last executing test programs: 10.898101721s ago: executing program 0 (id=79): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x26, 0x8a, 0x5c, 0x20, 0x1de1, 0xc102, 0xf839, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0x50, 0x81, "", [{{0x9, 0x4, 0xc2, 0x80, 0x0, 0xf2, 0x9c, 0x4, 0xbf}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 8.844706514s ago: executing program 3 (id=88): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 8.702498908s ago: executing program 0 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000003000071104200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x8000}], 0x1, 0x8000) sendfile(r2, r3, 0x0, 0x7ffff004) 8.50811554s ago: executing program 3 (id=90): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201}, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 8.002164164s ago: executing program 4 (id=93): r0 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$setown(r0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[], 0x24, 0x0) 7.748205407s ago: executing program 0 (id=95): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r1 = socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073", @ANYRES64=r1], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000200)=@mmap={0x9, 0x0, 0x4, 0x800, 0x401, {}, {0x5, 0x8, 0x6, 0x3, 0xc, 0x5, "7a1e9b25"}, 0xffffffff, 0x1, {}, 0x4, 0x0, r3}) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 7.517234025s ago: executing program 0 (id=99): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r1}) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, 0x0) ioctl(r2, 0x8936, &(0x7f0000000000)) 7.349676393s ago: executing program 3 (id=100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x2, 0xc9, 0x4, 0x6, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0x5, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) 7.298662591s ago: executing program 0 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7.201390638s ago: executing program 3 (id=102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x0, 0x9, '\x00', 0x63}, {0x0, 0x5, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x73, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc, '\x00', 0x8}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0x40, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x1, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0x4}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0xff}, {0x1, 0xc, 0x80, '\x00', 0x9}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) 7.140286708s ago: executing program 0 (id=103): syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340110800450000300082d672faf26d1509ba94860000f1000190780a010102ac1414aa0b0090781200022825000000000000dee6"], 0x0) r1 = getpid() futex(&(0x7f000000cffc), 0x100, 0x4, 0x0, 0x0, 0xfffffffd) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) umount2(&(0x7f0000000040)='.\x00', 0x2) 6.713568619s ago: executing program 2 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5.386544501s ago: executing program 4 (id=105): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000003000071104200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r2, 0x4, 0x40800) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x8000}], 0x1, 0x8000) sendfile(r2, r3, 0x0, 0x7ffff004) 5.283482858s ago: executing program 3 (id=106): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r0, 0x1000, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) capget(0x0, &(0x7f0000000040)={0x101, 0x2, 0x3, 0x6, 0x0, 0x367}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x0) 5.246191874s ago: executing program 2 (id=107): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 5.134487123s ago: executing program 2 (id=108): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121040, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010206, 0x0, 0x4}]}) 5.126740764s ago: executing program 2 (id=109): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 4.117345013s ago: executing program 1 (id=110): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.109233074s ago: executing program 4 (id=111): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xad1}}], 0x10}}], 0x2, 0xf00) 4.108684454s ago: executing program 3 (id=112): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000005c0)={0x0, 0x31, 0x4, "7d9ee46f"}, 0x0, 0x0}) 3.970392347s ago: executing program 1 (id=113): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8010, &(0x7f00000000c0), 0xff, 0x57d, &(0x7f0000000100)="$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") mknod$loop(&(0x7f0000000780)='./bus\x00', 0x20, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3.883848972s ago: executing program 4 (id=114): r0 = socket(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r1, &(0x7f00000003c0), 0x0, 0x800) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000001010000089000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) getsockopt(r0, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, 0x0) 3.852536207s ago: executing program 2 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 3.110245811s ago: executing program 2 (id=116): pipe(&(0x7f0000000440)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002000), 0x0, 0x400100b5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffffffffffff8000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x400000) 2.569526471s ago: executing program 4 (id=117): r0 = socket$packet(0x11, 0x3, 0x300) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r1 = open(0x0, 0x143142, 0x1a5) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)) statx(r1, 0x0, 0x800, 0x400, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) setgroups(0x4, &(0x7f00000004c0)=[r5, r6, 0x0, 0x0]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r8, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 2.512218671s ago: executing program 1 (id=118): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 1.380709719s ago: executing program 1 (id=119): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010206, 0x0, 0x4}]}) 1.218456267s ago: executing program 1 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 180.23464ms ago: executing program 4 (id=121): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001ac0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prlimit64(r2, 0x1, &(0x7f0000000000)={0x10001, 0x9}, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) request_key(&(0x7f0000001480)='asymmetric\x00', &(0x7f0000001400)={'syz', 0x2}, &(0x7f00000002c0)='lo(Pn\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x176, 0x402) 0s ago: executing program 1 (id=122): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x2004000, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="76e6299582673a17dc165b52126d9b5ebefaffce7591b3e858ec5ed1c0bcfbb28bb8b0771b9d7bafda74268d068808dfeb2186c0cb22ce6d409cafb470c8dbeee8adbd992946fcbac0d8526cacf256ba422844b1f83d45e058a5c282098be693631c1a9abe0347be4d78f840ad5fe1b5b66ec21a3649b537497775cba62faf8223fa64df6cc1c3ff32e60c28cc9db40351dbc9460f90ff5c82bfc19be3daf82609d615a9d272f9693791b73c9265ccca96d673ec071275dfc825d56bb3ae3b200390", @ANYRES32=0x0, @ANYRESHEX], 0x9, 0x226, &(0x7f0000000140)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r0, 0x1000, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) capget(0x0, &(0x7f0000000040)={0x101, 0x2, 0x3, 0x6, 0x0, 0x367}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 57.937840][ T4173] cgroup: Unknown subsys name 'net' [ 58.039214][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.547744][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.492046][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 61.571167][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 61.638003][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 61.671637][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.679431][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.687626][ T4196] device bridge_slave_0 entered promiscuous mode [ 61.699583][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.706763][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.714970][ T4196] device bridge_slave_1 entered promiscuous mode [ 61.722633][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 61.748859][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.784114][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.796056][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.855911][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.863218][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.871295][ T4186] device bridge_slave_0 entered promiscuous mode [ 61.892394][ T4196] team0: Port device team_slave_0 added [ 61.905114][ T4196] team0: Port device team_slave_1 added [ 61.914555][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.921657][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.929850][ T4186] device bridge_slave_1 entered promiscuous mode [ 61.980585][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.987921][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.996218][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.015382][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.031671][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.038980][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.047211][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.055593][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.062561][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.088651][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.108179][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.115530][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.141646][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.155029][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.164222][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.171263][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.179783][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.211718][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.218939][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.226954][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.244027][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.251096][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.259515][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.277534][ T4186] team0: Port device team_slave_0 added [ 62.300514][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.309866][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.320925][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.328968][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.344399][ T4186] team0: Port device team_slave_1 added [ 62.363483][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.386215][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.398313][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.411540][ T4196] device hsr_slave_0 entered promiscuous mode [ 62.418916][ T4196] device hsr_slave_1 entered promiscuous mode [ 62.434383][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.459740][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.488654][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.495994][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.522219][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.549274][ T4185] team0: Port device team_slave_0 added [ 62.557752][ T4187] team0: Port device team_slave_0 added [ 62.564627][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.571745][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.598014][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.631276][ T4185] team0: Port device team_slave_1 added [ 62.639162][ T4187] team0: Port device team_slave_1 added [ 62.655527][ T4194] team0: Port device team_slave_0 added [ 62.692078][ T4194] team0: Port device team_slave_1 added [ 62.729758][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.737002][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.763614][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.775830][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.782810][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.810117][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.827425][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.834497][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.861208][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.877502][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.884569][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.910692][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.923023][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.929997][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.956237][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.971949][ T4186] device hsr_slave_0 entered promiscuous mode [ 62.979109][ T4186] device hsr_slave_1 entered promiscuous mode [ 62.986171][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.994518][ T4186] Cannot create hsr debugfs directory [ 63.000473][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.007618][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.033698][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.124937][ T4185] device hsr_slave_0 entered promiscuous mode [ 63.131808][ T4185] device hsr_slave_1 entered promiscuous mode [ 63.138535][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.146250][ T4185] Cannot create hsr debugfs directory [ 63.182070][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.189148][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.195959][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.203700][ T4194] Cannot create hsr debugfs directory [ 63.263085][ T4197] Bluetooth: hci4: command 0x0409 tx timeout [ 63.285429][ T4197] Bluetooth: hci3: command 0x0409 tx timeout [ 63.291700][ T4197] Bluetooth: hci0: command 0x0409 tx timeout [ 63.301734][ T4197] Bluetooth: hci1: command 0x0409 tx timeout [ 63.309002][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.314009][ T4197] Bluetooth: hci2: command 0x0409 tx timeout [ 63.321518][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.328452][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.336152][ T4187] Cannot create hsr debugfs directory [ 63.513598][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.538586][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.556598][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.566566][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.597582][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.622078][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.645523][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.656967][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.726598][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.738438][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.751395][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.773885][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.860575][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.889312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.899564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.911556][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.922063][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.935291][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.948439][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.958410][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.985824][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.995901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.005316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.014746][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.021971][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.030493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.040311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.048955][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.056072][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.084125][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.097047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.106297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.115725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.124321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.135369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.148627][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.170142][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.181195][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.190128][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.197349][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.206549][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.215589][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.224315