last executing test programs: 1.207481616s ago: executing program 4 (id=250): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000108"], 0x48) 1.185197618s ago: executing program 1 (id=251): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="dfc58edecec483d4be98b93dc8aa19cca582c2f0b43b57014460befff84d8852888b065ef7e7758f3a387c37690670255632332372772319fe1e663e257a498b7dc7f688374fa0cbc24f57ebe94a95cadafd905fff8e2db5aa34f775a19f30612e3b95ad1b3c1085b3e9feb6ab2c30560f0d29f2d155bf8997e2f2088f5e5d9726c244458f193de40bc706eb2fc99156f936025045328be33e3b66713f2de38137e865cca57317", 0xa7}], 0x1) 1.100705975s ago: executing program 1 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 1.100554775s ago: executing program 4 (id=254): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd, 0x823, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x12}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c060000) unshare(0x2c020400) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, 0x0) 1.007742842s ago: executing program 1 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.007494852s ago: executing program 4 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_flash={0x33, 0x200ea6, './file1\x00'}}) 963.443295ms ago: executing program 1 (id=262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) pread64(r2, &(0x7f0000000180)=""/73, 0x49, 0xac8c) 482.037243ms ago: executing program 0 (id=270): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 411.764818ms ago: executing program 0 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_SET_STATUS64(r1, 0xc0c0128e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x2ac, 0x0, 0x0, 0x15, 0x19, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa393edb69e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee41b80000827cc7d24fdc26f2395d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0xc, 0xfffffffffffffffd]}) 411.593418ms ago: executing program 2 (id=274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711823000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000109500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r0, 0x24, &(0x7f0000000740)={0x2, 0x1, 0x5, 0xfffffffffffffff6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2, 0x0, 0x3}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f000000000000fdffff7fffffffff0000ffffffff00000000000000000d0001006564703a73"], 0x54}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c76657273696f6e3d3970323030302c02"]) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX], 0x15) 329.817374ms ago: executing program 3 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 278.268088ms ago: executing program 2 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) copy_file_range(r2, 0x0, r2, &(0x7f0000000080)=0x87d, 0x401, 0x0) 277.307048ms ago: executing program 3 (id=279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000000701030000000000000000000000080900010073797a30"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 211.929284ms ago: executing program 2 (id=280): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0x100000, 0x25dfdbfb, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa, 0x0, 0x0, 0x1}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x8, 0x43}, {0x3, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0x0, 0xafcd}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 211.789094ms ago: executing program 3 (id=281): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002180000"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 206.664974ms ago: executing program 2 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000002"], 0x78) 205.723774ms ago: executing program 3 (id=283): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) 189.268935ms ago: executing program 0 (id=284): r0 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 115.712611ms ago: executing program 0 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000300), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) setreuid(0x0, 0xee01) 115.473031ms ago: executing program 4 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) 115.373641ms ago: executing program 0 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 115.287671ms ago: executing program 4 (id=288): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x29, 0x0, 0x0) 114.535981ms ago: executing program 3 (id=289): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000000000800000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0xe, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 101.706752ms ago: executing program 1 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 100.657832ms ago: executing program 2 (id=291): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x3) syz_open_dev$evdev(0x0, 0x1, 0x0) 51.390046ms ago: executing program 3 (id=292): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, 0x0) 50.312046ms ago: executing program 0 (id=293): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000b40)={0xbb5, 0x8000000000000000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$binfmt_script(r2, &(0x7f0000000b00)={'#! ', '', [{0x20, ' \x15'}, {}], 0xa, "78e9"}, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, 0x0, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = openat(r1, &(0x7f0000000200)='./file1\x00', 0x88842, 0x10) fcntl$setlease(r5, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 50.144656ms ago: executing program 4 (id=294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x10000001}) 47.699156ms ago: executing program 1 (id=295): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x20000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 0s ago: executing program 2 (id=296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) sendto$inet6(r1, &(0x7f0000000000)="8f6b", 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts. [ 29.778591][ T4308] cgroup: Unknown subsys name 'net' [ 29.995898][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.262248][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.026076][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.032525][ T4326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.034168][ T4326] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.035582][ T4326] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.037164][ T4328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.038654][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.042694][ T4328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.044049][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.045636][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.046755][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.048170][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.049053][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.049333][ T4328] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.051296][ T4334] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.052052][ T4334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.054014][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.055006][ T4328] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.056631][ T4328] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.058410][ T4334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.061746][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.063850][ T4334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.065872][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.067167][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.067480][ T4334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.071632][ T4326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.071755][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.074795][ T4334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.079500][ T4334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.082053][ T4334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.083535][ T4323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.201252][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.206940][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 31.221897][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 31.248898][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.250145][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.251823][ T4320] device bridge_slave_0 entered promiscuous mode [ 31.253930][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 31.255832][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.257018][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.258529][ T4320] device bridge_slave_1 entered promiscuous mode [ 31.277542][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.279118][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.280271][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.281717][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.283261][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.284445][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.285986][ T4319] device bridge_slave_0 entered promiscuous mode [ 31.292656][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.296641][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.297807][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.299193][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.300915][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.301886][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.303577][ T4319] device bridge_slave_1 entered promiscuous mode [ 31.325826][ T4320] team0: Port device team_slave_0 added [ 31.328116][ T4320] team0: Port device team_slave_1 added [ 31.332246][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.345598][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.347450][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.348467][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.352077][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.355019][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.360169][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.368305][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.369449][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.373357][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.375231][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.376258][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.377767][ T4324] device bridge_slave_0 entered promiscuous mode [ 31.379674][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.380777][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.382292][ T4324] device bridge_slave_1 entered promiscuous mode [ 31.388220][ T4329] team0: Port device team_slave_0 added [ 31.396618][ T4329] team0: Port device team_slave_1 added [ 31.400065][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 31.409037][ T4319] team0: Port device team_slave_0 added [ 31.411202][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.418813][ T4319] team0: Port device team_slave_1 added [ 31.420485][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.421622][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.425769][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.428388][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.464332][ T4320] device hsr_slave_0 entered promiscuous mode [ 31.503367][ T4320] device hsr_slave_1 entered promiscuous mode [ 31.556024][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.557072][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.560764][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.575856][ T4324] team0: Port device team_slave_0 added [ 31.577090][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.578199][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.582263][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.588946][ T4324] team0: Port device team_slave_1 added [ 31.590234][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.591263][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.595383][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.627437][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.628618][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.632208][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.654407][ T4319] device hsr_slave_0 entered promiscuous mode [ 31.703427][ T4319] device hsr_slave_1 entered promiscuous mode [ 31.783177][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.784424][ T4319] Cannot create hsr debugfs directory [ 31.836381][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.883373][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.923199][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.924417][ T4329] Cannot create hsr debugfs directory [ 31.925408][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.926606][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.928062][ T4331] device bridge_slave_0 entered promiscuous mode [ 31.931154][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.932289][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.934117][ T4331] device bridge_slave_1 entered promiscuous mode [ 31.936143][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.937183][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.941134][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.951113][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.960998][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.004094][ T4324] device hsr_slave_0 entered promiscuous mode [ 32.053415][ T4324] device hsr_slave_1 entered promiscuous mode [ 32.093205][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.094403][ T4324] Cannot create hsr debugfs directory [ 32.108127][ T4331] team0: Port device team_slave_0 added [ 32.116572][ T4331] team0: Port device team_slave_1 added [ 32.132504][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.133853][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.137713][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.146200][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.147171][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.150896][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.194999][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.229775][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.314150][ T4331] device hsr_slave_0 entered promiscuous mode [ 32.363403][ T4331] device hsr_slave_1 entered promiscuous mode [ 32.403178][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.404344][ T4331] Cannot create hsr debugfs directory [ 32.405284][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.436735][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.498573][ T4329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.547903][ T4329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.594380][ T4329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.645454][ T4329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.711972][ T4319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.745146][ T4319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.784263][ T4319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.835949][ T4319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.896537][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.900422][ T4324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.918359][ T4324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.954425][ T4324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.994256][ T4324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.041938][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.047219][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.049079][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.056314][ T4331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.085259][ T4331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.114232][ T4323] Bluetooth: hci4: command 0x0409 tx timeout [ 33.114241][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 33.114312][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 33.115343][ T4323] Bluetooth: hci3: command 0x0409 tx timeout [ 33.116406][ T4330] Bluetooth: hci0: command 0x0409 tx timeout [ 33.124733][ T4331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.177899][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.179863][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.181486][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.182571][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.184562][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.186159][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.187596][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.188762][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.190100][ T4331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.231810][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.235993][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.248029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.256970][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.265992][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.267755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.269375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.271152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.279561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.280889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.282299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.284736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.286135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.287500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.289530][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.299670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.301209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.302880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.304910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.306358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.307872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.309326][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.310399][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.311711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.316463][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.320307][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.321995][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.323834][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.325313][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.326476][ T511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.332543][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.334530][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.335889][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.337318][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.338368][ T511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.339647][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.341811][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.343537][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.345008][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.346154][ T511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.347501][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.354841][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.357395][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.359010][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.365130][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.366548][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.368039][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.380412][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.389742][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.391745][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.393345][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.394770][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.406832][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.408475][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.409998][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.411477][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.413001][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.416803][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.418290][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.419834][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.421306][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.428153][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.429678][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.430994][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.432476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.437289][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.440153][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.442716][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.444574][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.446038][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.447358][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.448510][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.449722][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.451633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.452996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.459866][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.461032][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.462216][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.464456][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.465795][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.466882][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.472811][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.478366][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.481100][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.490641][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.493207][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.494737][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.496121][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.497297][ T511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.498967][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.516659][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.518398][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.519948][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.521500][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.522975][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.527733][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.529497][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.530632][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.532184][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.537855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.539244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.541932][ T4324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.544621][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.548075][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.549864][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.559314][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.561107][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.562680][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.565272][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.566773][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.568341][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.569848][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.572342][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.574027][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.580815][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.582205][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.584616][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.586093][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.591009][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.593830][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.595032][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.602982][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.604876][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.606502][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.607912][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.611027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.612419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.619720][ T4320] device veth0_vlan entered promiscuous mode [ 33.622463][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.626295][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.627875][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.631398][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.641025][ T4320] device veth1_vlan entered promiscuous mode [ 33.660739][ T4329] device veth0_vlan entered promiscuous mode [ 33.663359][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.664836][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.666483][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.668007][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.669763][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.671253][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.672722][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.678534][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.680295][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.681694][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.683062][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.686114][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.694690][ T4329] device veth1_vlan entered promiscuous mode [ 33.696245][ T4319] device veth0_vlan entered promiscuous mode [ 33.697996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.699295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.700374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.702743][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.718911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.720383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.721726][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.729231][ T4320] device veth0_macvtap entered promiscuous mode [ 33.731137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.732948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.735678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.738901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.740084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.743076][ T4319] device veth1_vlan entered promiscuous mode [ 33.749722][ T4320] device veth1_macvtap entered promiscuous mode [ 33.755020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.756518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.757890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.759212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.760713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.762118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.764532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.765843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.769790][ T4329] device veth0_macvtap entered promiscuous mode [ 33.771947][ T4329] device veth1_macvtap entered promiscuous mode [ 33.780201][ T4324] device veth0_vlan entered promiscuous mode [ 33.783830][ T4324] device veth1_vlan entered promiscuous mode [ 33.788519][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.796808][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.800056][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.801566][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.802967][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.807846][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.809162][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.812277][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.814426][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.815883][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.817387][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.820042][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.822228][ T4329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.824106][ T4329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.825448][ T4329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.826765][ T4329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.829587][ T4319] device veth0_macvtap entered promiscuous mode [ 33.832322][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.836507][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.837962][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.841509][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.844248][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.846113][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.850387][ T4324] device veth0_macvtap entered promiscuous mode [ 33.852585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.854032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.855542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.856928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.858376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.861441][ T4319] device veth1_macvtap entered promiscuous mode [ 33.863644][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.865327][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.867339][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.869656][ T4324] device veth1_macvtap entered promiscuous mode [ 33.876359][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.877797][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.879291][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.880742][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.891523][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.892958][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.895979][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.897322][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.904068][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.905607][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.907119][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.908621][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.911133][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.918635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.920254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.927448][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.929102][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.930616][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.932182][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.936887][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.944882][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.946471][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.951514][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.953874][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.955392][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.956936][