last executing test programs: 47.485830184s ago: executing program 2 (id=50): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kfree\x00', r3}, 0x18) getdents64(r1, 0x0, 0x0) 47.292680592s ago: executing program 2 (id=51): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e78", 0xa) recvmmsg(r2, 0x0, 0x0, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @private0}, {0xa, 0x4e22, 0x2, @empty, 0x9}, r5, 0x2}}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec00000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="aa5400000000000008002900387d060008001e0008000000050011000500000022002400b1cb171d0292a4768da3c92c74d44b53afdaf607f83e21061d472c3a1ebf000024000e0007000000000000000600000000000000080000000000000060040701000000000a0001000000000000000000140003006c6f0000000000000000000000000000440012800b0001006970366772650000340002800400120014000700fe800000000000000000000d000000aa0500080008000000835950558c9908000d007e0a00000800040004000000050027007f000000"], 0xec}, 0x1, 0x0, 0x0, 0x20000064}, 0x0) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt(r0, 0x101, 0x6, &(0x7f0000000240)=""/139, &(0x7f0000000300)=0x8b) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) 47.080749412s ago: executing program 2 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000287, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES64=r2, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r5, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, r4, 0x0, 0x0, 0xbd7, 0x0, 0x0, r4}]) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x4, @private=0xa010102, 0x4e21, 0x4, 'nq\x00', 0x1, 0x10001, 0x47}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4e23, 0x10002, 0xfffffff8, 0x10, 0x3}}, 0x44) getegid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xd6, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0xa0, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x4, 0x0, 'Qh'}, {0x1, 0x11, "78676b5529157c4a4f2468a8f55ab301a031c43b00a9d84d0a2336bb418ea68a2e44f59b8f4d4beae7bf367e646889390c945b9efb324d3ace080eaf2477ebdbb7bf1b03371a36b22c4192c19a9c68215d40fb38ed96129794604b1ff4171f0091c19f35f0e25a2626f54aad286feeb406027a12e795bf2e6c1c09b05ab4f8211753bcd1fec7"}]}}}}}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0x88, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x679254deaba97529}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4881}, 0x1) unshare(0x2040400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r10, &(0x7f0000000180)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x8000, 0x4, 0x1) 46.056378596s ago: executing program 2 (id=62): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, r0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) 45.411967404s ago: executing program 2 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="0d00381d72a1d65bb35663e10f898f42", 0x10}], 0x1}, 0x4) 38.870799637s ago: executing program 2 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 38.478543864s ago: executing program 32 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 19.464118897s ago: executing program 1 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@rnullb, 0x0, &(0x7f0000000200)='./file0\x00') 19.259224366s ago: executing program 1 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}]}}) 19.016453387s ago: executing program 1 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.93416154s ago: executing program 1 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 18.687658241s ago: executing program 1 (id=299): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 18.419088963s ago: executing program 1 (id=301): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e78", 0xa) recvmmsg(r2, 0x0, 0x0, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @private0}, {0xa, 0x4e22, 0x2, @empty, 0x9}, r5, 0x2}}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec00000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="aa5400000000000008002900387d060008001e0008000000050011000500000022002400b1cb171d0292a4768da3c92c74d44b53afdaf607f83e21061d472c3a1ebf000024000e0007000000000000000600000000000000080000000000000060040701000000000a0001000000000000000000140003006c6f0000000000000000000000000000440012800b0001006970366772650000340002800400120014000700fe800000000000000000000d000000aa0500080008000000835950558c9908000d007e0a00000800040004000000050027007f000000"], 0xec}, 0x1, 0x0, 0x0, 0x20000064}, 0x0) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt(r0, 0x101, 0x6, &(0x7f0000000240)=""/139, &(0x7f0000000300)=0x8b) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) 18.226918291s ago: executing program 33 (id=301): r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e78", 0xa) recvmmsg(r2, 0x0, 0x0, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x800000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r5, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8, @private0}, {0xa, 0x4e22, 0x2, @empty, 0x9}, r5, 0x2}}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec00000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="aa5400000000000008002900387d060008001e0008000000050011000500000022002400b1cb171d0292a4768da3c92c74d44b53afdaf607f83e21061d472c3a1ebf000024000e0007000000000000000600000000000000080000000000000060040701000000000a0001000000000000000000140003006c6f0000000000000000000000000000440012800b0001006970366772650000340002800400120014000700fe800000000000000000000d000000aa0500080008000000835950558c9908000d007e0a00000800040004000000050027007f000000"], 0xec}, 0x1, 0x0, 0x0, 0x20000064}, 0x0) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt(r0, 0x101, 0x6, &(0x7f0000000240)=""/139, &(0x7f0000000300)=0x8b) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) 8.184832726s ago: executing program 3 (id=385): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x14f5, &(0x7f0000000400)={0x0, 0xd144, 0x1000, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r3, 0x3516, 0xddd6, 0x4, 0x0, 0x0) 7.968008215s ago: executing program 3 (id=388): prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x8001) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) close(0xffffffffffffffff) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r5, 0x8918, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 7.227677047s ago: executing program 6 (id=395): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="02030003110000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c00000080030005000000000002004e20ac1414bb0000000000000000020013"], 0x88}, 0x1, 0x7}, 0x0) 7.060393545s ago: executing program 3 (id=397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) 6.980139878s ago: executing program 6 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x400, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000001280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r2, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 6.779992027s ago: executing program 3 (id=402): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='Rv\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300000000000000000000000e00"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='mm_vmscan_throttled\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) 6.779644016s ago: executing program 6 (id=403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)=ANY=[], 0x0) 6.504221569s ago: executing program 3 (id=407): prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x8001) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) close(0xffffffffffffffff) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r5, 0x8918, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x714f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 5.699311723s ago: executing program 4 (id=415): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) socketpair$unix(0x1, 0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 5.646212606s ago: executing program 3 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000001a0000de00000000000014000780080006400000000005001500010000000500010006000000050005000200000005000400030000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ppoll(0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.151801417s ago: executing program 4 (id=418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x20000000000000d2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 4.985475544s ago: executing program 4 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 4.676915827s ago: executing program 4 (id=422): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@oldalloc}, {@block_validity}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@i_version}, {@nomblk_io_submit}, {@nodioread_nolock}]}, 0x6, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000600)={[{@nobarrier}]}, 0xfe, 0x269, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getgroups(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 4.206707808s ago: executing program 0 (id=425): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x20000810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) 3.814518185s ago: executing program 6 (id=427): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="0d00381d72a1d65bb35663e10f898f42", 0x10}], 0x1}, 0x4) 2.832844308s ago: executing program 4 (id=429): setreuid(0x0, 0xee00) mkdir(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3f, 0x7fff4002}]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = semget$private(0x0, 0x7, 0x191) semtimedop(r2, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r2, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) semop(r2, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}, {0x1, 0x5, 0x1000}], 0x2) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6883, 0x7, 0x1) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) semctl$GETZCNT(r2, 0x5, 0xf, 0x0) 2.832288438s ago: executing program 0 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.820403388s ago: executing program 6 (id=431): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f00000000c0)='./file0\x00', 0x1000480, &(0x7f0000000040)=ANY=[], 0x1, 0x11df, &(0x7f0000001f80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000014) shutdown(r1, 0x1) 2.418501275s ago: executing program 0 (id=434): syz_mount_image$ext4(&(0x7f0000002580)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 2.176408956s ago: executing program 5 (id=435): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 2.156769737s ago: executing program 6 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffddb, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1.949374966s ago: executing program 5 (id=437): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) pwritev2(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="a801d19893d8a671143e33c9ffe32763f2d59526373bf940585e9f24d330e81b2fa91bc16180480b92a1202b7b89280ada84a3a364e616bfca6dafadad5baeea6d957b581e8b674bc1fddb7662972e33447b82efbd8026d7c713d3f74035ac04b8043e5d4f6ca406ffe9c0f710f08dfb671d5a0536b385406ac44c47ae3279332fc7ea49ae432a0fba89da087cd12e0d5c117aa8d7e43b82b8c74abd8e37a714fda64a70aaf4f85d77288dbc39fe6b7b010e6db24ce2bd609a36", 0xba}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000000c0)="fc57dc83495e8c0eb77b8663408b832919d2f523b79a7c83735a4fc459ae5b080500f5bf4afb11b8072e9cf2b8f4943902fb9f608c27d8ec6b882b9e888410044001592dd5e218bbb097f4e86c95814c4a67f49e3f8f97d9", 0x58}, {&(0x7f0000000140)="8f61075b4ff957223a5eb6d01b2f20535a1f26293caa681cb604076aa9884bb5d309921c09536f7f41082c92308d828754619c6f1501358520b8b419507265dbe0b9c7c34404d0015e54c08072808abc1760739cf552fbe62d63cecb93787e8d649171b9c1bbc0d5fb40528192407472eae0cd45d17f4ebed7727cb37792c0ec4784813683328e3b5fc0ef37a35a0bb9f5953f3db355dcb654ea093cb728594e0aa681834de98b4e6da86b30b683ab2e401c4107c54a003e0cd5cf0ff37159a958e051837d7c3c602e152af0051b2f8d8e9e9ab9d7beb1298d8e8d82a26a447f643c4eb47918ca22fb36006adcf68084ce3d", 0xf2}], 0x4, 0x9, 0x7, 0x10) sendfile(r0, r0, 0x0, 0x2) 1.644173539s ago: executing program 5 (id=438): prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x8001) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r6, 0x8918, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x714f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 1.539190594s ago: executing program 4 (id=439): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)=ANY=[], 0x0) 1.018627646s ago: executing program 0 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) capget(&(0x7f0000000600)={0x20080522}, 0x0) 786.651876ms ago: executing program 5 (id=441): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="0d00381d72a1d65bb35663e10f898f42", 0x10}], 0x1}, 0x4) 424.266712ms ago: executing program 0 (id=442): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 298.583427ms ago: executing program 5 (id=443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a310000000008000340000000010800084000000000080004400000000014000000110001"], 0x6c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000150a0102"], 0x34}}, 0x20000000) 153.275274ms ago: executing program 0 (id=444): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000ac0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@dax_never}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}], 0x2c}, 0xa, 0x525, &(0x7f0000000480)="$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") open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) 0s ago: executing program 5 (id=445): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7f, &(0x7f0000000280)={0x0, 0x7a22, 0x2, 0xa003, 0x337}) unshare(0x2040400) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140), 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6745208e00183aff00000000000000000000ffffac1414aaff0200000000000000000000000009000000000000000100"/78], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0x8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 64.112013][ T4172] cgroup: Unknown subsys name 'net' [ 64.279685][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.757477][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.270810][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.356740][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.379157][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.452084][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 67.488553][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.496569][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.504755][ T4184] device bridge_slave_0 entered promiscuous mode [ 67.513209][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.522657][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.530400][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.538402][ T4184] device bridge_slave_1 entered promiscuous mode [ 67.616088][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.625530][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.637565][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.646133][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.653438][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.661371][ T4183] device bridge_slave_0 entered promiscuous mode [ 