last executing test programs: 5.473429734s ago: executing program 1 (id=11): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 4.287298173s ago: executing program 3 (id=4): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) 3.527218137s ago: executing program 3 (id=15): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x324}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) 3.070733472s ago: executing program 0 (id=17): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x80000) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c0002800800014000000005080002400000000308000340000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.072109783s ago: executing program 1 (id=19): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x0, 0x0, 0x90}, 0x9c) sendto$inet6(r0, &(0x7f00000002c0)="fe", 0x1, 0x440c0, &(0x7f0000000040)={0xa, 0x4e28, 0x8000028, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10001}, 0x1c) 1.394677335s ago: executing program 1 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000f00), r0) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2502000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x48850) 1.339037087s ago: executing program 0 (id=21): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r2 = dup3(r1, r0, 0x80000) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) 1.270989689s ago: executing program 1 (id=22): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r0, &(0x7f0000000240)="8b", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @private0, 0x9}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x0) 1.25535934s ago: executing program 2 (id=23): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x8000600) ioctl$TIOCMSET(r0, 0x5418, 0x0) 1.107167274s ago: executing program 2 (id=24): unshare(0x22020400) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 982.152268ms ago: executing program 2 (id=25): r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000580)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 865.214732ms ago: executing program 2 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}, @NHA_FDB={0x4}]}, 0x28}}, 0x4000008) 726.976256ms ago: executing program 2 (id=27): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000), 0x5, 0x4ba, &(0x7f00000002c0)="$eJzs3N9rHNUeAPDvbJJNe9vc7O291x/9YVerGPyRNGnVPgj+QKEvgqAP9TGmaalNG2ki2BJsFKmP0r+g+ij4F/ikL6KCoPiqj4IIRfLS2gcZmd2dZLPZjZs0m22Tzwe2OWfOzJxzZubMnjmnswFsW+XsnyRid0T8HBGD1ejyFcrVPzcX5ib+XJibSCJNX/sjqax3Y2FuIl81325XLTJUiCh8mMS+JvnOXLx0dnxqavJCLT4ye+7tkZmLl548c2789OTpyfNjx44dPTL6zNNjT21IPQeysu59b3r//cffuPrKxImrb377eVbe3bX0GwtzxeVblPLA3ohIG/f3fBt5lqO8/FjWeWRtxb/jDdSFk94uFoQ16YmI7HT1Vdr/YPTE0skbjJc/iCh0tXxA56RpmvavWJrdFXZmgfkU2MKS6HYJgO7Iv/Gz5/j8s8ldkK66/kL1ASir983ap5rSW3nyKZeqz0YDHcq/HAcj4ta1E/O3rkXDeAoAQCd8mfV/nmjW/yvEPXXr/bs2N1SKiP9ExJ6I+G9E/C8i/h9RWffeiLiv3YyT5lMjK/s/P+5cZ9XakvX/nq3NbS3v/y2Oe5d6arGBSv37klNnpiYP147JUPT1Z/HRVfL46qWfPm6VVo6IrO+Xf7L8875grRy/9zYM0J0cnx2/nTrXu34wYm9vs/onizMBSexY9/4HihFnHvtsf6v0f67/KjZgnin9NOLR6vmfj4b655LV5ydHdsTU5OGR/KpY6bsfrrzaKv/bqv8GuP5+xL+aXv+L9S8l9fO1M2vOovfKLx+1fKZZ7/VfTF6vhPNJ23fHZ2cvjEYUk/mVy8eWts3j+fpZ/YcONW//eyL++qS23b6IyC7iAxHxQETlqS0r+4MR8VBEHFrlAHzz4sNvZX+/X1f9Oyur/8k1nf/6QF80LmkW6Dn79Ret8m/v/B+thIZqS5buf2lPq/1WM8/vW60LeFsHDwAAAO4Shcr/gU+SiOq4ye66tGL2HD09M/v4qel3zp+sppWir5CPdA3WjYeO1saG8/hYQ/xIZdw4TdN0ZyU+PDE91ak5daA9u6rtvzC8eC8oFIaHq2m/NYyuPdeVEgIdtaZ5tFZvtAF3pfbav4YPW9Fi+1/5JmBO44ctqtr+ewa7XQ5g8/m9Fti+mrX/yxE3u1AUYJP5/oftS/uH7Wut7b/UoXIAm8/3P2xLy1+JL0Ybr/O3FdhzfGP2szUDkSwd+Z5ul6d/fZtH4Q45mPWBpElSYXHJgV/zH4YotL3n4oYULFZbpz8i2t3h5disg9ntOxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDG+DsAAP//KI/hOg==") syz_mount_image$vfat(&(0x7f0000002180), &(0x7f0000000040)='./bus\x00', 0x2034459, 0x0, 0x1, 0x0, &(0x7f00000021c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0xa000, 0x50) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 609.40887ms ago: executing program 0 (id=28): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000001e80)=[{{&(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001640)=[{&(0x7f0000003300)="e6", 0x1}], 0x1, &(0x7f0000001680)=ANY=[], 0x80, 0xf5}}], 0x1, 0x20008000) 471.191494ms ago: executing program 0 (id=29): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000140)=0xffff7e27, 0x4) 452.445905ms ago: executing program 3 (id=30): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/107, 0x6b}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 353.933869ms ago: executing program 1 (id=31): setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000480)={0x0, 0xfffe, 0x304, "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"}, 0x30c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 271.051121ms ago: executing program 2 (id=32): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x5, 0x476, &(0x7f00000006c0)="$eJzs289vFFUcAPDvTH8AIhQRf4CoVWLSaGxpQeXgRaOJMRhN9IDH2i6kYaGGViNIpBjjycSQ6Jl4NPoXeDMmRj2ZcPXkyZAQ5QJ4qpnZGViGXaB2y5bu55NM+97Mm5337Zsfb97rBtCzhiNiISLujYg/ImIoIpJqgeHGr8sXT05duXhyKonFxbf/TvJyly6enCqLlvttLDIjaUT6WdLYuWLu+InDk/V67ViRH5s/8v7Y3PETz354ZPJQ7VDt6MS+fXv3jL/w/MRzHYkzi+vSjk9md25/7d0zb0wdOPPer98nRdxRiaNThrPA/1nMVbc91emDddmmpnTS38WKsCR9EZE110B+/Q9FX1xrvKF49dOuVg5YUdmzaV37zQuLwBqWRLdrAHRH+aDP3n/L5Q51PVaFCy81XoCyuC8XS2NLf6RFmYHK+20nDUfEgYV/z2ZLrNA4BABAsy+mvt4/GBEfX/nu9azvMRQR5XjQg/nPP/Ofm4s5lC0RcV9EbI2I+yNiW0Q8UJR9KCIeXmZ9buz/pOeX+ZE3lfX/Xizmtq7v/5W9v9jSV+Q25fEPJAdn6rXdsS7/m4zEwLosP36TY/z4yrkv221r7v9lS3b8si9Y1ON8f2WAbnpyfjLvlHbAhdMRO/pbxZ9cnQlIImJ7ROxY2kdvLhMzT3+7s12h1vFfOntbR+jAPNPiN1l4C1n8C1GJv5Q0z0/O3DA/ObY+6rXdY42zopXffv/8rXbHv3X7r6wLtcbvpvavFtmSNM/XznX2+P/z/E8Hk3fyeebBYt1Hk/Pzx8YjBpP9ef669RPX9i3zZfns/B/Z1fr631rsk8X/SERkJ/GjEfFYRDxe1P2JiHgyInbdJMZfXr51/JF2qf1PR0y3vP9dPf8r7b/0RN/hn39od/zba/+9eWqkWJPf/26hVXWy20W1gsv52wEAAMDdIs3/Bz5JR6+m03R0tPE//NvinrQ+Ozf/zMHZD45Ox7nNjfHPtBzpGirGQ+sz9dp4slB8YmN8dKIYKy7HS/cU48Zf9W3I86NTs/XpLscOvW5jm+s/81dft2sHrLANLddODN7xigBdUJ1HT6/Pnnoz3AxgrfJ9behd5fXf5n2/+XswwBrj+Q+9q9X1f6qSNxcAa5PnP/Qu1z/0qPSnZezsrQDudp7/0JOW873+FUysXx3V6E5itTZKnogoE+mqqI/ECiW6fWcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojP8CAAD//68e5+k=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) 270.840591ms ago: executing program 0 (id=33): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043000000080000000000000050"], 0xb0}}], 0x1, 0x4000801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000500)=0x10) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 268.541481ms ago: executing program 3 (id=34): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff9, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff18b6, 0x3, 0xc, 0xffffffb9, 0x1a}, 0x9c) 88.113457ms ago: executing program 3 (id=35): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x20842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 87.820077ms ago: executing program 0 (id=36): unshare(0x8040480) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x4}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 0s ago: executing program 1 (id=37): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000280)="0f", 0x1}, {&(0x7f0000000340)="ad", 0x1}, {&(0x7f00000003c0)="d0d6", 0x2}, {&(0x7f0000000440)="e5", 0x1}], 0x5, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 72.413159][ T5757] cgroup: Unknown subsys name 'net' [ 72.541395][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.867979][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.938823][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.946387][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.947289][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.961733][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.970940][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.978945][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.987354][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.996340][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.004535][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.011659][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.018818][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.037210][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.044151][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.051431][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.053531][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.059057][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.065886][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.076228][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.081139][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.087103][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.095367][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.108183][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.109917][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.123593][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.430340][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 