][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.232272][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.248752][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.266149][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.279750][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.290396][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.302803][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.312000][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.320998][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.328125][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.336750][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.345978][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.354746][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.363527][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.380334][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.389252][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.400811][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.410365][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.428455][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.445775][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.454310][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.462140][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.471136][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.480215][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.489893][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.498997][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.508788][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.517392][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.555354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.565105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.575568][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.582663][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.592104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.602051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.612401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.622100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.631442][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.638561][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.650033][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.693486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.707277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.745805][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.755914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.767295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.778510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.816350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.826666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.838430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.848254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.857397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.866921][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.876908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.890481][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.908776][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.932695][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.940334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.954641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.996547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.008494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.017332][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.024459][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.034110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.041639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.056729][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.068437][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.092459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.101627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.124690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.142569][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.149729][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.158214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.167212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.177498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.186500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.195647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.216819][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.231570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.241586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.258499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.270318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.279701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.290960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.321598][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.333154][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 65.339432][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 65.351354][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.353285][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 65.371228][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.380147][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.388665][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 65.395575][ T1270] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.402670][ T1270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.410667][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 65.411993][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.428366][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.437109][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.445743][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.453757][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.470233][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.479416][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.496568][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.522003][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.547548][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.556700][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.564647][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.573726][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.582197][ T1208] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.589330][ T1208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.599814][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.631793][ T4186] device veth0_vlan entered promiscuous mode [ 65.648592][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.667920][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.681909][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.695291][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.704007][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.730485][ T4186] device veth1_vlan entered promiscuous mode [ 65.763926][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.772772][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.790069][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.799570][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.815776][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.828745][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.839915][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.849175][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.873485][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.882035][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.892524][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.901491][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.910779][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.940776][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.961388][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.973695][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.990134][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.012588][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.024144][ T4185] device veth0_vlan entered promiscuous mode [ 66.048861][ T4186] device veth0_macvtap entered promiscuous mode [ 