67.674376][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.686035][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.702040][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.709343][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.718228][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.726000][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.733304][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.741163][ T4183] device bridge_slave_1 entered promiscuous mode [ 67.813108][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.831906][ T4184] team0: Port device team_slave_0 added [ 67.840410][ T4184] team0: Port device team_slave_1 added [ 67.855928][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.867148][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.899621][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.917358][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.924800][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.932605][ T4185] device bridge_slave_0 entered promiscuous mode [ 67.948095][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.955281][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.963482][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.986205][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.993590][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.001410][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.009871][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.016960][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.043145][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.054950][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.062157][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.070547][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.093535][ T4183] team0: Port device team_slave_0 added [ 68.110208][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.117245][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.144150][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.164752][ T4186] team0: Port device team_slave_0 added [ 68.180786][ T4183] team0: Port device team_slave_1 added [ 68.197821][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.212733][ T4186] team0: Port device team_slave_1 added [ 68.220837][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.245717][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.272599][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.312057][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.319234][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.346486][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.360242][ T4185] team0: Port device team_slave_0 added [ 68.369760][ T4185] team0: Port device team_slave_1 added [ 68.382220][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.389684][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.416102][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.434645][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.441636][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.467808][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.493745][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.500734][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.527062][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.541033][ T4187] team0: Port device team_slave_0 added [ 68.565023][ T4184] device hsr_slave_0 entered promiscuous mode [ 68.571794][ T4184] device hsr_slave_1 entered promiscuous mode [ 68.591061][ T4187] team0: Port device team_slave_1 added [ 68.606009][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.613089][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.639677][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.681854][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.689042][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.715426][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.732517][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.739979][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.746838][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.754797][ T4186] Cannot create hsr debugfs directory [ 68.768012][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.775245][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.801731][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.840331][ T4183] device hsr_slave_0 entered promiscuous mode [ 68.847220][ T4183] device hsr_slave_1 entered promiscuous mode [ 68.854475][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.862067][ T4183] Cannot create hsr debugfs directory [ 68.868753][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.876220][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.902360][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.924232][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 68.931158][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 68.933082][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 68.947765][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 68.954100][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 68.986727][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.994103][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.000788][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.008804][ T4187] Cannot create hsr debugfs directory [ 69.074359][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.081170][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.088021][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.096486][ T4185] Cannot create hsr debugfs directory [ 69.360417][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.373408][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.383923][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.398452][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.445051][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.460926][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.472035][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.489886][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.551478][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.561573][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.591980][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.601716][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.669640][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.684925][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.699606][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.736207][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.746072][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.761170][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.769418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.778716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.824505][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.842240][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.855057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.865883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.875970][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.883271][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.892521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.901344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.909951][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.947388][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.956905][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.966956][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.974126][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.985081][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.994040][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.002449][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.009574][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.017529][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.026825][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.042164][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.051351][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.060305][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.070629][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.079895][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.092563][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.115306][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.124464][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.133377][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.142170][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.149315][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.158018][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.171177][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.181330][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.205832][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.223795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.232260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.242344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.251376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.260699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.288502][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.304317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.313047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.321874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.331900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.341033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.349873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.377784][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.387012][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.403224][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.410262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.420692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.439908][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.468815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.479254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.488751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.497837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.510306][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.537777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.554209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.572652][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.579893][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.610615][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.627873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.642139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.651291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.660177][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.667420][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.677168][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.688500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.715669][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.729570][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.740836][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.747999][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.761998][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.773380][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.782009][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.789144][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.797897][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.806774][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.849497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.859553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.870159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.884207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.893741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.902222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.911913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.921403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.931543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.941326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.950315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.959113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.967023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.974891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.982374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.990334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.999370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.003452][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 71.023467][ T4257] Bluetooth: hci3: command 0x041b tx timeout [ 71.029605][ T4257] Bluetooth: hci1: command 0x041b tx timeout [ 71.032392][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.036434][ T4257] Bluetooth: hci2: command 0x041b tx timeout [ 71.049540][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 71.058926][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.070368][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.087943][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.100214][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.115526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.124420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.133318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.141701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.150239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.158860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.168406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.184541][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.198611][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.245959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.257849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.282071][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.299555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.311335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.322539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.331345][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.337964][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.354467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.364395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.372219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.388568][ T4184] device veth0_vlan entered promiscuous mode [ 71.404600][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.413808][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.427722][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.434879][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.446225][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.459232][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.471078][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.478410][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.493885][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.537213][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.545749][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.557151][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.567170][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.576990][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.586083][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.595498][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.605452][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.617260][ T4184] device veth1_vlan entered promiscuous mode [ 71.637280][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.650575][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.669639][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.678049][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.687166][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.696096][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.704909][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.714666][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.743693][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.760485][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.769809][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.781310][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.791892][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.806837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.817306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.843844][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.854382][ T4184] device veth0_macvtap entered promiscuous mode [ 71.869146][ T4183] device veth0_vlan entered promiscuous mode [ 71.891978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.901654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.910603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.924524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.932660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.949093][ T4183] device veth1_vlan entered promiscuous mode [ 71.961521][ T4184] device veth1_macvtap entered promiscuous mode [ 71.977494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.993879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.002244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.018443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.059467][ T4187] device veth0_vlan entered promiscuous mode [ 72.079963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.097951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.106907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.115884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.124423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.141482][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.150449][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.169520][ T4187] device veth1_vlan entered promiscuous mode [ 72.197941][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.212661][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.228865][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.238622][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.246340][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.255619][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.270128][ T4183] device veth0_macvtap entered promiscuous mode [ 72.281314][ T4183] device veth1_macvtap entered promiscuous mode [ 72.293894][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.301375][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.310828][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.320421][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.329387][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.338564][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.374503][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.399861][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.409254][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.418674][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.432197][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.478629][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.491137][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.505378][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.515315][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.525300][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.535036][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.544386][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.553242][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.561873][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.570848][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.580306][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.596883][ T4187] device veth0_macvtap entered promiscuous mode [ 72.615005][ T4187] device veth1_macvtap entered promiscuous mode [ 72.626207][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.635294][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.643660][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.651937][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.663897][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.672408][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.684119][ T4186] device veth0_vlan entered promiscuous mode [ 72.708626][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.719430][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.732092][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.751362][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.762628][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.780712][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.790059][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.800321][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.811046][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.824797][ T4186] device veth1_vlan entered promiscuous mode [ 72.839461][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.849092][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.857971][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.880404][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.896661][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.906596][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.917358][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.930476][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.940713][ T4185] device veth0_vlan entered promiscuous mode [ 72.962449][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.970941][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.979311][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.989072][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.998049][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.015116][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.028124][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.038344][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.049213][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.060538][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.075671][ T4185] device veth1_vlan entered promiscuous mode [ 73.083614][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 73.089795][ T4257] Bluetooth: hci2: command 0x040f tx timeout [ 73.104591][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.112769][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.122071][ T4257] Bluetooth: hci1: command 0x040f tx timeout [ 73.122532][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.135013][ T4257] Bluetooth: hci3: command 0x040f tx timeout [ 73.142814][ T4257] Bluetooth: hci0: command 0x040f tx timeout [ 73.153965][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.162713][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.174219][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.184742][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.223773][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.231828][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.232137][ T4186] device veth0_macvtap entered promiscuous mode [ 73.271095][ T4185] device veth0_macvtap entered promiscuous mode [ 73.280647][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.292056][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.301938][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.310982][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.319956][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.329572][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.338773][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.348102][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.361777][ T4186] device veth1_macvtap entered promiscuous mode [ 73.379997][ T4185] device veth1_macvtap entered promiscuous mode [ 73.420356][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.428891][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.453504][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.461520][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.486942][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.500924][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.511875][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.522630][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.533308][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.543977][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.555584][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.571072][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.582546][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.592590][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.603793][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.613729][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.624576][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.635003][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.650730][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.666036][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.676837][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.685810][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.694820][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.703913][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.712588][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.724447][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.736357][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.746837][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.758165][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.768326][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.779091][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.790399][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.811053][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.812722][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.829271][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.842786][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.853360][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.864176][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.874118][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.886215][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.896112][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.906570][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.921324][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.933374][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.941385][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.949089][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.965032][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.976264][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.988210][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.997252][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.007976][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.025476][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035241][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.044432][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.053517][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.086578][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.106473][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.127719][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.138996][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.170916][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.196762][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.221365][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.325443][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.343140][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.392150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.442441][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.490987][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.531807][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.554990][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.603633][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.661306][ T4301] device syzkaller0 entered promiscuous mode [ 74.676412][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.689518][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.723620][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.812584][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.885661][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.920392][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.939876][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.041512][ T4314] loop3: detected capacity change from 0 to 1024 [ 75.079551][ T4314] ======================================================= [ 75.079551][ T4314] WARNING: The mand mount option has been deprecated and [ 75.079551][ T4314] and is ignored by this kernel. Remove the mand [ 75.079551][ T4314] option from the mount to silence this warning. [ 75.079551][ T4314] ======================================================= [ 75.153127][ T4314] EXT4-fs (loop3): Ignoring removed nobh option [ 75.161864][ T4314] EXT4-fs (loop3): Ignoring removed bh option [ 75.164642][ T4249] Bluetooth: hci0: command 0x0419 tx timeout [ 75.184893][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 75.195750][ T4314] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.206639][ T4249] Bluetooth: hci1: command 0x0419 tx timeout [ 75.218122][ T26] audit: type=1326 audit(1765101395.072:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.278138][ T4322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8'. [ 75.289140][ T4322] IPVS: Error connecting to the multicast addr [ 75.314441][ T4249] Bluetooth: hci2: command 0x0419 tx timeout [ 75.322007][ T4314] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,usrjquota=,mb_optimize_scan=0x0000000000000000,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,. Quota mode: none. [ 75.349534][ T4249] Bluetooth: hci4: command 0x0419 tx timeout [ 75.366714][ T26] audit: type=1326 audit(1765101395.072:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.391396][ T26] audit: type=1326 audit(1765101395.072:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.418688][ T26] audit: type=1326 audit(1765101395.072:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.465459][ T26] audit: type=1326 audit(1765101395.072:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.509845][ T4324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.529942][ T26] audit: type=1326 audit(1765101395.072:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.604315][ T26] audit: type=1326 audit(1765101395.072:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.625543][ T4329] loop0: detected capacity change from 0 to 1024 [ 75.640039][ T26] audit: type=1326 audit(1765101395.072:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.670377][ T26] audit: type=1326 audit(1765101395.072:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.698778][ T26] audit: type=1326 audit(1765101395.072:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4316 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 75.743605][ T4329] EXT4-fs (loop0): Unrecognized mount option "sync" or missing value [ 76.373694][ T4344] loop2: detected capacity change from 0 to 512 [ 76.665590][ T4344] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.12: corrupted in-inode xattr [ 76.680458][ T4344] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.12: couldn't read orphan inode 15 (err -117) [ 76.694505][ T4344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 77.128959][ T4258] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.147100][ T4349] netlink: 'syz.4.16': attribute type 1 has an invalid length. [ 77.353160][ T4258] usb 2-1: device descriptor read/64, error -71 [ 77.383340][ T4357] loop3: detected capacity change from 0 to 512 [ 77.473008][ T4357] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.473045][ T4357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.540030][ T4357] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.541407][ T4357] EXT4-fs (loop3): 1 truncate cleaned up [ 77.570588][ T4357] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 77.643048][ T4258] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.650951][ T4363] loop2: detected capacity change from 0 to 164 [ 77.762585][ T4363] ISOFS: unable to read i-node block [ 77.782255][ T4359] syz.4.19 uses obsolete (PF_INET,SOCK_PACKET) [ 77.788790][ T4363] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 77.893538][ T4258] usb 2-1: device descriptor read/64, error -71 [ 77.957882][ T4370] loop0: detected capacity change from 0 to 512 [ 78.023284][ T4258] usb usb2-port1: attempt power cycle [ 78.037079][ T4370] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 78.153646][ T4370] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000008000,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 78.264560][ T4372] mmap: syz.2.21 (4372) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 78.276981][ T4370] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.320532][ T4372] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.443228][ T4258] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.491704][ T4379] device syzkaller0 entered promiscuous mode [ 78.502603][ T4375] loop2: detected capacity change from 0 to 1024 [ 78.537513][ T4258] usb 2-1: device descriptor read/8, error -71 [ 78.564154][ T4375] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 78.807604][ T4258] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 78.825481][ T4385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25'. [ 78.933229][ T4258] usb 2-1: device descriptor read/8, error -71 [ 78.995961][ T4390] loop4: detected capacity change from 0 to 164 [ 79.063416][ T4258] usb usb2-port1: unable to enumerate USB device [ 79.417365][ T4404] loop1: detected capacity change from 0 to 512 [ 79.485953][ T4404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.554951][ T4404] EXT4-fs (loop1): 1 truncate cleaned up [ 79.611544][ T4404] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 79.850150][ T4415] device syzkaller0 entered promiscuous mode [ 80.101067][ T4430] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.139026][ T4430] FAT-fs (loop1): unable to read boot sector [ 80.229522][ T4258] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 80.437946][ T4258] usb 2-1: device descriptor read/64, error -71 [ 80.566730][ T4446] loop3: detected capacity change from 0 to 512 [ 80.661800][ T4446] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 80.705782][ T4446] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 80.714560][ T4258] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 80.735485][ T4446] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #13: comm syz.3.47: iget: bad i_size value: 12154757448730 [ 80.827076][ T4446] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.47: couldn't read orphan inode 13 (err -117) [ 80.850038][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 80.869531][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.914554][ T4258] usb 2-1: device descriptor read/64, error -71 [ 80.987782][ T4446] ip6t_srh: unknown srh match flags 4000 [ 81.047926][ T4258] usb usb2-port1: attempt power cycle [ 81.202519][ T26] kauditd_printk_skb: 103 callbacks suppressed [ 81.202536][ T26] audit: type=1326 audit(1765101407.152:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.332766][ T26] audit: type=1326 audit(1765101407.184:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.384998][ T26] audit: type=1326 audit(1765101407.184:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.418392][ T4465] device syzkaller0 entered promiscuous mode [ 81.444505][ T26] audit: type=1326 audit(1765101407.184:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.471902][ T4258] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 81.501104][ T26] audit: type=1326 audit(1765101407.184:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.523233][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.530678][ T26] audit: type=1326 audit(1765101407.184:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.552815][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.569622][ T26] audit: type=1326 audit(1765101407.184:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.612007][ T26] audit: type=1326 audit(1765101407.184:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.634121][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.641326][ T4258] usb 2-1: device descriptor read/8, error -71 [ 81.657066][ T26] audit: type=1326 audit(1765101407.184:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.704713][ T26] audit: type=1326 audit(1765101407.184:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652019d749 code=0x7ffc0000 [ 81.727198][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.923979][ T4258] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 82.047542][ T4258] usb 2-1: device descriptor read/8, error -71 [ 82.162095][ T4258] usb usb2-port1: unable to enumerate USB device [ 82.185286][ T4489] loop2: detected capacity change from 0 to 512 [ 82.274241][ T4494] netlink: 'syz.0.63': attribute type 5 has an invalid length. [ 82.408850][ T4489] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 82.471151][ T4489] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.537759][ T4509] loop0: detected capacity change from 0 to 128 [ 82.817344][ T4518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.835524][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 82.953907][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 82.997459][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.076739][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.157734][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.218498][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.253436][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.304051][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.362880][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.414630][ T4536] loop3: detected capacity change from 0 to 512 [ 83.427731][ T4528] loop1: detected capacity change from 0 to 8192 [ 83.431776][ T4184] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 83.490985][ T4536] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.615256][ T4536] EXT4-fs (loop3): 1 truncate cleaned up [ 83.654674][ T4536] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 84.413069][ T4235] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.923841][ T4235] usb 4-1: device descriptor read/64, error -71 [ 85.209675][ T4235] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.438336][ T4235] usb 4-1: device descriptor read/64, error -71 [ 85.567363][ T4235] usb usb4-port1: attempt power cycle [ 86.004407][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.124319][ T4235] usb 4-1: device descriptor read/8, error -71 [ 86.327306][ T3159] cfg80211: failed to load regulatory.db [ 86.400293][ T4235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.539533][ T4235] usb 4-1: device descriptor read/8, error -71 [ 86.548320][ T1281] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.589161][ T4565] loop1: detected capacity change from 0 to 512 [ 86.698874][ T4235] usb usb4-port1: unable to enumerate USB device [ 86.715051][ T1281] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.866475][ T1281] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.914528][ T4565] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 87.081994][ T1281] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.614213][ T26] kauditd_printk_skb: 263 callbacks suppressed [ 87.614228][ T26] audit: type=1326 audit(1765101413.882:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 87.650938][ T4591] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 87.673778][ T4591] netlink: 224 bytes leftover after parsing attributes in process `syz.4.93'. [ 87.704320][ T26] audit: type=1326 audit(1765101413.914:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 87.781393][ T26] audit: type=1326 audit(1765101413.924:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c02b0cf90 code=0x7ffc0000 [ 87.882297][ T26] audit: type=1326 audit(1765101413.924:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1c02b0ff77 code=0x7ffc0000 [ 87.984593][ T26] audit: type=1326 audit(1765101413.924:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 88.076602][ T26] audit: type=1326 audit(1765101413.924:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1c02b0ff77 code=0x7ffc0000 [ 88.213710][ T26] audit: type=1326 audit(1765101413.924:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1c02b0d3aa code=0x7ffc0000 [ 88.285637][ T26] audit: type=1326 audit(1765101413.924:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 88.420199][ T26] audit: type=1326 audit(1765101413.924:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 88.441523][ T4609] loop3: detected capacity change from 0 to 1024 [ 88.474699][ T4615] binfmt_misc: register: failed to install interpreter file ./file2 [ 88.514083][ T26] audit: type=1326 audit(1765101413.977:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 88.544744][ T4609] EXT4-fs (loop3): Ignoring removed nobh option [ 88.630054][ T4609] EXT4-fs (loop3): Ignoring removed bh option [ 88.636206][ T4609] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 89.433149][ T1281] device hsr_slave_0 left promiscuous mode [ 89.451778][ T1281] device hsr_slave_1 left promiscuous mode [ 89.482900][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.499287][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.545716][ T1281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.575643][ T1281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.614094][ T1281] device bridge_slave_1 left promiscuous mode [ 89.649072][ T1281] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.802719][ T1281] device bridge_slave_0 left promiscuous mode [ 89.819098][ T1281] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.329442][ T1281] device veth1_macvtap left promiscuous mode [ 90.329844][ T1281] device veth0_macvtap left promiscuous mode [ 90.330571][ T1281] device veth1_vlan left promiscuous mode [ 90.330784][ T1281] device veth0_vlan left promiscuous mode [ 90.632629][ T4658] atomic_op ffff88802527d198 conn xmit_atomic 0000000000000000 [ 90.843355][ T4665] xt_TCPMSS: Only works on TCP SYN packets [ 90.993425][ T4668] loop4: detected capacity change from 0 to 512 [ 91.048332][ T4668] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.091765][ T4668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 91.115152][ T4668] System zones: 1-12 [ 91.121810][ T4668] EXT4-fs (loop4): 1 truncate cleaned up [ 91.151278][ T4668] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,jqfmt=vfsv0,nodioread_nolock,debug,noquota,. Quota mode: none. [ 91.275523][ T4668] EXT4-fs error (device loop4): __ext4_iget:4908: inode #12: block 2: comm syz.4.114: invalid block [ 91.331931][ T4668] EXT4-fs (loop4): Remounting filesystem read-only [ 91.351993][ T4673] EXT4-fs error (device loop4): __ext4_iget:4908: inode #12: block 2: comm syz.4.114: invalid block [ 91.402522][ T4673] EXT4-fs (loop4): Remounting filesystem read-only [ 91.549809][ T1281] team0 (unregistering): Port device team_slave_1 removed [ 91.571433][ T4549] Set syz1 is full, maxelem 65536 reached [ 91.623713][ T1281] team0 (unregistering): Port device team_slave_0 removed [ 91.700230][ T1281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.796642][ T1281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.066025][ T1281] bond0 (unregistering): Released all slaves [ 92.208395][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.218405][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.226431][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.283876][ T4681] device syzkaller0 entered promiscuous mode [ 92.529068][ T4698] device macvlan2 entered promiscuous mode [ 92.584021][ T4698] batman_adv: batadv0: Adding interface: macvlan2 [ 92.590591][ T4698] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.648641][ T4242] Bluetooth: hci0: command 0x0409 tx timeout [ 92.716092][ T4698] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 93.339699][ T4656] chnl_net:caif_netlink_parms(): no params data found [ 93.427749][ T4732] loop4: detected capacity change from 0 to 128 [ 93.581844][ T4242] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.730125][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.762853][ T4242] usb 1-1: device descriptor read/64, error -71 [ 93.800992][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.833292][ T4656] device bridge_slave_0 entered promiscuous mode [ 93.875598][ T4656] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.919316][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.948400][ T4656] device bridge_slave_1 entered promiscuous mode [ 94.020290][ T4242] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 94.069078][ T4656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.094973][ T4656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.210310][ T4242] usb 1-1: device descriptor read/64, error -71 [ 94.223115][ T4656] team0: Port device team_slave_0 added [ 94.258401][ T4656] team0: Port device team_slave_1 added [ 94.325169][ T4242] usb usb1-port1: attempt power cycle [ 94.347821][ T4656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.372628][ T4656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.461437][ T4656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.489215][ T4656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.515773][ T4656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.584988][ T4656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.629441][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 94.715576][ T4242] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.721406][ T4656] device hsr_slave_0 entered promiscuous mode [ 94.746931][ T4656] device hsr_slave_1 entered promiscuous mode [ 94.801459][ T4242] usb 1-1: device descriptor read/8, error -71 [ 94.813074][ T4758] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 94.821621][ T4756] device syzkaller0 entered promiscuous mode [ 95.058372][ T4242] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.144287][ T4242] usb 1-1: device descriptor read/8, error -71 [ 95.155225][ T4771] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 95.258573][ T4242] usb usb1-port1: unable to enumerate USB device [ 95.450916][ T4656] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.518030][ T4656] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.599707][ T4656] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.672207][ T4656] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.053500][ T4656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.117721][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.135439][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.190557][ T4656] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.277855][ T4815] device syzkaller0 entered promiscuous mode [ 96.303221][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.358229][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.387108][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.394412][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.429787][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.457522][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.496945][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.550630][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.557816][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.586397][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.607121][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.610571][ T2304] Bluetooth: hci0: command 0x040f tx timeout [ 96.701742][ T4818] bridge0: port 3(batadv1) entered blocking state [ 96.725223][ T4818] bridge0: port 3(batadv1) entered disabled state [ 96.732960][ T4818] device batadv1 entered promiscuous mode [ 96.830825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.871646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.935380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.975795][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 96.975810][ T26] audit: type=1326 audit(1765101423.720:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 96.981551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.005112][ T26] audit: type=1326 audit(1765101423.752:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 97.105534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.120286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.120289][ T26] audit: type=1326 audit(1765101423.867:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 97.120328][ T26] audit: type=1326 audit(1765101423.867:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4829 comm="syz.0.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 97.131445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.198744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.211410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.227780][ T4346] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 97.237720][ T4346] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 97.259290][ T4832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 97.289991][ T4839] netlink: 96 bytes leftover after parsing attributes in process `syz.0.158'. [ 97.667048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.677230][ T2304] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.687366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.720321][ T4656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.867971][ T2304] usb 5-1: device descriptor read/64, error -71 [ 97.911854][ T4862] device syzkaller0 entered promiscuous mode [ 98.095532][ T26] audit: type=1326 audit(1765101424.886:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7897c4f749 code=0x7ffc0000 [ 98.125156][ T2304] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.175244][ T26] audit: type=1326 audit(1765101424.917:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f7897c4f749 code=0x7ffc0000 [ 98.266197][ T26] audit: type=1326 audit(1765101424.917:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7897c4f749 code=0x7ffc0000 [ 98.305791][ T2304] usb 5-1: device descriptor read/64, error -71 [ 98.376643][ T4887] loop0: detected capacity change from 0 to 512 [ 98.388105][ T4886] loop1: detected capacity change from 0 to 1024 [ 98.420671][ T2304] usb usb5-port1: attempt power cycle [ 98.458759][ T4886] EXT4-fs (loop1): Ignoring removed oldalloc option [ 98.465499][ T4886] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 98.503166][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.524349][ T26] audit: type=1800 audit(1765101425.337:432): pid=4887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.169" name="file2" dev="loop0" ino=1048591 res=0 errno=0 [ 98.527288][ T4887] attempt to access beyond end of device [ 98.527288][ T4887] loop0: rw=0, want=17179852722, limit=512 [ 98.563835][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.592146][ T4242] Bluetooth: hci0: command 0x0419 tx timeout [ 98.663820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.675827][ T4886] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,oldalloc,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 98.716533][ T4887] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 98.726616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.735715][ T4887] FAT-fs (loop0): Filesystem has been set read-only [ 98.738965][ T4656] device veth0_vlan entered promiscuous mode [ 98.769322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.787244][ T4887] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 98.807247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.829962][ T2304] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.863653][ T4656] device veth1_vlan entered promiscuous mode [ 98.917009][ T2304] usb 5-1: device descriptor read/8, error -71 [ 99.013585][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.040316][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.072666][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.099472][ T4911] Cannot find add_set index 0 as target [ 99.109491][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.141169][ T4656] device veth0_macvtap entered promiscuous mode [ 99.173259][ T2304] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.194890][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.260039][ T26] audit: type=1326 audit(1765101426.114:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7897c4f749 code=0x7ffc0000 [ 99.268461][ T2304] usb 5-1: device descriptor read/8, error -71 [ 99.308606][ T4909] device syzkaller0 entered promiscuous mode [ 99.349400][ T26] audit: type=1326 audit(1765101426.156:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7897c4f749 code=0x7ffc0000 [ 99.349917][ T4656] device veth1_macvtap entered promiscuous mode [ 99.513455][ T2304] usb usb5-port1: unable to enumerate USB device [ 99.539374][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.559037][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.578233][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.620587][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.646718][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.669932][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.687145][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.721919][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.762401][ T4656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.776601][ T4940] sd 0:0:1:0: device reset [ 99.801585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.829539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.872270][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.908503][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.938606][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.979598][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.013533][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.051092][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.087119][ T4656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.123260][ T4656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.143233][ T4656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.171919][ T4950] tipc: Enabling of bearer rejected, failed to enable media [ 100.190983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.204366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.221268][ T4656] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.237868][ T4656] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.265693][ T4656] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.288360][ T4656] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.526470][ T4968] device syzkaller0 entered promiscuous mode [ 100.547575][ T4973] loop1: detected capacity change from 0 to 512 [ 100.557374][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.582750][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.662157][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.735884][ T4973] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 100.777817][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.786947][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.796987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.829961][ T4973] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.947819][ T4991] netlink: 'syz.4.200': attribute type 4 has an invalid length. [ 100.969982][ T4973] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.196: corrupted inode contents [ 100.997626][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.020142][ T4973] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #16: comm syz.1.196: mark_inode_dirty error [ 101.054602][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.065944][ T4973] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.196: corrupted inode contents [ 101.126584][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.133173][ T4973] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.196: mark_inode_dirty error [ 101.152913][ T4998] loop4: detected capacity change from 0 to 1024 [ 101.159679][ T2304] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.185486][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.204544][ T4973] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.196: corrupted inode contents [ 101.232079][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.238649][ T4973] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 101.276019][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.317860][ T4998] EXT4-fs (loop4): Unrecognized mount option "sync" or missing value [ 101.325634][ T4973] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.196: corrupted inode contents [ 101.344471][ T2304] usb 4-1: device descriptor read/64, error -71 [ 101.374560][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.391539][ T4973] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.196: mark_inode_dirty error [ 101.450539][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.464646][ T4973] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 101.526347][ T4973] EXT4-fs (loop1): Remounting filesystem read-only [ 101.549503][ T4973] EXT4-fs (loop1): 1 truncate cleaned up [ 101.601317][ T2304] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.608834][ T4973] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 101.857118][ T5019] IPVS: Error connecting to the multicast addr [ 101.863734][ T2304] usb 4-1: device descriptor read/64, error -71 [ 101.942313][ T5022] device syzkaller0 entered promiscuous mode [ 101.986119][ T2304] usb usb4-port1: attempt power cycle [ 102.082467][ T5027] loop0: detected capacity change from 0 to 164 [ 102.139629][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 102.139643][ T26] audit: type=1326 audit(1765101429.138:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.145295][ T5031] netlink: 'syz.5.211': attribute type 12 has an invalid length. [ 102.146745][ T26] audit: type=1326 audit(1765101429.148:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.234759][ T26] audit: type=1326 audit(1765101429.201:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5033 comm="syz.1.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc513e749 code=0x7ffc0000 [ 102.363290][ T26] audit: type=1326 audit(1765101429.211:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.393044][ T2304] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 102.453631][ T26] audit: type=1326 audit(1765101429.211:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.506689][ T2304] usb 4-1: device descriptor read/8, error -71 [ 102.569610][ T26] audit: type=1326 audit(1765101429.211:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.659494][ T26] audit: type=1326 audit(1765101429.211:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.697716][ T5050] loop0: detected capacity change from 0 to 128 [ 102.731510][ T26] audit: type=1326 audit(1765101429.211:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.763502][ T2304] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 102.791766][ T26] audit: type=1326 audit(1765101429.211:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.830683][ T26] audit: type=1326 audit(1765101429.211:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 102.861048][ T2304] usb 4-1: device descriptor read/8, error -71 [ 102.968861][ T5059] loop4: detected capacity change from 0 to 2048 [ 102.983394][ T2304] usb usb4-port1: unable to enumerate USB device [ 103.048146][ T5059] loop4: p1 < > p4 [ 103.063764][ T5059] loop4: p4 size 8388608 extends beyond EOD, truncated [ 103.076384][ T5061] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.398688][ T5075] capability: warning: `syz.1.225' uses 32-bit capabilities (legacy support in use) [ 103.412740][ T5076] loop4: detected capacity change from 0 to 128 [ 103.515068][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 103.536165][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 103.755673][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 103.771462][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 103.792668][ T5090] loop4: detected capacity change from 0 to 512 [ 103.823435][ T5090] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 104.070073][ T5090] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,barrier=0x000000000000000c,,errors=continue. Quota mode: writeback. [ 104.173397][ T5090] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.192539][ T5110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.232'. [ 104.371102][ T5121] loop3: detected capacity change from 0 to 512 [ 104.425075][ T5120] 9p: Unknown access argument  [ 104.548849][ T5121] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.237: inode has both inline data and extents flags [ 104.590273][ T5121] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.237: couldn't read orphan inode 15 (err -117) [ 104.657683][ T5121] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 104.725625][ T5138] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.730273][ T5121] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 105.126874][ T5153] loop1: detected capacity change from 0 to 2048 [ 105.179246][ T5157] loop3: detected capacity change from 0 to 1024 [ 105.287573][ T5157] EXT4-fs (loop3): Ignoring removed orlov option [ 105.360791][ T5165] syz.1.249[5165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.360899][ T5165] syz.1.249[5165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.376687][ T5157] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 105.489348][ T5167] loop4: detected capacity change from 0 to 128 [ 105.999339][ T5181] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.744849][ T5194] loop3: detected capacity change from 0 to 512 [ 106.822119][ T5194] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.866449][ T5197] netlink: 'syz.4.260': attribute type 10 has an invalid length. [ 106.927375][ T5194] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 106.969944][ T5194] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.258: invalid indirect mapped block 2683928664 (level 1) [ 107.089228][ T5197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.106348][ T5194] EXT4-fs (loop3): Remounting filesystem read-only [ 107.147202][ T5194] EXT4-fs (loop3): 1 truncate cleaned up [ 107.168910][ T5194] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 107.274364][ T5197] syz.4.260 (5197) used greatest stack depth: 19296 bytes left [ 107.770225][ T26] kauditd_printk_skb: 510 callbacks suppressed [ 107.770241][ T26] audit: type=1326 audit(1765101948.046:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 107.827499][ T5235] sd 0:0:1:0: device reset [ 107.857453][ T26] audit: type=1326 audit(1765101948.088:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 107.921736][ T26] audit: type=1326 audit(1765101948.088:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 107.993917][ T5246] capability: warning: `syz.3.275' uses deprecated v2 capabilities in a way that may be insecure [ 108.013274][ T26] audit: type=1326 audit(1765101948.088:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 108.083248][ T26] audit: type=1326 audit(1765101948.088:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 108.120097][ T5220] syz.0.264 (5220) used greatest stack depth: 18560 bytes left [ 108.186012][ T26] audit: type=1326 audit(1765101948.098:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 108.289245][ T26] audit: type=1326 audit(1765101948.098:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 108.419963][ T26] audit: type=1326 audit(1765101948.098:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 108.560379][ T26] audit: type=1326 audit(1765101948.098:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 108.655572][ T26] audit: type=1326 audit(1765101948.098:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5230 comm="syz.4.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 108.728757][ T5282] smc: net device bond0 applied user defined pnetid SYZ0 [ 108.783133][ T5288] smc: net device bond0 erased user defined pnetid SYZ0 [ 108.976103][ T5296] Zero length message leads to an empty skb [ 109.003950][ T5299] 9pnet: Insufficient options for proto=fd [ 109.083467][ T5304] loop3: detected capacity change from 0 to 128 [ 109.199178][ T5311] loop5: detected capacity change from 0 to 512 [ 109.410904][ T5311] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.479761][ T5311] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.492002][ T5322] loop3: detected capacity change from 0 to 128 [ 109.499482][ T5311] EXT4-fs error (device loop5): ext4_do_update_inode:5218: inode #2: comm syz.5.294: corrupted inode contents [ 109.524256][ T5311] EXT4-fs error (device loop5): ext4_dirty_inode:6054: inode #2: comm syz.5.294: mark_inode_dirty error [ 109.549341][ T5311] EXT4-fs error (device loop5): ext4_do_update_inode:5218: inode #2: comm syz.5.294: corrupted inode contents [ 109.595597][ T5326] EXT4-fs error (device loop5): ext4_do_update_inode:5218: inode #2: comm syz.5.294: corrupted inode contents [ 109.671114][ T5326] EXT4-fs error (device loop5): ext4_dirty_inode:6054: inode #2: comm syz.5.294: mark_inode_dirty error [ 109.753863][ T5326] EXT4-fs error (device loop5): ext4_do_update_inode:5218: inode #2: comm syz.5.294: corrupted inode contents [ 109.766423][ T4190] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.822560][ T5326] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.294: mark_inode_dirty error [ 109.852144][ T5326] EXT4-fs error (device loop5): ext4_do_update_inode:5218: inode #2: comm syz.5.294: corrupted inode contents [ 109.881714][ T5326] EXT4-fs error (device loop5): ext4_dirty_inode:6054: inode #2: comm syz.5.294: mark_inode_dirty error [ 109.903679][ T5331] EXT4-fs error (device loop5): ext4_do_update_inode:5218: inode #2: comm syz.5.294: corrupted inode contents [ 110.050847][ T4190] usb 1-1: Using ep0 maxpacket: 16 [ 110.241740][ T4190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.355684][ T4190] usb 1-1: config 1 interface 0 has no altsetting 0 [ 110.555521][ T4190] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 110.564701][ T4190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.570946][ T5362] process 'syz.3.307' launched './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 110.572925][ T4190] usb 1-1: Product: syz [ 110.676527][ T4190] usb 1-1: Manufacturer: syz [ 110.694072][ T4190] usb 1-1: SerialNumber: syz [ 110.850270][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 110.883407][ T5371] loop4: detected capacity change from 0 to 512 [ 110.934886][ T5371] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.028921][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.052266][ T5371] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 111.070645][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.078413][ T5371] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.314: bg 0: block 248: padding at end of block bitmap is not set [ 111.094816][ T5347] device bridge_slave_0 entered promiscuous mode [ 111.122329][ T5371] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.314: Failed to acquire dquot type 1 [ 111.138766][ T5371] EXT4-fs (loop4): 1 truncate cleaned up [ 111.144572][ T5371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.175368][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.210196][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.243040][ T5347] device bridge_slave_1 entered promiscuous mode [ 111.346403][ T4190] usbhid 1-1:1.0: can't add hid device: -71 [ 111.352816][ T4190] usbhid: probe of 1-1:1.0 failed with error -71 [ 111.398570][ T4190] usb 1-1: USB disconnect, device number 6 [ 111.443232][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.481109][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.589814][ T5347] team0: Port device team_slave_0 added [ 111.616697][ T5347] team0: Port device team_slave_1 added [ 111.721959][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.736865][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.780994][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.816721][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.824382][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.830337][ T5403] loop4: detected capacity change from 0 to 128 [ 111.862132][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.930741][ T5405] loop0: detected capacity change from 0 to 512 [ 111.943750][ T5347] device hsr_slave_0 entered promiscuous mode [ 111.969425][ T5347] device hsr_slave_1 entered promiscuous mode [ 111.979769][ T5405] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 112.003404][ T5405] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.012980][ T5347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.020573][ T5347] Cannot create hsr debugfs directory [ 112.089700][ T5405] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.325: Allocating blocks 41-42 which overlap fs metadata [ 112.121101][ T5405] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.325: Allocating blocks 41-42 which overlap fs metadata [ 112.137044][ T5405] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.325: Failed to acquire dquot type 1 [ 112.158613][ T5405] EXT4-fs error (device loop0): mb_free_blocks:1860: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 112.193358][ T5405] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #12: comm syz.0.325: corrupted inode contents [ 112.208493][ T5405] EXT4-fs error (device loop0): ext4_dirty_inode:6054: inode #12: comm syz.0.325: mark_inode_dirty error [ 112.238283][ T4249] Bluetooth: hci4: command 0x0409 tx timeout [ 112.241991][ T5405] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #12: comm syz.0.325: corrupted inode contents [ 112.276101][ T5405] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.325: mark_inode_dirty error [ 112.310080][ T5405] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #12: comm syz.0.325: corrupted inode contents [ 112.367857][ T5405] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 112.392529][ T5405] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #12: comm syz.0.325: corrupted inode contents [ 112.420832][ T5405] EXT4-fs error (device loop0): ext4_truncate:4279: inode #12: comm syz.0.325: mark_inode_dirty error [ 112.480257][ T5405] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 112.523021][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.538677][ T5405] EXT4-fs (loop0): 1 truncate cleaned up [ 112.544377][ T5405] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,jqfmt=vfsold,noinit_itable,quota,noauto_da_alloc,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 112.581825][ T26] kauditd_printk_skb: 204 callbacks suppressed [ 112.581840][ T26] audit: type=1326 audit(1765101953.095:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5415 comm="syz.5.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa200a8f749 code=0x7ffc0000 [ 112.612158][ T5417] device batadv_slave_0 entered promiscuous mode [ 112.730939][ T5423] loop5: detected capacity change from 0 to 512 [ 112.790360][ T5425] netlink: 256 bytes leftover after parsing attributes in process `syz.3.334'. [ 112.816646][ T5425] netlink: 64 bytes leftover after parsing attributes in process `syz.3.334'. [ 112.854986][ T5423] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.861231][ T5347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.881758][ T5347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.891932][ T5347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.912503][ T5430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.332'. [ 112.918197][ T5423] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.959574][ T5347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.982080][ T5412] serio: Serial port ptm0 [ 113.278891][ T5447] loop3: detected capacity change from 0 to 2048 [ 113.331336][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.400718][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.425368][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.444290][ T5447] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,errors=remount-ro,usrjquota=,. Quota mode: none. [ 113.490387][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.583371][ T5447] EXT4-fs error (device loop3): ext4_ext_precache:608: inode #2: comm syz.3.337: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 113.605794][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.641256][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.644862][ T5447] EXT4-fs (loop3): Remounting filesystem read-only [ 113.711789][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.719157][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.795737][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.839183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.859268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.929202][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.936377][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.043689][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.107126][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.209191][ T5483] loop0: detected capacity change from 0 to 164 [ 114.263490][ T5347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.310415][ T2304] Bluetooth: hci4: command 0x041b tx timeout [ 114.326665][ T5483] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 114.333823][ T5347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.385679][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.419368][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.452477][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.481667][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.567707][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.616983][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.659112][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.660486][ T5492] loop0: detected capacity change from 0 to 764 [ 114.696214][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.741047][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.783344][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.301689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.319637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.356651][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.433312][ T26] audit: type=1326 audit(1765101956.098:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 115.475927][ T5524] syz.4.356[5524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.476028][ T5524] syz.4.356[5524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.519370][ T26] audit: type=1326 audit(1765101956.129:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 115.665491][ T26] audit: type=1326 audit(1765101956.140:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 115.776495][ T26] audit: type=1326 audit(1765101956.182:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 115.831684][ T5538] loop4: detected capacity change from 0 to 1024 [ 115.869178][ T26] audit: type=1326 audit(1765101956.182:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 115.904353][ T5538] EXT4-fs (loop4): Ignoring removed orlov option [ 115.953241][ T5538] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 115.994441][ T26] audit: type=1326 audit(1765101956.276:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 116.111132][ T26] audit: type=1326 audit(1765101956.276:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 116.218934][ T5552] netlink: 'syz.5.363': attribute type 4 has an invalid length. [ 116.254036][ T26] audit: type=1326 audit(1765101956.276:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 