last executing test programs: 1m8.380120681s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1510d0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x41) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 1m8.161795793s ago: executing program 2 (id=6): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x101, 0x100, 0x1) 1m7.136093694s ago: executing program 2 (id=12): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000100)=0x9f, 0x8) 1m6.926505666s ago: executing program 32 (id=12): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000100)=0x9f, 0x8) 58.543653103s ago: executing program 0 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, 0x0) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) setgroups(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x101002, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.539512432s ago: executing program 0 (id=64): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 55.923744288s ago: executing program 0 (id=72): mmap(&(0x7f0000249000/0x1000)=nil, 0x1000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r2, 0x10, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000400000073110a000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 55.747307619s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1510d0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x41) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 55.301827015s ago: executing program 0 (id=74): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, 0x0) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0x0) setgroups(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x101002, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.675940252s ago: executing program 0 (id=78): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 53.827050352s ago: executing program 33 (id=78): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 6.776630459s ago: executing program 1 (id=373): request_key(0x0, &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000001400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = creat(&(0x7f0000001280)='./file0\x00', 0xb) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r6, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x29}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x12040911}, 0x40) ioctl$TCFLSH(r4, 0x5608, 0x3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2, 0x6, 0x5) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4) write$nci(r3, 0x0, 0x0) 5.677205034s ago: executing program 1 (id=379): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x1a0, 0x2e8, 0x98, 0x1a0, 0x250, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @private=0xa010101, 0x0, 0xff, 'macvlan0\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x53}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) 5.477601496s ago: executing program 1 (id=382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x7, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x800009, 0x9, 0x100, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x7ff, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0xfffffffb, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x203ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x4, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x75, 0x2, 0x88f, 0x3, 0x1, 0xffffffff}, {0x7, 0x1, 0x8, 0x4, 0xf0, 0x9}, 0x4, 0xfff, 0x11b0}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 4.88928784s ago: executing program 1 (id=386): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r3 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8040) socket$kcm(0x10, 0x2, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.497712693s ago: executing program 5 (id=396): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x3, 0x3, 0x4, 0xd, 0x5, 0xb, 0x8, 0x7, 0x5, 0x6, 0x3, 0x5, 0x8, 0xf, 0x3], 0x1, [0x1, 0x10, 0x3, 0x9, 0x31d4, 0x6, 0x6, 0xadf, 0x7fff, 0x7, 0xff, 0x800, 0xcbe6, 0xd80, 0xf638, 0x1], [0x3, 0x9, 0x8, 0x4, 0x0, 0x3, 0xc, 0x6, 0x5, 0x0, 0xe, 0x8001, 0x8a67, 0x4, 0x7fff, 0xfffe]}}]}}]}, 0x8c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.426566477s ago: executing program 4 (id=397): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x3, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 3.386781619s ago: executing program 6 (id=399): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456", @ANYRES16, @ANYRES16], 0xef, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) 3.147845853s ago: executing program 4 (id=401): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x54, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}}, 0x0) 3.076428218s ago: executing program 5 (id=402): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(0xffffffffffffffff, r3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000040) sendmmsg$inet6(r0, 0x0, 0x0, 0x24000010) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x6}]}, 0x20}}, 0x0) 2.811951784s ago: executing program 6 (id=404): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @loopback}, 0x2, 0x9800}}, 0x2e) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.149517383s ago: executing program 3 (id=405): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) 1.976664233s ago: executing program 5 (id=406): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.915908886s ago: executing program 3 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x7, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x800009, 0x9, 0x100, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x7ff, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0xfffffffb, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x203ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x4, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x75, 0x2, 0x88f, 0x3, 0x1, 0xffffffff}, {0x7, 0x1, 0x8, 0x4, 0xf0, 0x9}, 0x4, 0xfff, 0x11b0}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.732665117s ago: executing program 5 (id=408): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000880) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x2a000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) 1.274750185s ago: executing program 1 (id=409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() shutdown(0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xd, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.274495335s ago: executing program 4 (id=410): mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, 0xffffffffffffffff, 0x8000000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x800, 0x0, 0x303, 0x2fd}}) 1.201540469s ago: executing program 6 (id=411): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.156219221s ago: executing program 4 (id=412): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x3, 0x3, 0x4, 0xd, 0x5, 0xb, 0x8, 0x7, 0x5, 0x6, 0x3, 0x5, 0x8, 0xf, 0x3], 0x1, [0x1, 0x10, 0x3, 0x9, 0x31d4, 0x6, 0x6, 0xadf, 0x7fff, 0x7, 0xff, 0x800, 0xcbe6, 0xd80, 0xf638, 0x1], [0x3, 0x9, 0x8, 0x4, 0x0, 0x3, 0xc, 0x6, 0x5, 0x0, 0xe, 0x8001, 0x8a67, 0x4, 0x7fff, 0xfffe]}}]}}]}, 0x8c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.107892654s ago: executing program 5 (id=413): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) pipe(&(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffff9, 0x0, 0xfd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.021747769s ago: executing program 3 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x30, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x5, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x8c1b5e9789d55504, 0x4, @multicast1, @loopback}}}}}}, 0x0) 1.01985552s ago: executing program 1 (id=415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 765.433115ms ago: executing program 3 (id=416): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='decodes m'], 0xd) 765.177465ms ago: executing program 4 (id=417): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) sendto$inet(r0, &(0x7f0000000680)="67ac2960dbf834b888a8b0b37d", 0xd, 0x841, 0x0, 0x0) syz_emit_ethernet(0xe, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='{', 0x1}], 0x1}}], 0x1, 0x4000055) 762.484405ms ago: executing program 6 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 604.066524ms ago: executing program 6 (id=419): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000012c0)={[{@nobarrier}, {@usrjquota}]}, 0xfd, 0x4bd, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) unlink(&(0x7f0000000100)='./file0\x00') 603.889384ms ago: executing program 4 (id=420): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 603.805464ms ago: executing program 3 (id=421): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300840e, &(0x7f00000003c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r0, 0x0, 0x478) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 323.279281ms ago: executing program 3 (id=422): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000100)='./file0\x00', 0x0, r1) 228.210897ms ago: executing program 6 (id=423): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) 0s ago: executing program 5 (id=424): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x19, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(0xffffffffffffffff, r3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000040) sendmmsg$inet6(r0, &(0x7f00000010c0)=[{{&(0x7f0000000c80)={0xa, 0x4e23, 0x2ce4db85, @local, 0xffff}, 0x1c, 0x0, 0x0, &(0x7f0000000f80)=[@hopopts={{0x18, 0x29, 0x36, {0x3a}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x30}}], 0x1, 0x24000010) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x6}]}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 48.934035][ T4171] cgroup: Unknown subsys name 'net' [ 49.060410][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.329973][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 51.698823][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 51.789389][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 51.846830][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 51.872519][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.879817][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.890073][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.898940][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 51.926538][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.933753][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.942452][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.019397][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.027061][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.034952][ T4188] device bridge_slave_0 entered promiscuous mode [ 52.045032][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.072443][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.080023][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.088679][ T4188] device bridge_slave_1 entered promiscuous mode [ 52.097497][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.116617][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.123693][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.132243][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.159080][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 52.179322][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.186837][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.194566][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.203827][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.219875][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.227352][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.235438][ T4193] device bridge_slave_0 entered promiscuous mode [ 52.248469][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.255867][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.263669][ T4193] device bridge_slave_1 entered promiscuous mode [ 52.292356][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.305267][ T4191] team0: Port device team_slave_0 added [ 52.324357][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.342339][ T4191] team0: Port device team_slave_1 added [ 52.363052][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.374175][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.393379][ T4188] team0: Port device team_slave_0 added [ 52.411155][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.429429][ T4188] team0: Port device team_slave_1 added [ 52.436360][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.443408][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.471144][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.509712][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.517219][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.543712][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.568899][ T4193] team0: Port device team_slave_0 added [ 52.582710][ T4193] team0: Port device team_slave_1 added [ 52.597235][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.604314][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.631249][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.643093][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.650506][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.658805][ T4194] device bridge_slave_0 entered promiscuous mode [ 52.675595][ T4184] team0: Port device team_slave_0 added [ 52.690422][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.697926][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.724061][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.744940][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.752571][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.760398][ T4194] device bridge_slave_1 entered promiscuous mode [ 52.767834][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.775055][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.802124][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.815045][ T4184] team0: Port device team_slave_1 added [ 52.854735][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.862013][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.888428][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.900629][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.908192][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.935372][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.953723][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.961201][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.987705][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.002143][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.009295][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.027545][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.056682][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.072554][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.080599][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.087540][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.096691][ T4188] Cannot create hsr debugfs directory [ 53.156667][ T4193] device hsr_slave_0 entered promiscuous mode [ 53.163930][ T4193] device hsr_slave_1 entered promiscuous mode [ 53.171000][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.179188][ T4193] Cannot create hsr debugfs directory [ 53.189587][ T4184] device hsr_slave_0 entered promiscuous mode [ 53.196774][ T4184] device hsr_slave_1 entered promiscuous mode [ 53.203600][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.211617][ T4184] Cannot create hsr debugfs directory [ 53.219302][ T4194] team0: Port device team_slave_0 added [ 53.268506][ T4194] team0: Port device team_slave_1 added [ 53.352639][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.359822][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.388662][ T4173] Bluetooth: hci0: command 0x0409 tx timeout [ 53.395386][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.428322][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.435367][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.455534][ T1324] Bluetooth: hci2: command 0x0409 tx timeout [ 53.462334][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 53.473374][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.535702][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 53.541281][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 53.596394][ T4194] device hsr_slave_0 entered promiscuous mode [ 53.603209][ T4194] device hsr_slave_1 entered promiscuous mode [ 53.610506][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.618949][ T4194] Cannot create hsr debugfs directory [ 53.688721][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.702645][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.726120][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.735820][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.811745][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.821173][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.831979][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.843513][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.921214][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.940480][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.952158][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.974070][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.014002][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.032092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.042370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.052335][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.077995][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.109743][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.117208][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.126447][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.157455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.167924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.177724][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.185579][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.202432][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.216990][ T4194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.226784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.237890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.247638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.256805][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.264949][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.296075][ T4194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.305291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.314291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.323852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.334363][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.344094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.357036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.368557][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.384841][ T4194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.394410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.403430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.413601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.422415][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.430169][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.438501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.447746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.456410][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.464051][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.473645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.498550][ T4194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.517223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.526650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.538882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.547804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.557442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.567378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.577321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.586532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.599434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.609032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.621950][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.640164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.649645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.659894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.676304][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.698642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.707859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.741360][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.759891][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.770033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.779803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.788494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.798420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.824255][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.868664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.887772][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.922754][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.930388][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.949326][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.968717][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.981581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.994497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.007970][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.015499][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.024460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.044267][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.062912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.072518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.081751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.090779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.098823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.109067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.118526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.146920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.157020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.166530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.175729][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.183157][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.191338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.201128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.210743][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.217890][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.231156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.254690][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.267603][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.284916][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.301760][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.312437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.322258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.330902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.341158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.350436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.359307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.368520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.377466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.406652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.420437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.431794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.442097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.452953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.462682][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 55.470816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.481030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.490958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.500195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.512178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.530562][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.546069][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 55.546116][ T4250] Bluetooth: hci2: command 0x041b tx timeout [ 55.563820][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.589904][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.603539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.614235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.622956][ T4238] Bluetooth: hci3: command 0x041b tx timeout [ 55.625909][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 55.638028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.647075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.690731][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.700264][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.708941][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.718333][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.731510][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.747585][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.755117][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.794894][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.821860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.833200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.842911][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.850032][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.859140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.867456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.875976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.884756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.894187][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.901710][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.909961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.918516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.927030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.935116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.946417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.954386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.963499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.971913][ T4191] device veth0_vlan entered promiscuous mode [ 55.990781][ T4188] device veth0_vlan entered promiscuous mode [ 56.003950][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.019632][ T4191] device veth1_vlan entered promiscuous mode [ 56.031298][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.045850][ T4188] device veth1_vlan entered promiscuous mode [ 56.085826][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.093921][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.104695][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.112648][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.124812][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.133544][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.142839][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.152143][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.161736][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.170723][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.180708][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.189026][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.207421][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.217425][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.234640][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.243722][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.253889][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.262889][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.279122][ T4184] device veth0_vlan entered promiscuous mode [ 56.294471][ T4184] device veth1_vlan entered promiscuous mode [ 56.306535][ T4188] device veth0_macvtap entered promiscuous mode [ 56.317994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.326789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.336183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.345074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.354265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.363019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.386865][ T4191] device veth0_macvtap entered promiscuous mode [ 56.400804][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.411327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.423406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.434083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.442907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.451702][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.462178][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.473870][ T4193] device veth0_vlan entered promiscuous mode [ 56.482825][ T4191] device veth1_macvtap entered promiscuous mode [ 56.490894][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.499440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.509498][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.519503][ T4188] device veth1_macvtap entered promiscuous mode [ 56.539431][ T4193] device veth1_vlan entered promiscuous mode [ 56.559753][ T4184] device veth0_macvtap entered promiscuous mode [ 