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.958490][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.960056][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.962128][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.964946][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.966533][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.967968][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.969492][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.979551][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.980993][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.982313][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.984395][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.990119][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.991320][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.993054][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.000808][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.002437][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.004661][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.006252][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.007826][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.009477][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.011499][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.018646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.020322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.027905][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.029191][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.031709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.034225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.035755][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.038276][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.039692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.044251][ T216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.045056][ T4319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.045456][ T216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.046768][ T4319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.049117][ T4319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.050325][ T4319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.056436][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.058852][ T4331] device veth0_vlan entered promiscuous mode [ 34.072417][ T4331] device veth1_vlan entered promiscuous mode [ 34.078982][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.080268][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.081514][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.083092][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.109520][ T4420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.110759][ T4420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.112346][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.114874][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.169744][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.171418][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.184173][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.185581][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.191535][ T216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.206354][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.207652][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.209642][ T4331] device veth0_macvtap entered promiscuous mode [ 34.217127][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.245609][ T4331] device veth1_macvtap entered promiscuous mode [ 34.249602][ T27] audit: type=1326 audit(34.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacb5b9e8 code=0x7ffc0000 [ 34.252722][ T27] audit: type=1326 audit(34.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffffacb5b9e8 code=0x7ffc0000 [ 34.261833][ T27] audit: type=1326 audit(34.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4440 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffacb5b9e8 code=0x7ffc0000 [ 34.345350][ T4443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.352692][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.354724][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.356660][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.358525][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.360279][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.360556][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.361912][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.364930][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.366712][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.368606][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.371013][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.373596][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.375478][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.377226][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.387055][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.388785][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.390609][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.392295][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.395530][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.398392][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.401287][ T4331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.402901][ T4331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.404631][ T4331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.406143][ T4331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.416292][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.417770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.419334][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.420711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.421176][ T4449] loop0: detected capacity change from 0 to 1024 [ 34.422120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.427505][ T4449] ======================================================= [ 34.427505][ T4449] WARNING: The mand mount option has been deprecated and [ 34.427505][ T4449] and is ignored by this kernel. Remove the mand [ 34.427505][ T4449] option from the mount to silence this warning. [ 34.427505][ T4449] ======================================================= [ 34.461616][ T4449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 34.470812][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.472045][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.488683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.495725][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.497008][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.497888][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 3) [ 34.498759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.512458][ T4449] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 34.515113][ T4449] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.515113][ T4449] [ 34.518532][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.524331][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.526985][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.529375][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.531567][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.535577][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.538140][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.540312][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.542519][ T4449] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #15: block 3: comm syz.0.11: lblock 3 mapped to illegal pblock 3 (length 1) [ 34.601111][ T27] audit: type=1326 audit(34.