66.069164][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.084988][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.093462][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.105059][ T4185] device veth1_vlan entered promiscuous mode [ 66.124283][ T4186] device veth1_macvtap entered promiscuous mode [ 66.167644][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.184914][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.200030][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.209011][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.225548][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.238690][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.250635][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.266481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.275079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.291781][ T4185] device veth0_macvtap entered promiscuous mode [ 66.308370][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.322129][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.335325][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.345682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.354673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.365045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.373816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.382491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.395491][ T4185] device veth1_macvtap entered promiscuous mode [ 66.418639][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.428202][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.437581][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.447284][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.464418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.472529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.482774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.491711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.499923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.510740][ T4196] device veth0_vlan entered promiscuous mode [ 66.529677][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.540654][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.552484][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.567497][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.576973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.585998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.594194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.602805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.611879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.622217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.639157][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.650768][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.662173][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.684655][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.693863][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.721414][ T4196] device veth1_vlan entered promiscuous mode [ 66.761836][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.779863][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.788800][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.797773][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.815961][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.824953][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.835008][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.844620][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.887606][ T1270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.895923][ T4194] device veth0_vlan entered promiscuous mode [ 66.902747][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.911018][ T1270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.926332][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.936009][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.944590][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.954579][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.993654][ T4194] device veth1_vlan entered promiscuous mode [ 67.001522][ T4196] device veth0_macvtap entered promiscuous mode [ 67.028246][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.047679][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.065044][ T4187] device veth0_vlan entered promiscuous mode [ 67.078413][ T4196] device veth1_macvtap entered promiscuous mode [ 67.096937][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.106875][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.115827][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.124756][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.132775][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.141428][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.151726][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.164889][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.174015][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.187779][ T4187] device veth1_vlan entered promiscuous mode [ 67.231362][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.249452][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.265569][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.277486][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.290617][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.305056][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.320813][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.335425][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.346136][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.356415][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.369398][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.380662][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.404963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.414028][ T2304] Bluetooth: hci0: command 0x040f tx timeout [ 67.420322][ T2304] Bluetooth: hci1: command 0x040f tx timeout [ 67.426509][ T2304] Bluetooth: hci2: command 0x040f tx timeout [ 67.428777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.442061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.450150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.458986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.468952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.477641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.485986][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 67.491316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.500834][ T2304] Bluetooth: hci4: command 0x040f tx timeout [ 67.509376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.521730][ T4194] device veth0_macvtap entered promiscuous mode [ 67.537719][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.568997][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.578183][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.590987][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.613956][ T4194] device veth1_macvtap entered promiscuous mode [ 67.623872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.632099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.640847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.651995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.663153][ T4187] device veth0_macvtap entered promiscuous mode [ 67.682388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.693950][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.702042][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.717155][ T4187] device veth1_macvtap entered promiscuous mode [ 