last executing test programs: 4.343101372s ago: executing program 0 (id=170): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.789119793s ago: executing program 2 (id=187): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521, 0x0, 0x20000, 0x0, 0x8000000000}, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x44080) 1.776139102s ago: executing program 2 (id=201): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) capget(0x0, 0x0) 1.717169076s ago: executing program 3 (id=202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.619424224s ago: executing program 2 (id=203): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4d2, &(0x7f0000001440)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, 0x0, 0x91, 0x20008800, 0x0, 0x0) 1.577215227s ago: executing program 0 (id=204): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.435376948s ago: executing program 0 (id=207): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESDEC, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)=ANY=[]) 1.318029687s ago: executing program 3 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x519, &(0x7f0000000640)={0x0, 0xc6d, 0x1, 0x503fa, 0x1dc}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8bcb650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c1da009444a131f4da58ae36556dd38ea6c029607462029add0924000000000267517308a3d40aa1c788df6"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) 1.167584119s ago: executing program 2 (id=211): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x8}, 0x28) 1.125971182s ago: executing program 4 (id=212): r0 = epoll_create1(0x0) close_range(r0, r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1.077997436s ago: executing program 0 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffff81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 1.003158492s ago: executing program 2 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffb}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xac4a}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) 1.002921972s ago: executing program 3 (id=216): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 892.60777ms ago: executing program 4 (id=218): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'io+mem'}, 0xf) 699.469175ms ago: executing program 4 (id=219): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$rxrpc(r0, &(0x7f00000002c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0xc0) 699.225895ms ago: executing program 3 (id=220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r2}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 698.901815ms ago: executing program 1 (id=221): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) 659.242378ms ago: executing program 4 (id=222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 568.688575ms ago: executing program 1 (id=223): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0xc, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) 563.639496ms ago: executing program 4 (id=224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 483.496152ms ago: executing program 3 (id=225): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x6e22, 0x10006, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 483.313672ms ago: executing program 1 (id=226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 417.271577ms ago: executing program 4 (id=227): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1800018, &(0x7f00000000c0)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000ec0)="$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") 375.8323ms ago: executing program 3 (id=228): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f0000000300)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@nombcache}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') 299.613866ms ago: executing program 1 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) 223.808372ms ago: executing program 1 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002080)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4000004, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x80, 0xa, 0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x1, 0x10000, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x3, 0x2, 0x80000001, 0x0, 0xfff7fffc, 0x80, 0x1, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x1, 0x7, 0x400000, 0x0, 0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0xffffffb3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xffffffff, 0x0, 0x0, 0xffff, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1002, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x620, 0x0, 0x9, 0x0, 0x0, 0x2, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x80000001, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0xffffffff}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x1, 0x3}}}}]}]}, 0x488}}, 0x0) 175.160886ms ago: executing program 1 (id=231): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x4804}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32], 0xe8}}, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r4}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0xc340) 99.530102ms ago: executing program 0 (id=232): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 26.663128ms ago: executing program 2 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) 0s ago: executing program 0 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 56.239871][ T4253] cgroup: Unknown subsys name 'net' [ 56.367611][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.619850][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.673908][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.681743][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.685185][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.689691][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.698936][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.703603][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.703881][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.711283][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.718922][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.725936][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.732435][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.740010][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.746073][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.753354][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.760706][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.767394][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.774484][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.781679][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.795179][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.802251][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.815840][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.817878][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.824092][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.837735][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.844378][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.845427][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.852216][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.866553][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.890958][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.903951][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.253850][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 60.296064][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 60.330032][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 60.405959][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 60.445190][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 60.515618][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.522843][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.530839][ T4267] device bridge_slave_0 entered promiscuous mode [ 60.538723][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.545873][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.554396][ T4280] device bridge_slave_0 entered promiscuous mode [ 60.575138][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.582511][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.590057][ T4263] device bridge_slave_0 entered promiscuous mode [ 60.597977][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.605204][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.613643][ T4267] device bridge_slave_1 entered promiscuous mode [ 60.620630][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.627773][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.638073][ T4280] device bridge_slave_1 entered promiscuous mode [ 60.653512][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.660590][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.668321][ T4263] device