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.3.12" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b5b9e8 code=0x0 [ 35.026409][ T4476] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.028735][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.036176][ T4476] device team1 entered promiscuous mode [ 35.037398][ T4476] 8021q: adding VLAN 0 to HW filter on device team1 [ 35.039901][ T4476] Zero length message leads to an empty skb [ 35.064811][ T14] cfg80211: failed to load regulatory.db [ 35.090394][ T4480] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 35.097276][ T4480] loop1: detected capacity change from 0 to 512 [ 35.193326][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 35.193343][ T4321] Bluetooth: hci3: command 0x041b tx timeout [ 35.193365][ T4321] Bluetooth: hci1: command 0x041b tx timeout [ 35.194356][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 35.195260][ T4321] Bluetooth: hci2: command 0x041b tx timeout [ 35.286848][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 35.288657][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.288657][ T11] [ 35.296639][ T4491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 35.301879][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 35.376732][ T4498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 35.488493][ T4516] loop4: detected capacity change from 0 to 512 [ 35.494342][ T4516] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.511246][ T4516] EXT4-fs (loop4): failed to initialize system zone (-117) [ 35.512589][ T4516] EXT4-fs (loop4): mount failed [ 35.643660][ T27] audit: type=1326 audit(35.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5b9e8 code=0x7ffc0000 [ 35.647012][ T27] audit: type=1326 audit(35.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9ff5a0d0 code=0x7ffc0000 [ 35.651332][ T27] audit: type=1326 audit(35.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5b9e8 code=0x7ffc0000 [ 35.656421][ T27] audit: type=1326 audit(35.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=73 compat=0 ip=0xffff9ff5b9e8 code=0x7ffc0000 [ 35.711567][ T27] audit: type=1326 audit(35.700:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5b9e8 code=0x7ffc0000 [ 35.717182][ T27] audit: type=1326 audit(35.700:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4532 comm="syz.1.44" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ff5b9e8 code=0x7ffc0000 [ 35.793787][ T4542] loop1: detected capacity change from 0 to 2048 [ 35.837063][ T4542] loop1: p2 < > p4 [ 35.838875][ T4542] loop1: p4 size 262144 extends beyond EOD, truncated [ 35.905084][ T4443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.949187][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 35.967316][ T4548] udevd[4548]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 35.969077][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 35.975999][ T4550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.50'. [ 35.979543][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 35.981595][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 36.192150][ T4563] loop1: detected capacity change from 0 to 1024 [ 36.229941][ T4563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.241611][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.59'. [ 36.245391][ T4571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.59'. [ 36.247931][ T4571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.59'. [ 36.250901][ T4571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.59'. [ 36.311984][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 36.376606][ T4583] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.423467][ T4382] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.583493][ T4382] usb 1-1: device descriptor read/64, error -71 [ 36.942813][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 36.950346][ T4612] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 36.982294][ T4615] bridge0: port 3(batadv1) entered blocking state [ 36.986386][ T4615] bridge0: port 3(batadv1) entered disabled state [ 36.987940][ T4615] device batadv1 entered promiscuous mode [ 37.023278][ T4382] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.183299][ T4382] usb 1-1: device descriptor read/64, error -71 [ 37.273312][ T4323] Bluetooth: hci4: command 0x040f tx timeout [ 37.273481][ T4321] Bluetooth: hci1: command 0x040f tx timeout [ 37.274568][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 37.275296][ T4321] Bluetooth: hci3: command 0x040f tx timeout [ 37.276382][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 37.303891][ T4382] usb usb1-port1: attempt power cycle [ 37.451609][ T4661] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 37.456821][ T4661] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 37.483393][ T511] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 37.484883][ T511] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 37.618538][ T4672] loop4: detected capacity change from 0 to 512 [ 37.627600][ T4672] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.632014][ T4672] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.646289][ T4672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 37.647663][ T4672] System zones: 1-12 [ 37.651515][ T4672] EXT4-fs (loop4): 1 truncate cleaned up [ 37.652458][ T4672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.687174][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 37.736031][ T4382] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.764258][ T4382] usb 1-1: device descriptor read/8, error -71 [ 37.841185][ T4695] loop1: detected capacity change from 0 to 512 [ 37.842354][ T4693] loop4: detected capacity change from 0 to 1024 [ 37.848064][ T4693] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.851661][ T4695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.861662][ T4695] EXT4-fs (loop1): 1 truncate cleaned up [ 37.862721][ T4695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 37.870238][ T4693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.897115][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 37.971598][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 38.015633][ T4707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.017361][ T4707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.033184][ T4382] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.076473][ T4382] usb 1-1: device descriptor read/8, error -71 [ 38.196105][ T4382] usb usb1-port1: unable to enumerate USB device [ 38.308460][ T4712] loop3: detected capacity change from 0 to 512 [ 38.309857][ T4712] journal_path: Lookup failure for './bus' [ 38.310863][ T4712] EXT4-fs: error: could not find journal device path [ 38.345356][ T4443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.346042][ T4313] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.476357][ T4443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.645766][ T4730] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.654141][ T4443] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.657536][ T4443] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.660581][ T4443] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.663753][ T4443] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.725179][ T4730] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.815961][ T4730] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.850047][ T4752] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 38.915481][ T4730] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.110695][ T4730] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.116274][ T4730] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.125623][ T4730] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.128694][ T4730] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.353768][ T4321] Bluetooth: hci3: command 0x0419 tx timeout [ 39.354846][ T4321] Bluetooth: hci1: command 0x0419 tx timeout [ 