67.739236][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.770023][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.786847][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.798419][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.811087][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.821641][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.832708][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.846749][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.873990][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.923847][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.946596][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.966791][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.982192][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.999002][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.009618][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.026368][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.040904][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.066252][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.077562][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.090441][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.101559][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.112301][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.123810][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.134698][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.145686][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.158431][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.172048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.185137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.197728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.207156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.235868][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.245199][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.255085][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.265096][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.281206][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.300569][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.312728][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.324072][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.334833][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.345680][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.356097][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.367295][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.379083][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.419255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.434652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.481614][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.492016][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.515145][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.539179][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.558468][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.571524][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.629347][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.665862][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.691022][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.725228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.794008][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.830203][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.881966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.897845][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.911437][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.928179][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.935021][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.984344][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.997096][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.026844][ T4269] loop0: detected capacity change from 0 to 512 [ 69.044048][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.059586][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.079511][ T4269] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.108994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.146914][ T4269] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.239737][ T4269] EXT4-fs (loop0): 1 truncate cleaned up [ 69.260771][ T4269] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 69.444063][ T4269] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.1: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 70.407904][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 70.561883][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 71.334279][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 71.340391][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 71.354546][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.361229][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.390504][ T4294] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.403305][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 71.424080][ T4269] EXT4-fs (loop0): Remounting filesystem read-only [ 71.430762][ T4269] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 71.500007][ T4269] EXT4-fs (loop0): Remounting filesystem read-only [ 71.518570][ T4269] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.1: Deleting old file: nlink 4, error=-117 [ 71.807291][ T4302] process 'syz.1.10' launched './file1' with NULL argv: empty string added [ 72.922840][ C1] sched: RT throttling activated [ 73.266564][ T4307] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 73.291758][ T4307] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 73.320373][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.333752][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.215821][ T4316] netlink: 'syz.2.12': attribute type 16 has an invalid length. [ 74.226892][ T4316] netlink: 'syz.2.12': attribute type 17 has an invalid length. [ 74.346198][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.354243][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 74.370094][ T4316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.549173][ T4334] loop3: detected capacity change from 0 to 512 [ 74.614821][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 75.609553][ T4321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 76.016052][ T4334] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.181440][ T4344] Zero length message leads to an empty skb [ 78.138018][ T4348] loop1: detected capacity change from 0 to 40427 [ 78.950507][ T4348] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x1ffff [ 79.003162][ T4348] tmpfs: Unknown parameter 'f2fs' [ 79.628103][ T4351] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.883963][ T4351] af_packet: tpacket_rcv: packet too big, clamped from 7192 to 3942. macoff=106 [ 79.965786][ T4356] loop1: detected capacity change from 0 to 1024 [ 80.016804][ T4362] loop2: detected capacity change from 0 to 512 [ 80.065441][ T4356] EXT4-fs (loop1): Ignoring removed bh option [ 80.071668][ T4356] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 80.071668][ T4356] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 80.071668][ T4356] [ 80.089472][ T4356] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.104000][ T4362] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 80.129526][ T4362] EXT4-fs error (device loop2): ext4_get_journal_inode:5185: comm syz.2.24: inode #1792: comm syz.2.24: iget: illegal inode # [ 80.186168][ T4356] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,noblock_validity,i_version,bh,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,dioread_nolock,,errors=continue. Quota mode: writeback. [ 80.246107][ T4362] EXT4-fs (loop2): Remounting filesystem read-only [ 80.259962][ T4356] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3885: comm syz.1.23: Allocating blocks 497-513 which overlap fs metadata [ 80.276890][ T4362] EXT4-fs (loop2): no journal found [ 80.282547][ T4356] EXT4-fs (loop1): pa ffff88805fb880e0: logic 128, phys. 385, len 8 [ 80.293334][ T4356] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 80.303987][ T4362] EXT4-fs (loop2): can't get journal size [ 80.341956][ T4362] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 80.383069][ T1326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.384672][ T4362] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 80.398742][ T4362] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,sb=0x0000000000000001,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 80.437913][ T4362] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 4: comm syz.2.24: path /4/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 80.446331][ T4368] loop0: detected capacity change from 0 to 16 [ 80.465828][ T4362] EXT4-fs (loop2): Remounting filesystem read-only [ 80.576529][ T4368] erofs: (device loop0): mounted with root inode @ nid 36. [ 80.693236][ T1326] usb 5-1: Using ep0 maxpacket: 16 [ 81.941008][ T4368] overlayfs: failed to resolve './file0': -2 [ 82.059096][ T4374] loop2: detected capacity change from 0 to 40427 [ 82.113142][ T1326] usb 5-1: config 0 has no interfaces? [ 82.148760][ T4374] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 