bridge_slave_1 entered promiscuous mode [ 60.695187][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.702355][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.709920][ T4264] device bridge_slave_0 entered promiscuous mode [ 60.740876][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.748349][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.756489][ T4264] device bridge_slave_1 entered promiscuous mode [ 60.770799][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.782331][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.792971][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.824397][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.842755][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.859696][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.866868][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.874855][ T4265] device bridge_slave_0 entered promiscuous mode [ 60.890079][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.915162][ T4267] team0: Port device team_slave_0 added [ 60.928002][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.935250][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.944084][ T4265] device bridge_slave_1 entered promiscuous mode [ 60.952283][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.971867][ T4267] team0: Port device team_slave_1 added [ 60.979560][ T4280] team0: Port device team_slave_0 added [ 60.992449][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.003178][ T4263] team0: Port device team_slave_0 added [ 61.017581][ T4280] team0: Port device team_slave_1 added [ 61.037749][ T4263] team0: Port device team_slave_1 added [ 61.060177][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.082887][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.089827][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.115912][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.136029][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.155023][ T4264] team0: Port device team_slave_0 added [ 61.174633][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.181578][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.207689][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.223372][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.230316][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.256715][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.278259][ T4264] team0: Port device team_slave_1 added [ 61.285876][ T4265] team0: Port device team_slave_0 added [ 61.301022][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.308004][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.334880][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.347351][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.354613][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.380534][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.399965][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.406994][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.433212][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.450420][ T4265] team0: Port device team_slave_1 added [ 61.480390][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.487369][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.513317][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.532694][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.539638][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.565722][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.578179][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.585199][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.611131][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.625749][ T4267] device hsr_slave_0 entered promiscuous mode [ 61.632676][ T4267] device hsr_slave_1 entered promiscuous mode [ 61.641309][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.648304][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.674292][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.721721][ T4263] device hsr_slave_0 entered promiscuous mode [ 61.728357][ T4263] device hsr_slave_1 entered promiscuous mode [ 61.735730][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.743645][ T4263] Cannot create hsr debugfs directory [ 61.770519][ T4280] device hsr_slave_0 entered promiscuous mode [ 61.777652][ T4280] device hsr_slave_1 entered promiscuous mode [ 61.784215][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.791752][ T4280] Cannot create hsr debugfs directory [ 61.841931][ T4264] device hsr_slave_0 entered promiscuous mode [ 61.849066][ T4264] device hsr_slave_1 entered promiscuous mode [ 61.855951][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.863583][ T4264] Cannot create hsr debugfs directory [ 61.871835][ T4265] device hsr_slave_0 entered promiscuous mode [ 61.878572][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 61.885285][ T4265] device hsr_slave_1 entered promiscuous mode [ 61.891728][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.899328][ T4265] Cannot create hsr debugfs directory [ 61.952377][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 61.958574][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 61.961795][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 61.966709][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 62.203558][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.215184][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.224927][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.234274][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.296161][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.305986][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.316888][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.348064][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.368527][ T4263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.386392][ T4263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.395048][ T4263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.428247][ T4263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.493167][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.517306][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.539993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.548941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.557203][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.569698][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.595584][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.605183][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.625415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.634246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.643747][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.650910][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.663828][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.676235][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.689708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.700482][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.710824][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.722732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.731307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.740875][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.748005][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.764953][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.775976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.801094][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.832581][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.841384][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.851075][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.859763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.868352][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.876882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.885965][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.894788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.903696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.911934][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.919022][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.926927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.934951][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.952976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.962354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.971052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.981113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.989778][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.996890][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.005384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.036229][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.048620][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