is unknown, defaulting to 1000 [ 282.826700][ T7416] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.766'. [ 285.150342][ T7455] netlink: 60 bytes leftover after parsing attributes in process `syz.7.777'. [ 285.152232][ T7455] netlink: 60 bytes leftover after parsing attributes in process `syz.7.777'. [ 285.154415][ T7452] netlink: 60 bytes leftover after parsing attributes in process `syz.7.777'. [ 285.164583][ T7452] netlink: 60 bytes leftover after parsing attributes in process `syz.7.777'. [ 287.016704][ T7511] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 292.219941][ T7613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.824'. [ 301.577272][ T7602] netlink: 'syz.7.819': attribute type 10 has an invalid length. [ 301.626028][ T7602] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 301.648272][ T7613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.824'. [ 306.609772][ T7713] sctp: [Deprecated]: syz.2.852 (pid 7713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.609772][ T7713] Use struct sctp_sack_info instead [ 311.359406][ T7805] lo speed is unknown, defaulting to 1000 [ 311.384969][ T7806] loop1: detected capacity change from 0 to 2048 [ 311.386767][ T7806] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.583868][ T7806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 311.603938][ T7814] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 311.614720][ T7811] device syzkaller0 entered promiscuous mode [ 312.233885][ T7814] EXT4-fs (loop1): Remounting filesystem read-only [ 312.318577][ T4304] Bluetooth: hci2: command 0x0406 tx timeout [ 312.383405][ T7819] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 312.528510][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 315.370673][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.372077][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.557911][ T4304] Bluetooth: hci5: command 0x0406 tx timeout [ 322.558047][ T4307] Bluetooth: hci6: command 0x0406 tx timeout [ 326.698006][ T7881] device wireguard0 entered promiscuous mode [ 326.896208][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.6.902'. [ 326.898358][ T7885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.902'. [ 326.928203][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 327.156020][ T7872] loop1: detected capacity change from 0 to 32768 [ 327.276580][ T7872] XFS (loop1): Mounting V5 Filesystem [ 327.355830][ T7872] XFS (loop1): Ending clean mount [ 327.363790][ T7872] XFS (loop1): Quotacheck needed: Please wait. [ 327.401575][ T7872] XFS (loop1): Quotacheck: Done. [ 327.434263][ T27] audit: type=1326 audit(840.410:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.439649][ T27] audit: type=1326 audit(840.410:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.443920][ T27] audit: type=1326 audit(840.410:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=6 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.470412][ T27] audit: type=1326 audit(840.450:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.488886][ T27] audit: type=1326 audit(840.470:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=14 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.505834][ T27] audit: type=1326 audit(840.470:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.524045][ T27] audit: type=1326 audit(840.470:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.546720][ T27] audit: type=1326 audit(840.470:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.562970][ T27] audit: type=1326 audit(840.470:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.597952][ T27] audit: type=1326 audit(840.470:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabb53aa8 code=0x7ffc0000 [ 327.995086][ T7912] loop5: detected capacity change from 0 to 256 [ 328.008598][ T7912] FAT-fs (loop5): Unrecognized mount option "uni]xlate=0" or missing value [ 328.081409][ T4299] XFS (loop1): Unmounting Filesystem [ 328.249575][ T7838] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 328.376438][ T7919] loop6: detected capacity change from 0 to 512 [ 328.437334][ T7923] loop2: detected capacity change from 0 to 1024 [ 328.443721][ T7923] EXT4-fs: Ignoring removed orlov option [ 328.444918][ T7923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.518141][ T7923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.526520][ T7919] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.913: Failed to acquire dquot type 0 [ 328.544092][ T7919] EXT4-fs (loop6): Remounting filesystem read-only [ 328.545762][ T7919] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.913: Failed to acquire dquot type 0 [ 328.576041][ T7919] EXT4-fs (loop6): Remounting filesystem read-only [ 328.584827][ T7919] EXT4-fs error (device loop6): ext4_acquire_dquot:6794: comm syz.6.913: Failed to acquire dquot type 0 [ 328.809561][ T7919] EXT4-fs (loop6): Remounting filesystem read-only [ 329.086089][ T7919] EXT4-fs (loop6): 1 orphan inode deleted [ 329.203342][ T7919] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 329.288598][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 329.363252][ T6380] EXT4-fs (loop6): unmounting filesystem. [ 329.374005][ T7936] loop7: detected capacity change from 0 to 512 [ 329.375836][ T7936] ext4: Unknown parameter 'pcr' [ 329.801358][ T7956] loop6: detected capacity change from 0 to 512 [ 329.840905][ T7956] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 330.079778][ T6380] EXT4-fs (loop6): unmounting filesystem. [ 330.419208][ T7977] input: syz0 as /devices/virtual/input/input5 [ 331.243978][ T7981] netlink: 76 bytes leftover after parsing attributes in process `syz.1.931'. [ 331.772415][ T7976] loop6: detected capacity change from 0 to 32768 [ 331.840604][ T7976] XFS (loop6): Mounting V5 Filesystem [ 331.982819][ T7976] XFS (loop6): Ending clean mount [ 332.014672][ T7976] netlink: 48 bytes leftover after parsing attributes in process `syz.6.930'. [ 332.091629][ T6380] XFS (loop6): Unmounting Filesystem [ 332.293411][ T8011] loop1: detected capacity change from 0 to 512 [ 332.295139][ T8011] EXT4-fs: Ignoring removed bh option [ 332.345317][ T8011] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 332.367363][ T8011] EXT4-fs (loop1): 1 truncate cleaned up [ 332.372690][ T8011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 332.752125][ T4299] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /199/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 333.393566][ T4299] EXT4-fs (loop1): unmounting filesystem. [ 333.760591][ T6522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.838716][ T8038] loop2: detected capacity change from 0 to 32768 [ 333.911633][ T6522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.930385][ T8038] XFS (loop2): Mounting V5 Filesystem [ 334.022541][ T6522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.039099][ T8038] XFS (loop2): Ending clean mount [ 334.114535][ T4307] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.133035][ T4307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.135339][ T4307] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.141904][ T4307] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.150452][ T4307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.152404][ T4307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.180528][ T6522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.531599][ T8071] loop6: detected capacity change from 0 to 512 [ 334.533566][ T8071] EXT4-fs: Ignoring removed bh option [ 334.537567][ T8062] lo speed is unknown, defaulting to 1000 [ 334.540748][ T4303] XFS (loop2): Unmounting Filesystem [ 334.565558][ T8071] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 334.652452][ T8071] EXT4-fs (loop6): 1 truncate cleaned up [ 334.653720][ T8071] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 334.911870][ T6380] EXT4-fs error (device loop6): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /70/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 335.383212][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 335.638947][ T6380] EXT4-fs (loop6): unmounting filesystem. [ 335.866295][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.868122][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.870369][ T8062] device bridge_slave_0 entered promiscuous mode [ 335.936513][ T8092] loop2: detected capacity change from 0 to 32768 [ 335.991143][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.992751][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.994856][ T8062] device bridge_slave_1 entered promiscuous mode [ 336.020675][ T8092] XFS (loop2): Mounting V5 Filesystem [ 336.098005][ T4304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.102113][ T4304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.105363][ T4307] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.108869][ T4307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.111282][ T4304] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.113154][ T4304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.113222][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.147349][ T8092] XFS (loop2): Ending clean mount [ 336.151680][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.329616][ T4304] Bluetooth: hci0: command 0x0409 tx timeout [ 337.066319][ T4303] XFS (loop2): Unmounting Filesystem [ 337.099814][ T8062] team0: Port device team_slave_0 added [ 337.109675][ T8062] team0: Port device team_slave_1 added [ 337.338234][ T8138] loop5: detected capacity change from 0 to 4096 [ 337.384694][ T8138] EXT2-fs (loop5): (no)user_xattr optionsnot supported [ 338.162350][ T4304] Bluetooth: hci1: command 0x0409 tx timeout [ 338.210332][ T8145] autofs4:pid:8145:autofs_fill_super: called with bogus options [ 338.218530][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.219998][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.225177][ T8062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.239423][ T8062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.240878][ T8062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.246057][ T8062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.398037][ T4304] Bluetooth: hci0: command 0x041b tx timeout [ 338.401738][ T8062] device hsr_slave_0 entered promiscuous mode [ 338.428255][ T8062] device hsr_slave_1 entered promiscuous mode [ 338.486939][ T8117] lo speed is unknown, defaulting to 1000 [ 339.596509][ T6522] device hsr_slave_0 left promiscuous mode [ 339.646233][ T6522] device hsr_slave_1 left promiscuous mode [ 339.843715][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.845778][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.848241][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.850362][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.852422][ T6522] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 339.854058][ T6522] batman_adv: batadv0: Removing interface: virt_wifi0 [ 339.856077][ T6522] device bridge_slave_0 left promiscuous mode [ 339.857433][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.239443][ T4295] Bluetooth: hci1: command 0x041b tx timeout [ 340.477996][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 340.758111][ T6522] device veth1_macvtap left promiscuous mode [ 340.759459][ T6522] device veth0_macvtap left promiscuous mode [ 340.760918][ T6522] device veth1_vlan left promiscuous mode [ 340.762395][ T6522] device veth0_vlan left promiscuous mode [ 340.856399][ T8179] loop2: detected capacity change from 0 