last executing test programs: 3.463174189s ago: executing program 1 (id=207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x2c, r2, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0) 3.16096027s ago: executing program 1 (id=210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 2.988882505s ago: executing program 1 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}}, 0x0) 2.836598931s ago: executing program 1 (id=216): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="4c0000000206010100000000000000000000000005000500050000000900020073797a3000000000100003006269746d61703a706f7274000400078005000100070000000500040000000000083eb1c61985579df9d573bbe3da47548ac73c1c113a6a0f2191b5338e9c80b51c18d904dca3f77e2cc8a0d2f0eba9e49c8f408f8050bfd08a4021066ca9600c95b9e6596a1b6c2ee095229de582be4ded33c819c2697f71fe260b7db202d7be4d220dedcc9efa93dd282f7d475838694a10a43689087ca352db72c635ebe9966b4144e9c3604a803eb98654fc0f6d109e282d591eb72b65f1928002e1743e2a9c53"], 0x4c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r6, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001840)=""/198, 0xc6}], 0x1, 0x33, 0xfffffffd) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000400000000000000010000009500"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 2.272676055s ago: executing program 1 (id=219): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x3a) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r2}, 0x18) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) 1.853022917s ago: executing program 0 (id=222): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) 1.584921253s ago: executing program 0 (id=226): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 1.552661057s ago: executing program 4 (id=227): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.109029839s ago: executing program 4 (id=229): sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[], 0x128}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc020) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.105542081s ago: executing program 2 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000b000000be00000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) 921.381051ms ago: executing program 2 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050001000000030000000200"], 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) 720.887508ms ago: executing program 2 (id=232): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 720.619258ms ago: executing program 3 (id=233): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 718.029179ms ago: executing program 4 (id=234): futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000010400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000000002400"], 0xd0}}, 0x0) 610.864825ms ago: executing program 3 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 599.28053ms ago: executing program 2 (id=236): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x4008800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r2, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3, 0x3, 0x0, 0x0, 0x8001}}) tkill(r1, 0x7) 528.679521ms ago: executing program 1 (id=237): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}}) 512.141038ms ago: executing program 4 (id=238): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x39]}}]}) 468.779586ms ago: executing program 0 (id=239): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 381.083425ms ago: executing program 3 (id=240): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000080)=""/4101, 0x1005) symlinkat(&(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') 362.506183ms ago: executing program 0 (id=241): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) 341.016432ms ago: executing program 4 (id=242): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/203, 0x0, 0xcb, 0x0, 0x8}, 0x28) 285.058726ms ago: executing program 2 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) 268.489794ms ago: executing program 4 (id=244): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0x5, [@struct={0xf, 0x4, 0x0, 0x4, 0x1, 0x6, [{0x8, 0x4, 0x4}, {0x6, 0x0, 0x1}, {0x4, 0x3, 0xa7a}, {0x6, 0x5, 0x4b1}]}, @datasec={0x4, 0x5, 0x0, 0xf, 0x3, [{0x1, 0xfffffffd, 0x9}, {0x2, 0x7, 0x7}, {0x1, 0x5, 0x6}, {0x4, 0x3, 0x80000001}, {0x2, 0x2, 0xb39}], "407da3"}, @float={0xd, 0x0, 0x0, 0x10, 0x1a}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x30, 0x30]}}, &(0x7f0000000240)=""/134, 0xc9, 0x86, 0x0, 0x5}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r3, 0x0, 0x11, &(0x7f0000000000)='errors=remount-ro'}, 0x30) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 246.662563ms ago: executing program 3 (id=245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4078, 0xe0}], 0x1, 0xf3, 0x3) 119.970288ms ago: executing program 0 (id=246): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1, 0xf}}, './file0\x00'}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) 119.700778ms ago: executing program 2 (id=247): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 75.517547ms ago: executing program 3 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002580)={r1, r0, 0x4, r0}, 0x10) 0s ago: executing program 0 (id=249): r0 = memfd_secret(0x80000) fgetxattr(r0, &(0x7f0000000640)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.200' (ED25519) to the list of known hosts. syzkaller login: [ 54.572130][ T4253] cgroup: Unknown subsys name 'net' [ 54.757552][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.021148][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.087211][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.098747][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.107085][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.115015][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.122915][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.126612][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.131927][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.137438][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.145066][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.151913][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.159304][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.166218][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.173313][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.180511][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.186344][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.194059][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.209151][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.209274][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.223401][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.223987][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.231113][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.238645][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.246332][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.252632][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.259263][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.265833][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.274086][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.280361][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.286697][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.293578][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.576272][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 58.704481][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.711642][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.721350][ T4270] device bridge_slave_0 entered promiscuous mode [ 58.752761][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.759852][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.769218][ T4270] device bridge_slave_1 entered promiscuous mode [ 58.818704][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 58.888622][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.900095][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.975435][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 59.005862][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 59.025413][ T4270] team0: Port device team_slave_0 added [ 59.056301][ T4270] team0: Port device team_slave_1 added [ 59.065993][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 59.075514][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.082759][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.090676][ T4271] device bridge_slave_0 entered promiscuous mode [ 59.121470][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.128708][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.136907][ T4271] device bridge_slave_1 entered promiscuous mode [ 59.154698][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.161659][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.187616][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.227404][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.234466][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.260633][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.291058][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.312013][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.319278][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.327457][ T4265] device bridge_slave_0 entered promiscuous mode [ 59.338998][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.363322][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.370419][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.378325][ T4265] device bridge_slave_1 entered promiscuous mode [ 59.397680][ T4271] team0: Port device team_slave_0 added [ 59.404370][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.411468][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.419668][ T4263] device bridge_slave_0 entered promiscuous mode [ 59.442780][ T4271] team0: Port device team_slave_1 added [ 59.455885][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.463218][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.471260][ T4263] device bridge_slave_1 entered promiscuous mode [ 59.509735][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.518916][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.526183][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.534429][ T4277] device bridge_slave_0 entered promiscuous mode [ 59.553497][ T4270] device hsr_slave_0 entered promiscuous mode [ 59.560508][ T4270] device hsr_slave_1 entered promiscuous mode [ 59.574931][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.591164][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.598402][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.607239][ T4277] device bridge_slave_1 entered promiscuous mode [ 59.614665][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.621610][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.647775][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.660588][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.667785][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.694512][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.707841][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.741167][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.785264][ T4265] team0: Port device team_slave_0 added [ 59.799618][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.821367][ T4265] team0: Port device team_slave_1 added [ 59.829190][ T4263] team0: Port device team_slave_0 added [ 59.836720][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.866424][ T4263] team0: Port device team_slave_1 added [ 59.882186][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.889293][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.915336][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.936682][ T4271] device hsr_slave_0 entered promiscuous mode [ 59.943739][ T4271] device hsr_slave_1 entered promiscuous mode [ 59.950274][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.959151][ T4271] Cannot create hsr debugfs directory [ 59.993143][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.000115][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.026257][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.049488][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.056581][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.082740][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.098534][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.105836][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.131789][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.148831][ T4277] team0: Port device team_slave_0 added [ 60.178594][ T4277] team0: Port device team_slave_1 added [ 60.238021][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.245381][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.271839][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.296651][ T4263] device hsr_slave_0 entered promiscuous mode [ 60.303391][ T4263] device hsr_slave_1 entered promiscuous mode [ 60.309837][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.317604][ T4263] Cannot create hsr debugfs directory [ 60.327346][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.337603][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.363934][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.377917][ T4265] device hsr_slave_0 entered promiscuous mode [ 60.385035][ T4265] device hsr_slave_1 entered promiscuous mode [ 60.391753][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.399579][ T4265] Cannot create hsr debugfs directory [ 60.405734][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 60.411980][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 60.418236][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 60.418362][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 60.424865][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 60.513548][ T4277] device hsr_slave_0 entered promiscuous mode [ 60.520171][ T4277] device hsr_slave_1 entered promiscuous mode [ 60.527293][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.534962][ T4277] Cannot create hsr debugfs directory [ 60.638349][ T4270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.663334][ T4270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.692867][ T4270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.718636][ T4270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.808872][ T4271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.839814][ T4271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.854315][ T4271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.873049][ T4271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.888718][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.908409][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.918967][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.933312][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.994782][ T4263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.006652][ T4263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.018951][ T4263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.028722][ T4263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.106008][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.146120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.156538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.169522][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.192200][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.216978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.227400][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.236956][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.244185][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.274883][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.287131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.296950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.305911][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.313042][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.321608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.330939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.338781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.347903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.361131][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.375451][ T4277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.387508][ T4277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.397056][ T4277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.410032][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.419757][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.429286][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.452117][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.461632][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.469713][ T4277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.494020][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.504536][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.514856][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.523470][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.530541][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.538589][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.549478][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.557951][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.565999][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.574303][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.582729][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.590991][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.599818][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.608751][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.615870][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.639736][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.648082][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.657607][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.667299][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.676357][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.686098][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.695600][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.702731][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.718078][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.726323][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.754607][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.772314][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.781770][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.792129][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.801114][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.810373][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.817706][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.826076][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.835154][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.845277][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.854904][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.863944][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.882211][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.893442][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.934961][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.943856][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.952457][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.972189][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.982047][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.996389][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.008605][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.020357][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.027538][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.036797][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.045616][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