116.270871][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 116.377487][ T26] audit: type=1326 audit(1765101956.287:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f1c02b0e749 code=0x7ffc0000 [ 116.401423][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.430738][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.321671][ T5347] device veth0_vlan entered promiscuous mode [ 117.499736][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.550987][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.649708][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.712792][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.772573][ T5347] device veth1_vlan entered promiscuous mode [ 117.907949][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.952358][ T5183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.989916][ T5347] device veth0_macvtap entered promiscuous mode [ 118.028572][ T5347] device veth1_macvtap entered promiscuous mode [ 118.079726][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.114789][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.135894][ T4190] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.147135][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.168776][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.197765][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.242430][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.252950][ T2304] Bluetooth: hci4: command 0x0419 tx timeout [ 118.269109][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.292837][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.328227][ T4190] usb 5-1: device descriptor read/64, error -71 [ 118.340526][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.362178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.378567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.414694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.446240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.482922][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.517990][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.556152][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.604308][ T4190] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.614162][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.638036][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.681913][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.704761][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.735628][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.762935][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.783067][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.814272][ T4190] usb 5-1: device descriptor read/64, error -71 [ 118.823804][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.860567][ T5347] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.909710][ T5347] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.932869][ T5347] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.937927][ T4190] usb usb5-port1: attempt power cycle [ 118.945583][ T5347] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.985669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.994802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.012973][ T5618] netem: change failed [ 119.159786][ T5622] loop5: detected capacity change from 0 to 1024 [ 119.261768][ T5183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.285525][ T5622] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.293776][ T5183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.312792][ T5627] loop0: detected capacity change from 0 to 512 [ 119.333663][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.351815][ T5627] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 119.366495][ T4190] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.402163][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.462492][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.500241][ T4190] usb 5-1: device descriptor read/8, error -71 [ 119.564307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.566890][ T5627] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.381: bg 0: block 104: invalid block bitmap [ 119.593558][ T5627] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 119.613381][ T5627] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.381: invalid indirect mapped block 1 (level 1) [ 119.804768][ T4190] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 119.819829][ T5627] EXT4-fs (loop0): 1 truncate cleaned up [ 119.928638][ T4190] usb 5-1: device descriptor read/8, error -71 [ 119.956878][ T5627] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.052721][ T4190] usb usb5-port1: unable to enumerate USB device [ 120.343824][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 120.343840][ T26] audit: type=1326 audit(1765101961.242:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5673 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa200a8f749 code=0x7ffc0000 [ 120.445714][ T26] audit: type=1326 audit(1765101961.273:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5673 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa200a8f749 code=0x7ffc0000 [ 120.607299][ T26] audit: type=1326 audit(1765101961.273:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5673 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa200a8f749 code=0x7ffc0000 [ 120.652373][ T26] audit: type=1326 audit(1765101961.284:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5673 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fa200a8f749 code=0x7ffc0000 [ 120.697266][ T26] audit: type=1326 audit(1765101961.284:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5673 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa200a8f749 code=0x7ffc0000 [ 121.900368][ T3159] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 122.109722][ T3159] usb 7-1: device descriptor read/64, error -71 [ 122.183679][ T26] audit: type=1326 audit(1765101963.173:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5758 comm="syz.5.413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa200a8f749 code=0x0 [ 122.383638][ T3159] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 122.586144][ T3159] usb 7-1: device descriptor read/64, error -71 [ 122.700959][ T3159] usb usb7-port1: attempt power cycle [ 123.100412][ T3159] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 123.215535][ T3159] usb 7-1: device descriptor read/8, error -71 [ 123.347664][ T5803] syz.4.419 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.481919][ T3159] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 123.573001][ T5812] loop4: detected capacity change from 0 to 512 [ 123.579636][ T3159] usb 7-1: device descriptor read/8, error -71 [ 123.691684][ T3159] usb usb7-port1: unable to enumerate USB device [ 123.733207][ T5812] EXT4-fs (loop4): Ignoring removed oldalloc option [ 123.790775][ T5812] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 123.888154][ T5812] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.140338][ T5812] EXT4-fs (loop4): 1 truncate cleaned up [ 124.148688][ T5812] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,block_validity,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000080,bsddf,i_version,nomblk_io_submit,nodioread_nolock,,errors=continue. Quota mode: none. [ 124.423601][ T26] audit: type=1800 audit(1765101965.525:1222): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.422" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 125.770910][ T5858] loop6: detected capacity change from 0 to 8192 [ 125.879144][ T5868] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 125.879144][ T5868] The task syz.4.429 (5868) triggered the difference, watch for misbehavior. [ 125.935666][ T5869] loop0: detected capacity change from 0 to 512 [ 126.215715][ T5869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.422957][ T5869] EXT4-fs (loop0): 1 truncate cleaned up [ 126.522344][ T5869] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 126.646475][ T5869] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.434: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 126.766100][ T5869] EXT4-fs (loop0): Remounting filesystem read-only [ 126.833418][ T5869] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 126.924607][ T5869] EXT4-fs (loop0): Remounting filesystem read-only [ 126.980392][ T5869] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.434: Deleting old file: nlink 5, error=-117 [ 127.216268][ T4235] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.415890][ T4235] usb 5-1: device descriptor read/64, error -71 [ 127.512327][ T26] audit: type=1326 audit(1765101968.779:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 127.605325][ T26] audit: type=1326 audit(1765101968.800:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 127.711240][ T4235] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.768377][ T26] audit: type=1326 audit(1765101968.800:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 127.889250][ T26] audit: type=1326 audit(1765101968.800:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 127.930436][ T4235] usb 5-1: device descriptor read/64, error -71 [ 127.948446][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.443'. [ 127.977927][ T26] audit: type=1326 audit(1765101968.800:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 128.012143][ T5906] netlink: 32 bytes leftover after parsing attributes in process `syz.5.443'. [ 128.044889][ T4235] usb usb5-port1: attempt power cycle [ 128.071824][ T26] audit: type=1326 audit(1765101968.800:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 128.187262][ T26] audit: type=1326 audit(1765101968.800:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 128.229620][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 128.240607][ T5908] loop0: detected capacity change from 0 to 512 [ 128.244528][ T26] audit: type=1326 audit(1765101968.800:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 128.289927][ T5910] loop5: detected capacity change from 0 to 512 [ 128.366672][ T26] audit: type=1326 audit(1765101968.800:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9fb677d749 code=0x7ffc0000 [ 128.458968][ T5910] [ 128.461357][ T5910] ====================================================== [ 128.468386][ T5910] WARNING: possible circular locking dependency detected [ 128.475426][ T5910] syzkaller #0 Not tainted [ 128.479854][ T5910] ------------------------------------------------------ [ 128.486880][ T5910] syz.5.445/5910 is trying to acquire lock: [ 128.492781][ T5910] ffff888055d18bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1c0/0x2d20 [ 128.502902][ T5910] [ 128.502902][ T5910] but task is already holding lock: [ 128.510282][ T5910] ffff888063ea9eb0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 128.520309][ T5910] [ 128.520309][ T5910] which lock already depends on the new lock. [ 128.520309][ T5910] [ 128.530748][ T5910] [ 128.530748][ T5910] the existing dependency chain (in reverse order) is: [ 128.539872][ T5910] [ 128.539872][ T5910] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 128.541965][ T5908] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 128.547469][ T5910] down_read+0x44/0x2e0 [ 128.562001][ T5910] ext4_xattr_get+0xfc/0x800 [ 128.567144][ T5910] ext4_get_acl+0x80/0x660 [ 128.572121][ T5910] get_acl+0x154/0x250 [ 128.576740][ T5910] posix_acl_create+0x124/0x430 [ 128.582137][ T5910] ext4_init_acl+0xb0/0x320 [ 128.587198][ T5910] __ext4_new_inode+0x2e5e/0x39e0 [ 128.592778][ T5910] ext4_ext_migrate+0x5ef/0xe50 [ 128.598186][ T5910] ext4_fileattr_set+0xedd/0x16a0 [ 128.603863][ T5910] vfs_fileattr_set+0x842/0xaf0 [ 128.609275][ T5910] do_vfs_ioctl+0x1767/0x1de0 [ 128.614512][ T5910] __se_sys_ioctl+0x83/0x170 [ 128.619652][ T5910] do_syscall_64+0x4c/0xa0 [ 128.624620][ T5910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.631065][ T5910] [ 128.631065][ T5910] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 128.639525][ T5910] __lock_acquire+0x2c33/0x7c60 [ 128.644933][ T5910] lock_acquire+0x197/0x3f0 [ 128.649987][ T5910] percpu_down_read+0x46/0x1b0 [ 128.655318][ T5910] ext4_writepages+0x1c0/0x2d20 [ 128.660719][ T5910] do_writepages+0x48d/0x6d0 [ 128.664147][ T5908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 128.665856][ T5910] __writeback_single_inode+0x153/0xda0 [ 128.665880][ T5910] writeback_single_inode+0x221/0x8b0 [ 128.685853][ T5910] write_inode_now+0x217/0x280 [ 128.691176][ T5910] iput+0x5ab/0x8a0 [ 128.695546][ T5910] ext4_xattr_set_entry+0x10ff/0x3d30 [ 128.701483][ T5910] ext4_xattr_block_set+0x4f7/0x2d30 [ 128.707488][ T5910] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 128.713843][ T5910] __ext4_expand_extra_isize+0x301/0x3e0 [ 128.720023][ T5910] __ext4_mark_inode_dirty+0x469/0x700 [ 128.726114][ T5910] ext4_evict_inode+0xa81/0x1080 [ 128.731597][ T5910] evict+0x485/0x870 [ 128.736131][ T5910] ext4_orphan_cleanup+0xaa9/0x12e0 [ 128.741875][ T5910] ext4_fill_super+0x92f0/0x9a60 [ 128.747361][ T5910] mount_bdev+0x287/0x3c0 [ 128.752351][ T5910] legacy_get_tree+0xe6/0x180 [ 128.757578][ T5910] vfs_get_tree+0x88/0x270 [ 128.762541][ T5910] do_new_mount+0x24a/0xa40 [ 128.767612][ T5910] __se_sys_mount+0x2d6/0x3c0 [ 128.772834][ T5910] do_syscall_64+0x4c/0xa0 [ 128.775293][ T5908] EXT4-fs (loop0): orphan cleanup on readonly fs [ 128.777791][ T5910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.777818][ T5910] [ 128.777818][ T5910] other info that might help us debug this: [ 128.777818][ T5910] [ 128.777825][ T5910] Possible unsafe locking scenario: [ 128.777825][ T5910] [ 128.777830][ T5910] CPU0 CPU1 [ 128.777835][ T5910] ---- ---- [ 128.777841][ T5910] lock(&ei->xattr_sem); [ 128.777857][ T5910] lock(&sbi->s_writepages_rwsem); [ 128.831209][ T5910] lock(&ei->xattr_sem); [ 128.838084][ T5910] lock(&sbi->s_writepages_rwsem); [ 128.843307][ T5910] [ 128.843307][ T5910] *** DEADLOCK *** [ 128.843307][ T5910] [ 128.851473][ T5910] 3 locks held by syz.5.445/5910: [ 128.855907][ T5908] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.444: bad orphan inode 267 [ 128.856562][ T5910] #0: ffff888055d1c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 128.876672][ T5910] #1: ffff888055d1c650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x444/0x1080 [ 128.886209][ T5910] #2: ffff888063ea9eb0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 128.896533][ T5910] [ 128.896533][ T5910] stack backtrace: [ 128.902445][ T5910] CPU: 1 PID: 5910 Comm: syz.5.445 Not tainted syzkaller #0 [ 128.909852][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.919946][ T5910] Call Trace: [ 128.923247][ T5910] [ 128.926204][ T5910] dump_stack_lvl+0x168/0x230 [ 128.930908][ T5910] ? load_image+0x3b0/0x3b0 [ 128.935445][ T5910] ? show_regs_print_info+0x20/0x20 [ 128.940678][ T5910] ? print_circular_bug+0x12b/0x1a0 [ 128.945932][ T5910] check_noncircular+0x274/0x310 [ 128.950916][ T5910] ? add_chain_block+0x940/0x940 [ 128.955881][ T5910] ? lockdep_lock+0xdc/0x1e0 [ 128.960509][ T5910] ? lockdep_unlock+0x134/0x2d0 [ 128.965396][ T5910] ? mark_lock+0x94/0x320 [ 128.969772][ T5910] __lock_acquire+0x2c33/0x7c60 [ 128.974719][ T5910] ? verify_lock_unused+0x140/0x140 [ 128.979958][ T5910] ? verify_lock_unused+0x140/0x140 [ 128.985209][ T5910] lock_acquire+0x197/0x3f0 [ 128.989745][ T5910] ? ext4_writepages+0x1c0/0x2d20 [ 128.994803][ T5910] ? check_path+0x40/0x40 [ 128.999162][ T5910] ? mark_lock+0x94/0x320 [ 129.003526][ T5910] ? __might_sleep+0xf0/0xf0 [ 129.008149][ T5910] ? read_lock_is_recursive+0x10/0x10 [ 129.013659][ T5910] ? mark_lock+0x94/0x320 [ 129.018029][ T5910] ? __lock_acquire+0x13ad/0x7c60 [ 129.023139][ T5910] percpu_down_read+0x46/0x1b0 [ 129.027932][ T5910] ? ext4_writepages+0x1c0/0x2d20 [ 129.032995][ T5910] ext4_writepages+0x1c0/0x2d20 [ 129.037892][ T5910] ? verify_lock_unused+0x140/0x140 [ 129.043237][ T5910] ? mark_lock+0x94/0x320 [ 129.047600][ T5910] ? verify_lock_unused+0x140/0x140 [ 129.052868][ T5910] ? mark_lock+0x94/0x320 [ 129.057404][ T5910] ? ext4_readpage+0x2e0/0x2e0 [ 129.062338][ T5910] ? __lock_acquire+0x13ad/0x7c60 [ 129.067406][ T5910] ? rcu_lock_release+0x5/0x20 [ 129.072213][ T5910] ? __lock_acquire+0x7c60/0x7c60 [ 129.077274][ T5910] ? do_raw_spin_lock+0x11d/0x280 [ 129.082343][ T5910] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 129.087772][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 129.093009][ T5910] ? ext4_readpage+0x2e0/0x2e0 [ 129.097817][ T5910] do_writepages+0x48d/0x6d0 [ 129.102446][ T5910] ? __writepage+0x130/0x130 [ 129.107063][ T5910] ? writeback_single_inode+0x216/0x8b0 [ 129.112644][ T5910] ? __lock_acquire+0x7c60/0x7c60 [ 129.117708][ T5910] ? do_raw_spin_lock+0x11d/0x280 [ 129.122771][ T5910] __writeback_single_inode+0x153/0xda0 [ 129.128442][ T5910] writeback_single_inode+0x221/0x8b0 [ 129.133857][ T5910] ? write_inode_now+0x280/0x280 [ 129.138940][ T5910] write_inode_now+0x217/0x280 [ 129.143737][ T5910] ? bdi_split_work_to_wbs+0x820/0x820 [ 129.149239][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 129.154469][ T5910] iput+0x5ab/0x8a0 [ 129.158310][ T5910] ext4_xattr_set_entry+0x10ff/0x3d30 [ 129.163741][ T5910] ? ext4_xattr_ibody_set+0x330/0x330 [ 129.169160][ T5910] ? rcu_is_watching+0x11/0xa0 [ 129.173955][ T5910] ? kmem_cache_free+0x14c/0x210 [ 129.178925][ T5910] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 129.185045][ T5910] ext4_xattr_block_set+0x4f7/0x2d30 [ 129.190457][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 129.195708][ T5910] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 129.201581][ T5910] ? ext4_xattr_block_find+0x500/0x500 [ 129.204212][ T5908] EXT4-fs (loop0): Remounting filesystem read-only [ 129.207106][ T5910] ? ext4_xattr_block_find+0x433/0x500 [ 129.207142][ T5910] ext4_expand_extra_isize_ea+0xf4b/0x19a0 [ 129.207182][ T5910] __ext4_expand_extra_isize+0x301/0x3e0 [ 129.230702][ T5910] __ext4_mark_inode_dirty+0x469/0x700 [ 129.236209][ T5910] ext4_evict_inode+0xa81/0x1080 [ 129.241179][ T5910] ? _raw_spin_unlock+0x24/0x40 [ 129.246067][ T5910] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 129.251991][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 129.252797][ T5908] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 129.257216][ T5910] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 129.257243][ T5910] evict+0x485/0x870 [ 129.257264][ T5910] ? __lock_acquire+0x7c60/0x7c60 [ 129.257291][ T5910] ? proc_nr_inodes+0x320/0x320 [ 129.257312][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 129.257334][ T5910] ? _raw_spin_unlock+0x24/0x40 [ 129.257353][ T5910] ? iput+0x706/0x8a0 [ 129.257376][ T5910] ext4_orphan_cleanup+0xaa9/0x12e0 [ 129.257404][ T5910] ? ext4_orphan_del+0xb90/0xb90 [ 129.257424][ T5910] ? errseq_check_and_advance+0x62/0x120 [ 129.257446][ T5910] ext4_fill_super+0x92f0/0x9a60 [ 129.257483][ T5910] ? ext4_mount+0x40/0x40 [ 129.257502][ T5910] ? set_blocksize+0x1f1/0x370 [ 129.257526][ T5910] ? sb_set_blocksize+0xa5/0xe0 [ 129.257549][ T5910] mount_bdev+0x287/0x3c0 [ 129.348478][ T5910] ? ext4_mount+0x40/0x40 [ 129.352936][ T5910] legacy_get_tree+0xe6/0x180 [ 129.357767][ T5910] ? ext4_errno_to_code+0x160/0x160 [ 129.363002][ T5910] vfs_get_tree+0x88/0x270 [ 129.367458][ T5910] do_new_mount+0x24a/0xa40 [ 129.372004][ T5910] __se_sys_mount+0x2d6/0x3c0 [ 129.376713][ T5910] ? __x64_sys_mount+0xc0/0xc0 [ 129.381508][ T5910] ? __x64_sys_mount+0x1c/0xc0 [ 129.386377][ T5910] do_syscall_64+0x4c/0xa0 [ 129.390827][ T5910] ? clear_bhb_loop+0x30/0x80 [ 129.395548][ T5910] ? clear_bhb_loop+0x30/0x80 [ 129.400252][ T5910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.406208][ T5910] RIP: 0033:0x7fa200a90eea [ 129.406558][ T5908] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.444: dx entry: limit 0 != root limit 125 [ 129.410647][ T5910] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.410673][ T5910] RSP: 002b:00007fa1fecf5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.410701][ T5910] RAX: ffffffffffffffda RBX: 00007fa1fecf5ef0 RCX: 00007fa200a90eea [ 129.410715][ T5910] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa1fecf5eb0 [ 129.410730][ T5910] RBP: 0000200000000180 R08: 00007fa1fecf5ef0 R09: 0000000000800700 [ 129.410743][ T5910] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 129.410756][ T5910] R13: 00007fa1fecf5eb0 R14: 000000000000046f R15: 000000000000002c [ 129.410779][ T5910] [ 129.414587][ T4235] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.456171][ T5910] ------------[ cut here ]------------ [ 129.556925][ T5908] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.444: Corrupt directory, running e2fsck is recommended [ 129.581373][ T4235] usb 5-1: device descriptor read/8, error -71 [ 129.588969][ T5910] EA inode 11 i_nlink=2 [ 129.589221][ T5910] WARNING: CPU: 0 PID: 5910 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 129.627658][ T5910] Modules linked in: [ 129.638281][ T5910] CPU: 0 PID: 5910 Comm: syz.5.445 Not tainted syzkaller #0 [ 129.657602][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.685748][ T5910] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 129.709782][ T5910] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 df a2 ff 49 8b 37 48 c7 c7 c0 8c 1d 8a 89 da e8 d2 d2 7d 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 129.764039][ T5910] RSP: 0018:ffffc900039af140 EFLAGS: 00010246 [ 129.778124][ T5910] RAX: 21c0021517c8e800 RBX: 0000000000000002 RCX: 0000000000080000 [ 129.796261][ T5910] RDX: ffffc900143fd000 RSI: 000000000007ffff RDI: 0000000000080000 [ 129.815255][ T5910] RBP: ffffc900039af230 R08: dffffc0000000000 R09: ffffed1017204f2c [ 129.834237][ T5910] R10: ffffed1017204f2c R11: 1ffff11017204f2b R12: ffffc900039af1a0 [ 129.847400][ T5910] R13: ffff888063f782a0 R14: dffffc0000000000 R15: ffff888063f782e0 [ 129.863655][ T5910] FS: 00007fa1fecf66c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 129.872656][ T5910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.898683][ T5910] CR2: 00007f9fb69a4ad8 CR3: 000000004ae1b000 CR4: 00000000003506e0 [ 129.921138][ T5910] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.929254][ T5910] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.960027][ T5910] Call Trace: [ 129.970591][ T5910] [ 129.973578][ T5910] ? ext4_xattr_block_csum+0x500/0x500 [ 129.980004][ T5910] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 129.985510][ T5910] ? mb_cache_entry_create+0x62e/0x890 [ 129.993200][ T5910] ext4_xattr_set_entry+0xed0/0x3d30 [ 130.000200][ T5910] ? rcu_is_watching+0x11/0xa0 [ 130.005040][ T5910] ? mb_cache_entry_create+0x676/0x890 [ 130.012696][ T5910] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 130.027932][ T5910] ? ext4_xattr_ibody_set+0x330/0x330 [ 130.033377][ T5910] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 130.058512][ T5910] ? ext4_xattr_block_find+0x500/0x500 [ 130.074329][ T5910] ext4_xattr_ibody_set+0x112/0x330 [ 130.079747][ T5910] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 130.092170][ T5910] __ext4_expand_extra_isize+0x301/0x3e0 [ 130.101119][ T5910] __ext4_mark_inode_dirty+0x469/0x700 [ 130.112494][ T5910] ext4_evict_inode+0xa81/0x1080 [ 130.123159][ T5910] ? _raw_spin_unlock+0x24/0x40 [ 130.133697][ T5910] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 130.146441][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 130.162060][ T5910] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 130.174689][ T5910] evict+0x485/0x870 [ 130.183162][ T5910] ? __lock_acquire+0x7c60/0x7c60 [ 130.195320][ T5910] ? proc_nr_inodes+0x320/0x320 [ 130.205866][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 130.222545][ T5910] ? _raw_spin_unlock+0x24/0x40 [ 130.228726][ T5910] ? iput+0x706/0x8a0 [ 130.229043][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.241280][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.247151][ T5910] ext4_orphan_cleanup+0xaa9/0x12e0 [ 130.262782][ T5910] ? ext4_orphan_del+0xb90/0xb90 [ 130.279241][ T5910] ? errseq_check_and_advance+0x62/0x120 [ 130.295291][ T5910] ext4_fill_super+0x92f0/0x9a60 [ 130.307701][ T5910] ? ext4_mount+0x40/0x40 [ 130.318478][ T5910] ? set_blocksize+0x1f1/0x370 [ 130.333105][ T5910] ? sb_set_blocksize+0xa5/0xe0 [ 130.344650][ T5910] mount_bdev+0x287/0x3c0 [ 130.355830][ T5910] ? ext4_mount+0x40/0x40 [ 130.367407][ T5910] legacy_get_tree+0xe6/0x180 [ 130.383662][ T5910] ? ext4_errno_to_code+0x160/0x160 [ 130.399423][ T5910] vfs_get_tree+0x88/0x270 [ 130.410487][ T5910] do_new_mount+0x24a/0xa40 [ 130.421938][ T5910] __se_sys_mount+0x2d6/0x3c0 [ 130.434261][ T5910] ? __x64_sys_mount+0xc0/0xc0 [ 130.448620][ T5910] ? __x64_sys_mount+0x1c/0xc0 [ 130.454427][ T5910] do_syscall_64+0x4c/0xa0 [ 130.458951][ T5910] ? clear_bhb_loop+0x30/0x80 [ 130.463660][ T5910] ? clear_bhb_loop+0x30/0x80 [ 130.484257][ T5910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.490236][ T5910] RIP: 0033:0x7fa200a90eea [ 130.502106][ T5910] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.540327][ T5910] RSP: 002b:00007fa1fecf5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.548972][ T5910] RAX: ffffffffffffffda RBX: 00007fa1fecf5ef0 RCX: 00007fa200a90eea [ 130.582183][ T5910] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa1fecf5eb0 [ 130.597385][ T5910] RBP: 0000200000000180 R08: 00007fa1fecf5ef0 R09: 0000000000800700 [ 130.616581][ T5910] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 130.624819][ T5910] R13: 00007fa1fecf5eb0 R14: 000000000000046f R15: 000000000000002c [ 130.644722][ T5910] [ 130.647891][ T5910] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.655188][ T5910] CPU: 1 PID: 5910 Comm: syz.5.445 Not tainted syzkaller #0 [ 130.662502][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.672723][ T5910] Call Trace: [ 130.676028][ T5910] [ 130.678983][ T5910] dump_stack_lvl+0x168/0x230 [ 130.683688][ T5910] ? show_regs_print_info+0x20/0x20 [ 130.689048][ T5910] ? load_image+0x3b0/0x3b0 [ 130.693581][ T5910] panic+0x2c9/0x7f0 [ 130.697509][ T5910] ? bpf_jit_dump+0xd0/0xd0 [ 130.702042][ T5910] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 130.708052][ T5910] __warn+0x248/0x2b0 [ 130.712060][ T5910] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 130.718067][ T5910] report_bug+0x1b7/0x2e0 [ 130.722433][ T5910] handle_bug+0x3a/0x70 [ 130.726620][ T5910] exc_invalid_op+0x16/0x40 [ 130.731152][ T5910] asm_exc_invalid_op+0x16/0x20 [ 130.736187][ T5910] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 130.742812][ T5910] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 df a2 ff 49 8b 37 48 c7 c7 c0 8c 1d 8a 89 da e8 d2 d2 7d 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 130.762447][ T5910] RSP: 0018:ffffc900039af140 EFLAGS: 00010246 [ 130.768549][ T5910] RAX: 21c0021517c8e800 RBX: 0000000000000002 RCX: 0000000000080000 [ 130.776560][ T5910] RDX: ffffc900143fd000 RSI: 000000000007ffff RDI: 0000000000080000 [ 130.784652][ T5910] RBP: ffffc900039af230 R08: dffffc0000000000 R09: ffffed1017204f2c [ 130.792775][ T5910] R10: ffffed1017204f2c R11: 1ffff11017204f2b R12: ffffc900039af1a0 [ 130.800778][ T5910] R13: ffff888063f782a0 R14: dffffc0000000000 R15: ffff888063f782e0 [ 130.808790][ T5910] ? ext4_xattr_block_csum+0x500/0x500 [ 130.814296][ T5910] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 130.819806][ T5910] ? mb_cache_entry_create+0x62e/0x890 [ 130.825331][ T5910] ext4_xattr_set_entry+0xed0/0x3d30 [ 130.830750][ T5910] ? rcu_is_watching+0x11/0xa0 [ 130.835553][ T5910] ? mb_cache_entry_create+0x676/0x890 [ 130.841056][ T5910] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 130.846557][ T5910] ? ext4_xattr_ibody_set+0x330/0x330 [ 130.851973][ T5910] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 130.857727][ T5910] ? ext4_xattr_block_find+0x500/0x500 [ 130.863323][ T5910] ext4_xattr_ibody_set+0x112/0x330 [ 130.868558][ T5910] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 130.874415][ T5910] __ext4_expand_extra_isize+0x301/0x3e0 [ 130.880087][ T5910] __ext4_mark_inode_dirty+0x469/0x700 [ 130.885609][ T5910] ext4_evict_inode+0xa81/0x1080 [ 130.890576][ T5910] ? _raw_spin_unlock+0x24/0x40 [ 130.895458][ T5910] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 130.901382][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 130.906606][ T5910] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 130.912525][ T5910] evict+0x485/0x870 [ 130.916455][ T5910] ? __lock_acquire+0x7c60/0x7c60 [ 130.921515][ T5910] ? proc_nr_inodes+0x320/0x320 [ 130.926402][ T5910] ? do_raw_spin_unlock+0x11d/0x230 [ 130.931627][ T5910] ? _raw_spin_unlock+0x24/0x40 [ 130.936504][ T5910] ? iput+0x706/0x8a0 [ 130.940517][ T5910] ext4_orphan_cleanup+0xaa9/0x12e0 [ 130.945742][ T5910] ? ext4_orphan_del+0xb90/0xb90 [ 130.950703][ T5910] ? errseq_check_and_advance+0x62/0x120 [ 130.956442][ T5910] ext4_fill_super+0x92f0/0x9a60 [ 130.961438][ T5910] ? ext4_mount+0x40/0x40 [ 130.965802][ T5910] ? set_blocksize+0x1f1/0x370 [ 130.970595][ T5910] ? sb_set_blocksize+0xa5/0xe0 [ 130.975473][ T5910] mount_bdev+0x287/0x3c0 [ 130.979848][ T5910] ? ext4_mount+0x40/0x40 [ 130.984251][ T5910] legacy_get_tree+0xe6/0x180 [ 130.988964][ T5910] ? ext4_errno_to_code+0x160/0x160 [ 130.994195][ T5910] vfs_get_tree+0x88/0x270 [ 130.998653][ T5910] do_new_mount+0x24a/0xa40 [ 131.003279][ T5910] __se_sys_mount+0x2d6/0x3c0 [ 131.007992][ T5910] ? __x64_sys_mount+0xc0/0xc0 [ 131.012793][ T5910] ? __x64_sys_mount+0x1c/0xc0 [ 131.017586][ T5910] do_syscall_64+0x4c/0xa0 [ 131.022037][ T5910] ? clear_bhb_loop+0x30/0x80 [ 131.026744][ T5910] ? clear_bhb_loop+0x30/0x80 [ 131.031450][ T5910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.037382][ T5910] RIP: 0033:0x7fa200a90eea [ 131.041908][ T5910] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.061545][ T5910] RSP: 002b:00007fa1fecf5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.070096][ T5910] RAX: ffffffffffffffda RBX: 00007fa1fecf5ef0 RCX: 00007fa200a90eea [ 131.078099][ T5910] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa1fecf5eb0 [ 131.086138][ T5910] RBP: 0000200000000180 R08: 00007fa1fecf5ef0 R09: 0000000000800700 [ 131.094140][ T5910] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 131.102143][ T5910] R13: 00007fa1fecf5eb0 R14: 000000000000046f R15: 000000000000002c [ 131.110326][ T5910] [ 131.113623][ T5910] Kernel Offset: disabled [ 131.117986][ T5910] Rebooting in 86400 seconds..