last executing test programs: 1m22.157713962s ago: executing program 2 (id=14): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000180)="f7", 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x200002e6) 1m21.424690436s ago: executing program 2 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x7cac, &(0x7f0000000040)={0x0, 0x753a, 0x8, 0x1, 0x1fd}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x83, 0x0, 0x0, @remote}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1m20.487855554s ago: executing program 2 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xfff1}, {0x1}}}, 0x24}}, 0x0) 1m19.769745367s ago: executing program 2 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r3 = syz_open_pts(r2, 0x141601) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x200007, 0x19, "680c1acfa4a5000000070000faffffff000800"}) 1m16.475132451s ago: executing program 2 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000004c0), r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000003c0)={0x7, 0x8, 0xfa9d, {r6, 0x6}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 1m15.45855311s ago: executing program 2 (id=33): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 59.622261734s ago: executing program 32 (id=33): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 8.143554364s ago: executing program 3 (id=281): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1a43) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) shutdown(r1, 0x1) 7.958058427s ago: executing program 3 (id=283): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x1c, r0, 0x62c21a4ade68aba1, 0x70bd28, 0xfffffffd, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 7.028887005s ago: executing program 5 (id=289): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = io_uring_setup(0x7cac, &(0x7f0000000040)={0x0, 0x753a, 0x8, 0x1, 0x1fd}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x83, 0x0, 0x0, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6.882617508s ago: executing program 5 (id=290): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$eJzs3U9oHPUeAPDvzGZf/+U1ffAevPfooahQoXST9I9WT+1VLBR6KHipYbMNIZtsyG60CTmk9yL2ICq91JsePCoePIgXwYtXL4pnodig0PSgK/svbZPduKlJN81+PjDZ+c1vdr+/38x+J78ZZtgA+tax2p804n8RcSmJGHqkbiCalcca662uLOUfrCzlk6hWL/+SRBIR91eW8q31k+broYhYjoj/RsTX2YgT6ca45YXFqbFisTDXLA9XpmeHywuLJyenxyYKE4WZ0y+/cvbcmbOjp0Y7Nz67tb7e/PHWOze/e+3OrU8+Pbqcf28sifMx2Kx7tB/bqbFNsnF+3fIzOxGsh5JeN4AnkmnmeS2V/hNDkWlmfTvVoafaNGCHVfdFVLciWd7S6sBulmwt/4E9ozUOqJ3/tqbHBgiZDgOHfdsz/rh7oXECUou72pwaNQONaxOxv35ucvDX5LEzk9r55pHtaQJ9bPlGRIwMDGz8/ifN79+TG9mOBrKjvrrQ2FEb93+6dvyJNsefwda107+pdfxb3XD8exg/0+H4d6nLGL+/8dOHHePfiPh/2/jJWvykTfw0It7sMv7tK1+c61RX/SjieLSP35Jsfn14+NpksTDS+Ns2xpfHj766Wf8PdojfuGa7v/5vpt32n+2y/59/89lzy5vEf/H5zfd/u+1/ICLe7TL+v+5//Hqnurs3knu1UcBW939t2Z0u4790/tgPHaoOdPkRAAAAAAAAAABAG2n9XrYkza3Np2ku13iG999xMC2WypUT10rzM+ONe96ORDZt3Wk11CgntfJo837cVvnUuvLp1n3EmQP1ci5fKo73uO8AAAAAAAAAAAAAAAAAAACwWxxa9/z/b5n68//rf64a2Ks6/+Q3sNfJf+hfj+d/sm0/7gvsfo/k/4NetgN46qrG/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74tLFi7Wp+mBlKV8rjw8szE+V3jo5XihP5abn87l8aW42N1EqTRQLuXxp+q8+r1gqzY7EzPz14UqhXBkuLyxenS7Nz1SuTk6PTRSuFrJPpVcAAAAAAAAAAAAAAAAAAADwbBmsT0mai4i0Pp+muVzEPyPiSGSTa5PFwkhEHI6I7zPZfbXyaK8bDQAAAAAAAAAAAAAAAAAAAHtMeWFxaqxYLMz1yczAhiXfdl45Ipa3txm1T9zyu7LNfbVbtuGzNnN483Uy0fMW7saZHh+YAAAAAAAAAAAAAAAAAACgDz186Lfbd/yxsw0CAAAAAAAAAAAAAAAAAACAvpT+nEREbTo+9MLg+tp/JKuZ+mtEvH378vvXxyqVudHa8ntryysfNJef6i7ilW3vA9CNVp628hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4qLywODVWLBbmdnCm130EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBJ/BgAA//9UNdg0") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x200002e6) 6.650970162s ago: executing program 5 (id=291): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4400610}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x10, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000840) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.296853958s ago: executing program 3 (id=292): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003740)={{r0}, &(0x7f0000000400), &(0x7f0000003700)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x2010, r4, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c0006800500010000000000470002800500010001"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) 5.296175868s ago: executing program 5 (id=294): socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x2, 0xf}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 5.230313869s ago: executing program 0 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 4.879001446s ago: executing program 0 (id=297): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x13}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 4.786869298s ago: executing program 0 (id=299): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x1b) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f", 0x9f}, {0x0}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x11a}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f", 0x75}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r2, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) 4.65503166s ago: executing program 3 (id=300): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = io_uring_setup(0x7cac, &(0x7f0000000040)={0x0, 0x753a, 0x8, 0x1, 0x1fd}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x83, 0x0, 0x0, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.634979091s ago: executing program 0 (id=301): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x200002e6) 4.326194707s ago: executing program 3 (id=303): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100b6"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.312250827s ago: executing program 1 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.001442973s ago: executing program 0 (id=306): socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 3.947883154s ago: executing program 3 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863cac505", 0x14}, {&(0x7f0000000000)="448b7cff030000000000008a15df09", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70ff16f304874ef539d80e29baefbb8c", 0x18}], 0x3) 3.860188166s ago: executing program 1 (id=308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x120}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 3.607098871s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x2) 2.408072884s ago: executing program 4 (id=311): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003740)={{r0}, &(0x7f0000000400), &(0x7f0000003700)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x2010, r4, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_mpls={0x40, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c0006800500010000000000470002800500010001"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) 2.407739874s ago: executing program 1 (id=312): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x1b) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f", 0x9f}, {&(0x7f0000001940)}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x11a}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f", 0x75}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r2, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) 2.220843797s ago: executing program 1 (id=313): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = io_uring_setup(0x7cac, &(0x7f0000000040)={0x0, 0x753a, 0x8, 0x1, 0x1fd}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x83, 0x0, 0x0, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.069477791s ago: executing program 1 (id=314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1.940210173s ago: executing program 4 (id=315): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') bind$packet(r0, &(0x7f0000000280)={0x11, 0x9, 0x0, 0x1, 0x0, 0x6, @random="da306236efee"}, 0x14) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) 1.754253586s ago: executing program 5 (id=316): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000cc0)=ANY=[@ANYRES32], 0x200002e6) 1.748212857s ago: executing program 4 (id=317): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b704"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 1.484139472s ago: executing program 4 (id=318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0xd4d, &(0x7f0000000240)={0x0, 0xdb60, 0x40, 0x0, 0x12f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480), 0x0) 1.463268552s ago: executing program 5 (id=319): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4400610}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x10, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000840) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.301317465s ago: executing program 4 (id=320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x120}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 1.166144258s ago: executing program 4 (id=321): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 0s ago: executing program 0 (id=322): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 75.251811][ T4254] cgroup: Unknown subsys name 'net' [ 75.417279][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.950756][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.138067][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.147238][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.156125][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.163157][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.164702][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.172082][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.179282][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.185985][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.193402][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.200134][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.206842][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.213673][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.220510][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.227330][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.242616][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.250504][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.251113][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.257798][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.266227][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.275839][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.281222][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.287137][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.293082][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.300699][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.307471][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.315141][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.321836][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.330511][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.336816][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.381000][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.823352][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 79.868483][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 79.920093][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 80.017256][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 80.064314][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.072589][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.081242][ T4265] device bridge_slave_0 entered promiscuous mode [ 80.123751][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 80.134696][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.141948][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.150370][ T4265] device bridge_slave_1 entered promiscuous mode [ 80.176747][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.184242][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.192878][ T4266] device bridge_slave_0 entered promiscuous mode [ 80.206127][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.213651][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.222482][ T4266] device bridge_slave_1 entered promiscuous mode [ 80.244035][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.251717][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.259643][ T4275] device bridge_slave_0 entered promiscuous mode [ 80.294518][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.301808][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.309709][ T4275] device bridge_slave_1 entered promiscuous mode [ 80.334040][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.346343][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.376968][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.415469][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.429840][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.466440][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.502390][ T4265] team0: Port device team_slave_0 added [ 80.510514][ T4266] team0: Port device team_slave_0 added [ 80.517238][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.524701][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.533131][ T4273] device bridge_slave_0 entered promiscuous mode [ 80.560167][ T4266] team0: Port device team_slave_1 added [ 80.567970][ T4265] team0: Port device team_slave_1 added [ 80.574658][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.582139][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.590130][ T4273] device bridge_slave_1 entered promiscuous mode [ 80.600706][ T4275] team0: Port device team_slave_0 added [ 80.607276][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.615230][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.623207][ T4267] device bridge_slave_0 entered promiscuous mode [ 80.657314][ T4275] team0: Port device team_slave_1 added [ 80.663482][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.670596][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.679184][ T4267] device bridge_slave_1 entered promiscuous mode [ 80.738708][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.745966][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.772190][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.784808][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.791859][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.817897][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.831589][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.849210][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.857094][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.883288][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.902985][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.910511][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.936970][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.948696][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.956044][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.982368][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.995556][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.005477][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.012552][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.038909][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.052944][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.085580][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.144730][ T4266] device hsr_slave_0 entered promiscuous mode [ 81.152351][ T4266] device hsr_slave_1 entered promiscuous mode [ 81.162413][ T4273] team0: Port device team_slave_0 added [ 81.187528][ T4273] team0: Port device team_slave_1 added [ 81.203883][ T4265] device hsr_slave_0 entered promiscuous mode [ 81.211666][ T4265] device hsr_slave_1 entered promiscuous mode [ 81.218665][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.227533][ T4265] Cannot create hsr debugfs directory [ 81.245931][ T4267] team0: Port device team_slave_0 added [ 81.272579][ T4275] device hsr_slave_0 entered promiscuous mode [ 81.279901][ T4275] device hsr_slave_1 entered promiscuous mode [ 81.287308][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.295367][ T4275] Cannot create hsr debugfs directory [ 81.306328][ T4267] team0: Port device team_slave_1 added [ 81.361793][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 81.369935][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.377058][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.403515][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.441086][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 81.441165][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 81.447408][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 81.453725][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 81.490039][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.497272][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.523733][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.551686][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.558688][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.584850][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.618937][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.626210][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.652880][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.762087][ T4273] device hsr_slave_0 entered promiscuous mode [ 81.769071][ T4273] device hsr_slave_1 entered promiscuous mode [ 81.776155][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.784314][ T4273] Cannot create hsr debugfs directory [ 81.823154][ T4267] device hsr_slave_0 entered promiscuous mode [ 81.830361][ T4267] device hsr_slave_1 entered promiscuous mode [ 81.837535][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.846405][ T4267] Cannot create hsr debugfs directory [ 81.980246][ T4266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.008393][ T4266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.021104][ T4266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.054725][ T4266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.137803][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.156872][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.167438][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.188043][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.226513][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.253965][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.285036][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.311291][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.369239][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.379663][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.406142][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.414764][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.426201][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.477060][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.505671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.516499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.548550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.558819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.573011][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.580343][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.590391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.601680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.610222][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.617586][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.652050][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.660400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.669858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.679864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.696168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.706289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.718633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.733274][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.744252][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.757083][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.777755][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.791924][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.800265][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.808468][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.816908][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.826366][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.837047][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.847593][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.858001][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.882958][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.892787][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.901547][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.908757][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.917661][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.926512][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.935942][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.945106][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.953954][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.961146][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.982289][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.992341][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.004110][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.013761][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.023052][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.063714][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.077226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.087803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.104031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.116852][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.124073][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.137473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.181149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.198694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.208506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.218311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.228804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.239873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.249472][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.256786][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.266151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.275543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.292970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.302665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.318247][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.339531][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.356583][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.374010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.401537][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.416246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.432596][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.447452][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 83.457183][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.472394][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.488042][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.499914][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.514598][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.522692][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 83.522732][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 83.522760][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 83.535587][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 83.549585][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.558811][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.567836][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.575027][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.583376][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.592442][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.601936][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.609057][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.619470][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.628044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.674708][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.686332][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.713055][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.728645][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.737986][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.747893][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.757080][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.766804][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.777892][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.787755][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.797369][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.806435][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.815804][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.826479][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.838067][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.847198][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.896260][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.918484][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.941368][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.977134][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.002845][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.025057][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.123203][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.130630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.153435][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.209707][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.271281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.279665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.304560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.331930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.346649][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.353913][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.363836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.373329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.391893][ T4266] device veth0_vlan entered promiscuous mode [ 84.415379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.432067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.444692][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.454219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.465236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.474665][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.481895][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.522894][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.535166][ T4266] device veth1_vlan entered promiscuous mode [ 