.055451][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.065112][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.074537][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.084957][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.093376][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.102285][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.110502][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.118810][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.141032][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.158677][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.181981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.196965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.213520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.221069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.252912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.262148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.276668][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.283823][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.312141][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.334956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.359937][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.401979][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.418638][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.431007][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.446522][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.459686][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.473146][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.482893][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 62.482959][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 62.488901][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 62.495510][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 62.501262][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 62.517577][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.551257][ T4263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.567292][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.581460][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.591371][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.599439][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.613431][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.627846][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.638201][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.648774][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.657452][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.691026][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.699225][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.715035][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.724280][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.731373][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.739497][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.749750][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.759359][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.766497][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.776229][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.815605][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.824870][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.832369][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.844942][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.853967][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.862488][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.871747][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.880326][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.888316][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.900456][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.912050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.921339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.931322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.939576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.952381][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.974450][ T4270] device veth0_vlan entered promiscuous mode [ 63.007886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.023876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.033994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.044420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.054019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.063785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.072301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.084605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.098975][ T4270] device veth1_vlan entered promiscuous mode [ 63.112294][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.138361][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.158532][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.166961][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.177493][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.186765][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.195589][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.243887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.264185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.279442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.309171][ T4271] device veth0_vlan entered promiscuous mode [ 63.321104][ T4265] device veth0_vlan entered promiscuous mode [ 63.330568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.348001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.359420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.370650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.379944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.388899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.398713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.407292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.417342][ T4270] device veth0_macvtap entered promiscuous mode [ 63.441191][ T4265] device veth1_vlan entered promiscuous mode [ 63.458924][ T4270] device veth1_macvtap entered promiscuous mode [ 63.478414][ T4271] device veth1_vlan entered promiscuous mode [ 63.520934][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.539954][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.549427][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.558003][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.569147][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.578074][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.592458][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.601208][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.619892][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.636513][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.660722][ T4265] device veth0_macvtap entered promiscuous mode [ 63.688012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.697873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.707007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.716522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.725423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.734766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.745492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.757410][ T4270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.768838][ T4270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.780546][ T4270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.791824][ T4270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.814266][ T4265] device veth1_macvtap entered promiscuous mode [ 63.821758][ T4271] device veth0_macvtap entered promiscuous mode [ 63.837081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.848129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.856384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.867012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.896744][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.909080][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.920527][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.930843][ T4271] device veth1_macvtap entered promiscuous mode [ 63.946880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.955653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.967043][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.978838][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.990665][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.001054][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.012902][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.021621][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.030675][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.044692][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.058814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.067582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.110213][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.125562][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.135797][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.147545][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.158511][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.206833][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.215553][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.225226][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.234616][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.251662][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.262348][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.272382][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.282975][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.296474][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.308370][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.317725][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.327374][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.336707][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.365886][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.375498][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.384521][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.394374][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.404235][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.412708][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.421040][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.429872][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.466334][ T4263] device veth0_vlan entered promiscuous mode [ 64.475611][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.485539][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.497298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.507386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.527932][ T4263] device veth1_vlan entered promiscuous mode [ 64.544171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.553388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.561223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.562953][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 64.569227][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 64.574521][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 64.580390][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 64.586943][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 64.594606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.613888][ T4277] device veth0_vlan entered promiscuous mode [ 64.632167][ T4277] device veth1_vlan entered promiscuous mode [ 64.719006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.727993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.736514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.745529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.754910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.776324][ T4263] device veth0_macvtap entered promiscuous mode [ 64.777405][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.803651][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.805548][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.815003][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.828265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.836142][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.836827][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.853730][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.861104][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.863282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.877454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.891231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.912401][ T4277] device veth0_macvtap entered promiscuous mode [ 64.925424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.939360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.948747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.960769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.985961][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.994645][ T4277] device veth1_macvtap entered promiscuous mode [ 65.003763][ T4263] device veth1_macvtap entered promiscuous mode [ 65.008159][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.023847][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.089476][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.100455][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.115670][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.152804][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.163706][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.174471][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.186384][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.196678][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.209351][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.219946][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.230848][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.242475][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.253777][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.264265][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.274958][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.287589][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.302101][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.331022][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.341676][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.355672][ T4380] device bridge_slave_0 left promiscuous mode [ 65.362402][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.378263][ T4380] device bridge_slave_1 left promiscuous mode [ 65.384811][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.397611][ T4380] bond0: (slave bond_slave_0): Releasing backup interface [ 65.412049][ T4380] bond0: (slave bond_slave_1): Releasing backup interface [ 65.438555][ T4380] team0: Port device team_slave_0 removed [ 65.455345][ T4380] team0: Port device team_slave_1 removed [ 65.461804][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.469530][ T4380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.478296][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.486080][ T4380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.498306][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.510626][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.542773][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.579484][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.610087][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.621658][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.637999][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.650313][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.666131][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.692068][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.710957][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.754017][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.765011][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.775742][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.786409][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.803268][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.810763][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.823133][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.832086][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.841603][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.857618][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.875259][ T4390] process 'syz.1.7' launched '/dev/fd/4' with NULL argv: empty string added [ 65.892624][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.911253][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.920274][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.948784][ T4388] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7'. [ 65.970798][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.982643][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.009027][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.027942][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.218849][ T4402] capability: warning: `syz.2.9' uses 32-bit capabilities (legacy support in use) [ 66.243318][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.293325][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.317584][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.326734][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.335060][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.355173][ T4402] program syz.2.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.367227][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.392912][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.400937][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.467238][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.519952][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.554453][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.575902][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.615480][ T126] cfg80211: failed to load regulatory.db [ 66.642974][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 66.649068][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 66.656240][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 66.656258][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 66.662238][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 67.035574][ T4417] smc: net device hsr0 applied user defined pnetid SYZ2 [ 67.045774][ T4417] smc: net device hsr0 erased user defined pnetid SYZ2 [ 67.828031][ T4430] loop1: detected capacity change from 0 to 1024 [ 68.161074][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 68.791421][ T4430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.822089][ T4434] loop4: detected capacity change from 0 to 40427 [ 68.845235][ T4428] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 68.849943][ T4434] F2FS-fs (loop4): Invalid segment/section count (24 != 3 * 1) [ 68.860792][ T4428] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.867905][ T4434] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 68.880173][ T4428] EXT4-fs (loop1): This should not happen!! Data will be lost [ 68.880173][ T4428] [ 68.880196][ T4428] EXT4-fs (loop1): Total free blocks count 0 [ 68.880209][ T4428] EXT4-fs (loop1): Free/Dirty block details [ 68.880255][ T4428] EXT4-fs (loop1): free_blocks=20480 [ 68.909553][ T4434] F2FS-fs (loop4): invalid crc value [ 68.910286][ T4428] EXT4-fs (loop1): dirty_blocks=80 [ 68.925851][ T4428] EXT4-fs (loop1): Block reservation details [ 68.931848][ T4428] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 69.123450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.194451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 69.202782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 