39.363510][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 39.364500][ T4323] Bluetooth: hci0: command 0x0419 tx timeout [ 39.365452][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 39.376052][ T4802] loop4: detected capacity change from 0 to 8192 [ 39.588112][ T4828] loop3: detected capacity change from 0 to 128 [ 39.626536][ T4828] syz.3.161: attempt to access beyond end of device [ 39.626536][ T4828] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 39.760696][ T27] kauditd_printk_skb: 51 callbacks suppressed [ 39.760707][ T27] audit: type=1326 audit(39.750:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.765620][ T27] audit: type=1326 audit(39.750:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.777489][ T27] audit: type=1326 audit(39.750:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.803266][ T27] audit: type=1326 audit(39.750:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.806882][ T27] audit: type=1326 audit(39.750:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=138 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.816397][ T27] audit: type=1326 audit(39.750:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.819800][ T27] audit: type=1326 audit(39.750:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.837546][ T27] audit: type=1326 audit(39.750:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.841112][ T27] audit: type=1326 audit(39.750:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4838 comm="syz.0.166" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8c55b9e8 code=0x7ffc0000 [ 39.930103][ T27] audit: type=1326 audit(39.920:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4852 comm="syz.3.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b5b9e8 code=0x7ffc0000 [ 40.045409][ T4869] __nla_validate_parse: 11 callbacks suppressed [ 40.045419][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 40.057531][ T4869] device bridge_slave_1 left promiscuous mode [ 40.059112][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.085781][ T4869] device bridge_slave_0 left promiscuous mode [ 40.086808][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.274611][ T4867] device ip6gre0 entered promiscuous mode [ 40.367475][ T4897] netlink: 400 bytes leftover after parsing attributes in process `syz.4.193'. [ 40.512434][ T4914] loop2: detected capacity change from 0 to 512 [ 40.545907][ T4920] netlink: 108 bytes leftover after parsing attributes in process `syz.1.204'. [ 40.593894][ T4914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.642862][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 40.684285][ T4329] EXT4-fs (loop2): unmounting filesystem. [ 40.741177][ T4947] syz.1.218 uses obsolete (PF_INET,SOCK_PACKET) [ 40.793692][ T4955] netlink: 176 bytes leftover after parsing attributes in process `LX[X'. [ 40.907293][ T4971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 40.951343][ T4980] process 'syz.4.232' launched '/dev/fd/4' with NULL argv: empty string added [ 41.075596][ T4995] loop3: detected capacity change from 0 to 1024 [ 41.129765][ T4995] EXT4-fs error (device loop3): ext4_acquire_dquot:6809: comm syz.3.238: Failed to acquire dquot type 0 [ 41.133815][ T4995] EXT4-fs error (device loop3): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 41.146778][ T4995] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.238: corrupted inode contents [ 41.167201][ T4995] EXT4-fs error (device loop3): ext4_dirty_inode:6133: inode #13: comm syz.3.238: mark_inode_dirty error [ 41.182595][ T4995] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.238: corrupted inode contents [ 41.185701][ T4995] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.238: mark_inode_dirty error [ 41.188795][ T4995] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.238: corrupted inode contents [ 41.193748][ T4995] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 41.195373][ T4995] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #13: comm syz.3.238: corrupted inode contents [ 41.203051][ T4995] EXT4-fs error (device loop3): ext4_truncate:4318: inode #13: comm syz.3.238: mark_inode_dirty error [ 41.206253][ T4995] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 41.215005][ T4995] EXT4-fs (loop3): 1 truncate cleaned up [ 41.215947][ T4995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.266651][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 41.272699][ T5015] loop1: detected capacity change from 0 to 512 [ 41.278042][ T5015] ext4: Bad value for 'resgid' [ 41.318067][ T5015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 41.557123][ T5038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.257'. [ 41.602286][ T5043] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2 [ 41.608506][ T5043] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file1 [ 41.681843][ T5054] capability: warning: `syz.3.263' uses 32-bit capabilities (legacy support in use) [ 41.729651][ T5054] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 42.343699][ T5124] netlink: 36 bytes leftover after parsing attributes in process `syz.3.279'. [ 42.371944][ T5128] netlink: 87 bytes leftover after parsing attributes in process `syz.3.281'. [ 42.580582][ T5156] loop1: detected capacity change from 0 to 512 [ 42.589654][ T5156] [ 42.590060][ T5156] ====================================================== [ 42.591199][ T5156] WARNING: possible circular locking dependency detected [ 42.592225][ T5156] syzkaller #0 Not tainted [ 42.592876][ T5156] ------------------------------------------------------ [ 42.593930][ T5156] syz.1.295/5156 is trying to acquire lock: [ 42.594794][ T5156] ffff0000dbec2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x188/0x284c [ 42.596329][ T5156] [ 42.596329][ T5156] but task is already holding lock: [ 42.597388][ T5156] ffff0000e27fc700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 42.598938][ T5156] [ 42.598938][ T5156] which lock already depends on the new lock. [ 42.598938][ T5156] [ 42.600417][ T5156] [ 42.600417][ T5156] the existing dependency chain (in reverse order) is: [ 42.601706][ T5156] [ 42.601706][ T5156] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 42.602808][ T5156] down_read+0x64/0x304 [ 42.603544][ T5156] ext4_xattr_get+0xec/0x544 [ 42.604343][ T5156] ext4_get_acl+0x94/0x5f0 [ 42.605101][ T5156] get_acl+0x160/0x33c [ 42.605848][ T5156] posix_acl_create+0x104/0x3d0 [ 42.606676][ T5156] ext4_init_acl+0xac/0x340 [ 42.607352][ T5156] __ext4_new_inode+0x27b8/0x3340 [ 42.608159][ T5156] ext4_ext_migrate+0x498/0xbfc [ 42.608957][ T5156] ext4_ioctl+0x1a38/0x4198 [ 42.609715][ T5156] __arm64_sys_ioctl+0x14c/0x1c8 [ 42.610525][ T5156] invoke_syscall+0x98/0x2bc [ 42.611324][ T5156] el0_svc_common+0x138/0x258 [ 42.612111][ T5156] do_el0_svc+0x58/0x13c [ 42.612828][ T5156] el0_svc+0x58/0x138 [ 42.613513][ T5156] el0t_64_sync_handler+0x84/0xf0 [ 42.614365][ T5156] el0t_64_sync+0x18c/0x190 [ 42.615163][ T5156] [ 42.615163][ T5156] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 42.616432][ T5156] __lock_acquire+0x293c/0x6544 [ 42.617259][ T5156] lock_acquire+0x20c/0x644 [ 42.618009][ T5156] percpu_down_read+0x70/0x2a8 [ 42.618724][ T5156] ext4_writepages+0x188/0x284c [ 42.619525][ T5156] do_writepages+0x2c0/0x4fc [ 42.620260][ T5156] __writeback_single_inode+0x164/0x157c [ 42.621141][ T5156] writeback_single_inode+0x1c0/0x720 [ 42.621910][ T5156] write_inode_now+0x144/0x1b0 [ 42.622599][ T5156] iput+0x5cc/0x7f4 [ 42.623244][ T5156] ext4_xattr_block_set+0x17a4/0x2810 [ 42.624090][ T5156] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 42.625007][ T5156] __ext4_expand_extra_isize+0x298/0x358 [ 42.625957][ T5156] __ext4_mark_inode_dirty+0x3e4/0x790 [ 42.626835][ T5156] ext4_evict_inode+0xb58/0x1270 [ 42.627657][ T5156] evict+0x3c8/0x810 [ 42.628340][ T5156] iput+0x764/0x7f4 [ 