to 164 [ 340.904124][ T7931] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 342.166176][ T8185] loop5: detected capacity change from 0 to 32768 [ 342.168378][ T8185] XFS: attr2 mount option is deprecated. [ 342.169692][ T8185] XFS: ikeep mount option is deprecated. [ 342.171171][ T8185] XFS: noikeep mount option is deprecated. [ 342.186677][ T8185] XFS (loop5): Mounting V5 Filesystem [ 342.217442][ T8185] XFS (loop5): Ending clean mount [ 342.220153][ T8185] XFS (loop5): Quotacheck needed: Please wait. [ 342.259730][ T8185] XFS (loop5): Quotacheck: Done. [ 342.299010][ T4931] XFS (loop5): Unmounting Filesystem [ 342.317947][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 342.559016][ T4304] Bluetooth: hci0: command 0x0419 tx timeout [ 342.683381][ T8195] loop5: detected capacity change from 0 to 128 [ 343.097319][ T6522] team0 (unregistering): Port device team_slave_1 removed [ 343.545960][ T6522] team0 (unregistering): Port device team_slave_0 removed [ 343.798650][ T6522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.892798][ T8201] loop5: detected capacity change from 0 to 32768 [ 343.907563][ T8201] XFS (loop5): Mounting V5 Filesystem [ 343.965968][ T8201] XFS (loop5): Ending clean mount [ 343.970756][ T8201] XFS (loop5): Quotacheck needed: Please wait. [ 343.994087][ T8201] XFS (loop5): Quotacheck: Done. [ 344.029001][ T6522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.037095][ T4931] XFS (loop5): Unmounting Filesystem [ 344.398137][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 344.424487][ T8211] loop5: detected capacity change from 0 to 512 [ 344.432051][ T8211] EXT2-fs (loop5): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 344.438279][ T8211] EXT2-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 344.440333][ T8211] EXT2-fs (loop5): 0.5b, 95/08/09, bs=2048, gc=1, bpg=16384, ipg=32, mo=8021c] [ 344.459396][ T8211] syz.5.991: attempt to access beyond end of device [ 344.459396][ T8211] loop5: rw=0, sector=511016, nr_sectors = 4 limit=512 [ 346.383914][ T8239] loop5: detected capacity change from 0 to 512 [ 346.399979][ T8239] EXT4-fs: Mount option(s) incompatible with ext3 [ 347.060436][ T6522] bond0 (unregistering): Released all slaves [ 347.469952][ T14] lo speed is unknown, defaulting to 1000 [ 347.472369][ T8239] device batadv_slave_1 entered promiscuous mode [ 347.474123][ T8240] device batadv_slave_1 left promiscuous mode [ 348.635591][ T8117] chnl_net:caif_netlink_parms(): no params data found [ 348.750891][ T8062] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 348.809862][ T8062] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 348.863889][ T8062] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 348.959859][ T8062] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 349.035343][ T8117] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.043967][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.053543][ T8117] device bridge_slave_0 entered promiscuous mode [ 349.078790][ T8117] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.080856][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.089940][ T8117] device bridge_slave_1 entered promiscuous mode [ 349.152587][ T8117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.181987][ T8117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.269839][ T8117] team0: Port device team_slave_0 added [ 349.271831][ T8288] fuse: Bad value for 'fd' [ 349.273751][ T8288] Process accounting resumed [ 349.285473][ T8117] team0: Port device team_slave_1 added [ 349.371973][ T8117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.373570][ T8117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.394967][ T8291] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1012'. [ 349.447901][ T8117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.451801][ T8117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.483076][ T8117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.502420][ T8117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.682018][ T8302] loop2: detected capacity change from 0 to 4096 [ 349.710037][ T8302] __ntfs_error: 71 callbacks suppressed [ 349.710052][ T8302] ntfs: (device loop2): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 349.713564][ T8302] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 349.736720][ T8302] ntfs: (device loop2): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 349.741064][ T8302] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 349.743626][ T8302] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 349.746928][ T8302] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 349.752671][ T8302] ntfs: (device loop2): map_mft_record_page(): Mft record 0x3 is corrupt. Run chkdsk. [ 349.754925][ T8302] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 349.756703][ T8302] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x3 as bad. Run chkdsk. [ 349.760718][ T8302] ntfs: (device loop2): load_system_files(): Failed to load $Volume. [ 350.802076][ T6522] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.889863][ T8117] device hsr_slave_0 entered promiscuous mode [ 350.926871][ T8117] device hsr_slave_1 entered promiscuous mode [ 350.975300][ T8117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.977030][ T8117] Cannot create hsr debugfs directory [ 351.069633][ T6522] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.087969][ T8062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.180961][ T8318] loop7: detected capacity change from 0 to 32768 [ 351.182977][ T8318] XFS: attr2 mount option is deprecated. [ 351.242001][ T6522] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.267459][ T8318] XFS (loop7): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 