84.548120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.557807][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.579547][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.597415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.607615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.618910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.627075][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.636080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.646090][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.654668][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.699270][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.710199][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.720275][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.730688][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.739619][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.748496][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.757874][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.789470][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.818819][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.830738][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.840946][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.850048][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.860129][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.867923][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.882463][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.902726][ T4265] device veth0_vlan entered promiscuous mode [ 84.924579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.937124][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.948900][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.972311][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.004318][ T4266] device veth0_macvtap entered promiscuous mode [ 85.022044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.030127][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.038963][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.064620][ T4266] device veth1_macvtap entered promiscuous mode [ 85.077494][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.086718][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.096353][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.107121][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.117006][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.135232][ T4265] device veth1_vlan entered promiscuous mode [ 85.150562][ T4273] device veth0_vlan entered promiscuous mode [ 85.165171][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.177960][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.214730][ T4273] device veth1_vlan entered promiscuous mode [ 85.248796][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.268091][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.278718][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.290655][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.299632][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.310275][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.365231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.376425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.387649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.396813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.405635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.415930][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.425290][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.435915][ T4265] device veth0_macvtap entered promiscuous mode [ 85.447967][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.462323][ T4275] device veth0_vlan entered promiscuous mode [ 85.474359][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.483520][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.493831][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.503229][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.510762][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.521420][ T4265] device veth1_macvtap entered promiscuous mode [ 85.531094][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 85.541674][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.557086][ T4275] device veth1_vlan entered promiscuous mode [ 85.571523][ T4266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.580611][ T4266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.597848][ T4266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.609966][ T4266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.612484][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 85.625370][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 85.625391][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 85.631614][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 85.648422][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.666253][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.680680][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.692044][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.709577][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.719085][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.734075][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.746916][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.756766][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.767935][ T4273] device veth0_macvtap entered promiscuous mode [ 85.798396][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.813666][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.834411][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.851552][ T4273] device veth1_macvtap entered promiscuous mode [ 85.863053][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.875966][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.886736][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.896647][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.907771][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.920033][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.931666][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.940627][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.949790][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.020072][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.052794][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.066425][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.079386][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.100367][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.125635][ T4275] device veth0_macvtap entered promiscuous mode [ 86.153453][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.168200][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.178502][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.188429][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.197998][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.225239][ T4275] device veth1_macvtap entered promiscuous mode [ 86.248215][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.263325][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.274382][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.285335][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.297789][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.332403][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.347446][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.381670][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.389996][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.401554][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.416827][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.437341][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.447998][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.458129][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.468787][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.480147][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.491856][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.500637][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.510313][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.519334][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.550541][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.566303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.575802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.588301][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.603218][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.614339][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.625284][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.635414][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.646183][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.658033][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.690129][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.691060][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.698666][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.709158][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.727967][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.737002][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.745983][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.755225][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.794631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.805084][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.817617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.871476][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.879725][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.897281][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.918783][ T4267] device veth0_vlan entered promiscuous mode [ 86.939489][ T1169] cfg80211: failed to load regulatory.db [ 86.957011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.980454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.992682][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.008775][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.038796][ T4267] device veth1_vlan entered promiscuous mode [ 87.050276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.061842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.070134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.078914][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.172774][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.182302][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.216869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.229203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.255487][ T4267] device veth0_macvtap entered promiscuous mode [ 87.311951][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.322675][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.341509][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.349620][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.368977][ T4267] device veth1_macvtap entered promiscuous mode [ 87.394354][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.406346][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.415982][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.427385][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.474796][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.508439][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.540735][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.576109][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.586878][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.601394][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 87.615995][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.665430][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.681420][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 87.682517][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 87.687480][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 87.694253][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 87.716674][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.757498][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.813789][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.859568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.869672][ T4390] loop2: detected capacity change from 0 to 8192 [ 87.886729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.908066][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.956153][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.958472][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.966860][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.011620][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.030838][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.057418][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.078143][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.104671][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.133122][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.170462][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.208073][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.225135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.259868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.285805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.314125][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.343501][ T26] audit: type=1800 audit(1757562204.967:2): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=1048586 res=0 errno=0 [ 88.390902][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.399892][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.443171][ T26] audit: type=1804 audit(1757562204.987:3): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/bus/file1" dev="loop2" ino=1048586 