56.578548][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.593554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.602455][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.612141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.626420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.634649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.644891][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.656854][ T4184] device veth1_macvtap entered promiscuous mode [ 56.697204][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.708196][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.722033][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.731228][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.740654][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.750022][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.760952][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.773161][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.786761][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.801288][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.814318][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.825728][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.836949][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.849139][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.858888][ T4193] device veth0_macvtap entered promiscuous mode [ 56.867547][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.877581][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.886636][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.897414][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.907491][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.916665][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.926723][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.935896][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.946878][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.958212][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.967226][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.977287][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.995425][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.004900][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.020526][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.032235][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.043262][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.054603][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.068260][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.078517][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.087437][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.097206][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.105969][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.116993][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.126943][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.136795][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.146040][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.180675][ T4193] device veth1_macvtap entered promiscuous mode [ 57.190179][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.199221][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.208116][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.218164][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.265713][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.273435][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.284711][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.296223][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.306488][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.317517][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.327559][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.338457][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.350574][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.360531][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.372285][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.382748][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.393822][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.404102][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.414831][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.426739][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.443657][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.454534][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.464480][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.473408][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.507615][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.518143][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.528952][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.539201][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.545632][ T4238] Bluetooth: hci0: command 0x040f tx timeout [ 57.560607][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.616712][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 57.623093][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 57.660056][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.675060][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.698160][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.708544][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 57.715649][ T4245] Bluetooth: hci3: command 0x040f tx timeout [ 57.721627][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.731460][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.743634][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.751883][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.760628][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.782282][ T4194] device veth0_vlan entered promiscuous mode [ 57.795250][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.803442][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.804338][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.822427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.832522][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.841217][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.850606][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.864701][ T4194] device veth1_vlan entered promiscuous mode [ 57.877837][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.895748][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.904742][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.921837][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.934289][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.946825][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.964203][ T4194] device veth0_macvtap entered promiscuous mode [ 57.987340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.009600][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.024140][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.049194][ T4194] device veth1_macvtap entered promiscuous mode [ 58.067309][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.077566][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.098455][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.135007][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.151196][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.159217][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.177488][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.201467][ T4292] loop4: detected capacity change from 0 to 2048 [ 58.202281][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.220219][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.232942][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.243780][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.252828][ T4292] EXT4-fs (loop4): Ignoring removed bh option [ 58.256125][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.274256][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.289645][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.294664][ T4264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.307855][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.316702][ T4264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.328568][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.334427][ T4292] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 58.339353][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.375358][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.425871][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.436411][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.447964][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.458734][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.470804][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.486054][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.501961][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.517480][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.554582][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.599547][ T4300] loop3: detected capacity change from 0 to 1024 [ 58.602838][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.637331][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.647631][ T4300] ======================================================= [ 58.647631][ T4300] WARNING: The mand mount option has been deprecated and [ 58.647631][ T4300] and is ignored by this kernel. Remove the mand [ 58.647631][ T4300] option from the mount to silence this warning. [ 58.647631][ T4300] ======================================================= [ 58.688330][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.697556][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.708210][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.727083][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.751218][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.772515][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.838314][ T4300] EXT4-fs (loop3): Ignoring removed bh option [ 58.934495][ T4300] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 58.994406][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.030202][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.090701][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.112943][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.149720][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.162692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.308947][ T4300] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.4: Allocating blocks 209-513 which overlap fs metadata [ 59.354283][ T4313] loop0: detected capacity change from 0 to 256 [ 59.507949][ T4315] lo speed is unknown, defaulting to 1000 [ 59.536657][ T4315] lo speed is unknown, defaulting to 1000 [ 59.560079][ T4315] lo speed is unknown, defaulting to 1000 [ 59.612527][ T4315] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.627059][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 59.689633][ T4315] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.696539][ T4318] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 59.711609][ T4245] Bluetooth: hci1: command 0x0419 tx timeout [ 59.725490][ T4245] Bluetooth: hci2: command 0x0419 tx timeout [ 59.776466][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 59.890037][ T4315] lo speed is unknown, defaulting to 1000 [ 59.905535][ T4323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8'. [ 59.925723][ T4323] device ip_vti0 entered promiscuous mode [ 59.945046][ T4315] lo speed is unknown, defaulting to 1000 [ 59.960481][ T4315] lo speed is unknown, defaulting to 1000 [ 59.981589][ T4315] lo speed is unknown, defaulting to 1000 [ 60.006756][ T4315] lo speed is unknown, defaulting to 1000 [ 60.023551][ T4315] lo speed is unknown, defaulting to 1000 [ 60.203528][ T4328] loop4: detected capacity change from 0 to 512 [ 60.235044][ T4206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.312259][ T4328] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.345315][ T4328] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.432924][ T4206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.642272][ T4206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.761973][ T4206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.093393][ T4349] lo speed is unknown, defaulting to 1000 [ 61.424857][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27'. [ 61.615674][ T4381] loop0: detected capacity change from 0 to 512 [ 61.775783][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.776301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.776857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.777931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.778988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.780044][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.781102][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.782166][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.783222][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.784273][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 62.454317][ T4381] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 62.464899][ T4381] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 62.474778][ T4381] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 62.509998][ T4381] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 62.518287][ T4381] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 62.526678][ T4381] EXT4-fs (loop0): failed to initialize system zone (-117) [ 62.534152][ T4381] EXT4-fs (loop0): mount failed [ 62.627742][ T4349] chnl_net:caif_netlink_parms(): no params data found [ 62.718751][ T4397] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 62.921165][ T4407] loop0: detected capacity change from 0 to 512 [ 62.926708][ T4402] loop4: detected capacity change from 0 to 1024 [ 62.975925][ T4225] Bluetooth: hci4: command 0x0409 tx timeout [ 62.978389][ T4402] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 62.978436][ T4407] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.978594][ T4407] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.978608][ T4407] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 63.133543][ T4407] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 63.157701][ T4402] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.34: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 63.159119][ T4402] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.34: couldn't read orphan inode 11 (err -117) [ 63.159310][ T4402] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,noload,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 63.182019][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.182113][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.183294][ T4349] device bridge_slave_0 entered promiscuous mode [ 63.193435][ T4407] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 63.193539][ T4407] System zones: 0-2, 18-18, 34-35 [ 