76.588503][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.608604][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.617019][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.624382][ T5771] bridge_slave_0: entered allmulticast mode [ 76.631958][ T5771] bridge_slave_0: entered promiscuous mode [ 76.645018][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.652234][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.659622][ T5771] bridge_slave_1: entered allmulticast mode [ 76.666413][ T5771] bridge_slave_1: entered promiscuous mode [ 76.732008][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.749506][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.809901][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.818684][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.825968][ T5769] bridge_slave_0: entered allmulticast mode [ 76.832585][ T5769] bridge_slave_0: entered promiscuous mode [ 76.846805][ T5771] team0: Port device team_slave_0 added [ 76.852971][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 76.863376][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.874371][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.881665][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.888974][ T5769] bridge_slave_1: entered allmulticast mode [ 76.895904][ T5769] bridge_slave_1: entered promiscuous mode [ 76.903781][ T5771] team0: Port device team_slave_1 added [ 76.979608][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.988416][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.014780][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.048016][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.060565][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.067726][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.094006][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.122603][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.201392][ T5771] hsr_slave_0: entered promiscuous mode [ 77.207746][ T5771] hsr_slave_1: entered promiscuous mode [ 77.223193][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.230456][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.237895][ T5768] bridge_slave_0: entered allmulticast mode [ 77.244494][ T5768] bridge_slave_0: entered promiscuous mode [ 77.251618][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.261296][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.268597][ T5770] bridge_slave_0: entered allmulticast mode [ 77.275403][ T5770] bridge_slave_0: entered promiscuous mode [ 77.283228][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.290644][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.298135][ T5770] bridge_slave_1: entered allmulticast mode [ 77.304784][ T5770] bridge_slave_1: entered promiscuous mode [ 77.314648][ T5769] team0: Port device team_slave_0 added [ 77.321454][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.329038][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.336541][ T5768] bridge_slave_1: entered allmulticast mode [ 77.343189][ T5768] bridge_slave_1: entered promiscuous mode [ 77.368780][ T5769] team0: Port device team_slave_1 added [ 77.421281][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.435258][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.446686][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.463852][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.470904][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.497157][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.509975][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.517134][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.550379][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.563311][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.619813][ T5770] team0: Port device team_slave_0 added [ 77.630494][ T5770] team0: Port device team_slave_1 added [ 77.676054][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.683033][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.709453][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.723439][ T5768] team0: Port device team_slave_0 added [ 77.752825][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.760037][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.787895][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.800291][ T5768] team0: Port device team_slave_1 added [ 77.854294][ T5769] hsr_slave_0: entered promiscuous mode [ 77.860987][ T5769] hsr_slave_1: entered promiscuous mode [ 