res=1 errno=0 [ 88.471725][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.595649][ T4395] loop3: detected capacity change from 0 to 1024 [ 88.621627][ T4395] ======================================================= [ 88.621627][ T4395] WARNING: The mand mount option has been deprecated and [ 88.621627][ T4395] and is ignored by this kernel. Remove the mand [ 88.621627][ T4395] option from the mount to silence this warning. [ 88.621627][ T4395] ======================================================= [ 88.733753][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.772175][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.847373][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.870430][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.879272][ T4395] EXT4-fs: Ignoring removed oldalloc option [ 88.900428][ T4395] EXT4-fs: Ignoring removed bh option [ 88.918659][ T4397] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.956575][ T4395] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.012640][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.022863][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.090217][ T4395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 89.199597][ T4397] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.345452][ T4406] loop2: detected capacity change from 0 to 1024 [ 89.708506][ T4406] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 89.729362][ T4406] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 89.739570][ T4406] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.7: Failed to acquire dquot type 0 [ 89.769810][ T4406] EXT4-fs error (device loop2): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 89.811120][ T4406] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.7: corrupted inode contents [ 89.835351][ T4406] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #13: comm syz.2.7: mark_inode_dirty error [ 89.837009][ T4397] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.865579][ T4406] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.7: corrupted inode contents [ 89.892128][ T4406] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.7: mark_inode_dirty error [ 89.915319][ T4406] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.7: corrupted inode contents [ 89.961890][ T4406] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 89.987556][ T4406] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.7: corrupted inode contents [ 90.022723][ T4406] EXT4-fs error (device loop2): ext4_truncate:4312: inode #13: comm syz.2.7: mark_inode_dirty error [ 90.040182][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 90.082181][ T4406] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 90.094535][ T4397] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.122131][ T4406] EXT4-fs (loop2): 1 truncate cleaned up [ 90.131088][ T4406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.396136][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 90.427588][ T4397] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.471307][ T26] audit: type=1326 audit(1757562207.087:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.3.8" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x0 [ 90.505618][ T4397] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.548180][ T4397] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.572769][ T26] audit: type=1326 audit(1757562207.197:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5af8eba9 code=0x7ffc0000 [ 90.595203][ T4417] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8'. [ 90.609545][ T4397] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.621178][ T4417] netlink: 31 bytes leftover after parsing attributes in process `syz.3.8'. [ 90.644051][ T4418] process 'syz.4.11' launched '/dev/ptmx' with NULL argv: empty string added [ 90.646463][ T4417] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 90.666305][ T26] audit: type=1326 audit(1757562207.197:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b5af8eba9 code=0x7ffc0000 [ 90.695954][ T26] audit: type=1326 audit(1757562207.197:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5af8eba9 code=0x7ffc0000 [ 90.776076][ T26] audit: type=1326 audit(1757562207.197:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5af8eba9 code=0x7ffc0000 [ 90.805665][ T26] audit: type=1326 audit(1757562207.197:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b5af8eba9 code=0x7ffc0000 [ 91.030223][ T4426] loop2: detected capacity change from 0 to 1024 [ 91.085194][ T4426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.102587][ T4426] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.117926][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 91.470880][ T4430] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 91.662292][ T4352] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 156 with error 117 [ 91.691047][ T4352] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.691047][ T4352] [ 91.720410][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 91.751728][ T4352] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 91.770608][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 91.790905][ T4352] EXT4-fs (loop2): This should not happen!! Data will be lost [ 91.790905][ T4352] [ 91.800646][ T4352] EXT4-fs (loop2): Total free blocks count 0 [ 91.871021][ T4352] EXT4-fs (loop2): Free/Dirty block details [ 91.891025][ T4352] EXT4-fs (loop2): free_blocks=0 [ 91.896097][ T4352] EXT4-fs (loop2): dirty_blocks=32 [ 91.902192][ T4440] loop3: detected capacity change from 0 to 1024 [ 91.961034][ T4352] EXT4-fs (loop2): Block reservation details [ 91.979843][ T4446] loop1: detected capacity change from 0 to 512 [ 92.011402][ T4440] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.051960][ T4446] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.160869][ T4446] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 92.169651][ T4440] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.438676][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 92.743554][ T4469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 92.895317][ T4439] hub 8-0:1.0: USB hub found [ 92.909307][ T4439] hub 8-0:1.0: 1 port detected [ 92.927431][ T4471] loop1: detected capacity change from 0 to 512 [ 92.999540][ T4471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.028552][ T4473] tipc: Started in network mode [ 93.059526][ T4471] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.073411][ T4473] tipc: Node identity 0a58b541beea, cluster identity 4711 [ 93.128629][ T4473] tipc: Enabled bearer , priority 0 [ 93.545705][ T4481] usb usb8: usbfs: process 4481 (syz.4.26) did not claim interface 0 before use [ 95.512612][ T4341] tipc: Node number set to 3031610689 [ 95.648998][ T26] kauditd_printk_skb: 302 callbacks suppressed [ 95.649016][ T26] audit: type=1800 audit(1757562212.267:312): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.24" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 95.758466][ T4478] device syzkaller0 entered promiscuous mode [ 95.787153][ T4478] tipc: Resetting bearer [ 96.020789][ C1] sched: RT throttling activated [ 96.295190][ T4352] tipc: Resetting bearer [ 96.347309][ T4472] tipc: Resetting bearer [ 96.772356][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 96.937293][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 96.996495][ T4497] netlink: 312 bytes leftover after parsing attributes in process `syz.2.30'. [ 97.046679][ T26] audit: type=1326 audit(1757562213.667:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5af8eba9 code=0x7ffc0000 [ 97.099275][ T4500] loop1: detected capacity change from 0 to 512 [ 97.158615][ T26] audit: type=1326 audit(1757562213.697:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b5af8d510 code=0x7ffc0000 [ 97.181530][ T4500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.254659][ T4500] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.254766][ T4500] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.352591][ T4500] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz.1.31: corrupted xattr block 19 [ 97.498293][ T26] audit: type=1326 audit(1757562214.117:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5af8eba9 code=0x7ffc0000 [ 97.556720][ T26] audit: type=1326 audit(1757562214.117:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4496 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5af8eba9 code=0x7ffc0000 [ 97.580744][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 98.000157][ T4511] loop1: detected capacity change from 0 to 512 [ 98.028765][ T4511] EXT4-fs: Ignoring removed nobh option [ 98.055841][ T4511] EXT4-fs (loop1): failed to initialize system zone (-117) [ 98.071191][ T4511] EXT4-fs (loop1): mount failed [ 99.950475][ T4516] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 101.459480][ T4472] tipc: Disabling bearer [ 101.469407][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 101.479270][ T4516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.35'. [ 101.530959][ T4516] bond0: invalid ARP target 0.0.0.0 specified for addition [ 101.538265][ T4516] bond0: option arp_ip_target: invalid value (0) [ 101.773396][ T26] audit: type=1326 audit(1757562218.397:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 101.852592][ T26] audit: type=1326 audit(1757562218.417:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 101.919904][ T26] audit: type=1326 audit(1757562218.417:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 101.984979][ T26] audit: type=1326 audit(1757562218.417:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 102.055059][ T26] audit: type=1326 audit(1757562218.417:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4520 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 102.218613][ T4530] usb usb8: usbfs: process 4530 (syz.4.40) did not claim interface 0 before use [ 104.044122][ T4555] loop0: detected capacity change from 0 to 8192 [ 104.434441][ T26] audit: type=1800 audit(1757562221.057:322): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.48" name="file1" dev="loop0" ino=1048596 res=0 errno=0 [ 104.455394][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.531033][ T26] audit: type=1804 audit(1757562221.057:323): pid=4559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.48" name="/newroot/6/bus/file1" dev="loop0" ino=1048596 res=1 errno=0 [ 104.807337][ T4562] loop0: detected capacity change from 0 to 512 [ 104.826111][ T4562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.921892][ T4562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.964028][ T4562] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.066835][ T4562] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz.0.50: corrupted xattr block 19 [ 105.090271][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 105.112663][ T4567] netlink: 312 bytes leftover after parsing attributes in process `syz.1.51'. [ 105.153948][ T26] audit: type=1326 audit(1757562221.777:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4566 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 105.210612][ T26] audit: type=1326 audit(1757562221.807:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4566 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 105.260926][ T26] audit: type=1326 audit(1757562221.807:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4566 comm="syz.1.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5bcf8d510 code=0x7ffc0000 [ 105.293521][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 105.422484][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 105.600846][ T4575] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.058657][ T4576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 106.327177][ T4575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.561172][ T4580] usb usb8: usbfs: process 4580 (syz.1.54) did not claim interface 0 before use [ 106.638731][ T4575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.373861][ T4575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.547819][ T4575] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.590737][ T4575] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.635187][ T4575] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.674298][ T4575] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.835525][ T4598] usb usb8: usbfs: process 4598 (syz.3.58) did not claim interface 0 before use [ 109.916600][ T4602] loop3: detected capacity change from 0 to 512 [ 110.105694][ T4602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.105793][ T4602] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.876872][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 111.876888][ T26] audit: type=1800 audit(1757562228.497:332): pid=4621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.61" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 112.879527][ T4632] usb usb8: usbfs: process 4632 (syz.0.68) did not claim interface 0 before use [ 113.040303][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 113.200668][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 113.634458][ T4636] loop0: detected capacity change from 0 to 512 [ 113.748430][ T4636] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 114.278809][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 114.300922][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 114.384606][ T4649] usb usb8: usbfs: process 4649 (syz.0.73) did not claim interface 0 before use [ 115.121628][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 115.131234][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 