69.212550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 69.222545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 69.232551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 69.240882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 69.249178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 69.267960][ T4378] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 69.284229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.355804][ T4434] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.437417][ T4434] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 69.444791][ T4434] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.566890][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 69.828170][ T4453] sctp: [Deprecated]: syz.3.23 (pid 4453) Use of int in max_burst socket option deprecated. [ 69.828170][ T4453] Use struct sctp_assoc_value instead [ 69.940653][ T4453] netlink: 'syz.3.23': attribute type 39 has an invalid length. [ 69.978791][ T4455] IPv4: Oversized IP packet from 127.202.26.0 [ 70.308717][ T26] audit: type=1326 audit(1766149498.719:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 70.371911][ T26] audit: type=1326 audit(1766149498.719:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 70.462661][ T26] audit: type=1326 audit(1766149498.759:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 70.552185][ T26] audit: type=1326 audit(1766149498.759:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 70.645768][ T26] audit: type=1326 audit(1766149498.759:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 70.754479][ T26] audit: type=1326 audit(1766149498.759:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 70.790323][ T26] audit: type=1326 audit(1766149498.759:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 70.858928][ T26] audit: type=1326 audit(1766149498.769:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 70.983195][ T26] audit: type=1326 audit(1766149498.779:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 71.020779][ T26] audit: type=1326 audit(1766149498.779:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 71.287349][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.294147][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.359607][ T4492] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 71.942612][ T126] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 72.107603][ T126] usb 4-1: device descriptor read/64, error -71 [ 72.402733][ T126] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 72.443602][ T4506] Zero length message leads to an empty skb [ 72.526435][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 72.552012][ T4513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'. [ 72.569938][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 72.590118][ T126] usb 4-1: device descriptor read/64, error -71 [ 72.611159][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 72.641953][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 72.682293][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 72.713952][ T126] usb usb4-port1: attempt power cycle [ 73.162652][ T126] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 73.171586][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 73.225054][ T126] usb 4-1: device descriptor read/8, error -71 [ 73.512700][ T126] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 73.564431][ T126] usb 4-1: device descriptor read/8, error -71 [ 73.597867][ T4531] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 73.689616][ T126] usb usb4-port1: unable to enumerate USB device [ 74.194982][ T4542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 74.244410][ T4420] Set syz1 is full, maxelem 65536 reached [ 74.723340][ T4552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.65'. [ 74.736567][ T4551] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 74.761008][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 74.764082][ T4551] team0: Port device batadv1 added [ 74.856801][ T4555] loop0: detected capacity change from 0 to 1024 [ 74.895882][ T4555] ext2: Unknown parameter 'fsname' [ 74.946564][ T4284] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.748714][ T4571] device hsr_slave_0 left promiscuous mode [ 75.797474][ T4571] device hsr_slave_1 left promiscuous mode [ 76.159495][ T4582] loop3: detected capacity change from 0 to 512 [ 76.230617][ T4582] ======================================================= [ 76.230617][ T4582] WARNING: The mand mount option has been deprecated and [ 76.230617][ T4582] and is ignored by this kernel. Remove the mand [ 76.230617][ T4582] option from the mount to silence this warning. [ 76.230617][ T4582] ======================================================= [ 76.330869][ T4582] EXT4-fs: Ignoring removed orlov option [ 76.360852][ T4581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.398353][ T4582] EXT4-fs: Ignoring removed i_version option [ 76.417628][ T4582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.439628][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 76.439643][ T26] audit: type=1326 audit(1766149504.849:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 76.493287][ T4582] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 76.595319][ T4582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 76.621621][ T26] audit: type=1326 audit(1766149504.849:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 76.651734][ T4582] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.691042][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058c12800: rx timeout, send abort [ 76.696607][ T4582] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 76.707436][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058c12800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 76.768760][ T4582] EXT4-fs warning (device loop3): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 76.783903][ T26] audit: type=1326 audit(1766149504.889:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 76.821646][ T4582] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 76.848830][ T4581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.867108][ T26] audit: type=1326 audit(1766149504.889:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 76.884851][ T4582] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.73: bg 0: block 40: padding at end of block bitmap is not set [ 76.906359][ T4603] syz.2.82[4603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.906458][ T4603] syz.2.82[4603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.937109][ T26] audit: type=1326 audit(1766149504.889:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 76.961924][ T4582] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 76.992034][ T4582] EXT4-fs (loop3): 1 truncate cleaned up [ 76.999770][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 77.089302][ T26] audit: type=1326 audit(1766149504.889:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 77.188291][ T26] audit: type=1326 audit(1766149504.889:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 77.213189][ T4581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.276009][ T26] audit: type=1326 audit(1766149504.889:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 77.379780][ T26] audit: type=1326 audit(1766149504.889:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe36f58f749 code=0x7ffc0000 [ 77.413517][ T4581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.476486][ T4615] loop4: detected capacity change from 0 to 164 [ 77.647141][ T4581] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.669252][ T4619] loop1: detected capacity change from 0 to 1024 [ 77.689075][ T4581] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.738568][ T4619] journal_path: Lookup failure for './file1' [ 77.740716][ T4581] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.760237][ T4619] EXT4-fs: error: could not find journal device path [ 77.830254][ T4581] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.963218][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 77.998760][ T4631] loop2: detected capacity change from 0 to 1024 [ 78.057801][ T4631] EXT4-fs: Mount option(s) incompatible with ext2 [ 78.087568][ T4635] __nla_validate_parse: 4 callbacks suppressed [ 78.087584][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 78.119738][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 78.962304][ T4663] loop2: detected capacity change from 0 to 1024 [ 79.039563][ T4663] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.156393][ T4663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.177086][ T4677] loop4: detected capacity change from 0 to 512 [ 79.185111][ T4673] netlink: 76 bytes leftover after parsing attributes in process `syz.0.111'. [ 79.230276][ T4677] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.274455][ T4681] Error parsing options; rc = [-22] [ 79.302257][ T4682] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 79.360462][ T4677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.398628][ T4677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 79.410148][ T4677] System zones: 1-12 [ 79.422981][ T4677] EXT4-fs (loop4): 1 truncate cleaned up [ 79.444171][ T4677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.475970][ T4681] loop3: detected capacity change from 0 to 64 [ 79.563951][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 79.650171][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 79.874060][ T4697] loop1: detected capacity change from 0 to 512 [ 79.918615][ T4697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.958084][ T4697] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.050367][ T4697] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.117: Allocating blocks 41-42 which overlap fs metadata [ 80.171071][ T4697] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.117: Allocating blocks 41-42 which overlap fs metadata [ 80.237357][ T4697] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.117: Failed to