82.169573][ T4374] F2FS-fs (loop2): invalid crc value [ 82.353941][ T1326] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.398131][ T4374] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.583758][ T4374] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.748986][ T4382] loop1: detected capacity change from 0 to 512 [ 83.866370][ T4382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 83.945234][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.140247][ T1326] usb 5-1: Product: syz [ 84.144845][ T1326] usb 5-1: Manufacturer: syz [ 84.149565][ T1326] usb 5-1: SerialNumber: syz [ 84.159973][ T1326] r8152-cfgselector 5-1: config 0 descriptor?? [ 84.302837][ T4387] loop0: detected capacity change from 0 to 512 [ 84.422397][ T4390] loop1: detected capacity change from 0 to 2048 [ 84.645410][ T4387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.730221][ T4390] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 85.639684][ T4390] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 85.674217][ T1326] r8152-cfgselector 5-1: Unknown version 0x0000 [ 85.689143][ T1326] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 85.787694][ T4412] loop4: detected capacity change from 0 to 512 [ 85.860935][ T4412] ======================================================= [ 85.860935][ T4412] WARNING: The mand mount option has been deprecated and [ 85.860935][ T4412] and is ignored by this kernel. Remove the mand [ 85.860935][ T4412] option from the mount to silence this warning. [ 85.860935][ T4412] ======================================================= [ 86.125739][ T4412] EXT4-fs (loop4): Mount option "nodioread_nolock" incompatible with ext3 [ 86.785729][ T1107] cfg80211: failed to load regulatory.db [ 86.940818][ T4419] loop2: detected capacity change from 0 to 512 [ 87.164195][ T4419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b806e02c, mo2=0002] [ 87.172429][ T4419] System zones: 1-12 [ 87.245440][ T4419] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.36: Directory hole found for htree index block 0 [ 87.320986][ T4425] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 87.379711][ T4425] overlayfs: conflicting lowerdir path [ 87.388773][ T4419] EXT4-fs (loop2): Remounting filesystem read-only [ 87.398403][ T4419] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 87.408525][ T4419] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.36: Directory hole found for htree index block 0 [ 87.647132][ T4434] cgroup: noprefix used incorrectly [ 88.201637][ T4419] EXT4-fs (loop2): Remounting filesystem read-only [ 88.213798][ T4419] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 88.421901][ T4419] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,data_err=abort,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 88.554100][ T4419] EXT4-fs (loop2): shut down requested (2) [ 89.944438][ T4444] loop0: detected capacity change from 0 to 16 [ 90.472523][ T4444] erofs: (device loop0): mounted with root inode @ nid 36. [ 90.584276][ T4449] loop3: detected capacity change from 0 to 2048 [ 90.629637][ T4451] netlink: 36 bytes leftover after parsing attributes in process `syz.1.44'. [ 90.657066][ T4451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.44'. [ 90.716648][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.747507][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 90.895643][ T4197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.940926][ T4449] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 90.958404][ T4449] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 90.972318][ T4449] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.972318][ T4449] [ 90.982091][ T4449] EXT4-fs (loop3): Total free blocks count 0 [ 90.989945][ T4449] EXT4-fs (loop3): Free/Dirty block details [ 91.049113][ T4459] capability: warning: `syz.0.45' uses 32-bit capabilities (legacy support in use) [ 91.955649][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.956721][ T4449] EXT4-fs (loop3): free_blocks=66060288 [ 93.927696][ T4449] EXT4-fs (loop3): dirty_blocks=80 [ 93.934325][ T4449] EXT4-fs (loop3): Block reservation details [ 93.940457][ T4449] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 94.506736][ T4464] loop2: detected capacity change from 0 to 256 [ 94.565437][ T4458] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 268 with max blocks 20 with error 28 [ 94.609384][ T4468] loop4: detected capacity change from 0 to 512 [ 94.640647][ T4458] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.640647][ T4458] [ 94.678369][ T4470] loop1: detected capacity change from 0 to 1024 [ 94.929772][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 95.004240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 95.013322][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 95.022846][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 95.031906][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 95.040925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 95.050010][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.059013][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.068104][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.077233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 95.304161][ T4197] usb 3-1: device not accepting address 2, error -71 [ 95.808283][ T4470] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 95.856623][ T4470] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.874708][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 95.893069][ T4464] FAT-fs (loop2): Directory bread(block 64) failed [ 95.913805][ T4468] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.927640][ T4464] FAT-fs (loop2): Directory bread(block 65) failed [ 95.935133][ T4464] FAT-fs (loop2): Directory bread(block 66) failed [ 95.943537][ T4464] FAT-fs (loop2): Directory bread(block 67) failed [ 95.951090][ T4464] FAT-fs (loop2): Directory bread(block 68) failed [ 95.958000][ T4464] FAT-fs (loop2): Directory bread(block 69) failed [ 95.970985][ T4464] FAT-fs (loop2): Directory bread(block 70) failed [ 95.977822][ T4464] FAT-fs (loop2): Directory bread(block 71) failed [ 95.985044][ T4464] FAT-fs (loop2): Directory bread(block 72) failed [ 95.991752][ T4464] FAT-fs (loop2): Directory bread(block 73) failed [ 96.003293][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 96.031733][ T4470] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,delalloc,resuid=0x0000000000000000,data=ordered,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 96.054496][ T4469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 96.250477][ T4478] loop3: detected capacity change from 0 to 512 [ 96.366318][ T4478] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.400981][ T4478] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.740342][ T4498] loop4: detected capacity change from 0 to 1024 [ 97.826148][ T4503] loop3: detected capacity change from 0 to 256 [ 97.930968][ T4503] FAT-fs (loop3): Directory bread(block 64) failed [ 97.953274][ T4498] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 98.011308][ T4503] FAT-fs (loop3): Directory bread(block 65) failed [ 98.021686][ T4503] FAT-fs (loop3): Directory bread(block 66) failed [ 98.028986][ T4503] FAT-fs (loop3): Directory bread(block 67) failed [ 98.036725][ T4503] FAT-fs (loop3): Directory bread(block 68) failed [ 98.045116][ T4503] FAT-fs (loop3): Directory bread(block 69) failed [ 98.051834][ T4503] FAT-fs (loop3): Directory bread(block 70) failed [ 98.058904][ T4503] FAT-fs (loop3): Directory bread(block 71) failed [ 98.624516][ T4503] FAT-fs (loop3): Directory bread(block 72) failed [ 98.670383][ T4503] FAT-fs (loop3): Directory bread(block 73) failed [ 98.696554][ T4514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 98.736876][ T4498] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 99.587798][ T4514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.59'. [ 100.814453][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.383251][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 101.391969][ T4528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 101.983474][ T4537] tipc: Can't bind to reserved service type 1 [ 103.569870][ T4558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.73'. [ 103.589005][ T4558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73'. [ 103.625329][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.814787][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 