77.867885][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.875876][ T5769] Cannot create hsr debugfs directory [ 77.891769][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.898863][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.924903][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.937620][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.944579][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.970653][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.029596][ T5770] hsr_slave_0: entered promiscuous mode [ 78.036077][ T5770] hsr_slave_1: entered promiscuous mode [ 78.042294][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.050450][ T5770] Cannot create hsr debugfs directory [ 78.122254][ T5768] hsr_slave_0: entered promiscuous mode [ 78.128968][ T5768] hsr_slave_1: entered promiscuous mode [ 78.135433][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.143005][ T5768] Cannot create hsr debugfs directory [ 78.176170][ T5776] Bluetooth: hci1: command tx timeout [ 78.182328][ T51] Bluetooth: hci2: command tx timeout [ 78.182713][ T5782] Bluetooth: hci3: command tx timeout [ 78.188733][ T5775] Bluetooth: hci0: command tx timeout [ 78.304324][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.347559][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.356848][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.404443][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.539737][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.552473][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.561843][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.573189][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.650082][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.663780][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.682546][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.694389][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.784531][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.794247][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.815953][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.827245][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.881930][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.891396][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.928569][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.947334][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.954627][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.968895][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.976066][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.993917][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.039493][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.070774][ T3409] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.077977][ T3409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.106660][ T3409] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.113784][ T3409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.194208][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.219219][ T3415] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.226413][ T3415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.257968][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.290106][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.297302][ T3415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.382507][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.404741][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.417881][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.444427][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.496743][ T3415] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.503920][ T3415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.547385][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.559551][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.566884][ T3415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.693629][ T5771] veth0_vlan: entered promiscuous mode [ 79.740131][ T5771] veth1_vlan: entered promiscuous mode [ 79.807146][ T5771] veth0_macvtap: entered promiscuous mode [ 79.838902][ T5771] veth1_macvtap: entered promiscuous mode [ 79.873646][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.896232][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.912357][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.949362][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.960728][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.971618][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.982530][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.009020][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.101867][ T5769] veth0_vlan: entered promiscuous mode [ 80.113581][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.143850][ T5769] veth1_vlan: entered promiscuous mode [ 80.193942][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.211523][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.252349][ T5768] veth0_vlan: entered promiscuous mode [ 80.265270][ T5775] Bluetooth: hci0: command tx timeout [ 80.267185][ T5782] Bluetooth: hci2: command tx timeout [ 80.270710][ T5776] Bluetooth: hci3: command tx timeout [ 80.281955][ T51] Bluetooth: hci1: command tx timeout [ 80.284843][ T5769] veth0_macvtap: entered promiscuous mode [ 80.303632][ T5769] veth1_macvtap: entered promiscuous mode [ 80.316469][ T5768] veth1_vlan: entered promiscuous mode [ 80.339797][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.340182][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.350759][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.352203][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.379225][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.414789][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.428074][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.440312][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.448911][ T5770] veth0_vlan: entered promiscuous mode [ 80.470270][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.482572][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.492548][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.502804][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528124][ T5770] veth1_vlan: entered promiscuous mode [ 80.542706][ T5768] veth0_macvtap: entered promiscuous mode [ 80.574285][ T5768] veth1_macvtap: entered promiscuous mode [ 80.618394][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.640984][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.652672][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.674231][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.675739][ T5839] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.698434][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.713853][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.728946][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.739163][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.752071][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.787015][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.817417][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.828415][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.837188][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.847039][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.904327][ T3415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.917471][ T3415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.972502][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.001145][ T5770] veth0_macvtap: entered promiscuous mode [ 81.001953][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.014613][ T5770] veth1_macvtap: entered promiscuous mode [ 81.023794][ T5841] syzkaller0: entered promiscuous mode [ 81.029853][ T5841] syzkaller0: entered allmulticast mode [ 81.084398][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.098637][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.109135][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.120047][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.130127][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.140936][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.153745][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.176924][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.190901][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.218349][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.242307][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.254151][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.267643][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.279366][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.292567][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.302490][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.312210][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.321524][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.336741][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.354866][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.487722][ T3415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.505435][ T3415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.674603][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.682229][ T5851] tipc: Started in network mode [ 81.694625][ T5851] tipc: Node identity 050000000000000005, cluster identity 16 [ 81.697949][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.848348][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.863975][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.878641][ T5855] tipc: Started in network mode [ 81.891562][ T5855] tipc: Node identity 5, cluster identity 4711 [ 81.898585][ T5855] tipc: Node number set to 5 [ 81.904103][ T5855] tipc: Cannot configure node identity twice [ 82.443736][ T5776] Bluetooth: hci3: command tx timeout [ 82.449403][ T5776] Bluetooth: hci2: command tx timeout [ 82.455136][ T5776] Bluetooth: hci0: command tx timeout [ 82.460719][ T5776] Bluetooth: hci1: command tx timeout [ 83.840576][ T5874] syz.0.13[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.915830][ T5874] loop0: detected capacity change from 0 to 512 [ 83.957090][ T5874] ======================================================= [ 83.957090][ T5874] WARNING: The mand mount option has been deprecated and [ 83.957090][ T5874] and is ignored by this kernel. Remove the mand [ 83.957090][ T5874] option from the mount to silence this warning. [ 83.957090][ T5874] ======================================================= [ 84.324128][ T5878] syzkaller0: entered promiscuous mode [ 84.371212][ T5878] syzkaller0: entered allmulticast mode [ 84.495242][ T51] Bluetooth: hci1: command tx timeout [ 84.500976][ T51] Bluetooth: hci0: command tx timeout [ 84.507817][ T51] Bluetooth: hci2: command tx timeout [ 84.513531][ T51] Bluetooth: hci3: command tx timeout [ 84.570931][ T5882] process 'syz.2.16' launched '/dev/fd/-1/./file1' with NULL argv: empty string added [ 85.683593][ T5887] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18'. [ 86.232167][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 86.348676][ T28] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.389674][ T28] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.827414][ T5916] loop2: detected capacity change from 0 to 512 [ 86.862525][ T5916] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.27: bad orphan inode 13 [ 86.904048][ T5916] ext4_test_bit(bit=12, block=4) = 1 [ 86.925315][ T5916] is_bad_inode(inode)=0 [ 86.929523][ T5916] NEXT_ORPHAN(inode)=0 [ 86.933600][ T5916] max_ino=32 [ 86.966673][ T5916] i_nlink=1 [ 86.971290][ T5916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.007873][ T5916] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.27: Hash code is SIPHASH, but hash not in dirent [ 87.020884][ T5916] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.27: Corrupt directory, running e2fsck is recommended [ 87.034752][ T3062] cfg80211: failed to load regulatory.db [ 87.054793][ T5916] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.27: Hash code is SIPHASH, but hash not in dirent [ 87.103009][ T5916] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.27: Corrupt directory, running e2fsck is recommended [ 87.148069][ T5916] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.27: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 87.247535][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.416604][ T5933] loop2: detected capacity change from 0 to 512 [ 87.475316][ T5933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.531079][ T5933] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.32: bg 0: block 127: padding at end of block bitmap is not set [ 87.556605][ T5933] ------------[ cut here ]------------ [ 87.562360][ T5933] EA inode 11 i_nlink=0 [ 87.565508][ T5933] WARNING: CPU: 0 PID: 5933 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x53c/0x590 [ 87.579981][ T5933] Modules linked in: [ 87.584376][ T5933] CPU: 0 PID: 5933 Comm: syz.2.32 Not tainted syzkaller #0 [ 87.591682][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.601830][ T5933] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 87.608525][ T5933] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d2 98 ff 49 8b 37 48 c7 c7 60 dc de 8a 89 da e8 54 44 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 2e c1 41 08 [ 87.629089][ T5933] RSP: 0018:ffffc900050972e0 