acquire dquot type 1 [ 80.287167][ T4697] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 80.341978][ T4697] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.117: corrupted inode contents [ 80.389260][ T4697] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #12: comm syz.1.117: mark_inode_dirty error [ 80.419736][ T4697] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.117: corrupted inode contents [ 80.467479][ T4697] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.117: mark_inode_dirty error [ 80.515232][ T4697] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.117: corrupted inode contents [ 80.556892][ T4697] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 80.581522][ T4697] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.117: corrupted inode contents [ 80.622954][ T4697] EXT4-fs error (device loop1): ext4_truncate:4318: inode #12: comm syz.1.117: mark_inode_dirty error [ 80.649656][ T4697] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 80.689331][ T4697] EXT4-fs (loop1): 1 truncate cleaned up [ 80.709311][ T4697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.753365][ T4697] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 80.877655][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 81.132134][ T4737] capability: warning: `syz.1.132' uses deprecated v2 capabilities in a way that may be insecure [ 81.317819][ T4746] loop1: detected capacity change from 0 to 128 [ 81.371804][ T4746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.386358][ T4746] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.703606][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 81.706467][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 81.726701][ T4761] syz.0.142[4761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.726791][ T4761] syz.0.142[4761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.036149][ T4756] device hsr_slave_1 left promiscuous mode [ 82.058774][ T26] kauditd_printk_skb: 40 callbacks suppressed [ 82.058789][ T26] audit: type=1326 audit(1766149510.469:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 82.151672][ T26] audit: type=1326 audit(1766149510.469:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 82.184369][ T26] audit: type=1326 audit(1766149510.469:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 82.287767][ T26] audit: type=1326 audit(1766149510.469:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.1.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 82.317405][ T4780] loop2: detected capacity change from 0 to 512 [ 82.350356][ T26] audit: type=1326 audit(1766149510.479:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 82.388230][ T4780] EXT4-fs: inline encryption not supported [ 82.431151][ T4780] journal_path: Lookup failure for './file0' [ 82.439860][ T4785] loop4: detected capacity change from 0 to 512 [ 82.467835][ T4780] EXT4-fs: error: could not find journal device path [ 82.470583][ T26] audit: type=1326 audit(1766149510.479:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 82.498398][ T4785] EXT4-fs: inline encryption not supported [ 82.521669][ T26] audit: type=1326 audit(1766149510.479:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 82.564595][ T4785] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.647222][ T4785] EXT4-fs (loop4): 1 truncate cleaned up [ 82.672861][ T4785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.731884][ T26] audit: type=1326 audit(1766149510.499:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 82.763073][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 82.799355][ T26] audit: type=1326 audit(1766149510.499:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 82.869630][ T26] audit: type=1326 audit(1766149510.499:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.2.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9da98f749 code=0x7ffc0000 [ 82.938090][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 83.505973][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 83.535789][ T4816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.165'. [ 83.737835][ T4816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.165'. [ 84.066192][ T4816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.165'. [ 84.274485][ T4846] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 84.308635][ T4846] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.177'. [ 84.310071][ T4852] device bridge0 entered promiscuous mode [ 84.383663][ T4852] bridge0: port 1(macsec1) entered blocking state [ 84.401843][ T4852] bridge0: port 1(macsec1) entered disabled state [ 84.432869][ T4852] device bridge0 left promiscuous mode [ 84.508723][ T4854] loop3: detected capacity change from 0 to 2048 [ 84.515688][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 84.537006][ T4850] device bridge_slave_1 left promiscuous mode [ 84.550599][ T4854] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.578006][ T4850] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.610934][ T4850] device bridge_slave_0 left promiscuous mode [ 84.618406][ T4854] EXT4-fs (loop3): failed to initialize system zone (-117) [ 84.629972][ T4850] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.636050][ T4854] EXT4-fs (loop3): mount failed [ 85.310682][ T4870] loop2: detected capacity change from 0 to 512 [ 85.360002][ T4870] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.452354][ T4870] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.187: iget: bad i_size value: 38620345925642 [ 85.492895][ T4870] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.187: couldn't read orphan inode 15 (err -117) [ 85.609520][ T4870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.674393][ T4877] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.930190][ T4883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'. [ 86.508141][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 86.659639][ T4891] netlink: '+}[@': attribute type 7 has an invalid length. [ 86.692676][ T4891] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 86.872906][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 87.058084][ T4899] syz.3.194 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.358394][ T4359] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.377100][ T4359] Bluetooth: hci5: Frame reassembly failed (-84) [ 87.768925][ T4912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 87.807886][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 87.807909][ T26] audit: type=1326 audit(1766149516.219:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 87.886703][ T26] audit: type=1326 audit(1766149516.219:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 87.938333][ T26] audit: type=1326 audit(1766149516.219:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 87.967264][ T26] audit: type=1326 audit(1766149516.219:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 87.991253][ T26] audit: type=1326 audit(1766149516.219:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 88.015537][ T26] audit: type=1326 audit(1766149516.259:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 88.044264][ T26] audit: type=1326 audit(1766149516.259:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 88.076026][ T26] audit: type=1326 audit(1766149516.259:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 88.109227][ T26] audit: type=1326 audit(1766149516.259:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 88.146726][ T26] audit: type=1326 audit(1766149516.259:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4918 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc28f8f749 code=0x7ffc0000 [ 88.400958][ T4921] team0 (unregistering): Port device team_slave_0 removed [ 88.424533][ T4921] team0 (unregistering): Port device team_slave_1 removed [ 88.871391][ T4945] loop4: detected capacity change from 0 to 512 [ 88.922261][ T4945] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.928048][ T4949] loop1: detected capacity change from 0 to 512 [ 88.931582][ T4945] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.957797][ T4949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.026264][ T4949] EXT4-fs (loop1): 1 truncate cleaned up [ 89.041610][ T4949] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.360833][ T4965] netem: incorrect gi model size [ 89.361364][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 89.366334][ T4965] netem: change failed [ 89.372740][ T47] Bluetooth: hci5: command 0x1003 tx timeout [ 89.383720][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 89.501107][ T4973] loop3: detected capacity change from 0 to 1024 [ 89.529688][ T4973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.667198][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 89.806376][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 90.371066][ T5004] loop2: detected capacity change from 0 to 512 [ 90.391255][ T5004] journal_path: Lookup failure for './file0' [ 90.423967][ T5004] EXT4-fs: error: could not find journal device path [ 90.606215][ T5007] netlink: 'syz.4.229': attribute type 30 has an invalid length. [ 90.620820][ T5007] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.630187][ T5007] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.639362][ T5007] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.648262][ T5007] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.669520][ T5007] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.678682][ T5007] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.687668][ T5007] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.696749][ T5007] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.787054][ T5011] __nla_validate_parse: 3 callbacks suppressed [ 90.787072][ T5011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.231'. [ 91.045566][ T5017] netlink: 92 bytes leftover after parsing attributes in process `syz.4.234'. [ 91.146992][ T5022] loop1: detected capacity change from 0 to 512 [ 91.165193][ T5022] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.182405][ T5022] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.193060][ T4997] syz.0.226 (4997) used greatest stack depth: 18176 bytes left [ 91.224022][ T5022] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.237: Allocating blocks 41-42 which overlap fs metadata [ 91.239131][ T5029] tmpfs: Too few inodes for current use [ 91.260653][ T5022] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.237: Failed to acquire dquot type 1 [ 91.318917][ T5022] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 91.398504][ T5022] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.237: corrupted inode contents [ 91.458948][ T5022] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #12: comm syz.1.237: mark_inode_dirty error [ 91.486246][ T5044] syz.3.245[5044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.486353][ T5044] syz.3.245[5044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.506798][ T5022] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.237: corrupted inode contents [ 91.589184][ T5022] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.237: mark_inode_dirty error [ 91.594257][ T5045] loop4: detected capacity change from 0 to 512 [ 91.613421][ T5022] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.237: corrupted inode contents [ 91.643662][ T5022] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 91.664207][ T5022] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #12: comm syz.1.237: corrupted inode contents [ 91.711023][ T5022] EXT4-fs error (device loop1): ext4_truncate:4318: inode #12: comm syz.1.237: mark_inode_dirty error [ 91.761026][ T5045] [ 91.763417][ T5045] ====================================================== [ 91.770455][ T5045] WARNING: possible circular locking dependency detected [ 91.777496][ T5045] syzkaller #0 Not tainted [ 91.782190][ T5045] ------------------------------------------------------ [ 91.789299][ T5045] syz.4.244/5045 is trying to acquire lock: [ 91.795228][ T5045] ffff888073ec6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1c0/0x2e50 [ 91.805442][ T5045] [ 91.805442][ T5045] but task is already holding lock: [ 91.813244][ T5045] ffff888071b95108 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 91.823095][ T5045] [ 91.823095][ T5045] which lock already depends on the new lock. [ 91.823095][ T5045] [ 91.833957][ T5045] [ 91.833957][ T5045] the existing dependency chain (in reverse order) is: [ 91.843248][ T5045] [ 91.843248][ T5045] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 91.851000][ T5045] down_write+0x36/0x60 [ 91.855981][ T5045] ext4_destroy_inline_data+0x24/0xe0 [ 91.862139][ T5045] ext4_writepages+0x5df/0x2e50 [ 91.867590][ T5045] do_writepages+0x3b7/0x610 [ 91.872704][ T5045] filemap_fdatawrite_wbc+0x11e/0x180 [ 91.878592][ T5045] file_write_and_wait_range+0x137/0x200 [ 91.884846][ T5045] ext4_sync_file+0x23b/0xca0 [ 91.891341][ T5045] ext4_buffered_write_iter+0x2f6/0x390 [ 91.897491][ T5045] ext4_file_write_iter+0x1d6/0x16e0 [ 91.903922][ T5045] vfs_write+0x44c/0x960 [ 91.908748][ T5045] __x64_sys_pwrite64+0x191/0x220 [ 91.914400][ T5045] do_syscall_64+0x4c/0xa0 [ 91.919887][ T5045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.926508][ T5045] [ 91.926508][ T5045] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 91.935548][ T5045] __lock_acquire+0x2cf8/0x7c50 [ 91.940925][ T5045] lock_acquire+0x1b4/0x490 [ 91.945945][ T5045] percpu_down_read+0x44/0x1a0 [ 91.951742][ T5045] ext4_writepages+0x1c0/0x2e50 [ 91.957278][ T5045] do_writepages+0x3b7/0x610 [ 91.962382][ T5045] __writeback_single_inode+0x156/0x1160 [ 91.968531][ T5045] writeback_single_inode+0x221/0x8b0 [ 91.974420][ T5045] write_inode_now+0x15d/0x1d0 [ 91.979707][ T5045] iput+0x613/0x980 [ 91.984030][ T5045] ext4_xattr_block_set+0x2736/0x32a0 [ 91.990138][ T5045] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 91.996555][ T5045] __ext4_expand_extra_isize+0x301/0x3e0 [ 92.002703][ T5045] __ext4_mark_inode_dirty+0x47f/0x770 [ 92.008821][ T5045] ext4_evict_inode+0xa73/0x1100 [ 92.014399][ T5045] evict+0x485/0x870 [ 92.018809][ T5045] ext4_orphan_cleanup+0xbd3/0x1400 [ 92.024617][ T5045] ext4_fill_super+0x7bdf/0x8150 [ 92.030079][ T5045] get_tree_bdev+0x3f1/0x610 [ 92.035183][ T5045] vfs_get_tree+0x88/0x270 [ 92.040283][ T5045] do_new_mount+0x24a/0xa40 [ 92.045396][ T5045] __se_sys_mount+0x2d6/0x3c0 [ 92.050688][ T5045] do_syscall_64+0x4c/0xa0 [ 92.056144][ T5045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.062676][ T5045] [ 92.062676][ T5045] other info that might help us debug this: [ 92.062676][ T5045] [ 92.073712][ T5045] Possible unsafe locking scenario: [ 92.073712][ T5045] [ 92.081425][ T5045] CPU0 CPU1 [ 92.087852][ T5045] ---- ---- [ 92.093334][ T5045] lock(&ei->xattr_sem); [ 92.097697][ T5045] lock(&sbi->s_writepages_rwsem); [ 92.105780][ T5045] lock(&ei->xattr_sem); [ 92.112721][ T5045] lock(&sbi->s_writepages_rwsem); [ 92.118021][ T5045] [ 92.118021][ T5045] *** DEADLOCK *** [ 92.118021][ T5045] [ 92.126194][ T5045] 3 locks held by syz.4.244/5045: [ 92.131243][ T5045] #0: ffff888073ec40e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 92.141441][ T5045] #1: ffff888073ec4650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x436/0x1100 [ 92.151370][ T5045] #2: ffff888071b95108 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 92.161724][ T5045] [ 92.161724][ T5045] stack backtrace: [ 92.167614][ T5045] CPU: 0 PID: 5045 Comm: syz.4.244 Not tainted syzkaller #0 [ 92.174898][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.184952][ T5045] Call Trace: [ 92.188236][ T5045] [ 92.191168][ T5045] dump_stack_lvl+0x168/0x22e [ 92.195858][ T5045] ? load_image+0x3b0/0x3b0 [ 92.201097][ T5045] ? show_regs_print_info+0x12/0x12 [ 92.206403][ T5045] ? print_circular_bug+0x12b/0x1a0 [ 92.211632][ T5045] check_noncircular+0x274/0x310 [ 92.216590][ T5045] ? add_chain_block+0x940/0x940 [ 92.221531][ T5045] ? lockdep_lock+0xdc/0x1e0 [ 92.226117][ T5045] ? lockdep_unlock+0x133/0x2d0 [ 92.230977][ T5045] ? _find_first_zero_bit+0xcf/0x100 [ 92.236349][ T5045] __lock_acquire+0x2cf8/0x7c50 [ 92.241213][ T5045] ? verify_lock_unused+0x140/0x140 [ 92.246589][ T5045] ? mark_lock+0x94/0x320 [ 92.250948][ T5045] ? __lock_acquire+0x13c0/0x7c50 [ 92.256098][ T5045] lock_acquire+0x1b4/0x490 [ 92.260624][ T5045] ? ext4_writepages+0x1c0/0x2e50 [ 92.265665][ T5045] ? __might_sleep+0xd0/0xd0 [ 92.270368][ T5045] ? read_lock_is_recursive+0x10/0x10 [ 92.275825][ T5045] ? __lock_acquire+0x12e5/0x7c50 [ 92.281545][ T5045] ? mark_lock+0x94/0x320 [ 92.285907][ T5045] percpu_down_read+0x44/0x1a0 [ 92.290685][ T5045] ? ext4_writepages+0x1c0/0x2e50 [ 92.295791][ T5045] ext4_writepages+0x1c0/0x2e50 [ 92.300895][ T5045] ? __lock_acquire+0x13c0/0x7c50 [ 92.306019][ T5045] ? verify_lock_unused+0x140/0x140 [ 92.311214][ T5045] ? mark_lock+0x94/0x320 [ 92.315541][ T5045] ? ext4_read_folio+0x370/0x370 [ 92.320467][ T5045] ? __lock_acquire+0x13c0/0x7c50 [ 92.325491][ T5045] ? __lock_acquire+0x7c50/0x7c50 [ 92.330509][ T5045] ? do_raw_spin_lock+0x11d/0x280 [ 92.335543][ T5045] ? do_raw_spin_unlock+0x11d/0x230 [ 92.341174][ T5045] ? ext4_read_folio+0x370/0x370 [ 92.346152][ T5045] do_writepages+0x3b7/0x610 [ 92.350744][ T5045] ? __writepage+0x130/0x130 [ 92.355336][ T5045] ? writeback_single_inode+0x216/0x8b0 [ 92.360890][ T5045] ? __lock_acquire+0x7c50/0x7c50 [ 92.365943][ T5045] ? do_raw_spin_lock+0x11d/0x280 [ 92.370979][ T5045] ? __ext4_expand_extra_isize+0x301/0x3e0 [ 92.377045][ T5045] __writeback_single_inode+0x156/0x1160 [ 92.382683][ T5045] writeback_single_inode+0x221/0x8b0 [ 92.388183][ T5045] ? write_inode_now+0x1d0/0x1d0 [ 92.393144][ T5045] write_inode_now+0x15d/0x1d0 [ 92.398164][ T5045] ? bdi_split_work_to_wbs+0x890/0x890 [ 92.403622][ T5045] ? rcu_is_watching+0x11/0xa0 [ 92.408472][ T5045] ? do_raw_spin_unlock+0x11d/0x230 [ 92.413693][ T5045] iput+0x613/0x980 [ 92.417539][ T5045] ext4_xattr_block_set+0x2736/0x32a0 [ 92.422936][ T5045] ? __might_sleep+0xd0/0xd0 [ 92.427563][ T5045] ? xattr_find_entry+0x12b/0x2f0 [ 92.432585][ T5045] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 92.438039][ T5045] ? ext4_xattr_block_find+0x241/0x2b0 [ 92.443679][ T5045] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 92.449665][ T5045] __ext4_expand_extra_isize+0x301/0x3e0 [ 92.455403][ T5045] __ext4_mark_inode_dirty+0x47f/0x770 [ 92.460865][ T5045] ext4_evict_inode+0xa73/0x1100 [ 92.465797][ T5045] ? _raw_spin_unlock+0x24/0x40 [ 92.470642][ T5045] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 92.476534][ T5045] ? do_raw_spin_unlock+0x11d/0x230 [ 92.481736][ T5045] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 92.487626][ T5045] evict+0x485/0x870 [ 92.491518][ T5045] ? __lock_acquire+0x7c50/0x7c50 [ 92.496543][ T5045] ? proc_nr_inodes+0x2f0/0x2f0 [ 92.501387][ T5045] ? do_raw_spin_unlock+0x11d/0x230 [ 92.506600][ T5045] ? _raw_spin_unlock+0x24/0x40 [ 92.511563][ T5045] ? iput+0x768/0x980 [ 92.515553][ T5045] ext4_orphan_cleanup+0xbd3/0x1400 [ 92.521979][ T5045] ? ext4_orphan_del+0xb90/0xb90 [ 92.527030][ T5045] ? errseq_check_and_advance+0x62/0x120 [ 92.532681][ T5045] ext4_fill_super+0x7bdf/0x8150 [ 92.537756][ T5045] ? bdev_name+0x2c1/0x3f0 [ 92.542192][ T5045] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 92.548521][ T5045] ? snprintf+0xd7/0x120 [ 92.552757][ T5045] ? preempt_count_add+0x8d/0x190 [ 92.557864][ T5045] ? vscnprintf+0x80/0x80 [ 92.562540][ T5045] ? set_blocksize+0x1d0/0x470 [ 92.567365][ T5045] ? sb_set_blocksize+0xa5/0xe0 [ 92.572233][ T5045] get_tree_bdev+0x3f1/0x610 [ 92.576905][ T5045] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 92.583404][ T5045] vfs_get_tree+0x88/0x270 [ 92.588113][ T5045] do_new_mount+0x24a/0xa40 [ 92.592631][ T5045] __se_sys_mount+0x2d6/0x3c0 [ 92.597365][ T5045] ? __x64_sys_mount+0xc0/0xc0 [ 92.602414][ T5045] ? lockdep_hardirqs_on+0x94/0x140 [ 92.607722][ T5045] ? __x64_sys_mount+0x1c/0xc0 [ 92.612767][ T5045] do_syscall_64+0x4c/0xa0 [ 92.617373][ T5045] ? clear_bhb_loop+0x60/0xb0 [ 92.622160][ T5045] ? clear_bhb_loop+0x60/0xb0 [ 92.626842][ T5045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.632730][ T5045] RIP: 0033:0x7f1a6d390eea [ 92.637156][ T5045] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.656951][ T5045] RSP: 002b:00007f1a6b5f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.667478][ T5045] RAX: ffffffffffffffda RBX: 00007f1a6b5f5ef0 RCX: 00007f1a6d390eea [ 92.675818][ T5045] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1a6b5f5eb0 [ 92.683879][ T5045] RBP: 0000200000000180 R08: 00007f1a6b5f5ef0 R09: 0000000000800700 [ 92.691847][ T5045] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 92.700266][ T5045] R13: 00007f1a6b5f5eb0 R14: 000000000000046f R15: 000000000000002c [ 92.708335][ T5045] [ 92.721696][ T5045] ------------[ cut here ]------------ [ 92.727458][ T5045] EA inode 11 i_nlink=2 [ 92.729435][ T5022] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 92.749449][ T5045] WARNING: CPU: 0 PID: 5045 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 92.759632][ T5045] Modules linked in: [ 92.763569][ T5045] CPU: 0 PID: 5045 Comm: syz.4.244 Not tainted syzkaller #0 [ 92.771481][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.783603][ T5045] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 92.790237][ T5045] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 f0 9c ff 49 8b 37 48 c7 c7 80 91 80 8a 89 da e8 c2 da 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 92.810655][ T5045] RSP: 0018:ffffc90004fb7200 EFLAGS: 00010246 [ 92.812056][ T5022] EXT4-fs (loop1): 1 truncate cleaned up [ 92.816770][ T5045] RAX: aab706c7fb326400 RBX: 0000000000000002 RCX: 0000000000080000 [ 92.816788][ T5045] RDX: ffffc9000fe6d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 92.816799][ T5045] RBP: ffffc90004fb72e8 R08: dffffc0000000000 R09: fffff520009f6dd1 [ 92.816811][ T5045] R10: fffff520009f6dd1 R11: 1ffff920009f6dd0 R12: ffffc90004fb7260 [ 92.816823][ T5045] R13: ffff888071b95cf8 R14: dffffc0000000000 R15: ffff888071b95d38 [ 92.816837][ T5045] FS: 00007f1a6b5f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 92.816854][ T5045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.816867][ T5045] CR2: 000055555d7b0808 CR3: 0000000054cd2000 CR4: 00000000003506f0 [ 92.816882][ T5045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.816892][ T5045] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.816902][ T5045] Call Trace: [ 92.816908][ T5045] [ 92.816917][ T5045] ? ext4_xattr_block_csum+0x500/0x500 [ 92.849268][ T5022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.856573][ T5045] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 92.856611][ T5045] ext4_xattr_set_entry+0xb33/0x1e90 [ 92.856641][ T5045] ext4_xattr_ibody_set+0x250/0x690 [ 92.856666][ T5045] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 92.856697][ T5045] __ext4_expand_extra_isize+0x301/0x3e0 [ 92.959608][ T5045] __ext4_mark_inode_dirty+0x47f/0x770 [ 92.965490][ T5045] ext4_evict_inode+0xa73/0x1100 [ 92.970819][ T5045] ? _raw_spin_unlock+0x24/0x40 [ 92.975898][ T5045] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 92.981991][ T5045] ? do_raw_spin_unlock+0x11d/0x230 [ 92.987240][ T5045] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 92.993299][ T5045] evict+0x485/0x870 [ 92.997221][ T5045] ? __lock_acquire+0x7c50/0x7c50 [ 93.002451][ T5045] ? proc_nr_inodes+0x2f0/0x2f0 [ 93.007351][ T5045] ? do_raw_spin_unlock+0x11d/0x230 [ 93.012671][ T5045] ? _raw_spin_unlock+0x24/0x40 [ 93.017624][ T5045] ? iput+0x768/0x980 [ 93.021602][ T5045] ext4_orphan_cleanup+0xbd3/0x1400 [ 93.027839][ T5045] ? ext4_orphan_del+0xb90/0xb90 [ 93.033289][ T5045] ? errseq_check_and_advance+0x62/0x120 [ 93.039121][ T5045] ext4_fill_super+0x7bdf/0x8150 [ 93.044330][ T5045] ? bdev_name+0x2c1/0x3f0 [ 93.048940][ T5045] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 93.055363][ T5045] ? snprintf+0xd7/0x120 [ 93.060155][ T5045] ? preempt_count_add+0x8d/0x190 [ 93.065229][ T5045] ? vscnprintf+0x80/0x80 [ 93.070907][ T5045] ? set_blocksize+0x1d0/0x470 [ 93.075801][ T5045] ? sb_set_blocksize+0xa5/0xe0 [ 93.080670][ T5045] get_tree_bdev+0x3f1/0x610 [ 93.085326][ T5045] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 93.091583][ T5045] vfs_get_tree+0x88/0x270 [ 93.097462][ T5045] do_new_mount+0x24a/0xa40 [ 93.102180][ T5045] __se_sys_mount+0x2d6/0x3c0 [ 93.107003][ T5045] ? __x64_sys_mount+0xc0/0xc0 [ 93.111880][ T5045] ? lockdep_hardirqs_on+0x94/0x140 [ 93.117751][ T5045] ? __x64_sys_mount+0x1c/0xc0 [ 93.123341][ T5045] do_syscall_64+0x4c/0xa0 [ 93.127975][ T5045] ? clear_bhb_loop+0x60/0xb0 [ 93.132978][ T5045] ? clear_bhb_loop+0x60/0xb0 [ 93.138017][ T5045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.144771][ T5045] RIP: 0033:0x7f1a6d390eea [ 93.153515][ T5045] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.173978][ T5045] RSP: 002b:00007f1a6b5f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.182633][ T5045] RAX: ffffffffffffffda RBX: 00007f1a6b5f5ef0 RCX: 00007f1a6d390eea [ 93.191334][ T5045] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1a6b5f5eb0 [ 93.199385][ T5045] RBP: 0000200000000180 R08: 00007f1a6b5f5ef0 R09: 0000000000800700 [ 93.207545][ T5045] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 93.215775][ T5045] R13: 00007f1a6b5f5eb0 R14: 000000000000046f R15: 000000000000002c [ 93.224259][ T5045] [ 93.227542][ T5045] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.235031][ T5045] CPU: 0 PID: 5045 Comm: syz.4.244 Not tainted syzkaller #0 [ 93.243035][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.253404][ T5045] Call Trace: [ 93.256862][ T5045] [ 93.261032][ T5045] dump_stack_lvl+0x168/0x22e [ 93.265996][ T5045] ? memcpy+0x3c/0x60 [ 93.270087][ T5045] ? show_regs_print_info+0x12/0x12 [ 93.275316][ T5045] ? load_image+0x3b0/0x3b0 [ 93.280125][ T5045] panic+0x2c9/0x710 [ 93.284914][ T5045] ? bpf_jit_dump+0xd0/0xd0 [ 93.289423][ T5045] __warn+0x2f8/0x4f0 [ 93.293465][ T5045] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 93.299668][ T5045] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 93.306462][ T5045] report_bug+0x2ba/0x4f0 [ 93.311256][ T5045] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 93.317603][ T5045] handle_bug+0x3a/0x70 [ 93.321912][ T5045] exc_invalid_op+0x16/0x40 [ 93.326546][ T5045] asm_exc_invalid_op+0x16/0x20 [ 93.331510][ T5045] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 93.338625][ T5045] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 a3 f0 9c ff 49 8b 37 48 c7 c7 80 91 80 8a 89 da e8 c2 da 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 93.358434][ T5045] RSP: 0018:ffffc90004fb7200 EFLAGS: 00010246 [ 93.364850][ T5045] RAX: aab706c7fb326400 RBX: 0000000000000002 RCX: 0000000000080000 [ 93.374174][ T5045] RDX: ffffc9000fe6d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 93.383469][ T5045] RBP: ffffc90004fb72e8 R08: dffffc0000000000 R09: fffff520009f6dd1 [ 93.392102][ T5045] R10: fffff520009f6dd1 R11: 1ffff920009f6dd0 R12: ffffc90004fb7260 [ 93.400532][ T5045] R13: ffff888071b95cf8 R14: dffffc0000000000 R15: ffff888071b95d38 [ 93.408524][ T5045] ? ext4_xattr_block_csum+0x500/0x500 [ 93.414078][ T5045] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 93.419882][ T5045] ext4_xattr_set_entry+0xb33/0x1e90 [ 93.425348][ T5045] ext4_xattr_ibody_set+0x250/0x690 [ 93.431063][ T5045] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 93.437175][ T5045] __ext4_expand_extra_isize+0x301/0x3e0 [ 93.443361][ T5045] __ext4_mark_inode_dirty+0x47f/0x770 [ 93.448975][ T5045] ext4_evict_inode+0xa73/0x1100 [ 93.453934][ T5045] ? _raw_spin_unlock+0x24/0x40 [ 93.458788][ T5045] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 93.464811][ T5045] ? do_raw_spin_unlock+0x11d/0x230 [ 93.470022][ T5045] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 93.476099][ T5045] evict+0x485/0x870 [ 93.480793][ T5045] ? __lock_acquire+0x7c50/0x7c50 [ 93.486179][ T5045] ? proc_nr_inodes+0x2f0/0x2f0 [ 93.491462][ T5045] ? do_raw_spin_unlock+0x11d/0x230 [ 93.496843][ T5045] ? _raw_spin_unlock+0x24/0x40 [ 93.501691][ T5045] ? iput+0x768/0x980 [ 93.505681][ T5045] ext4_orphan_cleanup+0xbd3/0x1400 [ 93.510986][ T5045] ? ext4_orphan_del+0xb90/0xb90 [ 93.515925][ T5045] ? errseq_check_and_advance+0x62/0x120 [ 93.521559][ T5045] ext4_fill_super+0x7bdf/0x8150 [ 93.526780][ T5045] ? bdev_name+0x2c1/0x3f0 [ 93.531535][ T5045] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 93.537784][ T5045] ? snprintf+0xd7/0x120 [ 93.543245][ T5045] ? preempt_count_add+0x8d/0x190 [ 93.548411][ T5045] ? vscnprintf+0x80/0x80 [ 93.553023][ T5045] ? set_blocksize+0x1d0/0x470 [ 93.557899][ T5045] ? sb_set_blocksize+0xa5/0xe0 [ 93.562864][ T5045] get_tree_bdev+0x3f1/0x610 [ 93.567641][ T5045] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 93.573979][ T5045] vfs_get_tree+0x88/0x270 [ 93.578926][ T5045] do_new_mount+0x24a/0xa40 [ 93.583432][ T5045] __se_sys_mount+0x2d6/0x3c0 [ 93.588131][ T5045] ? __x64_sys_mount+0xc0/0xc0 [ 93.592921][ T5045] ? lockdep_hardirqs_on+0x94/0x140 [ 93.598823][ T5045] ? __x64_sys_mount+0x1c/0xc0 [ 93.603596][ T5045] do_syscall_64+0x4c/0xa0 [ 93.609179][ T5045] ? clear_bhb_loop+0x60/0xb0 [ 93.613979][ T5045] ? clear_bhb_loop+0x60/0xb0 [ 93.618674][ T5045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.624738][ T5045] RIP: 0033:0x7f1a6d390eea [ 93.629427][ T5045] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.649469][ T5045] RSP: 002b:00007f1a6b5f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.659524][ T5045] RAX: ffffffffffffffda RBX: 00007f1a6b5f5ef0 RCX: 00007f1a6d390eea [ 93.668020][ T5045] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f1a6b5f5eb0 [ 93.677029][ T5045] RBP: 0000200000000180 R08: 00007f1a6b5f5ef0 R09: 0000000000800700 [ 93.688243][ T5045] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 93.696593][ T5045] R13: 00007f1a6b5f5eb0 R14: 000000000000046f R15: 000000000000002c [ 93.704599][ T5045] [ 93.707739][ T5045] Kernel Offset: disabled [ 93.712050][ T5045] Rebooting in 86400 seconds..