63.262867][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.262907][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.263956][ T4349] device bridge_slave_1 entered promiscuous mode [ 63.287105][ T4402] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.34: Invalid block bitmap block 0 in block_group 0 [ 63.292126][ T4407] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.323021][ T4402] Quota error (device loop4): write_blk: dquota write failed [ 63.342079][ T4349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.382254][ T4420] loop1: detected capacity change from 0 to 128 [ 63.388820][ T4402] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 63.411861][ T4402] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.34: Failed to acquire dquot type 0 [ 63.447384][ T4264] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 63.447532][ T4264] EXT4-fs error (device loop4): ext4_release_dquot:6270: comm kworker/u4:5: Failed to release dquot type 0 [ 63.457717][ T4420] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 63.457842][ T4420] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.527973][ T4349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.598735][ T4424] process 'syz.1.37' launched './file1' with NULL argv: empty string added [ 63.602298][ T4349] team0: Port device team_slave_0 added [ 63.771719][ T4349] team0: Port device team_slave_1 added [ 63.793551][ T4349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.875049][ T4349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.875079][ T4349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.897941][ T4428] loop4: detected capacity change from 0 to 128 [ 63.945751][ T4349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.945767][ T4349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.945787][ T4349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.954998][ T4430] netlink: 'syz.1.39': attribute type 29 has an invalid length. [ 63.957471][ T4430] netlink: 'syz.1.39': attribute type 29 has an invalid length. [ 63.988179][ T4428] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.988266][ T4428] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.085732][ T4430] netlink: 'syz.1.39': attribute type 29 has an invalid length. [ 64.137398][ T4349] device hsr_slave_0 entered promiscuous mode [ 64.216740][ T4349] device hsr_slave_1 entered promiscuous mode [ 64.282157][ T4349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.300343][ T4349] Cannot create hsr debugfs directory [ 64.334991][ T4439] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 64.577875][ T4449] loop3: detected capacity change from 0 to 128 [ 65.055865][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 65.080209][ T4457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.44'. [ 65.468566][ T4465] loop4: detected capacity change from 0 to 256 [ 65.776950][ T4415] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 66.243504][ T4206] device hsr_slave_0 left promiscuous mode [ 66.263681][ T4206] device hsr_slave_1 left promiscuous mode [ 66.294167][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.298426][ T4475] loop4: detected capacity change from 0 to 128 [ 66.305329][ T4206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.324867][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.366248][ T4206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.384507][ T4206] device bridge_slave_1 left promiscuous mode [ 66.400848][ T4475] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 66.401016][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.428034][ T4475] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.451765][ T4206] device bridge_slave_0 left promiscuous mode [ 66.458077][ T4206] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.516024][ T4206] device veth1_macvtap left promiscuous mode [ 66.606037][ T4206] device veth0_macvtap left promiscuous mode [ 66.624612][ T4206] device veth1_vlan left promiscuous mode [ 66.636477][ T4206] device veth0_vlan left promiscuous mode [ 66.717271][ T4485] loop4: detected capacity change from 0 to 256 [ 66.766798][ T4485] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.106578][ T4488] loop4: detected capacity change from 0 to 512 [ 67.138871][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 67.161176][ T4488] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 67.198468][ T4488] EXT4-fs (loop4): 1 truncate cleaned up [ 67.215413][ T4488] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,,errors=continue. Quota mode: writeback. [ 67.303998][ T4488] EXT4-fs (loop4): re-mounted. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,noinit_itable,noblock_validity,. Quota mode: writeback. [ 67.533395][ T4206] team0 (unregistering): Port device team_slave_1 removed [ 67.629575][ T4495] netlink: 32 bytes leftover after parsing attributes in process `syz.4.56'. [ 67.642024][ T4206] team0 (unregistering): Port device team_slave_0 removed [ 67.698709][ T4206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.645162][ C0] sched: RT throttling activated [ 69.218343][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 69.258544][ T4206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.370541][ T4206] bond0 (unregistering): Released all slaves [ 69.431942][ T4505] lo speed is unknown, defaulting to 1000 [ 69.606915][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 69.661587][ T4349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.695069][ T4349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.786735][ T4349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.824624][ T4349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.903629][ T4530] netlink: 'syz.0.64': attribute type 10 has an invalid length. [ 71.015653][ T4530] team0: Port device dummy0 added [ 71.064642][ T4530] syz.0.64 (4530) used greatest stack depth: 20048 bytes left [ 71.105791][ T4536] netlink: 'syz.0.64': attribute type 10 has an invalid length. [ 71.133376][ T4536] team0: Port device dummy0 removed [ 71.183315][ T4536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.410175][ T4558] loop3: detected capacity change from 0 to 512 [ 71.478345][ T4349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.539512][ T4567] lo speed is unknown, defaulting to 1000 [ 71.661922][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.680842][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.712086][ T4558] EXT4-fs (loop3): Ignoring removed nobh option [ 71.780898][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.791318][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.802686][ T4349] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.835356][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.873768][ T4558] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 71.896103][ T4558] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.896730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.976678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.986241][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.993727][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.002410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.012799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.022469][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.029638][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.041272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.081665][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.115655][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 72.185303][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.202914][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.254903][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.284362][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 72.302299][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.312487][ T4580] usb usb1: usbfs: process 4580 (syz.4.75) did not claim interface 0 before use [ 72.323530][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.376710][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.399680][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.417251][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.555503][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.568064][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.577589][ T23] usb 2-1: SerialNumber: syz [ 72.603765][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.612879][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.629848][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.774493][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.258768][ T4245] usb 2-1: USB disconnect, device number 2 [ 73.659620][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.672677][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.014961][ T4349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.269853][ T4609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.83'. [ 74.331731][ T4606] lo speed is unknown, defaulting to 1000 [ 74.382763][ T4621] loop3: detected capacity change from 0 to 256 [ 74.534329][ T4621] FAT-fs (loop3): Directory bread(block 64) failed [ 74.585512][ T4621] FAT-fs (loop3): Directory bread(block 65) failed [ 74.592307][ T4621] FAT-fs (loop3): Directory bread(block 66) failed [ 74.632257][ T4621] FAT-fs (loop3): Directory bread(block 67) failed [ 74.660459][ T4621] FAT-fs (loop3): Directory bread(block 68) failed [ 74.695294][ T4621] FAT-fs (loop3): Directory bread(block 69) failed [ 74.745807][ T4621] FAT-fs (loop3): Directory bread(block 70) failed [ 74.748823][ T4606] chnl_net:caif_netlink_parms(): no params data found [ 74.795350][ T4621] FAT-fs (loop3): Directory bread(block 71) failed [ 74.802001][ T4621] FAT-fs (loop3): Directory bread(block 72) failed [ 74.865258][ T4621] FAT-fs (loop3): Directory bread(block 73) failed [ 74.884386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.902448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.938954][ T4639] lo speed is unknown, defaulting to 1000 [ 74.993314][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.011414][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.100056][ T4349] device veth0_vlan entered promiscuous mode [ 75.118671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.134413][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.186985][ T4349] device veth1_vlan entered promiscuous mode [ 75.198050][ T4644] loop3: detected capacity change from 0 to 2048 [ 75.208215][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.218651][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.227342][ T4606] device bridge_slave_0 entered promiscuous mode [ 75.238346][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.246900][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.255491][ T4606] device bridge_slave_1 entered promiscuous mode [ 75.302058][ T4606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.322654][ T4606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.340965][ T4644] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,min_batch_time=0x0000000000000005,resgid=0x0000000000000000,resgid=0x0000000000000000,bsdgroups,inode_readahead_blks=0x0000000008000000,,errors=continue. Quota mode: none. [ 75.372495][ T4349] device veth0_macvtap entered promiscuous mode [ 75.419181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.437602][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.488671][ T4644] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.520653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.540581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.587888][ T26] audit: type=1326 audit(1769137752.869:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf0c09cb9 code=0x7ffc0000 [ 75.606238][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.636966][ T4651] loop1: detected capacity change from 0 to 512 [ 75.657658][ T4606] team0: Port device team_slave_0 added [ 75.681226][ T4644] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.89: bg 0: block 345: padding at end of block bitmap is not set [ 75.684474][ T4349] device veth1_macvtap entered promiscuous mode [ 75.711004][ T26] audit: type=1326 audit(1769137752.899:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1cf0c09cb9 code=0x7ffc0000 [ 75.755229][ T26] audit: type=1326 audit(1769137752.899:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf0c09cb9 code=0x7ffc0000 [ 75.786088][ T4606] team0: Port device team_slave_1 added [ 75.799285][ T4644] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 75.800063][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.826399][ T26] audit: type=1326 audit(1769137752.899:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f1cf0c09cb9 code=0x7ffc0000 [ 75.849633][ T4651] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.881892][ T26] audit: type=1326 audit(1769137752.899:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf0c09cb9 code=0x7ffc0000 [ 75.892909][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.955886][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.984522][ T4606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.008895][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.018930][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.054096][ T26] audit: type=1326 audit(1769137752.919:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cf0c09cb9 code=0x7ffc0000 [ 76.086552][ T4651] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 76.114528][ T4606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.127118][ T26] audit: type=1326 audit(1769137753.129:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf0c09cb9 code=0x7ffc0000 [ 76.163783][ T4651] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 76.171330][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.185640][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 76.226675][ T26] audit: type=1326 audit(1769137753.129:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.3.