42.628957][ T5156] ext4_process_orphan+0x240/0x2b4 [ 42.629739][ T5156] ext4_orphan_cleanup+0x908/0x104c [ 42.630540][ T5156] ext4_fill_super+0x6440/0x68a8 [ 42.631343][ T5156] get_tree_bdev+0x358/0x544 [ 42.632078][ T5156] ext4_get_tree+0x28/0x38 [ 42.632808][ T5156] vfs_get_tree+0x90/0x274 [ 42.633558][ T5156] do_new_mount+0x228/0x810 [ 42.634248][ T5156] path_mount+0x5b4/0xe78 [ 42.634909][ T5156] __arm64_sys_mount+0x49c/0x584 [ 42.635604][ T5156] invoke_syscall+0x98/0x2bc [ 42.636296][ T5156] el0_svc_common+0x138/0x258 [ 42.637043][ T5156] do_el0_svc+0x58/0x13c [ 42.637738][ T5156] el0_svc+0x58/0x138 [ 42.638391][ T5156] el0t_64_sync_handler+0x84/0xf0 [ 42.639139][ T5156] el0t_64_sync+0x18c/0x190 [ 42.639898][ T5156] [ 42.639898][ T5156] other info that might help us debug this: [ 42.639898][ T5156] [ 42.641283][ T5156] Possible unsafe locking scenario: [ 42.641283][ T5156] [ 42.642378][ T5156] CPU0 CPU1 [ 42.643111][ T5156] ---- ---- [ 42.643929][ T5156] lock(&ei->xattr_sem); [ 42.644530][ T5156] lock(&sbi->s_writepages_rwsem); [ 42.645645][ T5156] lock(&ei->xattr_sem); [ 42.646600][ T5156] lock(&sbi->s_writepages_rwsem); [ 42.647315][ T5156] [ 42.647315][ T5156] *** DEADLOCK *** [ 42.647315][ T5156] [ 42.648457][ T5156] 3 locks held by syz.1.295/5156: [ 42.649177][ T5156] #0: ffff0000dbec40e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804 [ 42.650680][ T5156] #1: ffff0000dbec4650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x3dc/0x1270 [ 42.652084][ T5156] #2: ffff0000e27fc700 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x37c/0x790 [ 42.653584][ T5156] [ 42.653584][ T5156] stack backtrace: [ 42.654455][ T5156] CPU: 0 PID: 5156 Comm: syz.1.295 Not tainted syzkaller #0 [ 42.655505][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 42.656980][ T5156] Call trace: [ 42.657471][ T5156] dump_backtrace+0x1c8/0x1f4 [ 42.658165][ T5156] show_stack+0x2c/0x3c [ 42.658746][ T5156] __dump_stack+0x30/0x40 [ 42.659353][ T5156] dump_stack_lvl+0xf8/0x160 [ 42.659981][ T5156] dump_stack+0x1c/0x5c [ 42.660558][ T5156] print_circular_bug+0x148/0x1b0 [ 42.661263][ T5156] check_noncircular+0x240/0x2d4 [ 42.661993][ T5156] __lock_acquire+0x293c/0x6544 [ 42.662717][ T5156] lock_acquire+0x20c/0x644 [ 42.663454][ T5156] percpu_down_read+0x70/0x2a8 [ 42.664150][ T5156] ext4_writepages+0x188/0x284c [ 42.664839][ T5156] do_writepages+0x2c0/0x4fc [ 42.665463][ T5156] __writeback_single_inode+0x164/0x157c [ 42.666314][ T5156] writeback_single_inode+0x1c0/0x720 [ 42.667092][ T5156] write_inode_now+0x144/0x1b0 [ 42.667774][ T5156] iput+0x5cc/0x7f4 [ 42.668327][ T5156] ext4_xattr_block_set+0x17a4/0x2810 [ 42.669105][ T5156] ext4_expand_extra_isize_ea+0xcb8/0x15cc [ 42.670024][ T5156] __ext4_expand_extra_isize+0x298/0x358 [ 42.670793][ T5156] __ext4_mark_inode_dirty+0x3e4/0x790 [ 42.671609][ T5156] ext4_evict_inode+0xb58/0x1270 [ 42.672284][ T5156] evict+0x3c8/0x810 [ 42.672882][ T5156] iput+0x764/0x7f4 [ 42.673508][ T5156] ext4_process_orphan+0x240/0x2b4 [ 42.674245][ T5156] ext4_orphan_cleanup+0x908/0x104c [ 42.674962][ T5156] ext4_fill_super+0x6440/0x68a8 [ 42.675666][ T5156] get_tree_bdev+0x358/0x544 [ 42.676278][ T5156] ext4_get_tree+0x28/0x38 [ 42.676928][ T5156] vfs_get_tree+0x90/0x274 [ 42.677585][ T5156] do_new_mount+0x228/0x810 [ 42.678238][ T5156] path_mount+0x5b4/0xe78 [ 42.678882][ T5156] __arm64_sys_mount+0x49c/0x584 [ 42.679550][ T5156] invoke_syscall+0x98/0x2bc [ 42.680250][ T5156] el0_svc_common+0x138/0x258 [ 42.680890][ T5156] do_el0_svc+0x58/0x13c [ 42.681549][ T5156] el0_svc+0x58/0x138 [ 42.682117][ T5156] el0t_64_sync_handler+0x84/0xf0 [ 42.682788][ T5156] el0t_64_sync+0x18c/0x190 [ 42.688359][ T5156] ------------[ cut here ]------------ [ 42.689252][ T5156] EA inode 11 i_nlink=2 [ 42.689330][ T5156] WARNING: CPU: 0 PID: 5156 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x42c/0x470 [ 42.691593][ T5156] Modules linked in: [ 42.692128][ T5156] CPU: 0 PID: 5156 Comm: syz.1.295 Not tainted syzkaller #0 [ 42.693215][ T5156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 42.694779][ T5156] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 42.695908][ T5156] pc : ext4_xattr_inode_update_ref+0x42c/0x470 [ 42.696777][ T5156] lr : ext4_xattr_inode_update_ref+0x42c/0x470 [ 42.697681][ T5156] sp : ffff800021616e00 [ 42.698263][ T5156] x29: ffff800021616ea0 x28: 0000000000000000 x27: dfff800000000000 [ 42.699480][ T5156] x26: 1fffe0001c4ffd1f x25: ffff7000042c2dc4 x24: 0000000000000000 [ 42.700615][ T5156] x23: ffff800017a15000 x22: ffff0000e27fe740 x21: 0000000000000002 [ 42.701848][ T5156] x20: 0000000000000001 x19: ffff0000e27fe700 x18: ffff800011a5bd40 [ 42.702993][ T5156] x17: 0000000000000000 x16: ffff800008042d90 x15: 0000000000000002 [ 42.704182][ T5156] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 42.705392][ T5156] x11: 000000000007a0b1 x10: ffff80002225b000 x9 : 61b7255df0a25a00 [ 42.706595][ T5156] x8 : 61b7255df0a25a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 42.707824][ T5156] x5 : ffff800021616898 x4 : ffff800015134e00 x3 : ffff80000852f9b8 [ 42.709022][ T5156] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 42.710179][ T5156] Call trace: [ 42.710646][ T5156] ext4_xattr_inode_update_ref+0x42c/0x470 [ 42.711475][ T5156] ext4_xattr_set_entry+0x918/0x15ac [ 42.712299][ T5156] ext4_xattr_ibody_set+0x204/0x600 [ 42.713055][ T5156] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 42.713833][ T5156] __ext4_expand_extra_isize+0x298/0x358 [ 42.714630][ T5156] __ext4_mark_inode_dirty+0x3e4/0x790 [ 42.715439][ T5156] ext4_evict_inode+0xb58/0x1270 [ 42.716190][ T5156] evict+0x3c8/0x810 [ 42.716764][ T5156] iput+0x764/0x7f4 [ 42.717328][ T5156] ext4_process_orphan+0x240/0x2b4 [ 42.718046][ T5156] ext4_orphan_cleanup+0x908/0x104c [ 42.718797][ T5156] ext4_fill_super+0x6440/0x68a8 [ 42.719551][ T5156] get_tree_bdev+0x358/0x544 [ 42.720266][ T5156] ext4_get_tree+0x28/0x38 [ 42.720917][ T5156] vfs_get_tree+0x90/0x274 [ 42.721526][ T5156] do_new_mount+0x228/0x810 [ 42.722213][ T5156] path_mount+0x5b4/0xe78 [ 42.722829][ T5156] __arm64_sys_mount+0x49c/0x584 [ 42.723615][ T5156] invoke_syscall+0x98/0x2bc [ 42.724255][ T5156] el0_svc_common+0x138/0x258 [ 42.724895][ T5156] do_el0_svc+0x58/0x13c [ 42.725570][ T5156] el0_svc+0x58/0x138 [ 42.726146][ T5156] el0t_64_sync_handler+0x84/0xf0 [ 42.726888][ T5156] el0t_64_sync+0x18c/0x190 [ 42.727688][ T5156] irq event stamp: 3263 [ 42.728428][ T5156] hardirqs last enabled at (3263): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 42.730056][ T5156] hardirqs last disabled at (3262): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 42.731730][ T5156] softirqs last enabled at (588): [] local_bh_enable+0x10/0x34 [ 42.733157][ T5156] softirqs last disabled at (586): [] local_bh_disable+0x10/0x34 [ 42.734568][ T5156] ---[ end trace 0000000000000000 ]--- [ 42.739759][ T5156] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #18: comm syz.1.295: iget: bad extra_isize 90 (inode size 256) [ 42.742219][ T5156] EXT4-fs (loop1): Remounting filesystem read-only [ 42.743439][ T5156] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.295: error while reading EA inode 18 err=-117 [ 42.745484][ T5156] EXT4-fs (loop1): Remounting filesystem read-only [ 42.746591][ T5156] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #18: comm syz.1.295: iget: bad extra_isize 90 (inode size 256) [ 42.748706][ T5156] EXT4-fs (loop1): Remounting filesystem read-only [ 42.749820][ T5156] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.295: error while reading EA inode 18 err=-117 [ 42.751888][ T5156] EXT4-fs (loop1): Remounting filesystem read-only [ 42.753056][ T5156] EXT4-fs (loop1): 1 orphan inode deleted [ 42.754246][ T5156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.762702][ T4320] EXT4-fs (loop1): unmounting filesystem.