103.823987][ T4560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 105.722948][ T4197] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.013033][ T4197] usb 1-1: Using ep0 maxpacket: 32 [ 106.198768][ T4197] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.288001][ T4197] usb 1-1: config 0 has an invalid interface number: 194 but max is 0 [ 106.309071][ T4197] usb 1-1: config 0 has no interface number 0 [ 106.330145][ T4197] usb 1-1: config 0 interface 194 has no altsetting 0 [ 106.513341][ T4197] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=f8.39 [ 106.535327][ T4197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.558668][ T4197] usb 1-1: Product: syz [ 106.581377][ T4197] usb 1-1: Manufacturer: syz [ 106.600193][ T4197] usb 1-1: SerialNumber: syz [ 106.639326][ T4197] usb 1-1: config 0 descriptor?? [ 106.999429][ T4197] usb-storage 1-1:0.194: USB Mass Storage device detected [ 107.064093][ T4197] usb-storage 1-1:0.194: device ignored [ 107.189044][ T4601] netlink: 36 bytes leftover after parsing attributes in process `syz.3.85'. [ 107.212931][ T4197] usb 1-1: USB disconnect, device number 2 [ 107.225117][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 107.280839][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.427213][ T4605] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 107.446706][ T4605] loop4: detected capacity change from 0 to 512 [ 107.469517][ T4607] loop3: detected capacity change from 0 to 512 [ 107.544893][ T4605] EXT4-fs (loop4): Invalid want_extra_isize 109 [ 107.593617][ T4607] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.88: invalid indirect mapped block 256 (level 2) [ 107.630122][ T4607] EXT4-fs (loop3): 2 truncates cleaned up [ 107.640618][ T4607] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 107.684472][ T26] audit: type=1800 audit(1776154853.399:2): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.88" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 108.206172][ T4618] loop2: detected capacity change from 0 to 256 [ 108.585738][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 108.978094][ T4636] netlink: 72 bytes leftover after parsing attributes in process `syz.0.101'. [ 109.066537][ T4197] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.356081][ T4197] usb 2-1: Using ep0 maxpacket: 8 [ 109.374143][ T4643] ipt_CLUSTERIP: Please specify destination IP [ 109.533016][ T4197] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 109.552744][ T4197] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 109.579574][ T4197] usb 2-1: config 0 has no interface number 0 [ 109.596680][ T4197] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.619824][ T4197] usb 2-1: config 0 interface 200 has no altsetting 0 [ 110.762612][ T4197] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 110.793452][ T4197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.815068][ T4197] usb 2-1: Product: syz [ 110.819391][ T4197] usb 2-1: Manufacturer: syz [ 110.835715][ T4197] usb 2-1: SerialNumber: syz [ 110.859010][ T4197] usb 2-1: config 0 descriptor?? [ 110.958523][ T4654] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.014836][ T4658] loop3: detected capacity change from 0 to 64 [ 111.147321][ T4662] loop2: detected capacity change from 0 to 512 [ 111.312617][ T4197] usb 2-1: USB disconnect, device number 2 [ 111.537133][ T4662] FAT-fs (loop2): Directory bread(block 199916) failed [ 111.657801][ T4662] FAT-fs (loop2): Directory bread(block 199917) failed [ 111.874585][ T4662] FAT-fs (loop2): Directory bread(block 199918) failed [ 112.074341][ T4662] FAT-fs (loop2): Directory bread(block 199919) failed [ 112.188142][ T4662] FAT-fs (loop2): Directory bread(block 199920) failed [ 112.195085][ T4662] FAT-fs (loop2): Directory bread(block 199921) failed [ 112.220490][ T4662] FAT-fs (loop2): Directory bread(block 199922) failed [ 112.227627][ T4662] FAT-fs (loop2): Directory bread(block 199923) failed [ 112.333404][ T4672] loop1: detected capacity change from 0 to 512 [ 112.434111][ T4672] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.627685][ T4672] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.675374][ T4680] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 113.049168][ T4376] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.151680][ T4672] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.113: corrupted inode contents [ 113.454638][ T4672] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.113: mark_inode_dirty error [ 113.526283][ T4376] usb 4-1: Using ep0 maxpacket: 32 [ 113.533079][ T4672] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.113: corrupted inode contents [ 113.584171][ T4672] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.113: mark_inode_dirty error [ 113.653309][ T4376] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.716081][ T4376] usb 4-1: config 0 has no interface number 0 [ 113.888653][ T4376] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.897877][ T4376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.949984][ T4376] usb 4-1: Product: syz [ 113.963841][ T4376] usb 4-1: Manufacturer: syz [ 113.968486][ T4376] usb 4-1: SerialNumber: syz [ 114.063135][ T4690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 114.777796][ T4376] usb 4-1: config 0 descriptor?? [ 114.820768][ T4376] smsc95xx v2.0.0 [ 116.171001][ T4701] loop4: detected capacity change from 0 to 512 [ 116.222870][ T4376] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 116.233951][ T4376] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 116.260394][ T4701] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.261670][ T4376] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 116.322093][ T4376] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 116.346570][ T4704] loop1: detected capacity change from 0 to 64 [ 116.347435][ T4376] usb 4-1: USB disconnect, device number 2 [ 116.387614][ T4701] [ 116.390005][ T4701] ====================================================== [ 116.397044][ T4701] WARNING: possible circular locking dependency detected [ 116.404094][ T4701] syzkaller #0 Not tainted [ 116.408532][ T4701] ------------------------------------------------------ [ 116.415685][ T4701] syz.4.121/4701 is trying to acquire lock: [ 116.421594][ T4701] ffff88807b784bd8 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 116.431841][ T4701] [ 116.431841][ T4701] but task is already holding lock: [ 116.439230][ T4701] ffff888073226e70 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 116.449112][ T4701] [ 116.449112][ T4701] which lock already depends on the new lock. [ 116.449112][ T4701] [ 116.459570][ T4701] [ 116.459570][ T4701] the existing dependency chain (in reverse order) is: [ 116.468611][ T4701] [ 116.468611][ T4701] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 116.476260][ T4701] down_write+0x38/0x60 [ 116.480970][ T4701] ext4_destroy_inline_data+0x24/0xe0 [ 116.486891][ T4701] ext4_writepages+0x670/0x2df0 [ 116.492295][ T4701] do_writepages+0x476/0x6e0 [ 116.497439][ T4701] filemap_fdatawrite_wbc+0x1eb/0x240 [ 116.503363][ T4701] file_write_and_wait_range+0x14d/0x220 [ 116.509553][ T4701] ext4_sync_file+0x1ff/0xae0 [ 116.514789][ T4701] ext4_buffered_write_iter+0x338/0x3b0 [ 116.520875][ T4701] ext4_file_write_iter+0x74d/0x1700 [ 116.526702][ T4701] vfs_write+0x745/0xd60 [ 116.531496][ T4701] __x64_sys_pwrite64+0x19a/0x220 [ 116.537085][ T4701] do_syscall_64+0x4c/0xa0 [ 116.542058][ T4701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.548502][ T4701] [ 116.548502][ T4701] -> #0 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 116.556954][ T4701] __lock_acquire+0x2c42/0x7d10 [ 116.562350][ T4701] lock_acquire+0x19e/0x400 [ 116.567397][ T4701] percpu_down_read+0x46/0x1b0 [ 116.572715][ T4701] ext4_writepages+0x20f/0x2df0 [ 116.578111][ T4701] do_writepages+0x476/0x6e0 [ 116.583252][ T4701] __writeback_single_inode+0x153/0xda0 [ 116.589347][ T4701] writeback_single_inode+0x3cb/0x8e0 [ 116.595267][ T4701] write_inode_now+0x23b/0x2c0 [ 116.600587][ T4701] iput+0x5ab/0x8a0 [ 116.604963][ T4701] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 116.610884][ T4701] ext4_xattr_block_set+0x979/0x2d20 [ 116.616723][ T4701] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 116.623166][ T4701] __ext4_expand_extra_isize+0x301/0x3e0 [ 116.629367][ T4701] __ext4_mark_inode_dirty+0x469/0x700 [ 116.635374][ T4701] ext4_evict_inode+0xa8d/0x1090 [ 116.640852][ T4701] evict+0x4c9/0x8d0 [ 116.645293][ T4701] ext4_orphan_cleanup+0xad2/0x1320 [ 116.651040][ T4701] ext4_fill_super+0x8e25/0x95a0 [ 116.656531][ T4701] mount_bdev+0x287/0x3c0 [ 116.661407][ T4701] legacy_get_tree+0xe6/0x180 [ 116.666631][ T4701] vfs_get_tree+0x88/0x270 [ 116.671686][ T4701] do_new_mount+0x24a/0xa40 [ 116.676731][ T4701] __se_sys_mount+0x2e3/0x3d0 [ 116.681976][ T4701] do_syscall_64+0x4c/0xa0 [ 116.686942][ T4701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.693413][ T4701] [ 116.693413][ T4701] other info that might help us debug this: [ 116.693413][ T4701] [ 116.703666][ T4701] Possible unsafe locking scenario: [ 116.703666][ T4701] [ 116.711131][ T4701] CPU0 CPU1 [ 116.716512][ T4701] ---- ---- [ 116.721890][ T4701] lock(&ei->xattr_sem); [ 116.726241][ T4701] lock(&sbi->s_writepages_rwsem); [ 116.733985][ T4701] lock(&ei->xattr_sem); [ 116.740868][ T4701] lock(&sbi->s_writepages_rwsem); [ 116.746106][ T4701] [ 116.746106][ T4701] *** DEADLOCK *** [ 116.746106][ T4701] [ 116.754263][ T4701] 3 locks held by syz.4.121/4701: [ 116.759312][ T4701] #0: ffff88807b7820e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 116.769605][ T4701] #1: ffff88807b782650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 116.779162][ T4701] #2: ffff888073226e70 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 116.789476][ T4701] [ 116.789476][ T4701] stack backtrace: [ 116.795413][ T4701] CPU: 0 PID: 4701 Comm: syz.4.121 Not tainted syzkaller #0 [ 116.802710][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.812785][ T4701] Call Trace: [ 116.816082][ T4701] [ 116.819043][ T4701] dump_stack_lvl+0x188/0x250 [ 116.823740][ T4701] ? load_image+0x400/0x400 [ 116.828267][ T4701] ? show_regs_print_info+0x20/0x20 [ 116.833491][ T4701] ? print_circular_bug+0x12b/0x1a0 [ 116.838716][ T4701] check_noncircular+0x296/0x330 [ 116.843727][ T4701] ? look_up_lock_class+0x71/0x110 [ 116.848868][ T4701] ? add_chain_block+0x940/0x940 [ 116.853858][ T4701] ? lockdep_lock+0xf1/0x1f0 [ 116.858522][ T4701] ? mark_lock+0x94/0x320 [ 116.862878][ T4701] __lock_acquire+0x2c42/0x7d10 [ 116.867760][ T4701] ? 0xffffffffa0028000 [ 116.871933][ T4701] ? is_bpf_text_address+0x254/0x270 [ 116.877243][ T4701] ? verify_lock_unused+0x140/0x140 [ 116.882495][ T4701] ? __kernel_text_address+0x9a/0x100 [ 116.887916][ T4701] ? unwind_get_return_address+0x49/0x80 [ 116.893584][ T4701] ? stack_trace_save+0xf0/0xf0 [ 116.898510][ T4701] ? arch_stack_walk+0xf2/0x140 [ 116.903441][ T4701] lock_acquire+0x19e/0x400 [ 116.908119][ T4701] ? ext4_writepages+0x20f/0x2df0 [ 116.913193][ T4701] ? __might_sleep+0xf0/0xf0 [ 116.917830][ T4701] ? lockdep_unlock+0x143/0x2e0 [ 116.922718][ T4701] ? read_lock_is_recursive+0x10/0x10 [ 116.928123][ T4701] ? add_lock_to_list+0x18d/0x280 [ 116.933177][ T4701] ? __lock_acquire+0x28ac/0x7d10 [ 116.938231][ T4701] percpu_down_read+0x46/0x1b0 [ 116.943023][ T4701] ? ext4_writepages+0x20f/0x2df0 [ 116.948076][ T4701] ext4_writepages+0x20f/0x2df0 [ 116.952966][ T4701] ? deref_stack_reg+0xd0/0x120 [ 116.957840][ T4701] ? verify_lock_unused+0x140/0x140 [ 116.963077][ T4701] ? mark_lock+0x94/0x320 [ 116.967430][ T4701] ? ext4_readpage+0x2e0/0x2e0 [ 116.972235][ T4701] ? __lock_acquire+0x13bc/0x7d10 [ 116.977293][ T4701] ? arch_stack_walk+0xf2/0x140 [ 116.982185][ T4701] ? __lock_acquire+0x7d10/0x7d10 [ 116.987241][ T4701] ? do_raw_spin_lock+0x128/0x2f0 [ 116.992306][ T4701] ? lockdep_unlock+0x143/0x2e0 [ 116.997194][ T4701] ? do_raw_spin_unlock+0x11d/0x230 [ 117.002416][ T4701] ? ext4_readpage+0x2e0/0x2e0 [ 117.007210][ T4701] do_writepages+0x476/0x6e0 [ 117.011829][ T4701] ? __writepage+0x130/0x130 [ 117.016445][ T4701] ? writeback_single_inode+0x3c0/0x8e0 [ 117.022016][ T4701] ? __lock_acquire+0x7d10/0x7d10 [ 117.027155][ T4701] ? do_raw_spin_lock+0x128/0x2f0 [ 117.032197][ T4701] __writeback_single_inode+0x153/0xda0 [ 117.037773][ T4701] writeback_single_inode+0x3cb/0x8e0 [ 117.043164][ T4701] ? write_inode_now+0x2c0/0x2c0 [ 117.048130][ T4701] write_inode_now+0x23b/0x2c0 [ 117.052921][ T4701] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 117.058439][ T4701] ? do_raw_spin_unlock+0x11d/0x230 [ 117.063664][ T4701] iput+0x5ab/0x8a0 [ 117.067527][ T4701] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 117.072957][ T4701] ? ext4_xattr_ibody_set+0x330/0x330 [ 117.078472][ T4701] ext4_xattr_block_set+0x979/0x2d20 [ 117.083791][ T4701] ? ext4_get_inode_loc+0x120/0x120 [ 117.089039][ T4701] ? ext4_xattr_block_find+0x500/0x500 [ 117.094534][ T4701] ? ext4_xattr_block_find+0xe6/0x500 [ 117.099971][ T4701] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 117.105829][ T4701] __ext4_expand_extra_isize+0x301/0x3e0 [ 117.111599][ T4701] __ext4_mark_inode_dirty+0x469/0x700 [ 117.117104][ T4701] ext4_evict_inode+0xa8d/0x1090 [ 117.122069][ T4701] ? _raw_spin_unlock+0x24/0x40 [ 117.126951][ T4701] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 117.132872][ T4701] ? do_raw_spin_unlock+0x11d/0x230 [ 117.138110][ T4701] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 117.144046][ T4701] evict+0x4c9/0x8d0 [ 117.147984][ T4701] ? proc_nr_inodes+0x320/0x320 [ 117.152893][ T4701] ? do_raw_spin_unlock+0x11d/0x230 [ 117.158119][ T4701] ? _raw_spin_unlock+0x24/0x40 [ 117.163031][ T4701] ? iput+0x706/0x8a0 [ 117.167050][ T4701] ext4_orphan_cleanup+0xad2/0x1320 [ 117.172276][ T4701] ? ext4_orphan_del+0xbf0/0xbf0 [ 117.177439][ T4701] ? errseq_check_and_advance+0x62/0x120 [ 117.183117][ T4701] ext4_fill_super+0x8e25/0x95a0 [ 117.188109][ T4701] ? ext4_mount+0x40/0x40 [ 117.192470][ T4701] ? set_blocksize+0x1f3/0x370 [ 117.197299][ T4701] ? sb_set_blocksize+0xa5/0xe0 [ 117.202177][ T4701] mount_bdev+0x287/0x3c0 [ 117.206543][ T4701] ? ext4_mount+0x40/0x40 [ 117.210961][ T4701] legacy_get_tree+0xe6/0x180 [ 117.215699][ T4701] ? ext4_errno_to_code+0x160/0x160 [ 117.220934][ T4701] vfs_get_tree+0x88/0x270 [ 117.225379][ T4701] do_new_mount+0x24a/0xa40 [ 117.229912][ T4701] __se_sys_mount+0x2e3/0x3d0 [ 117.234628][ T4701] ? __x64_sys_mount+0xc0/0xc0 [ 117.239431][ T4701] ? lockdep_hardirqs_on+0x94/0x140 [ 117.244660][ T4701] ? __x64_sys_mount+0x1c/0xc0 [ 117.249478][ T4701] do_syscall_64+0x4c/0xa0 [ 117.253960][ T4701] ? clear_bhb_loop+0x30/0x80 [ 117.258658][ T4701] ? clear_bhb_loop+0x30/0x80 [ 117.263354][ T4701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.269295][ T4701] RIP: 0033:0x7efe3fb8fa8a [ 117.273762][ T4701] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.293396][ T4701] RSP: 002b:00007efe3dde7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.301846][ T4701] RAX: ffffffffffffffda RBX: 00007efe3dde7ee0 RCX: 00007efe3fb8fa8a [ 117.309896][ T4701] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007efe3dde7ea0 [ 117.317905][ T4701] RBP: 0000200000000180 R08: 00007efe3dde7ee0 R09: 0000000000000000 [ 117.325903][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 117.333894][ T4701] R13: 00007efe3dde7ea0 R14: 000000000000047a R15: 000000000000002c [ 117.341904][ T4701] [ 117.405849][ T4701] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.121: iget: bad extra_isize 58 (inode size 256) [ 117.448638][ T4701] EXT4-fs (loop4): Remounting filesystem read-only [ 117.471494][ T4701] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.121: error while reading EA inode 18 err=-117 [ 117.496357][ T4701] EXT4-fs (loop4): Remounting filesystem read-only [ 117.503976][ T4701] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.517450][ T4701] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.121: iget: bad extra_isize 58 (inode size 256) [ 117.531363][ T4701] EXT4-fs (loop4): Remounting filesystem read-only [ 117.541697][ T4701] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.121: error while reading EA inode 11 err=-117 [ 117.554524][ T4701] EXT4-fs (loop4): Remounting filesystem read-only [ 117.563455][ T4701] EXT4-fs (loop4): 1 orphan inode deleted [ 117.570059][ T4701] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,min_batch_time=0x0000000000000003,jqfmt=vfsold,. Quota mode: none. [ 117.889530][ T4701] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.121: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 117.914745][ T4701] EXT4-fs (loop4): Remounting filesystem read-only [ 117.922973][ T4701] syz.4.121 (4701): attempted to duplicate a private mapping with mremap. This is not supported.