115.139438][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 115.148019][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 115.155830][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 115.239257][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 115.668791][ T4648] chnl_net:caif_netlink_parms(): no params data found [ 115.738859][ T4646] hub 8-0:1.0: USB hub found [ 115.746751][ T4646] hub 8-0:1.0: 1 port detected [ 115.747065][ T4509] Set syz1 is full, maxelem 65536 reached [ 115.828764][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.838671][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.854255][ T4648] device bridge_slave_0 entered promiscuous mode [ 115.890263][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.912088][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.941196][ T4648] device bridge_slave_1 entered promiscuous mode [ 116.027789][ T4648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.069230][ T4648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.197872][ T4648] team0: Port device team_slave_0 added [ 116.242920][ T4648] team0: Port device team_slave_1 added [ 116.320739][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.333330][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.359447][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.366093][ T4648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.382282][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.389354][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.426816][ T4648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.512226][ T4648] device hsr_slave_0 entered promiscuous mode [ 116.519232][ T4648] device hsr_slave_1 entered promiscuous mode [ 116.526475][ T4648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.535286][ T4648] Cannot create hsr debugfs directory [ 116.652601][ T4648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.664587][ T4648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.675707][ T4648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.689042][ T4648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.769534][ T4648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.795062][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.803949][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.816016][ T4648] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.830737][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.839940][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.848811][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.855993][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.865128][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.880436][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.905226][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.923427][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.930659][ T4652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.949404][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.959834][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.004767][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.017136][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.028958][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.052107][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.071605][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.090510][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.113742][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.144008][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.178714][ T4683] loop4: detected capacity change from 0 to 1024 [ 117.187777][ T4684] loop1: detected capacity change from 0 to 1024 [ 117.267653][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.281198][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 117.304071][ T4683] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.318380][ T4684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.331874][ T4684] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.350712][ T4683] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.469622][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.666341][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.714095][ T4701] loop0: detected capacity change from 0 to 512 [ 117.768039][ T4701] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.868127][ T4701] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.150907][ T4707] usb usb8: usbfs: process 4707 (syz.3.81) did not claim interface 0 before use [ 119.367233][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 119.447890][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.898662][ T4611] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 121.431366][ T26] audit: type=1326 audit(1757562238.057:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 121.454532][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 121.483485][ T26] audit: type=1326 audit(1757562238.087:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 121.513027][ T26] audit: type=1326 audit(1757562238.087:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 121.558474][ T26] audit: type=1326 audit(1757562238.087:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 121.629507][ T26] audit: type=1326 audit(1757562238.087:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 121.667163][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 121.688098][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 121.710720][ T4531] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1520 with error 117 [ 121.756963][ T4648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.799893][ T4531] EXT4-fs (loop4): This should not happen!! Data will be lost [ 121.799893][ T4531] [ 121.816265][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.827420][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.858598][ T26] audit: type=1326 audit(1757562238.087:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 121.952949][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 121.958438][ T26] audit: type=1326 audit(1757562238.087:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 121.984609][ T26] audit: type=1326 audit(1757562238.087:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 122.119977][ T4531] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 122.165405][ T26] audit: type=1326 audit(1757562238.087:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 122.188132][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.205330][ T4531] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.205330][ T4531] [ 122.251131][ T4531] EXT4-fs (loop4): Total free blocks count 0 [ 122.388641][ T4531] EXT4-fs (loop4): Free/Dirty block details [ 122.442206][ T4531] EXT4-fs (loop4): free_blocks=0 [ 122.459701][ T26] audit: type=1326 audit(1757562238.087:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4712 comm="syz.3.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 122.527047][ T4531] EXT4-fs (loop4): dirty_blocks=32 [ 122.615224][ T4732] usb usb8: usbfs: process 4732 (syz.1.93) did not claim interface 0 before use [ 122.753635][ T4531] EXT4-fs (loop4): Block reservation details [ 122.948417][ T4531] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 123.298803][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 123.521196][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 123.610670][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 123.640451][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 124.457733][ T4745] hub 8-0:1.0: USB hub found [ 124.524707][ T4745] hub 8-0:1.0: 1 port detected [ 124.720384][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.721624][ T4770] loop0: detected capacity change from 0 to 1024 [ 124.736472][ T4771] netlink: 44 bytes leftover after parsing attributes in process `syz.1.95'. [ 124.756361][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.764964][ T4771] netlink: 31 bytes leftover after parsing attributes in process `syz.1.95'. [ 124.765011][ T4771] netlink: 'syz.1.95': attribute type 4 has an invalid length. [ 124.897041][ T4770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.905977][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.925363][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.938128][ T4770] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.952915][ T4648] device veth0_vlan entered promiscuous mode [ 125.063984][ T4777] loop4: detected capacity change from 0 to 1024 [ 125.155136][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.172622][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.192441][ T4777] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.97: Failed to acquire dquot type 0 [ 125.198291][ T4648] device veth1_vlan entered promiscuous mode [ 125.248014][ T4784] tipc: Enabled bearer , priority 0 [ 125.271156][ T4775] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 125.289165][ T4777] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 125.339457][ T9] device hsr_slave_0 left promiscuous mode [ 125.396784][ T4777] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #13: comm syz.4.97: corrupted inode contents [ 125.408871][ T9] device hsr_slave_1 left promiscuous mode [ 125.424038][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.448250][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.456617][ T4777] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #13: comm syz.4.97: mark_inode_dirty error [ 125.478678][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.487602][ T4777] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #13: comm syz.4.97: corrupted inode contents [ 125.501019][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.520195][ T4777] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #13: comm syz.4.97: mark_inode_dirty error [ 125.536033][ T9] device bridge_slave_1 left promiscuous mode [ 125.546627][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.567840][ T4777] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #13: comm syz.4.97: corrupted inode contents [ 125.584852][ T4777] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 125.589986][ T4652] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 125.608595][ T9] device bridge_slave_0 left promiscuous mode [ 125.614999][ T4777] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #13: comm syz.4.97: corrupted inode contents [ 125.617741][ T4652] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.617741][ T4652] [ 125.631136][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.661534][ T4777] EXT4-fs error (device loop4): ext4_truncate:4312: inode #13: comm syz.4.97: mark_inode_dirty error [ 125.698017][ T4777] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 125.719648][ T9] device veth1_macvtap left promiscuous mode [ 125.727886][ T9] device veth0_macvtap left promiscuous mode [ 125.734894][ T9] device veth1_vlan left promiscuous mode [ 125.741347][ T9] device veth0_vlan left promiscuous mode [ 125.748565][ T4777] EXT4-fs (loop4): 1 truncate cleaned up [ 125.753965][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 125.757412][ T4777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.930543][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 126.265964][ T4794] usb usb8: usbfs: process 4794 (syz.0.100) did not claim interface 0 before use [ 127.305965][ T9] team0 (unregistering): Port device team_slave_1 removed [ 127.346595][ T9] team0 (unregistering): Port device team_slave_0 removed [ 127.390373][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.434108][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.863842][ T9] bond0 (unregistering): Released all slaves [ 127.968326][ T4778] tipc: Disabling bearer [ 127.994414][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.004682][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.102623][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.132057][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.205351][ T4648] device veth0_macvtap entered promiscuous mode [ 128.249801][ T4803] loop4: detected capacity change from 0 to 1024 [ 128.270193][ T4648] device veth1_macvtap entered promiscuous mode [ 128.308170][ T4803] EXT4-fs: Ignoring removed oldalloc option [ 128.332991][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.353495][ T4803] EXT4-fs: Ignoring removed bh option [ 128.356410][ T4811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 128.385992][ T4803] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.408455][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.415041][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 128.441556][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.482322][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.499856][ T4803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.503057][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.608154][ T4819] netlink: 44 bytes leftover after parsing attributes in process `syz.0.109'. [ 128.645589][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.681070][ T4819] netlink: 59 bytes leftover after parsing attributes in process `syz.0.109'. [ 128.698091][ T4819] netlink: 59 bytes leftover after parsing attributes in process `syz.0.109'. [ 128.713079][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.754498][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.806229][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.853413][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.892541][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.894687][ T4823] loop3: detected capacity change from 0 to 1024 [ 128.951000][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.992884][ T4823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 129.025653][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.035847][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.046588][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.056579][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.067313][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.081490][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.089020][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.100969][ T4823] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.124126][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.183122][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.189097][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 129.239906][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.274348][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.325094][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.382032][ T4648] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.423312][ T4648] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.455007][ T4648] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.515894][ T4648] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.712826][ T4844] usb usb8: usbfs: process 4844 (syz.4.113) did not claim interface 0 before use [ 130.499493][ T4735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.527518][ T4633] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:13: bg 0: block 393: padding at end of block bitmap is not set [ 130.542965][ T4735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.545888][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.587267][ T4633] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 964 with error 117 [ 130.609074][ T4633] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.609074][ T4633] [ 130.649767][ T4650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.700717][ T4650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.711939][ T4849] tipc: Started in network mode [ 130.725550][ T4849] tipc: Node identity ae0733d2cb4, cluster identity 4711 [ 130.738178][ T4633] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 130.756160][ T4633] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.756160][ T4633] [ 130.767814][ T4633] EXT4-fs (loop3): Total free blocks count 0 [ 130.778020][ T4849] tipc: Enabled bearer , priority 0 [ 130.783109][ T4633] EXT4-fs (loop3): Free/Dirty block details [ 130.793808][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.815911][ T4633] EXT4-fs (loop3): free_blocks=0 [ 130.832472][ T4633] EXT4-fs (loop3): dirty_blocks=32 [ 130.854930][ T4633] EXT4-fs (loop3): Block reservation details [ 130.867393][ T4848] tipc: Disabling bearer [ 130.937707][ T4855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 131.395463][ T4864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.121'. [ 131.428208][ T4864] netlink: 59 bytes leftover after parsing attributes in process `syz.3.121'. [ 131.487895][ T4864] netlink: 59 bytes leftover after parsing attributes in process `syz.3.121'. [ 131.575269][ T4868] loop5: detected capacity change from 0 to 164 [ 131.679563][ T4868] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.724825][ T4868] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 132.478927][ T4894] usb usb8: usbfs: process 4894 (syz.5.128) did not claim interface 0 before use [ 132.566593][ T4890] tipc: Enabled bearer , priority 0 [ 133.047180][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067472][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.133242][ T4893] loop0: detected capacity change from 0 to 1024 [ 133.159261][ T4887] tipc: Disabling bearer [ 133.455060][ T4893] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.556846][ T4893] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.795585][ T26] kauditd_printk_skb: 492 callbacks suppressed [ 133.795601][ T26] audit: type=1326 audit(1757562250.417:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4910 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 133.835814][ T4913] netlink: 44 bytes leftover after parsing attributes in process `syz.5.137'. [ 133.854541][ T4913] netlink: 59 bytes leftover after parsing attributes in process `syz.5.137'. [ 133.881616][ T4913] netlink: 59 bytes leftover after parsing attributes in process `syz.5.137'. [ 133.905756][ T26] audit: type=1326 audit(1757562250.417:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4910 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 133.951072][ T4904] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 134.007427][ T26] audit: type=1326 audit(1757562250.417:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4910 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 134.091021][ T26] audit: type=1326 audit(1757562250.417:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4910 comm="syz.3.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 134.218753][ T26] audit: type=1326 audit(1757562250.707:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 134.245175][ T4650] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 260 with error 117 [ 134.265263][ T4922] loop4: detected capacity change from 0 to 512 [ 134.326651][ T4650] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.326651][ T4650] [ 134.348676][ T26] audit: type=1326 audit(1757562250.707:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 134.372671][ T4650] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 134.385699][ T4650] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.385699][ T4650] [ 134.395971][ T4650] EXT4-fs (loop0): Total free blocks count 0 [ 134.402387][ T4650] EXT4-fs (loop0): Free/Dirty block details [ 134.406969][ T4922] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.140: error while reading EA inode 32 err=-116 [ 134.421017][ T4650] EXT4-fs (loop0): free_blocks=0 [ 134.440896][ T4650] EXT4-fs (loop0): dirty_blocks=32 [ 134.446855][ T4650] EXT4-fs (loop0): Block reservation details [ 134.471131][ T26] audit: type=1326 audit(1757562250.707:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 134.495873][ T26] audit: type=1326 audit(1757562250.707:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 134.527706][ T4922] EXT4-fs (loop4): Remounting filesystem read-only [ 134.536118][ T26] audit: type=1326 audit(1757562250.707:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 134.558837][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.575659][ T4922] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.632885][ T4922] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.140: error while reading EA inode 32 err=-116 [ 134.700937][ T26] audit: type=1326 audit(1757562250.707:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4919 comm="syz.3.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 134.723160][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.753680][ T4922] EXT4-fs (loop4): Remounting filesystem read-only [ 134.800276][ T4922] EXT4-fs (loop4): 1 orphan inode deleted [ 134.830096][ T4922] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.113539][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 135.250537][ T4943] usb usb8: usbfs: process 4943 (syz.1.144) did not claim interface 0 before use [ 135.590637][ T4948] device syzkaller0 entered promiscuous mode [ 135.664280][ T4954] device team_slave_0 entered promiscuous mode [ 135.671060][ T4954] device team_slave_1 entered promiscuous mode [ 135.770696][ T4954] device vlan1 entered promiscuous mode [ 135.786128][ T4954] device team0 entered promiscuous mode [ 135.859557][ T4962] loop0: detected capacity change from 0 to 1024 [ 135.999891][ T4962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 136.065976][ T4962] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.941427][ T4735] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:17: bg 0: block 393: padding at end of block bitmap is not set [ 137.009580][ T4735] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1668 with error 117 [ 137.050843][ T4735] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.050843][ T4735] [ 137.147384][ T4734] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 137.199754][ T4734] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.199754][ T4734] [ 137.253663][ T4734] EXT4-fs (loop0): Total free blocks count 0 [ 137.259816][ T4734] EXT4-fs (loop0): Free/Dirty block details [ 137.307814][ T4734] EXT4-fs (loop0): free_blocks=0 [ 137.319289][ T4983] syz.1.157[4983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.319407][ T4983] syz.1.157[4983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.324789][ T4734] EXT4-fs (loop0): dirty_blocks=32 [ 137.370835][ T4734] EXT4-fs (loop0): Block reservation details [ 139.723683][ T4983] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 139.996938][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 139.996953][ T26] audit: type=1326 audit(1757562256.617:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.3.164" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x0 [ 140.202758][ T5012] syz.1.165[5012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.202880][ T5012] syz.1.165[5012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.419586][ T5018] loop0: detected capacity change from 0 to 1024 [ 140.554874][ T5020] loop4: detected capacity change from 0 to 1024 [ 140.563346][ T5020] EXT4-fs: Ignoring removed orlov option [ 140.615051][ T5020] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 140.639283][ T5018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 140.681438][ T5018] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.749561][ T5028] usb usb8: usbfs: process 5028 (syz.5.167) did not claim interface 0 before use [ 140.874842][ T5031] program syz.1.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.913375][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 140.955417][ T5031] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 141.812618][ T5037] device syzkaller0 entered promiscuous mode [ 142.226503][ T9] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 393: padding at end of block bitmap is not set [ 142.291235][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 142.330922][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.330922][ T9] [ 142.465588][ T9] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 468 with error 28 [ 142.511878][ T9] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.511878][ T9] [ 142.558197][ T9] EXT4-fs (loop0): Total free blocks count 0 [ 142.575710][ T9] EXT4-fs (loop0): Free/Dirty block details [ 142.635999][ T9] EXT4-fs (loop0): free_blocks=0 [ 142.656321][ T9] EXT4-fs (loop0): dirty_blocks=480 [ 142.663814][ T9] EXT4-fs (loop0): Block reservation details [ 143.648231][ T26] audit: type=1326 audit(1757562260.267:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.5.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3f778eba9 code=0x0 [ 143.670230][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.661533][ T5077] syz.5.185[5077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.661642][ T5077] syz.5.185[5077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.211505][ T5070] netlink: 'syz.1.182': attribute type 13 has an invalid length. [ 145.400043][ T5082] loop4: detected capacity change from 0 to 1024 [ 145.497866][ T5082] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.506910][ T5082] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.828571][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.837217][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.315837][ T9] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 393: padding at end of block bitmap is not set [ 146.339153][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 146.357302][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.357302][ T9] [ 146.420009][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 146.438207][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.438207][ T9] [ 146.448494][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 146.460121][ T9] EXT4-fs (loop4): Free/Dirty block details [ 146.466276][ T9] EXT4-fs (loop4): free_blocks=0 [ 146.477653][ T9] EXT4-fs (loop4): dirty_blocks=10848 [ 146.485244][ T9] EXT4-fs (loop4): Block reservation details [ 146.636585][ T5070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.703875][ T5070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.387092][ T5097] usb usb8: usbfs: process 5097 (syz.4.190) did not claim interface 0 before use [ 147.747700][ T5070] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.756747][ T5070] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.766646][ T5070] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.775782][ T5070] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.872002][ T26] audit: type=1326 audit(1757562265.487:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.4.194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f674338eba9 code=0x0 [ 148.973812][ T5117] netlink: 44 bytes leftover after parsing attributes in process `syz.4.194'. [ 149.001708][ T5117] netlink: 59 bytes leftover after parsing attributes in process `syz.4.194'. [ 149.010652][ T5117] netlink: 59 bytes leftover after parsing attributes in process `syz.4.194'. [ 149.100539][ T5114] device syzkaller0 entered promiscuous mode [ 149.401728][ T5129] loop3: detected capacity change from 0 to 1024 [ 149.527035][ T5129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.557301][ T5129] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.930866][ T5087] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 