351.290270][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 351.292387][ T5009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.307043][ T8062] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.309853][ T8318] XFS (loop7): Quotacheck needed: Please wait. [ 351.335959][ T8317] loop2: detected capacity change from 0 to 32768 [ 351.338212][ T8317] XFS: ikeep mount option is deprecated. [ 351.339534][ T8317] XFS: noikeep mount option is deprecated. [ 351.345071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.347397][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.358143][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.359755][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.363048][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.365020][ T4572] XFS (loop7): Metadata CRC error detected at xfs_agfl_read_verify+0x184/0x248, xfs_agfl block 0x3 [ 351.372633][ T4572] XFS (loop7): Unmount and run xfs_repair [ 351.375411][ T4572] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 351.377067][ T4572] 00000000: 58 41 46 4c 00 00 00 00 bf dc 47 fc 10 d8 4e ed XAFL......G...N. [ 351.398130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.400606][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.402238][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.404086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.416356][ T4572] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 351.418641][ T4572] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 01 01 00 00 08 .;.............. [ 351.420664][ T4572] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 351.422472][ T4572] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 351.424261][ T4572] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 351.426157][ T4572] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 351.439456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.473319][ T4572] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 351.475517][ T4572] XFS (loop7): metadata I/O error in "xfs_alloc_read_agfl+0x1e8/0x3a0" at daddr 0x3 len 1 error 74 [ 351.503218][ T8318] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 351.529548][ T8317] XFS (loop2): Mounting V5 Filesystem [ 351.539719][ T6522] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.607333][ T8317] XFS (loop2): Ending clean mount [ 351.617562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.617723][ T8317] XFS (loop2): Quotacheck needed: Please wait. [ 351.628375][ T6382] XFS (loop7): Unmounting Filesystem [ 351.659943][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.662315][ T8317] XFS (loop2): Quotacheck: Done. [ 351.664038][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.723911][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.771453][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.773958][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.861752][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.864276][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.901295][ T8062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.904116][ T8062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 351.923450][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.925818][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 352.107985][ T4303] XFS (loop2): Unmounting Filesystem [ 352.855886][ T8117] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 352.969916][ T8117] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 353.125455][ T8117] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 353.200175][ T8117] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 353.501091][ T8399] loop5: detected capacity change from 0 to 164 [ 353.543727][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.545453][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.784975][ T8062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.963513][ T8117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.044542][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.047595][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.083025][ T8117] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.159130][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 354.161572][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.163576][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.164881][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.167390][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 354.196724][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.304627][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.306158][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.840441][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 354.855713][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 355.001179][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 355.003736][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 355.007589][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 355.069431][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 355.386104][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 355.393374][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 355.395615][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 355.410125][ T8448] loop5: detected capacity change from 0 to 4096 [ 355.415949][ T8448] __ntfs_error: 1 callbacks suppressed [ 355.415960][ T8448] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 355.421378][ T8448] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 355.424973][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.434268][ T8117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.437094][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 355.469554][ T8448] ntfs: (device