.066698][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.075403][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.085157][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.095268][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.104455][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.145721][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.160032][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.170871][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.181125][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.189917][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.198829][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.207360][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.219012][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.239015][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.253271][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.268974][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.281845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.319489][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.344163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.361474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.374397][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.385854][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.406485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.422807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.431305][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.438428][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.447793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.456922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.465771][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.472889][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.481490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.502462][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.516201][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.544949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.555977][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.569438][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.576556][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.590720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.599966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.614369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.628715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.641339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.656205][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.665066][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.674271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.690370][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.700391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.710022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.718894][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.726007][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.736040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.745074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.752705][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.760241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.767884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.776377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.787720][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.804949][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.817121][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.828649][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.873923][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.888114][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.899192][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.914643][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.927527][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.937519][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.950251][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.957434][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.965017][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 63.967560][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.978605][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.986076][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.994729][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.003015][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.010783][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.023714][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.032330][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 64.033396][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.042422][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 64.052687][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 64.052728][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 64.068815][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.080883][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.098858][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.122968][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.138386][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.145515][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.172559][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.198106][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.211303][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.225959][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.240396][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.275349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.286158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.295866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.308668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.317712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.341869][ T4265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.358786][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.386623][ T4280] device veth0_vlan entered promiscuous mode [ 64.419847][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.433073][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.441673][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.465280][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.489939][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.504237][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.520289][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.530606][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.543929][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.556448][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.566177][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.578017][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.599924][ T4280] device veth1_vlan entered promiscuous mode [ 64.665442][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.696144][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.712610][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.732571][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.753707][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.775092][ T4280] device veth0_macvtap entered promiscuous mode [ 64.814307][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.823790][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.839198][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.848023][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.856563][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.864878][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.872753][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.897957][ T4263] device veth0_vlan entered promiscuous mode [ 64.906167][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.917304][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.927576][ T4280] device veth1_macvtap entered promiscuous mode [ 64.946010][ T4264] device veth0_vlan entered promiscuous mode [ 64.959051][ T4263] device veth1_vlan entered promiscuous mode [ 64.968424][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.977319][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.986438][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.995259][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.009260][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.023165][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.040426][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.050496][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.073022][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.080691][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.090335][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.100868][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.114854][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.134576][ T4264] device veth1_vlan entered promiscuous mode [ 65.148187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.157263][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.166142][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.175127][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.184064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.193008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.205218][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.214254][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.223206][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.231915][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.260709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.269641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.279331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.288743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.297189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.308502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.332671][ T4263] device veth0_macvtap entered promiscuous mode [ 65.353667][ T4263] device veth1_macvtap entered promiscuous mode [ 65.365815][ T4265] device veth0_vlan entered promiscuous mode [ 65.376279][ T4267] device veth0_vlan entered promiscuous mode [ 65.383161][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.391200][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.400926][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.414020][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.421787][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.430098][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.443685][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.451722][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.459869][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.471418][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.480768][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.496920][ T4265] device veth1_vlan entered promiscuous mode [ 65.509162][ T4267] device veth1_vlan entered promiscuous mode [ 65.532203][ T4264] device veth0_macvtap entered promiscuous mode [ 65.554056][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.564904][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.578147][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.592600][ T4264] device veth1_macvtap entered promiscuous mode [ 65.599748][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.617545][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.628197][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.645147][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.660536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.668865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.678234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.687390][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.696518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.706999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.715688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.735801][ T4263] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.746621][ T4263] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.755582][ T4263] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.764603][ T4263] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.783903][ T4267] device veth0_macvtap entered promiscuous mode [ 65.791177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.800150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.808947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.821229][ T4265] device veth0_macvtap entered promiscuous mode [ 65.847419][ T4265] device veth1_macvtap entered promiscuous mode [ 65.859080][ T4267] device veth1_macvtap entered promiscuous mode [ 65.883922][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.885456][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.897366][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.912544][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.923966][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.928783][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.946284][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.956590][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.967282][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.977304][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.987798][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.998427][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.008839][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.016968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.025191][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.034110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.041748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.042898][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 66.050557][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.064795][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.075715][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.095494][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.104490][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.113666][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 66.113694][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 66.113716][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 66.113735][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 66.138363][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.147305][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.168118][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.178727][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.188723][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.200130][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.210224][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.220845][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.231835][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.248203][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.258859][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.270524][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.283313][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.293334][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.304299][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.314217][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.324719][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.336242][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.366965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.375704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.385478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.394020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.405894][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.419749][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.429675][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.440615][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.450837][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.461399][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.473056][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.482745][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.493880][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.504334][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.515150][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.527171][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.537811][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.547992][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.558436][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.569373][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.579291][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.579834][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.596612][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.597594][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.613454][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.622274][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.632764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.643347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.651761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.660597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.669018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.680529][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.689489][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.701410][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.710308][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.825266][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.838794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.904579][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.905510][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.921738][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.937313][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.954488][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.002822][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.016867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.025050][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.034560][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.058362][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.060480][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.078172][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.099276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.165725][ T4388] Zero length message leads to an empty skb [ 67.183713][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.191638][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.210334][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.217927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.273252][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.291556][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.305816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.338955][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.362361][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.754679][ T26] audit: type=1326 audit(1765820904.383:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 67.767636][ T4407] loop2: detected capacity change from 0 to 128 [ 67.847579][ T26] audit: type=1326 audit(1765820904.383:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 67.922766][ T26] audit: type=1326 audit(1765820904.413:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 68.013507][ T26] audit: type=1326 audit(1765820904.413:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 68.078821][ T26] audit: type=1326 audit(1765820904.413:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 68.112738][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 68.132203][ T26] audit: type=1326 audit(1765820904.423:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 68.191182][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 68.192337][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 68.207220][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 68.207239][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 68.213242][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 68.257103][ T26] audit: type=1326 audit(1765820904.433:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 68.321798][ T4411] loop2: detected capacity change from 0 to 764 [ 68.389737][ T26] audit: type=1326 audit(1765820904.433:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 68.490916][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 68.536360][ T4421] loop3: detected capacity change from 0 to 1024 [ 68.562152][ T26] audit: type=1326 audit(1765820904.433:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 68.602966][ T4421] EXT4-fs: Ignoring removed orlov option [ 68.668739][ T4421] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.669901][ T26] audit: type=1326 audit(1765820904.433:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4404 comm="syz.4.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 69.097046][ T4445] nft_compat: unsupported protocol 0 [ 69.108426][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 69.129149][ T4445] lo speed is unknown, defaulting to 1000 [ 69.172620][ T4445] lo speed is unknown, defaulting to 1000 [ 69.215361][ T4445] lo speed is unknown, defaulting to 1000 [ 69.273766][ T4445] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.326943][ T4449] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 69.393916][ T4445] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.600293][ T4445] lo speed is unknown, defaulting to 1000 [ 69.654019][ T4445] lo speed is unknown, defaulting to 1000 [ 69.660696][ T4445] lo speed is unknown, defaulting to 1000 [ 69.704232][ T4445] lo speed is unknown, defaulting to 1000 [ 69.768468][ T4445] lo speed is unknown, defaulting to 1000 [ 69.813581][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 69.874105][ T4464] netlink: 'syz.3.28': attribute type 11 has an invalid length. [ 69.957099][ T4464] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.966348][ T4464] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.975100][ T4464] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.983831][ T4464] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.077305][ T4470] loop1: detected capacity change from 0 to 2048 [ 70.109333][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 70.152094][ T4464] netlink: 'syz.3.28': attribute type 11 has an invalid length. [ 70.190903][ T4470] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c128, mo2=0002] [ 70.274060][ T4470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.318184][ T4470] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.30: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 70.404792][ T4470] EXT4-fs (loop1): Remounting filesystem read-only [ 70.530502][ T4485] lo speed is unknown, defaulting to 1000 [ 70.544668][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 70.818154][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 70.840936][ T4488] loop0: detected capacity change from 0 to 2048 [ 70.918694][ T4496] loop4: detected capacity change from 0 to 764 [ 71.062325][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 71.068157][ T4488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.156933][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.164019][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.204751][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 71.232503][ T4512] device team1 entered promiscuous mode [ 71.239603][ T4512] 8021q: adding VLAN 0 to HW filter on device team1 [ 71.872540][ T4530] loop4: detected capacity change from 0 to 128 [ 71.919363][ T4530] FAT-fs (loop4): bread failed, FSINFO block (sector = 16897) [ 72.206879][ T4539] loop3: detected capacity change from 0 to 128 [ 72.391716][ T4544] syz.3.52: attempt to access beyond end of device [ 72.391716][ T4544] loop3: rw=2049, sector=145, nr_sectors = 472 limit=128 [ 72.412981][ T4547] loop2: detected capacity change from 0 to 128 [ 72.618324][ T4547] syz.2.54: attempt to access beyond end of device [ 72.618324][ T4547] loop2: rw=2049, sector=169, nr_sectors = 872 limit=128 [ 72.764493][ T4558] syz.1.58[4558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.764588][ T4558] syz.1.58[4558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.782340][ T4349] kworker/u4:5: attempt to access beyond end of device [ 72.782340][ T4349] loop3: rw=1, sector=617, nr_sectors = 424 limit=128 [ 73.289024][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 73.507261][ T4581] loop0: detected capacity change from 0 to 164 [ 73.517734][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 73.517745][ T26] audit: type=1326 audit(1765820910.143:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 73.595782][ T4588] capability: warning: `syz.3.69' uses 32-bit capabilities (legacy support in use) [ 73.623581][ T4584] loop4: detected capacity change from 0 to 512 [ 73.672687][ T26] audit: type=1326 audit(1765820910.183:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 73.695451][ T4584] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.782049][ T4584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.784460][ T26] audit: type=1326 audit(1765820910.183:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 73.855340][ T4584] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.67: invalid block [ 73.918769][ T4584] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.67: invalid indirect mapped block 4294967295 (level 1) [ 73.951447][ T4584] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.67: invalid indirect mapped block 4294967295 (level 1) [ 73.977016][ T26] audit: type=1326 audit(1765820910.183:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 74.012883][ T4584] EXT4-fs (loop4): 2 truncates cleaned up [ 74.018641][ T4584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.064871][ T26] audit: type=1326 audit(1765820910.183:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 74.135895][ T26] audit: type=1326 audit(1765820910.183:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 74.229584][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 74.284506][ T26] audit: type=1326 audit(1765820910.183:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 74.385083][ T26] audit: type=1326 audit(1765820910.183:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 74.393887][ T4608] loop1: detected capacity change from 0 to 256 [ 74.420026][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x7 [ 74.448289][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.471595][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.499841][ T26] audit: type=1326 audit(1765820910.183:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 74.522301][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.538465][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.561383][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.584517][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.588119][ T26] audit: type=1326 audit(1765820910.183:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe746f8f749 code=0x7ffc0000 [ 74.613228][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.625711][ T4608] ======================================================= [ 74.625711][ T4608] WARNING: The mand mount option has been deprecated and [ 74.625711][ T4608] and is ignored by this kernel. Remove the mand [ 74.625711][ T4608] option from the mount to silence this warning. [ 74.625711][ T4608] ======================================================= [ 74.637834][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.729043][ T4311] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 74.761986][ T4311] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 74.797134][ T4608] FAT-fs (loop1): Directory bread(block 64) failed [ 74.843590][ T4608] FAT-fs (loop1): Directory bread(block 65) failed [ 74.877265][ T4619] device syzkaller0 entered promiscuous mode [ 74.890854][ T4608] FAT-fs (loop1): Directory bread(block 66) failed [ 74.910873][ T4608] FAT-fs (loop1): Directory bread(block 67) failed [ 74.965512][ T4608] FAT-fs (loop1): Directory bread(block 68) failed [ 75.026413][ T4608] FAT-fs (loop1): Directory bread(block 69) failed [ 75.068987][ T4608] FAT-fs (loop1): Directory bread(block 70) failed [ 75.115194][ T4608] FAT-fs (loop1): Directory bread(block 71) failed [ 75.162280][ T4608] FAT-fs (loop1): Directory bread(block 72) failed [ 75.168837][ T4608] FAT-fs (loop1): Directory bread(block 73) failed [ 75.333137][ T4627] fido_id[4627]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.276199][ T125] cfg80211: failed to load regulatory.db [ 76.975318][ T4674] loop2: detected capacity change from 0 to 1024 [ 77.025790][ T4674] EXT4-fs: Ignoring removed oldalloc option [ 77.062136][ T4674] EXT4-fs: Ignoring removed bh option [ 77.126672][ T4674] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.286813][ T4674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.980446][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 78.062211][ T4347] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 78.184303][ T4710] loop3: detected capacity change from 0 to 512 [ 78.240899][ T4710] EXT4-fs warning (device loop3): ext4_xattr_inode_get:509: inode #11: comm syz.3.106: EA inode hash validation failed [ 78.262324][ T4347] usb 5-1: device descriptor read/64, error -71 [ 78.272470][ T4710] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.293180][ T4710] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.106: corrupted inode contents [ 78.366604][ T4710] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #15: comm syz.3.106: mark_inode_dirty error [ 78.437344][ T4710] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.106: corrupted inode contents [ 78.467346][ T4710] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2964: inode #15: comm syz.3.106: mark_inode_dirty error [ 78.502554][ T4710] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #15: comm syz.3.106: mark inode dirty (error -117) [ 78.557235][ T4347] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 78.565030][ T4710] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 78.597659][ T4710] EXT4-fs (loop3): 1 orphan inode deleted [ 78.610147][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 78.610158][ T26] audit: type=1326 audit(1765820915.243:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 78.639808][ T4710] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.712488][ T26] audit: type=1326 audit(1765820915.243:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 78.742217][ T4347] usb 5-1: device descriptor read/64, error -71 [ 78.808047][ T26] audit: type=1326 audit(1765820915.243:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0248b8df90 code=0x7ffc0000 [ 78.862645][ T4347] usb usb5-port1: attempt power cycle [ 78.865808][ T26] audit: type=1326 audit(1765820915.243:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 78.906936][ T26] audit: type=1326 audit(1765820915.243:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 79.002408][ T26] audit: type=1326 audit(1765820915.243:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 79.107597][ T26] audit: type=1326 audit(1765820915.243:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 79.132874][ T26] audit: type=1326 audit(1765820915.243:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 79.156386][ T26] audit: type=1326 audit(1765820915.243:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 79.179568][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 79.186761][ T26] audit: type=1326 audit(1765820915.243:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4719 comm="syz.2.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0248b8f749 code=0x7ffc0000 [ 79.315987][ T4347] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 79.372666][ T4347] usb 5-1: device descriptor read/8, error -71 [ 79.652172][ T4347] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 79.712677][ T4347] usb 5-1: device descriptor read/8, error -71 [ 79.836532][ T4347] usb usb5-port1: unable to enumerate USB device [ 79.982493][ T4773] syz.0.125[4773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.982585][ T4773] syz.0.125[4773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.008081][ T4773] process 'syz.0.125' launched '/dev/fd/5' with NULL argv: empty string added [ 80.230138][ T4778] loop2: detected capacity change from 0 to 512 [ 80.307408][ T4778] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 80.366993][ T4778] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 80.387667][ T4778] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.423269][ T4778] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.127: corrupted inode contents [ 80.452336][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.460162][ T4778] EXT4-fs error (device loop2): ext4_dirty_inode:6133: inode #16: comm syz.2.127: mark_inode_dirty error [ 80.478079][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.484884][ T4778] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.127: corrupted inode contents [ 80.507990][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.515461][ T4778] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.127: mark_inode_dirty error [ 80.534938][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.564878][ T4778] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.127: corrupted inode contents [ 80.587330][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.622435][ T4778] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 80.643426][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.663369][ T4778] EXT4-fs error (device loop2): ext4_do_update_inode:5268: inode #16: comm syz.2.127: corrupted inode contents [ 80.686968][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.697602][ T4778] EXT4-fs error (device loop2): ext4_truncate:4318: inode #16: comm syz.2.127: mark_inode_dirty error [ 80.719367][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.732054][ T4778] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 80.762378][ T4778] EXT4-fs (loop2): Remounting filesystem read-only [ 80.778459][ T4797] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.133'. [ 80.789358][ T4778] EXT4-fs (loop2): 1 truncate cleaned up [ 80.815843][ T62] EXT4-fs error (device loop2): ext4_release_dquot:6845: comm kworker/u4:4: Failed to release dquot type 1 [ 80.831084][ T4793] loop0: detected capacity change from 0 to 8192 [ 80.865893][ T62] EXT4-fs (loop2): Remounting filesystem read-only [ 80.892453][ T4778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.043912][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 81.229966][ T4799] loop4: detected capacity change from 0 to 8192 [ 81.456375][ T4799] netlink: 64 bytes leftover after parsing attributes in process `syz.4.134'. [ 81.511236][ T4820] loop0: detected capacity change from 0 to 512 [ 81.559173][ T4820] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.143: iget: bad extended attribute block 1 [ 81.573584][ T4820] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.143: couldn't read orphan inode 15 (err -117) [ 81.678721][ T4820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 81.859127][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 