150.144964][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1760 with error 117 [ 150.176381][ T46] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.176381][ T46] [ 150.187009][ T5147] loop4: detected capacity change from 0 to 1024 [ 150.211249][ T5147] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.232501][ T5147] EXT4-fs: inline encryption not supported [ 150.272679][ T5147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.317703][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 150.363722][ T5147] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.205: bad orphan inode 11 [ 150.379855][ T46] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.379855][ T46] [ 150.421094][ T5147] ext4_test_bit(bit=10, block=4) = 1 [ 150.441325][ T5147] is_bad_inode(inode)=0 [ 150.445717][ T5147] NEXT_ORPHAN(inode)=3254779904 [ 150.450737][ T5147] max_ino=32 [ 150.451832][ T46] EXT4-fs (loop3): Total free blocks count 0 [ 150.461570][ T5147] i_nlink=0 [ 150.469906][ T46] EXT4-fs (loop3): Free/Dirty block details [ 150.475995][ T46] EXT4-fs (loop3): free_blocks=0 [ 150.481315][ T46] EXT4-fs (loop3): dirty_blocks=32 [ 150.486565][ T46] EXT4-fs (loop3): Block reservation details [ 150.575735][ T5152] usb usb8: usbfs: process 5152 (syz.5.204) did not claim interface 0 before use [ 150.688642][ T5147] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.205: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.784336][ T5147] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 150.830523][ T5147] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.205: lblock 0 mapped to illegal pblock 48 (length 1) [ 150.889453][ T5147] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 150.930419][ T5147] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.205: Failed to acquire dquot type 0 [ 150.966988][ T5147] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 151.048305][ T5147] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.205: mark_inode_dirty error [ 151.104533][ T5147] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 151.130992][ T5147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.159419][ T5147] EXT4-fs (loop4): unmounting filesystem. [ 151.180480][ T5147] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.205: Invalid inode table block 1 in block_group 0 [ 151.221309][ T5147] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 151.260474][ T5147] EXT4-fs error (device loop4): ext4_quota_off:7122: inode #3: comm syz.4.205: mark_inode_dirty error [ 151.592433][ T26] audit: type=1326 audit(1757562268.217:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5164 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674338eba9 code=0x7ffc0000 [ 151.644501][ T26] audit: type=1326 audit(1757562268.237:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5164 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674338eba9 code=0x7ffc0000 [ 151.680114][ T26] audit: type=1326 audit(1757562268.237:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5164 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f674338eba9 code=0x7ffc0000 [ 151.702878][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.725059][ T26] audit: type=1326 audit(1757562268.237:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5164 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674338eba9 code=0x7ffc0000 [ 151.775820][ T26] audit: type=1326 audit(1757562268.237:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5164 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674338eba9 code=0x7ffc0000 [ 151.798103][ T5168] loop3: detected capacity change from 0 to 2048 [ 151.817672][ T26] audit: type=1326 audit(1757562268.257:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5167 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 151.844624][ T26] audit: type=1326 audit(1757562268.257:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5167 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc53df8eba9 code=0x7ffc0000 [ 151.910238][ T5168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.009500][ T5174] netlink: 44 bytes leftover after parsing attributes in process `syz.4.214'. [ 152.032897][ T5175] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 152.051625][ T5174] netlink: 59 bytes leftover after parsing attributes in process `syz.4.214'. [ 152.069485][ T5174] netlink: 59 bytes leftover after parsing attributes in process `syz.4.214'. [ 152.069952][ T5175] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 152.099724][ T5175] EXT4-fs (loop3): This should not happen!! Data will be lost [ 152.099724][ T5175] [ 152.119427][ T5175] EXT4-fs (loop3): Total free blocks count 0 [ 152.126436][ T5175] EXT4-fs (loop3): Free/Dirty block details [ 152.133251][ T5175] EXT4-fs (loop3): free_blocks=2415919104 [ 152.142963][ T5175] EXT4-fs (loop3): dirty_blocks=16 [ 152.148942][ T5175] EXT4-fs (loop3): Block reservation details [ 152.155227][ T5175] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 152.268088][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 152.877519][ T5183] loop5: detected capacity change from 0 to 1024 [ 152.983100][ T5183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 153.016557][ T5183] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.513270][ T5188] usb usb8: usbfs: process 5188 (syz.4.218) did not claim interface 0 before use [ 153.823993][ T4505] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 393: padding at end of block bitmap is not set [ 153.855116][ T4505] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 153.887946][ T4505] EXT4-fs (loop5): This should not happen!! Data will be lost [ 153.887946][ T4505] [ 153.998635][ T46] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 154.023607][ T46] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.023607][ T46] [ 154.038805][ T46] EXT4-fs (loop5): Total free blocks count 0 [ 154.049282][ T46] EXT4-fs (loop5): Free/Dirty block details [ 154.060525][ T46] EXT4-fs (loop5): free_blocks=0 [ 154.066222][ T46] EXT4-fs (loop5): dirty_blocks=4272 [ 154.076836][ T46] EXT4-fs (loop5): Block reservation details [ 154.880039][ T5207] syz.4.225[5207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.880199][ T5207] syz.4.225[5207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.548782][ T26] kauditd_printk_skb: 120 callbacks suppressed [ 155.548797][ T26] audit: type=1326 audit(1757562272.167:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbdc78eba9 code=0x0 [ 155.653551][ T5222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.229'. [ 155.675575][ T5222] netlink: 59 bytes leftover after parsing attributes in process `syz.0.229'. [ 155.695977][ T5222] netlink: 59 bytes leftover after parsing attributes in process `syz.0.229'. [ 155.783699][ T5224] loop3: detected capacity change from 0 to 1024 [ 155.818747][ T5226] loop1: detected capacity change from 0 to 512 [ 155.857136][ T5224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.928435][ T5226] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 155.970094][ T5224] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.979704][ T5226] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 155.998535][ T5226] EXT4-fs (loop1): group descriptors corrupted! [ 156.104687][ T5231] usb usb8: usbfs: process 5231 (syz.5.230) did not claim interface 0 before use [ 156.753845][ T46] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 393: padding at end of block bitmap is not set [ 156.811505][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 772 with error 117 [ 156.870809][ T46] EXT4-fs (loop3): This should not happen!! Data will be lost [ 156.870809][ T46] [ 156.952432][ T46] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 157.016377][ T46] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.016377][ T46] [ 157.059076][ T5259] loop5: detected capacity change from 0 to 512 [ 157.071667][ T46] EXT4-fs (loop3): Total free blocks count 0 [ 157.088953][ T5259] journal_path: Lookup failure for './bus' [ 157.097404][ T46] EXT4-fs (loop3): Free/Dirty block details [ 157.124651][ T5260] loop1: detected capacity change from 0 to 256 [ 157.134946][ T5247] device syzkaller0 entered promiscuous mode [ 157.143520][ T46] EXT4-fs (loop3): free_blocks=0 [ 157.148633][ T5259] EXT4-fs: error: could not find journal device path [ 157.166401][ T46] EXT4-fs (loop3): dirty_blocks=32 [ 157.197666][ T46] EXT4-fs (loop3): Block reservation details [ 157.210925][ T5260] FAT-fs (loop1): Directory bread(block 64) failed [ 157.253432][ T5260] FAT-fs (loop1): Directory bread(block 65) failed [ 157.284925][ T5260] FAT-fs (loop1): Directory bread(block 66) failed [ 157.321405][ T5260] FAT-fs (loop1): Directory bread(block 67) failed [ 157.369173][ T5260] FAT-fs (loop1): Directory bread(block 68) failed [ 157.407199][ T5260] FAT-fs (loop1): Directory bread(block 69) failed [ 157.436729][ T5260] FAT-fs (loop1): Directory bread(block 70) failed [ 157.469516][ T5260] FAT-fs (loop1): Directory bread(block 71) failed [ 157.491310][ T5260] FAT-fs (loop1): Directory bread(block 72) failed [ 157.510001][ T5260] FAT-fs (loop1): Directory bread(block 73) failed [ 157.812578][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 157.824204][ T5272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.244'. [ 158.137763][ T26] audit: type=1326 audit(1757562274.757:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.1.246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x0 [ 158.239552][ T5283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.246'. [ 158.267844][ T5283] netlink: 31 bytes leftover after parsing attributes in process `syz.1.246'. [ 158.287593][ T5283] netlink: 'syz.1.246': attribute type 4 has an invalid length. [ 158.618373][ T5290] loop0: detected capacity change from 0 to 1024 [ 158.683771][ T5290] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 158.717931][ T5290] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.783862][ T5295] usb usb8: usbfs: process 5295 (syz.5.247) did not claim interface 0 before use [ 159.489748][ T4505] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 393: padding at end of block bitmap is not set [ 159.507748][ T4505] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 159.526264][ T4505] EXT4-fs (loop0): This should not happen!! Data will be lost [ 159.526264][ T4505] [ 159.610278][ T4505] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 159.631277][ T4505] EXT4-fs (loop0): This should not happen!! Data will be lost [ 159.631277][ T4505] [ 159.645846][ T4505] EXT4-fs (loop0): Total free blocks count 0 [ 159.653399][ T4505] EXT4-fs (loop0): Free/Dirty block details [ 159.659396][ T4505] EXT4-fs (loop0): free_blocks=0 [ 159.669360][ T4505] EXT4-fs (loop0): dirty_blocks=3264 [ 159.677012][ T4505] EXT4-fs (loop0): Block reservation details [ 160.066276][ T5305] loop1: detected capacity change from 0 to 512 [ 160.148927][ T5305] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.253: bad orphan inode 13 [ 160.197104][ T5305] ext4_test_bit(bit=12, block=4) = 1 [ 160.220377][ T5305] is_bad_inode(inode)=0 [ 160.260292][ T5305] NEXT_ORPHAN(inode)=0 [ 160.264746][ T5305] max_ino=32 [ 160.268086][ T5305] i_nlink=1 [ 160.272675][ T5305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.335689][ T5305] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.253: Unrecognised inode hash code 20 [ 160.380421][ T5305] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.253: Corrupt directory, running e2fsck is recommended [ 160.395342][ T5305] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.253: corrupted in-inode xattr [ 160.438536][ T5316] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.253: Unrecognised inode hash code 20 [ 160.472723][ T5316] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.253: Corrupt directory, running e2fsck is recommended [ 160.505480][ T5316] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.253: corrupted in-inode xattr [ 160.533772][ T5305] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.253: Unrecognised inode hash code 20 [ 160.565644][ T5305] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.253: Corrupt directory, running e2fsck is recommended [ 160.609431][ T5305] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.253: corrupted in-inode xattr [ 160.667047][ T5319] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.253: Unrecognised inode hash code 20 [ 160.679295][ T5319] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.253: Corrupt directory, running e2fsck is recommended [ 160.698065][ T5319] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.253: corrupted in-inode xattr [ 160.716885][ T5322] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.253: Unrecognised inode hash code 20 [ 160.736758][ T5322] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.253: Corrupt directory, running e2fsck is recommended [ 160.763097][ T5322] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.253: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 161.659267][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 162.203187][ T26] audit: type=1326 audit(1757562278.827:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 162.274630][ T26] audit: type=1326 audit(1757562278.827:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 162.321145][ T26] audit: type=1326 audit(1757562278.827:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 162.377808][ T26] audit: type=1326 audit(1757562278.827:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 162.397205][ T5393] loop1: detected capacity change from 0 to 1024 [ 162.416666][ T26] audit: type=1326 audit(1757562278.827:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 