loop5): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 355.472362][ T8448] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 355.475653][ T8448] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 355.479023][ T8448] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 355.482850][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.485089][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.498835][ T8448] ntfs: (device loop5): map_mft_record_page(): Mft record 0x3 is corrupt. Run chkdsk. [ 355.500842][ T8448] ntfs: (device loop5): map_mft_record(): Failed with error code 5. [ 355.502594][ T8448] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x3 as bad. Run chkdsk. [ 355.505179][ T8448] ntfs: (device loop5): load_system_files(): Failed to load $Volume. [ 355.913259][ T8062] device veth0_vlan entered promiscuous mode [ 355.919982][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.922197][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.924397][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 355.926492][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.962603][ T8062] device veth1_vlan entered promiscuous mode [ 355.968987][ T8457] loop5: detected capacity change from 0 to 32768 [ 355.979479][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.981681][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.984349][ T8457] XFS: ikeep mount option is deprecated. [ 355.986162][ T8457] XFS: noikeep mount option is deprecated. [ 356.802237][ T8457] XFS (loop5): Mounting V5 Filesystem [ 356.872592][ T6522] device hsr_slave_0 left promiscuous mode [ 356.911375][ T8457] XFS (loop5): Ending clean mount [ 356.918515][ T8457] XFS (loop5): Quotacheck needed: Please wait. [ 356.970659][ T6522] device hsr_slave_1 left promiscuous mode [ 356.981191][ T8457] XFS (loop5): Quotacheck: Done. [ 357.078234][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.079897][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.083392][ T6522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.086190][ T6522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.093350][ T6522] device bridge_slave_1 left promiscuous mode [ 357.095990][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.148900][ T6522] device bridge_slave_0 left promiscuous mode [ 357.150710][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.248485][ T4931] XFS (loop5): Unmounting Filesystem [ 357.316529][ T6522] device veth1_macvtap left promiscuous mode [ 357.317966][ T6522] device veth0_macvtap left promiscuous mode [ 357.319292][ T6522] device veth1_vlan left promiscuous mode [ 357.320492][ T6522] device veth0_vlan left promiscuous mode [ 357.342825][ T8478] loop7: detected capacity change from 0 to 32768 [ 357.344706][ T8478] XFS: attr2 mount option is deprecated. [ 357.345860][ T8478] XFS: ikeep mount option is deprecated. [ 357.347017][ T8478] XFS: noikeep mount option is deprecated. [ 357.392832][ T8478] XFS (loop7): Mounting V5 Filesystem [ 357.476606][ T8478] XFS (loop7): Ending clean mount [ 357.487116][ T8478] XFS (loop7): Quotacheck needed: Please wait. [ 357.532302][ T8478] XFS (loop7): Quotacheck: Done. [ 357.627084][ T6382] XFS (loop7): Unmounting Filesystem [ 359.253444][ T6522] team0 (unregistering): Port device team_slave_1 removed [ 359.440678][ T6522] team0 (unregistering): Port device team_slave_0 removed [ 359.629932][ T6522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.869392][ T6522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.476955][ T6522] bond0 (unregistering): Released all slaves [ 362.723455][ T8062] device veth0_macvtap entered promiscuous mode [ 362.727047][ T8062] device veth1_macvtap entered promiscuous mode [ 362.733665][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 362.735991][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 362.753834][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 362.758436][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 362.775446][ T8117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.950628][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.952254][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.973733][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.975997][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.988026][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.990295][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.992399][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.994475][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.032365][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.044347][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.046726][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.061650][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.063750][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.065749][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.080549][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.084177][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.086185][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.094620][ T8062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.096710][ T8062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.109137][ T8062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.117568][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.121538][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.134175][ T8062] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.135966][ T8062] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.137676][ T8062] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.153743][ T8062] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.258521][ T8528] loop2: detected capacity change from 0 to 