81.885101][ T4822] lo speed is unknown, defaulting to 1000 [ 82.015360][ T4830] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.147'. [ 82.139763][ T4832] netlink: 'syz.4.148': attribute type 142 has an invalid length. [ 82.338627][ T4840] loop2: detected capacity change from 0 to 1024 [ 82.350518][ T4832] loop4: detected capacity change from 0 to 8192 [ 82.484575][ T4840] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.514993][ T4840] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2749: inode #13: comm syz.2.152: corrupted in-inode xattr [ 82.617038][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 83.187763][ T4868] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 83.187763][ T4868] program syz.0.159 not setting count and/or reply_len properly [ 83.239454][ T4872] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.162'. [ 83.414350][ T4876] device bond1 entered promiscuous mode [ 83.464438][ T4876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.728952][ T4891] loop2: detected capacity change from 0 to 512 [ 83.774740][ T62] Bluetooth: hci5: Frame reassembly failed (-84) [ 83.784511][ T4876] bond1 (unregistering): Released all slaves [ 83.830032][ T4891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.854334][ T4893] lo speed is unknown, defaulting to 1000 [ 83.858000][ T4891] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.133479][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 84.133491][ T26] audit: type=1326 audit(1765820920.753:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.197743][ T26] audit: type=1326 audit(1765820920.793:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.255929][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 84.259604][ T26] audit: type=1326 audit(1765820920.793:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.327711][ T26] audit: type=1326 audit(1765820920.793:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.365504][ T4904] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 84.414173][ T4910] Illegal XDP return value 2766726135 on prog (id 62) dev syz_tun, expect packet loss! [ 84.424152][ T26] audit: type=1326 audit(1765820920.793:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.465227][ T4913] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.176'. [ 84.489681][ T4904] loop3: detected capacity change from 0 to 512 [ 84.498570][ T26] audit: type=1326 audit(1765820920.793:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.543244][ T4904] EXT4-fs (loop3): can't mount with both data=journal and delalloc [ 84.579479][ T26] audit: type=1326 audit(1765820920.793:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.631572][ T26] audit: type=1326 audit(1765820920.793:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.719351][ T26] audit: type=1326 audit(1765820920.793:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 84.789910][ T26] audit: type=1326 audit(1765820920.793:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4901 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad238f749 code=0x7ffc0000 [ 85.533781][ T4951] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.189'. [ 85.802406][ T4269] Bluetooth: hci5: command 0x1003 tx timeout [ 85.809502][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 85.960977][ T4968] tipc: Started in network mode [ 85.966372][ T4968] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 85.979382][ T4968] tipc: Enabled bearer , priority 10 [ 86.085384][ T4973] loop3: detected capacity change from 0 to 512 [ 86.144420][ T4973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.154237][ T4973] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.345773][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 86.462754][ T4986] loop2: detected capacity change from 0 to 512 [ 86.502864][ T4986] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.203: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 86.536305][ T4986] EXT4-fs error (device loop2): ext4_quota_enable:7020: comm syz.2.203: Bad quota inode: 3, type: 0 [ 86.640807][ T4995] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 86.642950][ T4994] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.202'. [ 86.660263][ T4986] EXT4-fs warning (device loop2): ext4_enable_quotas:7061: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 86.690181][ T4986] EXT4-fs (loop2): mount failed [ 86.724836][ T4998] xt_connbytes: Forcing CT accounting to be enabled [ 86.790112][ T4998] Cannot find set identified by id 0 to match [ 86.790640][ T5000] program syz.0.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.099232][ T125] tipc: Node number set to 4269801488 [ 87.279549][ T5024] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 87.624983][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 87.717704][ T5042] loop4: detected capacity change from 0 to 512 [ 87.763961][ T5044] loop3: detected capacity change from 0 to 512 [ 87.770996][ T5042] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 87.786653][ T5042] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.834792][ T5044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.953955][ T5042] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.227: corrupted inode contents [ 87.986299][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 87.993316][ T5044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.014681][ T5042] EXT4-fs error (device loop4): ext4_dirty_inode:6133: inode #16: comm syz.4.227: mark_inode_dirty error [ 88.053260][ T5044] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.107775][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 88.119071][ T5044] [ 88.121423][ T5044] ====================================================== [ 88.128445][ T5044] WARNING: possible circular locking dependency detected [ 88.135476][ T5044] syzkaller #0 Not tainted [ 88.137547][ T5042] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.227: corrupted inode contents [ 88.139877][ T5044] ------------------------------------------------------ [ 88.139885][ T5044] syz.3.228/5044 is trying to acquire lock: [ 88.164471][ T5044] ffff88807228beb8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x316/0x1b60 [ 88.173977][ T5044] [ 88.173977][ T5044] but task is already holding lock: [ 88.181325][ T5044] ffff88807cdea208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 88.190886][ T5044] [ 88.190886][ T5044] which lock already depends on the new lock. [ 88.190886][ T5044] [ 88.201273][ T5044] [ 88.201273][ T5044] the existing dependency chain (in reverse order) is: [ 88.210271][ T5044] [ 88.210271][ T5044] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 88.218340][ T5044] down_read+0x42/0x2d0 [ 88.223014][ T5044] v2_read_dquot+0x4a/0x110 [ 88.228027][ T5044] dquot_acquire+0x152/0x520 [ 88.233125][ T5044] ext4_acquire_dquot+0x2d9/0x4a0 [ 88.238659][ T5044] dqget+0x778/0xeb0 [ 88.243066][ T5044] __dquot_initialize+0x3b6/0xcb0 [ 88.248598][ T5044] ext4_process_orphan+0x54/0x300 [ 88.254137][ T5044] ext4_orphan_cleanup+0xbd3/0x1400 [ 88.259846][ T5044] ext4_fill_super+0x7bdf/0x8150 [ 88.265290][ T5044] get_tree_bdev+0x3f1/0x610 [ 88.270389][ T5044] vfs_get_tree+0x88/0x270 [ 88.275311][ T5044] do_new_mount+0x24a/0xa40 [ 88.280323][ T5044] __se_sys_mount+0x2d6/0x3c0 [ 88.285507][ T5044] do_syscall_64+0x4c/0xa0 [ 88.290437][ T5044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.296840][ T5044] [ 88.296840][ T5044] -> #1 (&dquot->dq_lock){+.+.}-{3:3}: [ 88.304475][ T5044] __mutex_lock+0x120/0xaf0 [ 88.309494][ T5044] dquot_commit+0x5a/0x410 [ 88.314417][ T5044] ext4_write_dquot+0x1f0/0x360 [ 88.319776][ T5044] mark_all_dquot_dirty+0xf9/0x400 [ 88.325395][ T5044] __dquot_free_space+0x7ec/0xbc0 [ 88.330928][ T5044] ext4_free_blocks+0x1bab/0x2640 [ 88.336463][ T5044] ext4_ext_remove_space+0x1f0d/0x4490 [ 88.342428][ T5044] ext4_ext_truncate+0x211/0x370 [ 88.347871][ T5044] ext4_truncate+0xa0b/0x1230 [ 88.353064][ T5044] ext4_process_orphan+0x1cb/0x300 [ 88.358689][ T5044] ext4_orphan_cleanup+0xbd3/0x1400 [ 88.364400][ T5044] ext4_fill_super+0x7bdf/0x8150 [ 88.369846][ T5044] get_tree_bdev+0x3f1/0x610 [ 88.374943][ T5044] vfs_get_tree+0x88/0x270 [ 88.379866][ T5044] do_new_mount+0x24a/0xa40 [ 88.384882][ T5044] __se_sys_mount+0x2d6/0x3c0 [ 88.390070][ T5044] do_syscall_64+0x4c/0xa0 [ 88.395000][ T5044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.401401][ T5044] [ 88.401401][ T5044] -> #0 (&ei->i_data_sem/2){++++}-{3:3}: [ 88.409211][ T5044] __lock_acquire+0x2cf8/0x7c50 [ 88.414575][ T5044] lock_acquire+0x1b4/0x490 [ 88.419597][ T5044] down_read+0x42/0x2d0 [ 88.424268][ T5044] ext4_map_blocks+0x316/0x1b60 [ 88.429630][ T5044] ext4_getblk+0x1ab/0x6d0 [ 88.434562][ T5044] ext4_bread+0x26/0x170 [ 88.439335][ T5044] ext4_quota_write+0x230/0x570 [ 88.444709][ T5044] get_free_dqblk+0x312/0x660 [ 88.449901][ T5044] do_insert_tree+0x22b/0x1040 [ 88.455180][ T5044] do_insert_tree+0x9eb/0x1040 [ 88.460460][ T5044] qtree_write_dquot+0x48d/0x5b0 [ 88.465911][ T5044] v2_write_dquot+0x108/0x190 [ 88.471102][ T5044] dquot_acquire+0x2d5/0x520 [ 88.476203][ T5044] ext4_acquire_dquot+0x2d9/0x4a0 [ 88.481738][ T5044] dqget+0x778/0xeb0 [ 88.486141][ T5044] __dquot_initialize+0x3b6/0xcb0 [ 88.491677][ T5044] ext4_set_acl+0x133/0x580 [ 88.496695][ T5044] posix_acl_xattr_set+0x387/0x3f0 [ 88.502317][ T5044] __vfs_removexattr+0x3b7/0x3f0 [ 88.507765][ T5044] __vfs_removexattr_locked+0x1e4/0x230 [ 88.513822][ T5044] vfs_removexattr+0x7d/0x1b0 [ 88.519012][ T5044] path_removexattr+0x1c9/0x3b0 [ 88.524375][ T5044] __x64_sys_lremovexattr+0x59/0x70 [ 88.530086][ T5044] do_syscall_64+0x4c/0xa0 [ 88.535018][ T5044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.541420][ T5044] [ 88.541420][ T5044] other info that might help us debug this: [ 88.541420][ T5044] [ 88.551630][ T5044] Chain exists of: [ 88.551630][ T5044] &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem [ 88.551630][ T5044] [ 88.565267][ T5044] Possible unsafe locking scenario: [ 88.565267][ T5044] [ 88.572698][ T5044] CPU0 CPU1 [ 88.578047][ T5044] ---- ---- [ 88.583401][ T5044] lock(&s->s_dquot.dqio_sem); [ 88.588237][ T5044] lock(&dquot->dq_lock); [ 88.595161][ T5044] lock(&s->s_dquot.dqio_sem); [ 88.602516][ T5044] lock(&ei->i_data_sem/2); [ 88.607098][ T5044] [ 88.607098][ T5044] *** DEADLOCK *** [ 88.607098][ T5044] [ 88.615225][ T5044] 4 locks held by syz.3.228/5044: [ 88.620229][ T5044] #0: ffff88807cdea460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 88.629370][ T5044] #1: ffff88807228d440 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: vfs_removexattr+0x69/0x1b0 [ 88.639719][ T5044] #2: ffff888073bb4428 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520 [ 88.649105][ T5044] #3: ffff88807cdea208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_write_dquot+0x12b/0x190 [ 88.659104][ T5044] [ 88.659104][ T5044] stack backtrace: [ 88.664989][ T5044] CPU: 1 PID: 5044 Comm: syz.3.228 Not tainted syzkaller #0 [ 88.672257][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.682303][ T5044] Call Trace: [ 88.685569][ T5044] [ 88.688488][ T5044] dump_stack_lvl+0x168/0x22e [ 88.693168][ T5044] ? load_image+0x3b0/0x3b0 [ 88.697659][ T5044] ? show_regs_print_info+0x12/0x12 [ 88.702856][ T5044] ? print_circular_bug+0x12b/0x1a0 [ 88.708052][ T5044] check_noncircular+0x274/0x310 [ 88.712990][ T5044] ? add_chain_block+0x940/0x940 [ 88.717922][ T5044] ? lockdep_lock+0xdc/0x1e0 [ 88.722503][ T5044] ? mark_lock+0x94/0x320 [ 88.726824][ T5044] ? _find_first_zero_bit+0xcf/0x100 [ 88.732099][ T5044] __lock_acquire+0x2cf8/0x7c50 [ 88.736950][ T5044] ? verify_lock_unused+0x140/0x140 [ 88.742140][ T5044] ? verify_lock_unused+0x140/0x140 [ 88.747339][ T5044] lock_acquire+0x1b4/0x490 [ 88.751833][ T5044] ? ext4_map_blocks+0x316/0x1b60 [ 88.756855][ T5044] ? __might_sleep+0xd0/0xd0 [ 88.761438][ T5044] ? mark_lock+0x94/0x320 [ 88.765758][ T5044] ? read_lock_is_recursive+0x10/0x10 [ 88.771122][ T5044] ? percpu_counter_add_batch+0x13b/0x160 [ 88.776840][ T5044] ? rcu_is_watching+0x11/0xa0 [ 88.781597][ T5044] down_read+0x42/0x2d0 [ 88.785746][ T5044] ? ext4_map_blocks+0x316/0x1b60 [ 88.790765][ T5044] ext4_map_blocks+0x316/0x1b60 [ 88.795608][ T5044] ? _raw_spin_unlock+0x40/0x40 [ 88.800449][ T5044] ? __stack_depot_save+0x421/0x460 [ 88.805643][ T5044] ? ext4_issue_zeroout+0x250/0x250 [ 88.810835][ T5044] ? kasan_set_track+0x60/0x70 [ 88.815589][ T5044] ? kasan_set_track+0x4b/0x70 [ 88.820341][ T5044] ? __kasan_kmalloc+0x8e/0xa0 [ 88.825096][ T5044] ? __kmalloc+0xb0/0x240 [ 88.829425][ T5044] ? get_free_dqblk+0x45/0x660 [ 88.834179][ T5044] ? do_insert_tree+0x9eb/0x1040 [ 88.839105][ T5044] ? qtree_write_dquot+0x48d/0x5b0 [ 88.844208][ T5044] ? v2_write_dquot+0x108/0x190 [ 88.849047][ T5044] ext4_getblk+0x1ab/0x6d0 [ 88.853460][ T5044] ? vfs_removexattr+0x7d/0x1b0 [ 88.858299][ T5044] ? path_removexattr+0x1c9/0x3b0 [ 88.863316][ T5044] ? __x64_sys_lremovexattr+0x59/0x70 [ 88.868679][ T5044] ? ext4_get_block_unwritten+0x100/0x100 [ 88.874397][ T5044] ext4_bread+0x26/0x170 [ 88.878632][ T5044] ext4_quota_write+0x230/0x570 [ 88.883478][ T5044] ? ext4_quota_read+0x380/0x380 [ 88.888421][ T5044] ? get_free_dqblk+0x45/0x660 [ 88.893186][ T5044] ? get_free_dqblk+0x45/0x660 [ 88.897951][ T5044] ? __kmalloc+0xe1/0x240 [ 88.902284][ T5044] get_free_dqblk+0x312/0x660 [ 88.906954][ T5044] ? ext4_quota_read+0x380/0x380 [ 88.911885][ T5044] do_insert_tree+0x22b/0x1040 [ 88.916640][ T5044] ? ext4_quota_read+0x305/0x380 [ 88.921566][ T5044] do_insert_tree+0x9eb/0x1040 [ 88.926324][ T5044] qtree_write_dquot+0x48d/0x5b0 [ 88.931265][ T5044] ? qtree_entry_unused+0xe0/0xe0 [ 88.936288][ T5044] ? rwsem_write_trylock+0x12f/0x1b0 [ 88.941565][ T5044] ? trace_contention_end+0x5f/0x170 [ 88.946840][ T5044] ? preempt_count_add+0x8d/0x190 [ 88.951907][ T5044] v2_write_dquot+0x108/0x190 [ 88.956585][ T5044] dquot_acquire+0x2d5/0x520 [ 88.961168][ T5044] ext4_acquire_dquot+0x2d9/0x4a0 [ 88.966185][ T5044] dqget+0x778/0xeb0 [ 88.970072][ T5044] __dquot_initialize+0x3b6/0xcb0 [ 88.975097][ T5044] ? dquot_initialize+0x20/0x20 [ 88.979935][ T5044] ? aa_get_newest_label+0xf4/0x5c0 [ 88.985135][ T5044] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.991198][ T5044] ext4_set_acl+0x133/0x580 [ 88.995698][ T5044] ? ext4_get_acl+0x660/0x660 [ 89.000370][ T5044] ? bpf_lsm_capable+0x5/0x10 [ 89.005043][ T5044] ? security_capable+0x85/0xb0 [ 89.009884][ T5044] ? ns_capable+0x85/0xe0 [ 89.014203][ T5044] ? inode_owner_or_capable+0x1a5/0x200 [ 89.019741][ T5044] posix_acl_xattr_set+0x387/0x3f0 [ 89.024846][ T5044] ? posix_acl_xattr_get+0x550/0x550 [ 89.030124][ T5044] __vfs_removexattr+0x3b7/0x3f0 [ 89.035055][ T5044] __vfs_removexattr_locked+0x1e4/0x230 [ 89.040595][ T5044] vfs_removexattr+0x7d/0x1b0 [ 89.045265][ T5044] path_removexattr+0x1c9/0x3b0 [ 89.050114][ T5044] ? listxattr+0x2e0/0x2e0 [ 89.054532][ T5044] ? lock_chain_count+0x20/0x20 [ 89.059375][ T5044] ? syscall_enter_from_user_mode+0x21/0x80 [ 89.065258][ T5044] __x64_sys_lremovexattr+0x59/0x70 [ 89.070479][ T5044] do_syscall_64+0x4c/0xa0 [ 89.074904][ T5044] ? clear_bhb_loop+0x60/0xb0 [ 89.079586][ T5044] ? clear_bhb_loop+0x60/0xb0 [ 89.084261][ T5044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.090146][ T5044] RIP: 0033:0x7fd44bb8f749 [ 89.094560][ T5044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.114166][ T5044] RSP: 002b:00007fd44cabc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 89.122570][ T5044] RAX: ffffffffffffffda RBX: 00007fd44bde5fa0 RCX: 00007fd44bb8f749 [ 89.130529][ T5044] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000000 [ 89.138488][ T5044] RBP: 00007fd44bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 89.146460][ T5044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.154427][ T5044] R13: 00007fd44bde6038 R14: 00007fd44bde5fa0 R15: 00007ffc125db2e8 [ 89.162398][ T5044] [ 89.192327][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 89.199538][ T5044] __quota_error: 32 callbacks suppressed [ 89.199549][ T5044] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 89.205413][ T5042] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.227: mark_inode_dirty error [ 89.220293][ T5044] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 89.229520][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 89.238005][ T5044] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.228: Failed to acquire dquot type 0 [ 89.244295][ T5042] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.227: corrupted inode contents [ 89.268189][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 89.277006][ T5042] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 89.285843][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 89.287485][ T4264] EXT4-fs (loop3): unmounting filesystem. [ 89.292454][ T5042] EXT4-fs error (device loop4): ext4_do_update_inode:5268: inode #16: comm syz.4.227: corrupted inode contents [ 89.294124][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 89.318926][ T5042] EXT4-fs error (device loop4): ext4_truncate:4318: inode #16: comm syz.4.227: mark_inode_dirty error [ 89.338953][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 89.346125][ T5042] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 89.357314][ T5042] EXT4-fs (loop4): Remounting filesystem read-only [ 89.364109][ T5042] EXT4-fs (loop4): 1 truncate cleaned up [ 89.369960][ T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 89.379925][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6845: comm kworker/u4:1: Failed to release dquot type 1 [ 89.393359][ T11] EXT4-fs (loop4): Remounting filesystem read-only [ 89.399970][ T5042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.435579][ T4267] EXT4-fs (loop4): unmounting filesystem.