162.444569][ T26] audit: type=1326 audit(1757562278.827:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 162.470173][ T26] audit: type=1326 audit(1757562278.827:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5389 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 162.507253][ T5393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.519424][ T5395] netlink: 44 bytes leftover after parsing attributes in process `syz.0.263'. [ 162.529781][ T5393] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.544732][ T5395] netlink: 31 bytes leftover after parsing attributes in process `syz.0.263'. [ 162.554026][ T5395] netlink: 'syz.0.263': attribute type 4 has an invalid length. [ 162.653613][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 163.200514][ T5403] usb usb8: usbfs: process 5403 (syz.0.265) did not claim interface 0 before use [ 164.186550][ T26] audit: type=1326 audit(1757562280.807:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 164.252662][ T26] audit: type=1326 audit(1757562280.807:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 164.382272][ T26] audit: type=1326 audit(1757562280.807:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe5bcf8eba9 code=0x7ffc0000 [ 164.503267][ T5431] loop1: detected capacity change from 0 to 1024 [ 164.636315][ T5431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 164.653153][ T5434] netlink: 44 bytes leftover after parsing attributes in process `syz.3.277'. [ 164.670970][ T5431] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.723841][ T5434] netlink: 31 bytes leftover after parsing attributes in process `syz.3.277'. [ 164.756195][ T5434] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 164.822247][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 164.832272][ T5437] device syzkaller0 entered promiscuous mode [ 165.347361][ T5458] loop5: detected capacity change from 0 to 2048 [ 165.430349][ T5458] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.597636][ T4648] EXT4-fs (loop5): unmounting filesystem. [ 165.663104][ T5469] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.692838][ T5469] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 165.748823][ T5471] netlink: 'syz.5.286': attribute type 3 has an invalid length. [ 166.262830][ T5481] loop5: detected capacity change from 0 to 1024 [ 166.335535][ T5481] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 166.344441][ T5481] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.460005][ T4648] EXT4-fs (loop5): unmounting filesystem. [ 168.059757][ T5492] loop1: detected capacity change from 0 to 512 [ 168.099822][ T5494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.292'. [ 168.123474][ T5492] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.170951][ T5494] netlink: 31 bytes leftover after parsing attributes in process `syz.3.292'. [ 168.201115][ T5494] netlink: 'syz.3.292': attribute type 4 has an invalid length. [ 168.291899][ T5492] __quota_error: 45 callbacks suppressed [ 168.291919][ T5492] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 168.360873][ T5492] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 168.376814][ T5492] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.293: Failed to acquire dquot type 1 [ 168.443902][ T5508] netlink: 288 bytes leftover after parsing attributes in process `syz.4.298'. [ 168.468421][ T5492] EXT4-fs (loop1): 1 truncate cleaned up [ 168.479220][ T5492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 168.551030][ T5492] EXT4-fs (loop1): unmounting filesystem. [ 168.682396][ T5512] loop0: detected capacity change from 0 to 1024 [ 168.818383][ T5512] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 168.876338][ T5512] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.098550][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 169.148945][ T5527] usb usb8: usbfs: process 5527 (syz.5.294) did not claim interface 0 before use [ 169.369187][ T5530] device syzkaller0 entered promiscuous mode [ 169.457833][ T5538] loop4: detected capacity change from 0 to 128 [ 169.541917][ T26] audit: type=1800 audit(1757562286.167:1065): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.309" name="bus" dev="loop4" ino=1048601 res=0 errno=0 [ 170.925812][ T5550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.311'. [ 170.945630][ T5550] netlink: 31 bytes leftover after parsing attributes in process `syz.4.311'. [ 170.965885][ T5550] netlink: 'syz.4.311': attribute type 4 has an invalid length. [ 173.417588][ T5577] loop0: detected capacity change from 0 to 512 [ 173.490674][ T5577] ------------[ cut here ]------------ [ 173.496644][ T5577] EA inode 11 i_nlink=2 [ 173.498136][ T5577] WARNING: CPU: 0 PID: 5577 at fs/ext4/xattr.c:1021 ext4_xattr_inode_update_ref+0x517/0x570 [ 173.512910][ T5577] Modules linked in: [ 173.516958][ T5577] CPU: 0 PID: 5577 Comm: syz.0.322 Not tainted syzkaller #0 [ 173.524347][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.534522][ T5577] RIP: 0010:ext4_xattr_inode_update_ref+0x517/0x570 [ 173.541227][ T5577] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 bb fa 9c ff 49 8b 37 48 c7 c7 60 9b a0 8a 44 89 f2 e8 19 04 19 ff <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 173.561149][ T5577] RSP: 0018:ffffc90004dd7260 EFLAGS: 00010246 [ 173.567296][ T5577] RAX: e08abe8942874000 RBX: ffff8880544720c8 RCX: 0000000000080000 [ 173.575377][ T5577] RDX: ffffc9000c769000 RSI: 0000000000016d70 RDI: 0000000000016d71 [ 173.583527][ T5577] RBP: ffffc90004dd7348 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 173.591610][ T5577] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: dffffc0000000000 [ 173.599631][ T5577] R13: ffffc90004dd72c0 R14: 0000000000000002 R15: ffff888054472108 [ 173.607980][ T5577] FS: 00007fdbdd6c96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 173.617174][ T5577] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.623879][ T5577] CR2: ffffffffffffffe8 CR3: 000000007a0a6000 CR4: 00000000003506f0 [ 173.631995][ T5577] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.640005][ T5577] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 173.648054][ T5577] Call Trace: [ 173.651433][ T5577] [ 173.654572][ T5577] ? ext4_xattr_block_csum+0x500/0x500 [ 173.660093][ T5577] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 173.665660][ T5577] ext4_xattr_set_entry+0xb33/0x1e90 [ 173.671124][ T5577] ext4_xattr_ibody_set+0x250/0x690 [ 173.676578][ T5577] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 173.682619][ T5577] __ext4_expand_extra_isize+0x301/0x3e0 [ 173.688331][ T5577] __ext4_mark_inode_dirty+0x47f/0x770 [ 173.693910][ T5577] ext4_evict_inode+0xa73/0x1100 [ 173.698918][ T5577] ? _raw_spin_unlock+0x24/0x40 [ 173.703912][ T5577] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 173.709953][ T5577] ? do_raw_spin_unlock+0x11d/0x230 [ 173.715333][ T5577] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 173.721363][ T5577] evict+0x485/0x870 [ 173.725303][ T5577] ? __lock_acquire+0x7c50/0x7c50 [ 173.730371][ T5577] ? proc_nr_inodes+0x2f0/0x2f0 [ 173.735331][ T5577] ? do_raw_spin_unlock+0x11d/0x230 [ 173.740598][ T5577] ? _raw_spin_unlock+0x24/0x40 [ 173.745602][ T5577] ? iput+0x768/0x980 [ 173.749646][ T5577] ext4_orphan_cleanup+0xbd3/0x1400 [ 173.755007][ T5577] ? ext4_orphan_del+0xb90/0xb90 [ 173.760018][ T5577] ? errseq_check_and_advance+0x62/0x120 [ 173.765758][ T5577] ext4_fill_super+0x7bc2/0x8150 [ 173.770823][ T5577] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 173.777120][ T5577] ? snprintf+0xd7/0x120 [ 173.781547][ T5577] ? preempt_count_add+0x8d/0x190 [ 173.786719][ T5577] ? set_blocksize+0x1d3/0x350 [ 173.791590][ T5577] ? sb_set_blocksize+0xa5/0xe0 [ 173.796503][ T5577] get_tree_bdev+0x3f1/0x610 [ 173.801287][ T5577] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 173.807617][ T5577] vfs_get_tree+0x88/0x270 [ 173.812383][ T5577] do_new_mount+0x24a/0xa40 [ 173.816935][ T5577] __se_sys_mount+0x2d6/0x3c0 [ 173.821803][ T5577] ? __x64_sys_mount+0xc0/0xc0 [ 173.826697][ T5577] ? lockdep_hardirqs_on+0x94/0x140 [ 173.831980][ T5577] ? __x64_sys_mount+0x1c/0xc0 [ 173.836780][ T5577] do_syscall_64+0x4c/0xa0 [ 173.841280][ T5577] ? clear_bhb_loop+0x60/0xb0 [ 173.846006][ T5577] ? clear_bhb_loop+0x60/0xb0 [ 173.851017][ T5577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.856980][ T5577] RIP: 0033:0x7fdbdc79034a [ 173.861559][ T5577] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.881382][ T5577] RSP: 002b:00007fdbdd6c8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.889857][ T5577] RAX: ffffffffffffffda RBX: 00007fdbdd6c8ef0 RCX: 00007fdbdc79034a [ 173.898120][ T5577] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fdbdd6c8eb0 [ 173.906359][ T5577] RBP: 0000200000000180 R08: 00007fdbdd6c8ef0 R09: 0000000000800700 [ 173.914515][ T5577] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 173.922576][ T5577] R13: 00007fdbdd6c8eb0 R14: 0000000000000473 R15: 0000200000000680 [ 173.931264][ T5577] [ 173.934408][ T5577] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.941722][ T5577] CPU: 0 PID: 5577 Comm: syz.0.322 Not tainted syzkaller #0 [ 173.949070][ T5577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.959147][ T5577] Call Trace: [ 173.962462][ T5577] [ 173.965516][ T5577] dump_stack_lvl+0x168/0x22e [ 173.970239][ T5577] ? memcpy+0x3c/0x60 [ 173.974340][ T5577] ? show_regs_print_info+0x12/0x12 [ 173.979639][ T5577] ? load_image+0x3b0/0x3b0 [ 173.984186][ T5577] panic+0x2c9/0x710 [ 173.988121][ T5577] ? bpf_jit_dump+0xd0/0xd0 [ 173.992659][ T5577] __warn+0x2f8/0x4f0 [ 173.996670][ T5577] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 174.002678][ T5577] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 174.008680][ T5577] report_bug+0x2ba/0x4f0 [ 174.013029][ T5577] ? ext4_xattr_inode_update_ref+0x517/0x570 [ 174.019296][ T5577] handle_bug+0x3a/0x70 [ 174.023471][ T5577] exc_invalid_op+0x16/0x40 [ 174.028013][ T5577] asm_exc_invalid_op+0x16/0x20 [ 174.032924][ T5577] RIP: 0010:ext4_xattr_inode_update_ref+0x517/0x570 [ 174.039559][ T5577] Code: 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 bb fa 9c ff 49 8b 37 48 c7 c7 60 9b a0 8a 44 89 f2 e8 19 04 19 ff <0f> 0b 48 8b 5c 24 10 4c 8b 7c 24 18 4c 8d 6c 24 60 e9 00 fe ff ff [ 174.059369][ T5577] RSP: 0018:ffffc90004dd7260 EFLAGS: 00010246 [ 174.065552][ T5577] RAX: e08abe8942874000 RBX: ffff8880544720c8 RCX: 0000000000080000 [ 174.073547][ T5577] RDX: ffffc9000c769000 RSI: 0000000000016d70 RDI: 0000000000016d71 [ 174.081534][ T5577] RBP: ffffc90004dd7348 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 174.089523][ T5577] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: dffffc0000000000 [ 174.097607][ T5577] R13: ffffc90004dd72c0 R14: 0000000000000002 R15: ffff888054472108 [ 174.105635][ T5577] ? ext4_xattr_block_csum+0x500/0x500 [ 174.111121][ T5577] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 174.116605][ T5577] ext4_xattr_set_entry+0xb33/0x1e90 [ 174.121931][ T5577] ext4_xattr_ibody_set+0x250/0x690 [ 174.127235][ T5577] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 174.133193][ T5577] __ext4_expand_extra_isize+0x301/0x3e0 [ 174.138871][ T5577] __ext4_mark_inode_dirty+0x47f/0x770 [ 174.144387][ T5577] ext4_evict_inode+0xa73/0x1100 [ 174.149351][ T5577] ? _raw_spin_unlock+0x24/0x40 [ 174.154240][ T5577] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 174.160158][ T5577] ? do_raw_spin_unlock+0x11d/0x230 [ 174.165558][ T5577] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 174.171473][ T5577] evict+0x485/0x870 [ 174.175390][ T5577] ? __lock_acquire+0x7c50/0x7c50 [ 174.180527][ T5577] ? proc_nr_inodes+0x2f0/0x2f0 [ 174.185390][ T5577] ? do_raw_spin_unlock+0x11d/0x230 [ 174.190633][ T5577] ? _raw_spin_unlock+0x24/0x40 [ 174.195512][ T5577] ? iput+0x768/0x980 [ 174.199515][ T5577] ext4_orphan_cleanup+0xbd3/0x1400 [ 174.204743][ T5577] ? ext4_orphan_del+0xb90/0xb90 [ 174.209898][ T5577] ? errseq_check_and_advance+0x62/0x120 [ 174.215600][ T5577] ext4_fill_super+0x7bc2/0x8150 [ 174.220614][ T5577] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 174.226974][ T5577] ? snprintf+0xd7/0x120 [ 174.231254][ T5577] ? preempt_count_add+0x8d/0x190 [ 174.236298][ T5577] ? set_blocksize+0x1d3/0x350 [ 174.241084][ T5577] ? sb_set_blocksize+0xa5/0xe0 [ 174.245969][ T5577] get_tree_bdev+0x3f1/0x610 [ 174.250668][ T5577] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 174.256935][ T5577] vfs_get_tree+0x88/0x270 [ 174.261372][ T5577] do_new_mount+0x24a/0xa40 [ 174.265898][ T5577] __se_sys_mount+0x2d6/0x3c0 [ 174.270598][ T5577] ? __x64_sys_mount+0xc0/0xc0 [ 174.275379][ T5577] ? lockdep_hardirqs_on+0x94/0x140 [ 174.280604][ T5577] ? __x64_sys_mount+0x1c/0xc0 [ 174.285394][ T5577] do_syscall_64+0x4c/0xa0 [ 174.289922][ T5577] ? clear_bhb_loop+0x60/0xb0 [ 174.294613][ T5577] ? clear_bhb_loop+0x60/0xb0 [ 174.299394][ T5577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.305341][ T5577] RIP: 0033:0x7fdbdc79034a [ 174.309776][ T5577] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.329436][ T5577] RSP: 002b:00007fdbdd6c8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.337871][ T5577] RAX: ffffffffffffffda RBX: 00007fdbdd6c8ef0 RCX: 00007fdbdc79034a [ 174.345882][ T5577] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fdbdd6c8eb0 [ 174.353976][ T5577] RBP: 0000200000000180 R08: 00007fdbdd6c8ef0 R09: 0000000000800700 [ 174.361963][ T5577] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 174.370038][ T5577] R13: 00007fdbdd6c8eb0 R14: 0000000000000473 R15: 0000200000000680 [ 174.378070][ T5577] [ 174.381364][ T5577] Kernel Offset: disabled [ 174.385830][ T5577] Rebooting in 86400 seconds..