4096 [ 363.299621][ T8528] __ntfs_error: 1 callbacks suppressed [ 363.299635][ T8528] ntfs: (device loop2): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 363.303012][ T8528] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 363.327986][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.329864][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.334301][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 363.336930][ T8528] ntfs: (device loop2): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 363.358393][ T8528] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 363.360372][ T8528] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 363.363090][ T8528] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 363.406114][ T4486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.414517][ T8528] ntfs: (device loop2): map_mft_record_page(): Mft record 0x3 is corrupt. Run chkdsk. [ 363.414868][ T4486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.416468][ T8528] ntfs: (device loop2): map_mft_record(): Failed with error code 5. [ 363.422644][ T8528] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x3 as bad. Run chkdsk. [ 363.427344][ T8528] ntfs: (device loop2): load_system_files(): Failed to load $Volume. [ 363.444157][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 363.446456][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.461895][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.494603][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.496777][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.501077][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.503460][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.505774][ T8117] device veth0_vlan entered promiscuous mode [ 363.517459][ T8117] device veth1_vlan entered promiscuous mode [ 363.550742][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.553680][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.556348][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.559044][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.616540][ T8117] device veth0_macvtap entered promiscuous mode [ 363.658211][ T8117] device veth1_macvtap entered promiscuous mode [ 363.693638][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.716415][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.719025][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.721307][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.723507][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.725634][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.744875][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.747069][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.754554][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.756726][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.760027][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.762146][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.764297][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.796203][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.816424][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.826122][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.834783][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.843125][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.845217][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.866131][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.875571][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.885722][ T8117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.894889][ T8117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.907289][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.935821][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 363.939339][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 363.982714][ T8117] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.984607][ T8117] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.986526][ T8117] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.007495][ T8117] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.063394][ T8557] loop8: detected capacity change from 0 to 512 [ 364.161926][ T8557] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 364.164062][ T8557] EXT4-fs (loop8): 1 truncate cleaned up [ 364.165415][ T8557] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 364.170792][ T8557] EXT4-fs (loop8): unmounting filesystem. [ 364.238980][ T4572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.240801][ T4572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.247329][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 364.311877][ T1576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.313875][ T1576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.344820][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 364.653731][ T8575] loop8: detected capacity change from 0 to 128 [ 364.678867][ T8575] EXT4-fs: Ignoring removed nobh option [ 364.690777][ T8575] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 364.732040][ T8552] loop7: detected capacity change from 0 to 32768 [ 364.750378][ T8546] loop2: detected capacity change from 0 to 32768 [ 364.770569][ T8546] XFS: ikeep mount option is deprecated. [ 364.772046][ T8546] XFS: noikeep mount option is deprecated. [ 364.841753][ T8552] XFS (loop7): Mounting V5 Filesystem [ 364.866355][ T8546] XFS (loop2): Mounting V5 Filesystem [ 364.889916][ T8062] EXT4-fs error (device loop8): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 364.896763][ T8062] EXT4-fs error (device loop8): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 364.947514][ T8062] EXT4-fs error (device loop8): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 364.989342][ T8552] XFS (loop7): Ending clean mount [ 364.994472][ T8552] XFS (loop7): Quotacheck needed: Please wait. [ 365.016038][ T8062] EXT4-fs error (device loop8): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 365.037180][ T8062] EXT4-fs error (device loop8): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 365.064721][ T8062] EXT4-fs error (device loop8): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 365.072022][ T8546] XFS (loop2): Ending clean mount [ 365.087951][ T8062] EXT4-fs error (device loop8): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 365.095655][ T8546] XFS (loop2): Quotacheck needed: Please wait. [ 365.102370][ T8552] XFS (loop7): Quotacheck: Done. [ 365.122807][ T8062] EXT4-fs error (device loop8): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 365.129029][ T8062] EXT4-fs error (device loop8): ext4_readdir:220: inode #11: comm syz-executor: path /3/mnt/lost+found: directory fails checksum at offset 1024 [ 365.146190][ T8062] EXT4-fs error (device loop8): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 365.188396][ T8546] XFS (loop2): Quotacheck: Done. [ 365.291874][ T6382] XFS (loop7): Unmounting Filesystem [ 365.575333][ T4303] XFS (loop2): Unmounting Filesystem [ 365.718533][ T8617] loop9: detected capacity change from 0 to 512 [ 365.783686][ T8617] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 365.970389][ T8117] EXT4-fs (loop9): unmounting filesystem. [ 366.004076][ T8062] EXT4-fs (loop8): unmounting filesystem. [ 366.412652][ T5529] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.572515][ T5529] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.661758][ T4295] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.675188][ T4295] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.678019][ T4295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.681517][ T4295] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.683493][ T4295] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 366.685216][ T4295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.778567][ T5529] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.960715][ T5529] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.973187][ T8666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1082'. [ 366.985860][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.988865][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.059493][ T8668] device bridge_slave_1 left promiscuous mode [ 367.062984][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.102914][ T8672] loop2: detected capacity change from 0 to 512 [ 367.162545][ T8668] device bridge_slave_0 left promiscuous mode [ 367.163894][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.228157][ T8672] EXT4-fs (loop2): 1 orphan inode deleted [ 367.229422][ T8672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 367.248189][ T4572] EXT4-fs error (device loop2): ext4_release_dquot:6817: comm kworker/u4:13: Failed to release dquot type 1 [ 367.352004][ T4303] EXT4-fs (loop2): unmounting filesystem. [ 367.560870][ T8687] loop5: detected capacity change from 0 to 2048 [ 367.607482][ T8687] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 367.793854][ T8694] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 367.856920][ T8694] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 362 with error 28 [ 367.873090][ T8694] EXT4-fs (loop5): This should not happen!! Data will be lost [ 367.873090][ T8694] [ 367.884386][ T8694] EXT4-fs (loop5): Total free blocks count 0 [ 367.894226][ T8694] EXT4-fs (loop5): Free/Dirty block details [ 367.895779][ T8694] EXT4-fs (loop5): free_blocks=2415919504 [ 367.916500][ T8694] EXT4-fs (loop5): dirty_blocks=368 [ 367.922087][ T8694] EXT4-fs (loop5): Block reservation details [ 367.930517][ T8694] EXT4-fs (loop5): i_reserved_data_blocks=23 [ 368.114435][ T8717] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 368.114742][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 368.167961][ T1576] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 368.305271][ T8724] loop7: detected capacity change from 0 to 512 [ 368.328572][ T8724] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.386618][ T8724] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 368.462435][ T8740] loop2: detected capacity change from 0 to 2048 [ 368.489733][ T8740] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 368.491549][ T8740] UDF-fs: Scanning with blocksize 512 failed [ 368.503594][ T8740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.517765][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.519558][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.521989][ T8648] device bridge_slave_0 entered promiscuous mode [ 368.545908][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.548933][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.556902][ T8648] device bridge_slave_1 entered promiscuous mode [ 368.620093][ T6382] EXT4-fs (loop7): unmounting filesystem. [ 368.717962][ T4295] Bluetooth: hci0: command 0x0409 tx timeout [ 368.784489][ T8755] loop5: detected capacity change from 0 to 512 [ 368.786337][ T8755] EXT4-fs: Ignoring removed nobh option [ 368.787705][ T8755] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.819216][ T8755] EXT4-fs: Mount option(s) incompatible with ext3 [ 368.829820][ T8753] loop2: detected capacity change from 0 to 2048 [ 368.864623][ T8753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 368.868733][ T8753] EXT4-fs (loop2): unmounting filesystem. [ 368.898795][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.934356][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.230108][ T8648] team0: Port device team_slave_0 added [ 369.230463][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 