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf0c09cb9 code=0x7ffc0000 [ 76.243292][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.249933][ T4651] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.249933][ T4651] [ 76.296108][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.301684][ T4651] EXT4-fs (loop1): Total free blocks count 0 [ 76.333166][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.357021][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.372848][ T4651] EXT4-fs (loop1): Free/Dirty block details [ 76.380599][ T4651] EXT4-fs (loop1): free_blocks=65280 [ 76.389625][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.402511][ T4651] EXT4-fs (loop1): dirty_blocks=2 [ 76.411063][ T4651] EXT4-fs (loop1): Block reservation details [ 76.421132][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.441812][ T4651] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 76.456791][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.508339][ T4349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.539823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.853618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.897325][ T1108] cfg80211: failed to load regulatory.db [ 76.974172][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.996639][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 77.028403][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.075205][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.115180][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.125029][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.178236][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.192098][ T4349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.209702][ T4349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.223925][ T4349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.252185][ T4606] device hsr_slave_0 entered promiscuous mode [ 77.258075][ T4682] loop1: detected capacity change from 0 to 4096 [ 77.287648][ T4606] device hsr_slave_1 entered promiscuous mode [ 77.324666][ T4606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.343846][ T4682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.371955][ T4606] Cannot create hsr debugfs directory [ 77.486604][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.507183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.548871][ T4349] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.569956][ T4349] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.595398][ T4349] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.630933][ T4349] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.660960][ T4694] device veth0 entered promiscuous mode [ 77.694472][ T4693] device veth0 left promiscuous mode [ 77.795085][ T4696] loop3: detected capacity change from 0 to 512 [ 77.838239][ T4696] EXT4-fs (loop3): Ignoring removed oldalloc option [ 77.895596][ T4696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.921935][ T4696] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 77.946667][ T4696] EXT4-fs (loop3): 1 truncate cleaned up [ 78.003220][ T4696] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 78.045538][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.067494][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.155422][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.232539][ T4541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.256199][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 78.278491][ T4206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.292277][ T4541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.326742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.368765][ T4206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.396413][ T4715] loop4: detected capacity change from 0 to 128 [ 78.601099][ T4722] 9pnet: Insufficient options for proto=fd [ 78.609702][ T4206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.977944][ T4729] loop5: detected capacity change from 0 to 512 [ 79.192450][ T4206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.207598][ T4734] loop4: detected capacity change from 0 to 128 [ 79.220816][ T4729] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.107: inode has both inline data and extents flags [ 79.245308][ T4729] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.107: couldn't read orphan inode 15 (err -117) [ 79.268424][ T4729] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,max_batch_time=0x0000000000000000,init_itable,journal_ioprio=0x0000000000000006,bsddf,,errors=continue. Quota mode: none. [ 79.287224][ T4734] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.335458][ T4734] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.656109][ T4606] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.716985][ T4606] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.769190][ T4752] loop5: detected capacity change from 0 to 512 [ 79.784841][ T4606] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.832605][ T4606] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.852667][ T4752] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.932215][ T4752] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #17: comm syz.5.113: inode has both inline data and extents flags [ 79.953127][ T4752] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.113: couldn't read orphan inode 17 (err -117) [ 79.967885][ T4752] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.207912][ T4770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.114'. [ 80.313537][ T4777] 9pnet: Insufficient options for proto=fd [ 80.335358][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 80.657176][ T4606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.713978][ T4606] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.738437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.061001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.152346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.217798][ T4799] loop5: detected capacity change from 0 to 512 [ 81.237213][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.255514][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.262847][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.271993][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.281337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.290605][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.297818][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.307781][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.319114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.345516][ T4799] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.367370][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.439342][ T4799] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.465533][ T4804] loop4: detected capacity change from 0 to 512 [ 81.472534][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.486585][ T4799] capability: warning: `syz.5.120' uses deprecated v2 capabilities in a way that may be insecure [ 81.508243][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.530933][ T4804] EXT4-fs (loop4): Ignoring removed nobh option [ 81.557737][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.587465][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.631490][ T4804] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 81.704140][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.709624][ T4804] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.731265][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.741632][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.756364][ T4807] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 81.796263][ T4606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.000416][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.022332][ T4821] 9pnet: Insufficient options for proto=fd [ 82.037914][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.079436][ T4815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.124'. [ 82.105516][ T4815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.124'. [ 82.137962][ T4817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.124'. [ 82.167396][ T4832] loop1: detected capacity change from 0 to 128 [ 82.168379][ T4817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.124'. [ 82.297411][ T26] audit: type=1800 audit(1769137759.559:10): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.130" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 82.302761][ T4832] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 82.344393][ T4832] FAT-fs (loop1): Filesystem has been set read-only [ 82.384485][ T4832] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522) [ 82.403024][ T26] audit: type=1800 audit(1769137759.579:11): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.130" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 82.519476][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 83.362251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.377395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.394702][ T4852] loop5: detected capacity change from 0 to 1024 [ 83.429145][ T4606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.442936][ T4857] loop1: detected capacity change from 0 to 164 [ 83.479490][ T4852] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 83.508089][ T4853] xt_hashlimit: size too large, truncated to 1048576 [ 83.559385][ T4857] Unable to read rock-ridge attributes [ 83.570442][ T4852] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,nobarrier,grpid,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 83.612984][ T4857] Unable to read rock-ridge attributes [ 83.703770][ T4861] netlink: 68 bytes leftover after parsing attributes in process `syz.4.135'. [ 83.803940][ T4858] Zero length message leads to an empty skb [ 85.222609][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.242568][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.421184][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.451134][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.477068][ T4606] device veth0_vlan entered promiscuous mode [ 85.485069][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.558728][ T4902] loop1: detected capacity change from 0 to 512 [ 85.566585][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.596173][ T4606] device veth1_vlan entered promiscuous mode [ 85.677423][ T4910] loop3: detected capacity change from 0 to 2048 [ 85.736901][ T4902] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 85.775728][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 85.783876][ T4902] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.146: invalid indirect mapped block 4278190080 (level 0) [ 85.823406][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.855959][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.881097][ T4910] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.911854][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 85.919909][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.933941][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.946091][ T4606] device veth0_macvtap entered promiscuous mode [ 85.961110][ T4902] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.146: invalid indirect mapped block 1 (level 1) [ 85.977513][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 85.989594][ T4902] EXT4-fs (loop1): 1 truncate cleaned up [ 86.005372][ T4902] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 86.018669][ T4606] device veth1_macvtap entered promiscuous mode [ 86.153486][ T4902] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.146: corrupted in-inode xattr [ 86.193918][ T4927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.151'. [ 86.210216][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.233767][ T4902] EXT4-fs (loop1): Remounting filesystem read-only [ 86.275332][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.311500][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.332744][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.377527][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.449598][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.462080][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.472621][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.488839][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.593955][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.879226][ T4606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.170511][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.187377][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.196910][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.207243][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.327580][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.385281][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.407698][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.421315][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.431596][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.442696][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.454197][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.465758][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.485244][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.502026][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.513917][ T4606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.622123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.646696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.652717][ T4945] loop1: detected capacity change from 0 to 512 [ 87.673031][ T4606] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.698218][ T4945] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 87.711295][ T4606] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.720724][ T4606] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.737718][ T4606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.777665][ T4945] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.157: bg 0: block 104: invalid block bitmap [ 87.814809][ T4945] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 87.846615][ T4206] device hsr_slave_0 left promiscuous mode [ 87.868500][ T4945] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.157: invalid indirect mapped block 1 (level 1) [ 87.879118][ T4206] device hsr_slave_1 left promiscuous mode [ 87.882623][ T4945] EXT4-fs (loop1): 1 truncate cleaned up [ 87.894593][ T4945] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.907447][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.941114][ T4206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.948373][ T26] audit: type=1800 audit(1769137765.219:12): pid=4945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.157" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 87.992826][ T4206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.001777][ T4206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.035453][ T4206] device bridge_slave_1 left promiscuous mode [ 88.041704][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.077676][ T4206] device bridge_slave_0 left promiscuous mode [ 88.093746][ T4206] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.110893][ T4206] device veth1_macvtap left promiscuous mode [ 88.126569][ T4206] device veth0_macvtap left promiscuous mode [ 88.132688][ T4206] device veth1_vlan left promiscuous mode [ 88.145363][ T4206] device veth0_vlan left promiscuous mode [ 88.664644][ T4206] team0 (unregistering): Port device team_slave_1 removed [ 88.711624][ T4206] team0 (unregistering): Port device team_slave_0 removed [ 88.756731][ T4206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.795683][ T4206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.897614][ T4206] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 88.953250][ T4206] bond0 (unregistering): Released all slaves [ 88.974000][ T4956] loop5: detected capacity change from 0 to 1024 [ 89.032236][ T4954] netlink: 'syz.4.160': attribute type 16 has an invalid length. [ 89.076807][ T4956] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 89.081792][ T4954] netlink: 'syz.4.160': attribute type 17 has an invalid length. [ 89.134210][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.145125][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.150036][ T4959] loop3: detected capacity change from 0 to 1024 [ 89.151197][ T4956] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 89.159147][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.182598][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.190125][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.213356][ T4956] EXT4-fs error (device loop5): ext4_get_journal_inode:5185: inode #5: comm syz.5.161: unexpected bad inode w/o EXT4_IGET_BAD [ 89.221631][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.235536][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.235854][ T4956] EXT4-fs (loop5): no journal found [ 89.251205][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.254865][ T4956] EXT4-fs (loop5): can't get journal size [ 89.259883][ T4959] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 89.277190][ T4956] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,noinit_itable,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 89.286401][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.311696][ T4959] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.321995][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.330653][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.338462][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.346403][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.353998][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.361605][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.369339][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.377103][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.384856][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.392475][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.400510][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.403308][ T4964] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm syz.3.163: lblock 0 mapped to illegal pblock 0 (length 6) [ 89.408005][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408034][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408055][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408077][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408097][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408117][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408137][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408157][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408176][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.408192][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.462732][ T4964] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 89.468053][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.468080][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.468101][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.468122][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.468143][ T4225] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 89.502836][ T4225] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 89.527072][ T4964] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.527072][ T4964] [ 89.570996][ T4954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.552974][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.556739][ T4970] fido_id[4970]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.612807][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.629945][ T4975] cgroup: noprefix used incorrectly [ 90.675830][ T4977] loop1: detected capacity change from 0 to 512 [ 90.699414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.703725][ T4979] IPv4: Oversized IP packet from 127.202.26.0 [ 90.719598][ T4977] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.733321][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.803425][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.874305][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.892977][ T26] audit: type=1326 audit(1769137768.169:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49587aacb9 code=0x7ffc0000 [ 90.951933][ T4977] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 90.963389][ T26] audit: type=1326 audit(1769137768.169:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49587aacb9 code=0x7ffc0000 [ 90.991276][ T26] audit: type=1326 audit(1769137768.169:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49587aacb9 code=0x7ffc0000 [ 91.046966][ T4977] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.167: bg 0: block 248: padding at end of block bitmap is not set [ 91.082699][ T4991] loop4: detected capacity change from 0 to 1024 [ 91.131263][ T26] audit: type=1326 audit(1769137768.169:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49587aacb9 code=0x7ffc0000 [ 91.170813][ T4977] Quota error (device loop1): write_blk: dquota write failed [ 91.173324][ T4996] device syzkaller0 entered promiscuous mode [ 91.188660][ T4977] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 91.232350][ T26] audit: type=1326 audit(1769137768.199:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49587aacb9 code=0x7ffc0000 [ 91.248231][ T4977] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.167: Failed to acquire dquot type 1 [ 91.284082][ T4991] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.345416][ T26] audit: type=1326 audit(1769137768.199:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49587aacb9 code=0x7ffc0000 [ 91.351201][ T4977] EXT4-fs (loop1): 1 truncate cleaned up [ 91.369679][ T26] audit: type=1326 audit(1769137768.199:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4986 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49587aacb9 code=0x7ffc0000 [ 91.400729][ T4998] lo speed is unknown, defaulting to 1000 [ 91.407555][ T4977] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.651584][ T5007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 92.041000][ T5029] loop4: detected capacity change from 0 to 512 [ 92.178146][ T5029] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.241665][ T5025] loop1: detected capacity change from 0 to 8192 [ 92.316323][ T5029] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 92.321956][ T5034] device syzkaller0 entered promiscuous mode [ 92.335251][ T5029] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.182: Corrupt directory, running e2fsck is recommended [ 92.384944][ T5029] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 92.437320][ T5029] EXT4-fs error (device loop4): ext4_iget_extra_inode:4566: inode #15: comm syz.4.182: corrupted in-inode xattr [ 92.473321][ T5029] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.182: couldn't read orphan inode 15 (err -117) [ 92.543642][ T5029] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,dioread_lock,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 92.676071][ T5029] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.727202][ T5029] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 92.804611][ T5053] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.853512][ T5029] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.182: Corrupt directory, running e2fsck is recommended [ 92.891037][ T5053] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 92.951045][ T5053] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.182: Corrupt directory, running e2fsck is recommended [ 93.003511][ T5064] loop3: detected capacity change from 0 to 512 [ 93.016899][ T5056] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 93.060865][ T5056] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 93.096217][ T5056] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.182: Corrupt directory, running e2fsck is recommended [ 93.116272][ T5064] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.135570][ T5064] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 93.179406][ T5064] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.191: iget: bad i_size value: 12154757448730 [ 93.215678][ T5064] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.191: couldn't read orphan inode 13 (err -117) [ 93.321519][ T5064] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nodelalloc,sysvgroups,jqfmt=vfsold,nombcache,grpjquota=.seclabel,,errors=continue. Quota mode: writeback. [ 93.452824][ T5064] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.633287][ T5076] loop3: detected capacity change from 0 to 512 [ 93.761952][ T5076] EXT4-fs (loop3): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 93.810190][ T5076] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.089240][ T5097] netlink: 'syz.4.201': attribute type 2 has an invalid length. [ 94.397167][ T5105] loop6: detected capacity change from 0 to 4096 [ 95.374797][ T5121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.209'. [ 95.613870][ T5105] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.708074][ T5125] capability: warning: `syz.6.204' uses 32-bit capabilities (legacy support in use) [ 96.758314][ T5138] loop5: detected capacity change from 0 to 256 [ 96.908962][ T5148] loop3: detected capacity change from 0 to 256 [ 96.933707][ T5146] loop1: detected capacity change from 0 to 512 [ 97.231036][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 97.231052][ T26] audit: type=1326 audit(1769137774.509:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1cf0c09cb9 code=0x0 [ 98.308010][ T5190] netlink: 48 bytes leftover after parsing attributes in process `syz.5.222'. [ 98.333452][ T5190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.222'. [ 98.635069][ T5206] syz.6.229 uses obsolete (PF_INET,SOCK_PACKET) [ 98.872714][ T5221] Process accounting resumed [ 99.703922][ T5234] program syz.6.240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.134486][ T5253] loop6: detected capacity change from 0 to 512 [ 100.313948][ T5253] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 100.411029][ T5253] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 100.475692][ T5253] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.471468][ T5274] loop5: detected capacity change from 0 to 512 [ 101.483054][ T5253] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3887: comm syz.6.246: Allocating blocks 41-42 which overlap fs metadata [ 101.565519][ T5253] Quota error (device loop6): write_blk: dquota write failed [ 101.573386][ T5253] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 101.652279][ T5274] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.662992][ T5253] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3887: comm syz.6.246: Allocating blocks 41-42 which overlap fs metadata [ 101.710229][ T5274] EXT4-fs (loop5): 1 truncate cleaned up [ 101.719753][ T5253] Quota error (device loop6): write_blk: dquota write failed [ 101.729908][ T5274] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 101.745463][ T5253] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 101.805550][ T5289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.254'. [ 101.825423][ T5253] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.246: Failed to acquire dquot type 1 [ 101.883478][ T5253] EXT4-fs error (device loop6): mb_free_blocks:1876: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.967723][ T5253] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #12: comm syz.6.246: corrupted inode contents [ 102.039257][ T5253] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #12: comm syz.6.246: mark_inode_dirty error [ 102.088584][ T5253] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #12: comm syz.6.246: corrupted inode contents [ 102.168098][ T5253] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #12: comm syz.6.246: mark_inode_dirty error [ 102.204230][ T5253] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #12: comm syz.6.246: corrupted inode contents [ 102.285362][ T5253] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 102.304882][ T5253] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #12: comm syz.6.246: corrupted inode contents [ 102.318206][ T5253] EXT4-fs error (device loop6): ext4_truncate:4279: inode #12: comm syz.6.246: mark_inode_dirty error [ 102.349273][ T5253] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 102.365966][ T5253] EXT4-fs (loop6): 1 truncate cleaned up [ 102.371656][ T5253] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,noblock_validity,inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,noinit_itable,quota,noauto_da_alloc,sysvgroups,usrjquota=2,errors=continue. Quota mode: writeback. [ 102.532936][ T5310] lo speed is unknown, defaulting to 1000 [ 102.627933][ T5253] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3887: comm syz.6.246: Allocating blocks 41-42 which overlap fs metadata [ 102.728962][ T5253] Quota error (device loop6): write_blk: dquota write failed [ 102.792720][ T5253] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 102.817542][ T5253] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.246: Failed to acquire dquot type 1 [ 104.108741][ T5332] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.256319][ T5336] loop3: detected capacity change from 0 to 2048 [ 105.155589][ T5336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.211996][ T26] audit: type=1800 audit(1769137782.489:23): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 105.330060][ T5354] loop6: detected capacity change from 0 to 512 [ 105.596063][ T5357] tipc: Enabling of bearer rejected, failed to enable media [ 105.623856][ T5354] EXT4-fs (loop6): 1 orphan inode deleted [ 105.685325][ T5354] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.724946][ T5354] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.273657][ T5393] loop6: detected capacity change from 0 to 256 [ 107.304138][ T5398] loop4: detected capacity change from 0 to 128 [ 107.433395][ T5393] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.479945][ T5398] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.915294][ T5398] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.584485][ T5413] tipc: Enabling of bearer rejected, failed to enable media [ 108.693162][ T5422] device syzkaller0 entered promiscuous mode [ 108.867711][ T5420] loop6: detected capacity change from 0 to 4096 [ 109.076433][ T5420] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.879472][ T5442] EXT4-fs (loop6): shut down requested (0) [ 109.943269][ T5444] loop4: detected capacity change from 0 to 512 [ 110.055824][ T5449] loop3: detected capacity change from 0 to 512 [ 110.138616][ T5444] EXT4-fs (loop4): orphan cleanup on readonly fs [ 110.166046][ T5449] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,max_dir_size_kb=0x0000000000000a30,journal_dev=0x00000000460b8000,,errors=continue. Quota mode: writeback. [ 110.182348][ T5444] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.293: bg 0: block 248: padding at end of block bitmap is not set [ 110.203536][ T5449] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.211333][ T5444] Quota error (device loop4): write_blk: dquota write failed [ 110.279394][ T5444] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 110.290002][ T5444] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.293: Failed to acquire dquot type 1 [ 110.306756][ T5444] EXT4-fs (loop4): 1 truncate cleaned up [ 110.316812][ T5444] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.336223][ T5444] EXT4-fs (loop4): shut down requested (0) [ 110.428814][ T5466] loop4: detected capacity change from 0 to 128 [ 110.602568][ T5468] tipc: Enabling of bearer rejected, failed to enable media [ 110.624926][ T5475] loop3: detected capacity change from 0 to 128 [ 110.671757][ T5477] netlink: 19 bytes leftover after parsing attributes in process `syz.4.303'. [ 110.827178][ T5473] device syzkaller0 entered promiscuous mode [ 110.883327][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 110.969798][ T5485] lo speed is unknown, defaulting to 1000 [ 111.599147][ T5490] device syzkaller0 entered promiscuous mode [ 111.874242][ T5505] loop5: detected capacity change from 0 to 764 [ 111.998018][ T5505] rock: directory entry would overflow storage [ 112.004667][ T5505] rock: sig=0x4f50, size=4, remaining=3 [ 112.106617][ T5505] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 112.656613][ T5537] ODEBUG: Out of memory. ODEBUG disabled [ 112.684308][ T5534] loop4: detected capacity change from 0 to 8192 [ 113.291281][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 113.356498][ T5540] device geneve0 entered promiscuous mode [ 113.491652][ T26] audit: type=1326 audit(1769137790.769:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 113.545720][ T5540] device geneve0 left promiscuous mode [ 113.598008][ T26] audit: type=1326 audit(1769137790.809:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 113.670751][ T5549] netlink: 'syz.6.326': attribute type 1 has an invalid length. [ 113.697110][ T26] audit: type=1326 audit(1769137790.809:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 113.820573][ T26] audit: type=1326 audit(1769137790.809:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 113.971216][ T26] audit: type=1326 audit(1769137790.809:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 114.100539][ T26] audit: type=1326 audit(1769137790.809:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 114.219682][ T26] audit: type=1326 audit(1769137790.809:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 114.332246][ T26] audit: type=1326 audit(1769137790.809:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 115.250448][ T26] kauditd_printk_skb: 398 callbacks suppressed [ 115.250462][ T26] audit: type=1326 audit(1769137792.469:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 115.330370][ T5582] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.366913][ T26] audit: type=1326 audit(1769137792.529:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 115.435351][ T26] audit: type=1326 audit(1769137792.529:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 115.513152][ T5589] device syzkaller0 entered promiscuous mode [ 115.542292][ T26] audit: type=1326 audit(1769137792.529:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 115.620450][ T26] audit: type=1326 audit(1769137792.529:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 115.670610][ T26] audit: type=1326 audit(1769137792.529:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 115.694980][ T26] audit: type=1326 audit(1769137792.529:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 115.725499][ T26] audit: type=1326 audit(1769137792.529:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 115.867436][ T26] audit: type=1326 audit(1769137792.529:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8720e940d9 code=0x7ffc0000 [ 115.936405][ T5606] loop3: detected capacity change from 0 to 512 [ 116.029649][ T26] audit: type=1326 audit(1769137792.529:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8720eecad7 code=0x7ffc0000 [ 116.623226][ T5606] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 116.821241][ T5606] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.833170][ T5622] loop1: detected capacity change from 0 to 512 [ 116.974626][ T5622] EXT4-fs error (device loop1): ext4_iget_extra_inode:4566: inode #15: comm syz.1.347: corrupted in-inode xattr [ 117.191803][ T5622] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.347: couldn't read orphan inode 15 (err -117) [ 117.260347][ T5622] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 118.427319][ T5650] loop6: detected capacity change from 0 to 512 [ 118.480160][ T5650] EXT4-fs (loop6): bad block size 65536 [ 118.681194][ T5666] loop3: detected capacity change from 0 to 1024 [ 118.775284][ T5666] EXT4-fs (loop3): Ignoring removed bh option [ 118.784992][ T5666] EXT4-fs (loop3): inline encryption not supported [ 118.825310][ T5666] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.920538][ T5669] loop1: detected capacity change from 0 to 1764 [ 118.956196][ T5666] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,bh,inlinecrypt,discard,data_err=ignore,nodiscard,nodelalloc,grpquota,init_itable,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 119.982656][ T5695] loop5: detected capacity change from 0 to 1024 [ 120.084285][ T5695] EXT4-fs (loop5): Ignoring removed oldalloc option [ 120.092429][ T5696] device syzkaller0 entered promiscuous mode [ 120.096319][ T5695] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 120.145391][ T5695] EXT4-fs (loop5): Unrecognized mount option "nomand" or missing value [ 120.346945][ T5718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 120.418455][ T5724] loop4: detected capacity change from 0 to 128 [ 120.490823][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 120.490837][ T26] audit: type=1800 audit(1769137797.769:467): pid=5724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.368" name="bus" dev="loop4" ino=1048605 res=0 errno=0 [ 120.561364][ T5730] lo speed is unknown, defaulting to 1000 [ 120.757399][ T5741] team0: No ports can be present during mode change [ 121.488923][ T5724] attempt to access beyond end of device [ 121.488923][ T5724] loop4: rw=2049, want=505, limit=128 [ 121.513036][ T5752] loop5: detected capacity change from 0 to 164 [ 121.671656][ T5757] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 121.845675][ T5765] loop3: detected capacity change from 0 to 128 [ 122.036980][ T26] audit: type=1800 audit(1769137799.319:468): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.383" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 122.779061][ T5782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.029421][ T5790] loop4: detected capacity change from 0 to 512 [ 123.304208][ T5790] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 123.325229][ T5784] device veth1_to_bond entered promiscuous mode [ 123.345392][ T5790] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.466707][ T5790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 123.483038][ T5784] device veth1_to_bond left promiscuous mode [ 123.499479][ T5798] loop6: detected capacity change from 0 to 128 [ 123.543450][ T5790] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.389: Invalid inode bitmap blk 4 in block_group 0 [ 123.568723][ T5790] EXT4-fs (loop4): Remounting filesystem read-only [ 123.575545][ T5790] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,norecovery,mblk_io_submit,quota,nobarrier,grpquota,nombcache,barrier=0x000000000000000c,dioread_nolock,noblock_validity,data_err=ignore,errors=remount-ro,. Quota mode: writeback. [ 123.629060][ T5782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.670686][ T26] audit: type=1800 audit(1769137800.949:469): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.389" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 123.819233][ T5782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.942156][ T5814] vcan0: tx address claim with dlc 0 [ 124.032522][ T5822] loop6: detected capacity change from 0 to 128 [ 124.122334][ T5782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.167252][ T5824] Illegal XDP return value 4292048688, expect packet loss! [ 124.463171][ T5782] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.772077][ T5782] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.099507][ T5782] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.307020][ T5782] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.036373][ T5857] device syzkaller0 entered promiscuous mode [ 126.376793][ T5879] device syzkaller0 entered promiscuous mode [ 126.662901][ T5894] loop6: detected capacity change from 0 to 512 [ 126.703968][ T5898] loop3: detected capacity change from 0 to 1024 [ 126.722483][ T5894] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 126.790091][ T5894] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.419: bg 0: block 255: padding at end of block bitmap is not set [ 126.824427][ T5898] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.851643][ T5894] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 126.881870][ T5894] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.419: invalid indirect mapped block 1 (level 1) [ 126.901761][ T5894] EXT4-fs (loop6): 1 truncate cleaned up [ 126.917737][ T5894] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 126.940867][ T5894] EXT4-fs (loop6): shut down requested (1) [ 127.050618][ T5913] loop3: detected capacity change from 0 to 512 [ 127.225672][ T5913] [ 127.228039][ T5913] ====================================================== [ 127.235057][ T5913] WARNING: possible circular locking dependency detected [ 127.242092][ T5913] syzkaller #0 Not tainted [ 127.246633][ T5913] ------------------------------------------------------ [ 127.253747][ T5913] syz.3.422/5913 is trying to acquire lock: [ 127.259708][ T5913] ffff888077c3ebd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 127.269911][ T5913] [ 127.269911][ T5913] but task is already holding lock: [ 127.277462][ T5913] ffff8880741fee70 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 127.287630][ T5913] [ 127.287630][ T5913] which lock already depends on the new lock. [ 127.287630][ T5913] [ 127.298103][ T5913] [ 127.298103][ T5913] the existing dependency chain (in reverse order) is: [ 127.307213][ T5913] [ 127.307213][ T5913] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 127.315100][ T5913] down_read+0x44/0x2e0 [ 127.319903][ T5913] ext4_xattr_get+0xfc/0x800 [ 127.325174][ T5913] ext4_get_acl+0x80/0x660 [ 127.330179][ T5913] get_acl+0x154/0x250 [ 127.334794][ T5913] posix_acl_create+0x124/0x430 [ 127.340233][ T5913] ext4_init_acl+0xb7/0x330 [ 127.345246][ T5913] __ext4_new_inode+0x2eb3/0x3a40 [ 127.350790][ T5913] ext4_ext_migrate+0x5f1/0xe60 [ 127.356244][ T5913] ext4_ioctl+0x1a84/0x3820 [ 127.361266][ T5913] __se_sys_ioctl+0xfa/0x170 [ 127.366375][ T5913] do_syscall_64+0x4c/0xa0 [ 127.371596][ T5913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.378102][ T5913] [ 127.378102][ T5913] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 127.386783][ T5913] __lock_acquire+0x2c42/0x7d10 [ 127.392150][ T5913] lock_acquire+0x19e/0x400 [ 127.397267][ T5913] percpu_down_read+0x46/0x1b0 [ 127.402628][ T5913] ext4_writepages+0x20f/0x2df0 [ 127.408001][ T5913] do_writepages+0x476/0x6e0 [ 127.413102][ T5913] __writeback_single_inode+0x153/0xda0 [ 127.419345][ T5913] writeback_single_inode+0x3cb/0x8e0 [ 127.425417][ T5913] write_inode_now+0x23b/0x2c0 [ 127.430707][ T5913] iput+0x5ab/0x8a0 [ 127.435031][ T5913] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 127.440913][ T5913] ext4_xattr_block_set+0x4fd/0x2d20 [ 127.446714][ T5913] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 127.453132][ T5913] __ext4_expand_extra_isize+0x301/0x3e0 [ 127.459513][ T5913] __ext4_mark_inode_dirty+0x469/0x700 [ 127.465512][ T5913] ext4_evict_inode+0xa8d/0x1090 [ 127.470958][ T5913] evict+0x4c9/0x8d0 [ 127.475369][ T5913] ext4_orphan_cleanup+0xad2/0x1320 [ 127.481075][ T5913] ext4_fill_super+0x8e25/0x95a0 [ 127.486537][ T5913] mount_bdev+0x287/0x3c0 [ 127.491632][ T5913] legacy_get_tree+0xe6/0x180 [ 127.497342][ T5913] vfs_get_tree+0x88/0x270 [ 127.502261][ T5913] do_new_mount+0x24a/0xa40 [ 127.507362][ T5913] __se_sys_mount+0x2e3/0x3d0 [ 127.512543][ T5913] do_syscall_64+0x4c/0xa0 [ 127.517566][ T5913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.523966][ T5913] [ 127.523966][ T5913] other info that might help us debug this: [ 127.523966][ T5913] [ 127.534274][ T5913] Possible unsafe locking scenario: [ 127.534274][ T5913] [ 127.541720][ T5913] CPU0 CPU1 [ 127.547150][ T5913] ---- ---- [ 127.552492][ T5913] lock(&ei->xattr_sem); [ 127.556801][ T5913] lock(&sbi->s_writepages_rwsem); [ 127.564604][ T5913] lock(&ei->xattr_sem); [ 127.571800][ T5913] lock(&sbi->s_writepages_rwsem); [ 127.577104][ T5913] [ 127.577104][ T5913] *** DEADLOCK *** [ 127.577104][ T5913] [ 127.585326][ T5913] 3 locks held by syz.3.422/5913: [ 127.590331][ T5913] #0: ffff888077c3c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 127.600527][ T5913] #1: ffff888077c3c650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 127.610114][ T5913] #2: ffff8880741fee70 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 127.620792][ T5913] [ 127.620792][ T5913] stack backtrace: [ 127.626806][ T5913] CPU: 1 PID: 5913 Comm: syz.3.422 Not tainted syzkaller #0 [ 127.634339][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.644390][ T5913] Call Trace: [ 127.647658][ T5913] [ 127.650576][ T5913] dump_stack_lvl+0x188/0x250 [ 127.655245][ T5913] ? load_image+0x400/0x400 [ 127.659838][ T5913] ? show_regs_print_info+0x20/0x20 [ 127.665028][ T5913] ? print_circular_bug+0x12b/0x1a0 [ 127.670481][ T5913] check_noncircular+0x296/0x330 [ 127.675603][ T5913] ? look_up_lock_class+0x71/0x110 [ 127.680798][ T5913] ? add_chain_block+0x940/0x940 [ 127.685885][ T5913] ? lockdep_lock+0x15c/0x1f0 [ 127.690544][ T5913] ? mark_lock+0x94/0x320 [ 127.694850][ T5913] __lock_acquire+0x2c42/0x7d10 [ 127.700075][ T5913] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 127.706133][ T5913] ? verify_lock_unused+0x140/0x140 [ 127.711563][ T5913] ? __rwlock_init+0x140/0x140 [ 127.716412][ T5913] ? rcu_is_watching+0x11/0xa0 [ 127.721307][ T5913] ? verify_lock_unused+0x140/0x140 [ 127.726516][ T5913] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 127.732746][ T5913] ? lockdep_hardirqs_on+0x94/0x140 [ 127.737936][ T5913] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 127.744125][ T5913] ? _raw_spin_unlock+0x40/0x40 [ 127.748970][ T5913] lock_acquire+0x19e/0x400 [ 127.753459][ T5913] ? ext4_writepages+0x20f/0x2df0 [ 127.758472][ T5913] ? mark_lock+0x94/0x320 [ 127.762878][ T5913] ? __might_sleep+0xf0/0xf0 [ 127.767444][ T5913] ? read_lock_is_recursive+0x10/0x10 [ 127.773010][ T5913] ? __lock_acquire+0x13bc/0x7d10 [ 127.778037][ T5913] percpu_down_read+0x46/0x1b0 [ 127.782786][ T5913] ? ext4_writepages+0x20f/0x2df0 [ 127.787791][ T5913] ext4_writepages+0x20f/0x2df0 [ 127.792628][ T5913] ? verify_lock_unused+0x140/0x140 [ 127.797992][ T5913] ? stack_trace_save+0xa6/0xf0 [ 127.802959][ T5913] ? stack_depot_save+0x404/0x440 [ 127.808059][ T5913] ? mark_lock+0x94/0x320 [ 127.812465][ T5913] ? ext4_readpage+0x2e0/0x2e0 [ 127.817297][ T5913] ? __lock_acquire+0x13bc/0x7d10 [ 127.822428][ T5913] ? ext4_readpage+0x2e0/0x2e0 [ 127.827278][ T5913] do_writepages+0x476/0x6e0 [ 127.831907][ T5913] ? __writepage+0x130/0x130 [ 127.836753][ T5913] ? writeback_single_inode+0x3c0/0x8e0 [ 127.842399][ T5913] ? __lock_acquire+0x7d10/0x7d10 [ 127.847494][ T5913] ? do_raw_spin_lock+0x128/0x2f0 [ 127.852503][ T5913] __writeback_single_inode+0x153/0xda0 [ 127.858134][ T5913] writeback_single_inode+0x3cb/0x8e0 [ 127.863789][ T5913] ? write_inode_now+0x2c0/0x2c0 [ 127.868760][ T5913] write_inode_now+0x23b/0x2c0 [ 127.873545][ T5913] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 127.879082][ T5913] ? do_raw_spin_unlock+0x11d/0x230 [ 127.884348][ T5913] iput+0x5ab/0x8a0 [ 127.888427][ T5913] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 127.893794][ T5913] ? ext4_xattr_ibody_set+0x330/0x330 [ 127.899356][ T5913] ? rcu_is_watching+0x11/0xa0 [ 127.904192][ T5913] ? kmem_cache_free+0x14c/0x210 [ 127.909306][ T5913] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 127.915372][ T5913] ext4_xattr_block_set+0x4fd/0x2d20 [ 127.920735][ T5913] ? ext4_get_inode_loc+0x120/0x120 [ 127.926069][ T5913] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 127.931774][ T5913] ? ext4_xattr_block_find+0x500/0x500 [ 127.937227][ T5913] ? ext4_xattr_block_find+0x433/0x500 [ 127.942753][ T5913] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 127.951446][ T5913] __ext4_expand_extra_isize+0x301/0x3e0 [ 127.957072][ T5913] __ext4_mark_inode_dirty+0x469/0x700 [ 127.962702][ T5913] ext4_evict_inode+0xa8d/0x1090 [ 127.967817][ T5913] ? _raw_spin_unlock+0x24/0x40 [ 127.972752][ T5913] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.978624][ T5913] ? do_raw_spin_unlock+0x11d/0x230 [ 127.983888][ T5913] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 127.989774][ T5913] evict+0x4c9/0x8d0 [ 127.993764][ T5913] ? proc_nr_inodes+0x320/0x320 [ 127.998593][ T5913] ? do_raw_spin_unlock+0x11d/0x230 [ 128.003791][ T5913] ? _raw_spin_unlock+0x24/0x40 [ 128.008626][ T5913] ? iput+0x706/0x8a0 [ 128.012600][ T5913] ext4_orphan_cleanup+0xad2/0x1320 [ 128.017871][ T5913] ? ext4_orphan_del+0xbf0/0xbf0 [ 128.022885][ T5913] ? errseq_check_and_advance+0x62/0x120 [ 128.028505][ T5913] ext4_fill_super+0x8e25/0x95a0 [ 128.033447][ T5913] ? ext4_mount+0x40/0x40 [ 128.037753][ T5913] ? set_blocksize+0x1f3/0x370 [ 128.042761][ T5913] ? sb_set_blocksize+0xa5/0xe0 [ 128.047787][ T5913] mount_bdev+0x287/0x3c0 [ 128.052105][ T5913] ? ext4_mount+0x40/0x40 [ 128.056519][ T5913] legacy_get_tree+0xe6/0x180 [ 128.061184][ T5913] ? ext4_errno_to_code+0x160/0x160 [ 128.066545][ T5913] vfs_get_tree+0x88/0x270 [ 128.071123][ T5913] do_new_mount+0x24a/0xa40 [ 128.075832][ T5913] __se_sys_mount+0x2e3/0x3d0 [ 128.080628][ T5913] ? __x64_sys_mount+0xc0/0xc0 [ 128.085402][ T5913] ? lockdep_hardirqs_on+0x94/0x140 [ 128.090790][ T5913] ? __x64_sys_mount+0x1c/0xc0 [ 128.095569][ T5913] do_syscall_64+0x4c/0xa0 [ 128.099980][ T5913] ? clear_bhb_loop+0x30/0x80 [ 128.105098][ T5913] ? clear_bhb_loop+0x30/0x80 [ 128.110201][ T5913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.116270][ T5913] RIP: 0033:0x7f1cf0c0af4a [ 128.120683][ T5913] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.140838][ T5913] RSP: 002b:00007f1ceee64e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.149251][ T5913] RAX: ffffffffffffffda RBX: 00007f1ceee64ee0 RCX: 00007f1cf0c0af4a [ 128.157206][ T5913] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1ceee64ea0 [ 128.165252][ T5913] RBP: 0000200000000180 R08: 00007f1ceee64ee0 R09: 0000000000800700 [ 128.173495][ T5913] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 128.181622][ T5913] R13: 00007f1ceee64ea0 R14: 000000000000046f R15: 00002000000007c0 [ 128.189745][ T5913] [ 128.203425][ T5918] loop6: detected capacity change from 0 to 1024 [ 128.233180][ T5913] ------------[ cut here ]------------ [ 128.238992][ T5913] EA inode 11 i_nlink=2 [ 128.239173][ T5913] WARNING: CPU: 0 PID: 5913 at fs/ext4/xattr.c:1005 ext4_xattr_inode_update_ref+0x4bd/0x510 [ 128.260691][ T5913] Modules linked in: [ 128.264706][ T5913] CPU: 0 PID: 5913 Comm: syz.3.422 Not tainted syzkaller #0 [ 128.273132][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.284798][ T5913] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510 [ 128.292726][ T5913] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 14 e8 a1 ff 49 8b 37 48 c7 c7 00 9b 3d 8a 89 da e8 a3 bd 94 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 ed ac 9f 07 [ 128.346811][ T5913] RSP: 0018:ffffc90003b7f160 EFLAGS: 00010246 [ 128.353283][ T5913] RAX: 7d87aa17206a6600 RBX: 0000000000000002 RCX: 0000000000080000 [ 128.631496][ T5918] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none. [ 128.726213][ T5913] RDX: ffffc9000d9f9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 128.734219][ T5913] RBP: ffffc90003b7f250 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 128.754050][ T26] audit: type=1800 audit(1769137806.029:470): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.423" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 128.775525][ T5918] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3887: comm syz.6.423: Allocating blocks 481-513 which overlap fs metadata [ 128.779425][ T5913] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88805eda7048 [ 128.802222][ T26] audit: type=1800 audit(1769137806.079:471): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.423" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 128.828262][ T5913] R13: 1ffff1100bdb4e48 R14: dffffc0000000000 R15: ffff88805eda7088 [ 128.838985][ T5913] FS: 00007f1ceee656c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 128.849430][ T5913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.859123][ T5913] CR2: 00007f2d0f205ff8 CR3: 00000000544c2000 CR4: 00000000003506f0 [ 128.867607][ T5913] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.876051][ T5913] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.884185][ T5913] Call Trace: [ 128.890367][ T5913] [ 128.893331][ T5913] ? ext4_xattr_block_csum+0x560/0x560 [ 128.898907][ T5913] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 128.904385][ T5913] ? mb_cache_entry_create+0x62e/0x890 [ 128.910886][ T5913] ext4_xattr_set_entry+0xed9/0x3ea0 [ 128.917456][ T5913] ? mb_cache_entry_create+0x676/0x890 [ 128.923718][ T5913] ? ext4_xattr_block_set+0xda0/0x2d20 [ 128.935664][ T5913] ? ext4_xattr_ibody_set+0x330/0x330 [ 128.941178][ T5913] ? ext4_get_inode_loc+0x120/0x120 [ 128.948836][ T5913] ext4_xattr_ibody_set+0x112/0x330 [ 128.955863][ T5913] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 128.961887][ T5913] __ext4_expand_extra_isize+0x301/0x3e0 [ 128.971587][ T5913] __ext4_mark_inode_dirty+0x469/0x700 [ 128.979032][ T5913] ext4_evict_inode+0xa8d/0x1090 [ 128.984326][ T5913] ? _raw_spin_unlock+0x24/0x40 [ 128.990863][ T5913] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 128.997067][ T5913] ? do_raw_spin_unlock+0x11d/0x230 [ 129.002282][ T5913] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 129.009114][ T5913] evict+0x4c9/0x8d0 [ 129.013781][ T5913] ? proc_nr_inodes+0x320/0x320 [ 129.019029][ T5913] ? do_raw_spin_unlock+0x11d/0x230 [ 129.027375][ T5913] ? _raw_spin_unlock+0x24/0x40 [ 129.033239][ T5913] ? iput+0x706/0x8a0 [ 129.037618][ T5913] ext4_orphan_cleanup+0xad2/0x1320 [ 129.043016][ T5913] ? ext4_orphan_del+0xbf0/0xbf0 [ 129.050553][ T5913] ? errseq_check_and_advance+0x62/0x120 [ 129.065707][ T5913] ext4_fill_super+0x8e25/0x95a0 [ 129.071019][ T5913] ? ext4_mount+0x40/0x40 [ 129.078345][ T5913] ? set_blocksize+0x1f3/0x370 [ 129.083412][ T5913] ? sb_set_blocksize+0xa5/0xe0 [ 129.090552][ T5913] mount_bdev+0x287/0x3c0 [ 129.095058][ T5913] ? ext4_mount+0x40/0x40 [ 129.101689][ T5913] legacy_get_tree+0xe6/0x180 [ 129.111678][ T5913] ? ext4_errno_to_code+0x160/0x160 [ 129.122363][ T5913] vfs_get_tree+0x88/0x270 [ 129.127979][ T5913] do_new_mount+0x24a/0xa40 [ 129.132870][ T5913] __se_sys_mount+0x2e3/0x3d0 [ 129.138059][ T5913] ? __x64_sys_mount+0xc0/0xc0 [ 129.143198][ T5913] ? lockdep_hardirqs_on+0x94/0x140 [ 129.153777][ T5913] ? __x64_sys_mount+0x1c/0xc0 [ 129.159302][ T5913] do_syscall_64+0x4c/0xa0 [ 129.164101][ T5913] ? clear_bhb_loop+0x30/0x80 [ 129.170760][ T5913] ? clear_bhb_loop+0x30/0x80 [ 129.176168][ T5913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.182903][ T5913] RIP: 0033:0x7f1cf0c0af4a [ 129.192163][ T5913] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.216014][ T5913] RSP: 002b:00007f1ceee64e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.224752][ T5913] RAX: ffffffffffffffda RBX: 00007f1ceee64ee0 RCX: 00007f1cf0c0af4a [ 129.234531][ T5913] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1ceee64ea0 [ 129.245566][ T5913] RBP: 0000200000000180 R08: 00007f1ceee64ee0 R09: 0000000000800700 [ 129.254110][ T5913] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 129.262758][ T5913] R13: 00007f1ceee64ea0 R14: 000000000000046f R15: 00002000000007c0 [ 129.272765][ T5913] [ 129.275966][ T5913] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.283516][ T5913] CPU: 0 PID: 5913 Comm: syz.3.422 Not tainted syzkaller #0 [ 129.291947][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.302440][ T5913] Call Trace: [ 129.305801][ T5913] [ 129.308731][ T5913] dump_stack_lvl+0x188/0x250 [ 129.313746][ T5913] ? show_regs_print_info+0x20/0x20 [ 129.319028][ T5913] ? load_image+0x400/0x400 [ 129.323623][ T5913] panic+0x2e5/0x810 [ 129.327528][ T5913] ? bpf_jit_dump+0xd0/0xd0 [ 129.332132][ T5913] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 129.338134][ T5913] __warn+0x248/0x2b0 [ 129.342227][ T5913] ? ext4_xattr_inode_update_ref+0x4bd/0x510 [ 129.348255][ T5913] report_bug+0x1b7/0x2e0 [ 129.352582][ T5913] handle_bug+0x3a/0x70 [ 129.356732][ T5913] exc_invalid_op+0x16/0x40 [ 129.361231][ T5913] asm_exc_invalid_op+0x16/0x20 [ 129.366169][ T5913] RIP: 0010:ext4_xattr_inode_update_ref+0x4bd/0x510 [ 129.373097][ T5913] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 14 e8 a1 ff 49 8b 37 48 c7 c7 00 9b 3d 8a 89 da e8 a3 bd 94 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 ed ac 9f 07 [ 129.393042][ T5913] RSP: 0018:ffffc90003b7f160 EFLAGS: 00010246 [ 129.399097][ T5913] RAX: 7d87aa17206a6600 RBX: 0000000000000002 RCX: 0000000000080000 [ 129.407062][ T5913] RDX: ffffc9000d9f9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 129.415201][ T5913] RBP: ffffc90003b7f250 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 129.423551][ T5913] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88805eda7048 [ 129.431760][ T5913] R13: 1ffff1100bdb4e48 R14: dffffc0000000000 R15: ffff88805eda7088 [ 129.440210][ T5913] ? ext4_xattr_block_csum+0x560/0x560 [ 129.445691][ T5913] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 129.451289][ T5913] ? mb_cache_entry_create+0x62e/0x890 [ 129.456867][ T5913] ext4_xattr_set_entry+0xed9/0x3ea0 [ 129.462273][ T5913] ? mb_cache_entry_create+0x676/0x890 [ 129.467960][ T5913] ? ext4_xattr_block_set+0xda0/0x2d20 [ 129.473902][ T5913] ? ext4_xattr_ibody_set+0x330/0x330 [ 129.479492][ T5913] ? ext4_get_inode_loc+0x120/0x120 [ 129.484734][ T5913] ext4_xattr_ibody_set+0x112/0x330 [ 129.490152][ T5913] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 129.496088][ T5913] __ext4_expand_extra_isize+0x301/0x3e0 [ 129.502099][ T5913] __ext4_mark_inode_dirty+0x469/0x700 [ 129.507974][ T5913] ext4_evict_inode+0xa8d/0x1090 [ 129.513062][ T5913] ? _raw_spin_unlock+0x24/0x40 [ 129.518131][ T5913] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 129.524506][ T5913] ? do_raw_spin_unlock+0x11d/0x230 [ 129.530137][ T5913] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 129.536689][ T5913] evict+0x4c9/0x8d0 [ 129.540706][ T5913] ? proc_nr_inodes+0x320/0x320 [ 129.546572][ T5913] ? do_raw_spin_unlock+0x11d/0x230 [ 129.551809][ T5913] ? _raw_spin_unlock+0x24/0x40 [ 129.557154][ T5913] ? iput+0x706/0x8a0 [ 129.561435][ T5913] ext4_orphan_cleanup+0xad2/0x1320 [ 129.567025][ T5913] ? ext4_orphan_del+0xbf0/0xbf0 [ 129.572528][ T5913] ? errseq_check_and_advance+0x62/0x120 [ 129.578202][ T5913] ext4_fill_super+0x8e25/0x95a0 [ 129.583261][ T5913] ? ext4_mount+0x40/0x40 [ 129.587797][ T5913] ? set_blocksize+0x1f3/0x370 [ 129.592761][ T5913] ? sb_set_blocksize+0xa5/0xe0 [ 129.597644][ T5913] mount_bdev+0x287/0x3c0 [ 129.602092][ T5913] ? ext4_mount+0x40/0x40 [ 129.606565][ T5913] legacy_get_tree+0xe6/0x180 [ 129.611442][ T5913] ? ext4_errno_to_code+0x160/0x160 [ 129.616861][ T5913] vfs_get_tree+0x88/0x270 [ 129.621307][ T5913] do_new_mount+0x24a/0xa40 [ 129.625949][ T5913] __se_sys_mount+0x2e3/0x3d0 [ 129.630921][ T5913] ? __x64_sys_mount+0xc0/0xc0 [ 129.635706][ T5913] ? lockdep_hardirqs_on+0x94/0x140 [ 129.641027][ T5913] ? __x64_sys_mount+0x1c/0xc0 [ 129.645827][ T5913] do_syscall_64+0x4c/0xa0 [ 129.650270][ T5913] ? clear_bhb_loop+0x30/0x80 [ 129.655378][ T5913] ? clear_bhb_loop+0x30/0x80 [ 129.660274][ T5913] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.666454][ T5913] RIP: 0033:0x7f1cf0c0af4a [ 129.671259][ T5913] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.691369][ T5913] RSP: 002b:00007f1ceee64e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.699851][ T5913] RAX: ffffffffffffffda RBX: 00007f1ceee64ee0 RCX: 00007f1cf0c0af4a [ 129.708128][ T5913] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1ceee64ea0 [ 129.716176][ T5913] RBP: 0000200000000180 R08: 00007f1ceee64ee0 R09: 0000000000800700 [ 129.724173][ T5913] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 129.732251][ T5913] R13: 00007f1ceee64ea0 R14: 000000000000046f R15: 00002000000007c0 [ 129.740422][ T5913] [ 129.743961][ T5913] Kernel Offset: disabled [ 129.748467][ T5913] Rebooting in 86400 seconds..