EFLAGS: 00010246 [ 87.635401][ T5933] RAX: 7f86aeafa1202000 RBX: 0000000000000000 RCX: 0000000000080000 [ 87.643417][ T5933] RDX: ffffc9000d25b000 RSI: 000000000003a31b RDI: 000000000003a31c [ 87.651500][ T5933] RBP: ffffc900050973d0 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 87.659620][ T5933] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 87.667690][ T5933] R13: ffff88805b4436a8 R14: ffff88805b4434b0 R15: ffff88805b443500 [ 87.675740][ T5933] FS: 00007fa5047ac6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 87.684704][ T5933] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.691378][ T5933] CR2: 00005600d925e2d0 CR3: 0000000076516000 CR4: 00000000003506f0 [ 87.699435][ T5933] Call Trace: [ 87.702770][ T5933] [ 87.705796][ T5933] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 87.711481][ T5933] ? __ext4_journal_ensure_credits+0x30/0x450 [ 87.717643][ T5933] ext4_xattr_inode_dec_ref_all+0x9ad/0x1060 [ 87.724239][ T5933] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 87.730117][ T5933] ? __ext4_journal_ensure_credits+0x450/0x450 [ 87.736373][ T5933] ext4_xattr_delete_inode+0xb3e/0xd10 [ 87.741982][ T5933] ? up_write+0x1c3/0x410 [ 87.746412][ T5933] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 87.752539][ T5933] ext4_evict_inode+0xaaf/0xea0 [ 87.757483][ T5933] ? _raw_spin_unlock+0x28/0x40 [ 87.762392][ T5933] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 87.768444][ T5933] ? do_raw_spin_unlock+0x121/0x230 [ 87.773682][ T5933] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 87.779669][ T5933] evict+0x4ca/0x8d0 [ 87.783608][ T5933] ? proc_nr_inodes+0x230/0x230 [ 87.788551][ T5933] ? do_raw_spin_unlock+0x121/0x230 [ 87.793794][ T5933] ? _raw_spin_unlock+0x28/0x40 [ 87.798741][ T5933] ? iput+0x706/0x920 [ 87.802764][ T5933] ext4_orphan_cleanup+0xbec/0x1420 [ 87.808052][ T5933] ? ext4_orphan_del+0xbf0/0xbf0 [ 87.813023][ T5933] ? ext4_register_li_request+0x183/0x940 [ 87.818818][ T5933] ? errseq_check_and_advance+0x66/0x120 [ 87.825130][ T5933] ext4_fill_super+0x5eea/0x67b0 [ 87.830133][ T5933] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 87.836581][ T5933] ? __might_sleep+0xe0/0xe0 [ 87.841209][ T5933] ? read_lock_is_recursive+0x20/0x20 [ 87.846651][ T5933] ? snprintf+0xe9/0x140 [ 87.850945][ T5933] ? down_read_killable+0x340/0x340 [ 87.856283][ T5933] ? setup_bdev_super+0x56b/0x660 [ 87.861339][ T5933] get_tree_bdev+0x3f3/0x520 [ 87.866011][ T5933] ? vfs_parse_fs_string+0x170/0x170 [ 87.871326][ T5933] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 87.877740][ T5933] ? setup_bdev_super+0x660/0x660 [ 87.882885][ T5933] ? apparmor_capable+0x137/0x1a0 [ 87.888063][ T5933] ? bpf_lsm_capable+0x9/0x10 [ 87.892779][ T5933] ? security_capable+0x89/0xb0 [ 87.897728][ T5933] vfs_get_tree+0x8c/0x280 [ 87.902189][ T5933] do_new_mount+0x24b/0xa40 [ 87.906790][ T5933] __se_sys_mount+0x2e7/0x3d0 [ 87.911506][ T5933] ? __x64_sys_mount+0xc0/0xc0 [ 87.916379][ T5933] ? lockdep_hardirqs_on+0x98/0x150 [ 87.921626][ T5933] ? __x64_sys_mount+0x20/0xc0 [ 87.927043][ T5933] do_syscall_64+0x55/0xb0 [ 87.931505][ T5933] ? clear_bhb_loop+0x40/0x90 [ 87.936393][ T5933] ? clear_bhb_loop+0x40/0x90 [ 87.941103][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.947103][ T5933] RIP: 0033:0x7fa50399e0ca [ 87.951557][ T5933] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.971578][ T5933] RSP: 002b:00007fa5047abe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.980072][ T5933] RAX: ffffffffffffffda RBX: 00007fa5047abee0 RCX: 00007fa50399e0ca [ 87.988447][ T5933] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fa5047abea0 [ 87.996559][ T5933] RBP: 0000200000000180 R08: 00007fa5047abee0 R09: 0000000000000000 [ 88.004567][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 88.012640][ T5933] R13: 00007fa5047abea0 R14: 0000000000000476 R15: 00002000000001c0 [ 88.020702][ T5933] [ 88.023746][ T5933] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.031046][ T5933] CPU: 0 PID: 5933 Comm: syz.2.32 Not tainted syzkaller #0 [ 88.038271][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.048322][ T5933] Call Trace: [ 88.051601][ T5933] [ 88.054529][ T5933] dump_stack_lvl+0x18c/0x250 [ 88.059214][ T5933] ? show_regs_print_info+0x20/0x20 [ 88.064412][ T5933] ? load_image+0x420/0x420 [ 88.068915][ T5933] panic+0x2dc/0x730 [ 88.072815][ T5933] ? bpf_jit_dump+0xd0/0xd0 [ 88.077329][ T5933] __warn+0x2e0/0x470 [ 88.081313][ T5933] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 