369.230475][ T27] audit: type=1107 audit(882.210:92): pid=8776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 369.240178][ T8648] team0: Port device team_slave_1 added [ 369.261975][ T8780] overlayfs: missing 'lowerdir' [ 369.390529][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.390548][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.390568][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.391920][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.391934][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.391953][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.609787][ T8648] device hsr_slave_0 entered promiscuous mode [ 369.628936][ T8648] device hsr_slave_1 entered promiscuous mode [ 369.668116][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.669839][ T8648] Cannot create hsr debugfs directory [ 370.036797][ T8812] bridge0: port 3(vlan2) entered blocking state [ 370.040622][ T8812] bridge0: port 3(vlan2) entered disabled state [ 370.222746][ T8816] loop2: detected capacity change from 0 to 128 [ 370.418499][ T8822] ------------[ cut here ]------------ [ 370.419808][ T8822] WARNING: CPU: 1 PID: 8822 at mm/page_alloc.c:5581 __alloc_pages+0x32c/0x730 [ 370.421623][ T8822] Modules linked in: [ 370.422406][ T8822] CPU: 1 PID: 8822 Comm: syz.5.1123 Tainted: G W 6.1.120-syzkaller #0 [ 370.424235][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 370.426321][ T8822] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 370.427937][ T8822] pc : __alloc_pages+0x32c/0x730 [ 370.428985][ T8822] lr : __alloc_pages+0xc8/0x730 [ 370.430020][ T8822] sp : ffff800022077760 [ 370.430847][ T8822] x29: ffff800022077850 x28: ffff800022077780 x27: dfff800000000000 [ 370.432713][ T8822] x26: ffff70000440eef0 x25: 0000000000000000 x24: ffff8000220777a0 [ 370.434384][ T8822] x23: 0000000000000000 x22: 0000000000040d40 x21: 1ffff0000440eef4 [ 370.436068][ T8822] x20: ffff8000220777c0 x19: 0000000000000023 x18: ffff8000220772c0 [ 370.437824][ T8822] x17: ffff800018b6b000 x16: ffff800012276780 x15: ffff80001864bf80 [ 370.439607][ T8822] x14: 1ffff00002b500b2 x13: dfff800000000000 x12: 0000000000000005 [ 370.441359][ T8822] x11: 1ffff0000440eef8 x10: 0000000000000000 x9 : 0000000000000001 [ 370.442972][ T8822] x8 : ffff8000183fd000 x7 : 0000000000000000 x6 : 0000000000000000 [ 370.444745][ T8822] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000020 [ 370.446428][ T8822] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff8000220777c0 [ 370.448218][ T8822] Call trace: [ 370.448930][ T8822] __alloc_pages+0x32c/0x730 [ 370.449885][ T8822] __kmalloc_large_node+0xbc/0x21c [ 370.450918][ T8822] __kmalloc+0x130/0x1c4 [ 370.451792][ T8822] __v9fs_get_acl+0x58/0x150 [ 370.452671][ T8822] v9fs_get_acl+0xa4/0x2c8 [ 370.453616][ T8822] v9fs_mount+0x77c/0xa5c [ 370.454596][ T8822] legacy_get_tree+0xd4/0x16c [ 370.455621][ T8822] vfs_get_tree+0x90/0x274 [ 370.456604][ T8822] do_new_mount+0x278/0x8fc [ 370.457609][ T8822] path_mount+0x590/0xe5c [ 370.458566][ T8822] __arm64_sys_mount+0x45c/0x594 [ 370.459640][ T8822] invoke_syscall+0x98/0x2bc [ 370.460640][ T8822] el0_svc_common+0x138/0x258 [ 370.461743][ T8822] do_el0_svc+0x58/0x13c [ 370.462623][ T8822] el0_svc+0x58/0x168 [ 370.463400][ T8822] el0t_64_sync_handler+0x84/0xf0 [ 370.464422][ T8822] el0t_64_sync+0x18c/0x190 [ 370.465385][ T8822] irq event stamp: 1240 [ 370.466288][ T8822] hardirqs last enabled at (1239): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 370.468436][ T8822] hardirqs last disabled at (1240): [] el1_dbg+0x24/0x80 [ 370.470254][ T8822] softirqs last enabled at (1096): [] bdi_register_va+0x508/0x880 [ 370.472246][ T8822] softirqs last disabled at (1094): [] bdi_register_va+0x2f0/0x880 [ 370.474280][ T8822] ---[ end trace 0000000000000000 ]--- [ 370.674988][ T5529] device hsr_slave_0 left promiscuous mode [ 370.762195][ T5529] device hsr_slave_1 left promiscuous mode [ 370.798645][ T4295] Bluetooth: hci0: command 0x041b tx timeout [ 370.858116][ T5529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.859722][ T5529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.871282][ T5529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.872981][ T5529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.888571][ T5529] device bridge_slave_1 left promiscuous mode [ 370.890082][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.953984][ T5529] device bridge_slave_0 left promiscuous mode [ 370.955583][ T5529] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.137992][ T5529] device veth1_macvtap left promiscuous mode [ 371.139429][ T5529] device veth0_macvtap left promiscuous mode [ 371.140716][ T5529] device veth1_vlan left promiscuous mode [ 371.141994][ T5529] device veth0_vlan left promiscuous mode [ 373.393226][ T5529] team0 (unregistering): Port device team_slave_1 removed [ 373.600388][ T5529] team0 (unregistering): Port device team_slave_0 removed [ 373.809705][ T5529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.059844][ T5529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.799865][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.801431][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.820692][ T5529] bond0 (unregistering): Released all slaves [ 379.609398][ T5529] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.711776][ T5529] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.789595][ T5529] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.901265][ T5529] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.201214][ T5529] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.310764][ T5529] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.381730][ T5529] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0