88.087298][ T5933] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 88.093371][ T5933] report_bug+0x2be/0x4f0 [ 88.097700][ T5933] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 88.103677][ T5933] ? ext4_xattr_inode_update_ref+0x53c/0x590 [ 88.109661][ T5933] ? ext4_xattr_inode_update_ref+0x53e/0x590 [ 88.115639][ T5933] handle_bug+0xcf/0x120 [ 88.119902][ T5933] exc_invalid_op+0x1a/0x50 [ 88.124408][ T5933] asm_exc_invalid_op+0x1a/0x20 [ 88.129265][ T5933] RIP: 0010:ext4_xattr_inode_update_ref+0x53c/0x590 [ 88.135869][ T5933] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 85 d2 98 ff 49 8b 37 48 c7 c7 60 dc de 8a 89 da e8 54 44 0a ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 ab fe ff ff e8 2e c1 41 08 [ 88.155468][ T5933] RSP: 0018:ffffc900050972e0 EFLAGS: 00010246 [ 88.161537][ T5933] RAX: 7f86aeafa1202000 RBX: 0000000000000000 RCX: 0000000000080000 [ 88.169503][ T5933] RDX: ffffc9000d25b000 RSI: 000000000003a31b RDI: 000000000003a31c [ 88.177470][ T5933] RBP: ffffc900050973d0 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 88.185447][ T5933] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 88.193501][ T5933] R13: ffff88805b4436a8 R14: ffff88805b4434b0 R15: ffff88805b443500 [ 88.201485][ T5933] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 88.207125][ T5933] ? __ext4_journal_ensure_credits+0x30/0x450 [ 88.213194][ T5933] ext4_xattr_inode_dec_ref_all+0x9ad/0x1060 [ 88.219185][ T5933] ? ext4_xattr_delete_inode+0xd10/0xd10 [ 88.224815][ T5933] ? __ext4_journal_ensure_credits+0x450/0x450 [ 88.230981][ T5933] ext4_xattr_delete_inode+0xb3e/0xd10 [ 88.236457][ T5933] ? up_write+0x1c3/0x410 [ 88.240786][ T5933] ? ext4_expand_extra_isize_ea+0x1e80/0x1e80 [ 88.246864][ T5933] ext4_evict_inode+0xaaf/0xea0 [ 88.251709][ T5933] ? _raw_spin_unlock+0x28/0x40 [ 88.256563][ T5933] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 88.262455][ T5933] ? do_raw_spin_unlock+0x121/0x230 [ 88.267655][ T5933] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 88.273576][ T5933] evict+0x4ca/0x8d0 [ 88.277506][ T5933] ? proc_nr_inodes+0x230/0x230 [ 88.282481][ T5933] ? do_raw_spin_unlock+0x121/0x230 [ 88.287711][ T5933] ? _raw_spin_unlock+0x28/0x40 [ 88.292576][ T5933] ? iput+0x706/0x920 [ 88.296569][ T5933] ext4_orphan_cleanup+0xbec/0x1420 [ 88.301787][ T5933] ? ext4_orphan_del+0xbf0/0xbf0 [ 88.306732][ T5933] ? ext4_register_li_request+0x183/0x940 [ 88.312452][ T5933] ? errseq_check_and_advance+0x66/0x120 [ 88.318093][ T5933] ext4_fill_super+0x5eea/0x67b0 [ 88.323157][ T5933] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 88.329408][ T5933] ? __might_sleep+0xe0/0xe0 [ 88.334021][ T5933] ? read_lock_is_recursive+0x20/0x20 [ 88.339407][ T5933] ? snprintf+0xe9/0x140 [ 88.343767][ T5933] ? down_read_killable+0x340/0x340 [ 88.348993][ T5933] ? setup_bdev_super+0x56b/0x660 [ 88.354031][ T5933] get_tree_bdev+0x3f3/0x520 [ 88.358626][ T5933] ? vfs_parse_fs_string+0x170/0x170 [ 88.363926][ T5933] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 88.370170][ T5933] ? setup_bdev_super+0x660/0x660 [ 88.375194][ T5933] ? apparmor_capable+0x137/0x1a0 [ 88.380227][ T5933] ? bpf_lsm_capable+0x9/0x10 [ 88.384909][ T5933] ? security_capable+0x89/0xb0 [ 88.389759][ T5933] vfs_get_tree+0x8c/0x280 [ 88.394172][ T5933] do_new_mount+0x24b/0xa40 [ 88.398673][ T5933] __se_sys_mount+0x2e7/0x3d0 [ 88.403348][ T5933] ? __x64_sys_mount+0xc0/0xc0 [ 88.408118][ T5933] ? lockdep_hardirqs_on+0x98/0x150 [ 88.413313][ T5933] ? __x64_sys_mount+0x20/0xc0 [ 88.418068][ T5933] do_syscall_64+0x55/0xb0 [ 88.422474][ T5933] ? clear_bhb_loop+0x40/0x90 [ 88.427145][ T5933] ? clear_bhb_loop+0x40/0x90 [ 88.431817][ T5933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.437726][ T5933] RIP: 0033:0x7fa50399e0ca [ 88.442155][ T5933] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.461769][ T5933] RSP: 002b:00007fa5047abe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.470205][ T5933] RAX: ffffffffffffffda RBX: 00007fa5047abee0 RCX: 00007fa50399e0ca [ 88.478184][ T5933] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fa5047abea0 [ 88.486160][ T5933] RBP: 0000200000000180 R08: 00007fa5047abee0 R09: 0000000000000000 [ 88.494122][ T5933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 88.502090][ T5933] R13: 00007fa5047abea0 R14: 0000000000000476 R15: 00002000000001c0 [ 88.510070][ T5933] [ 88.513410][ T5933] Kernel Offset: disabled [ 88.517773][ T5933] Rebooting in 86400 seconds..