last executing test programs: 4.094961585s ago: executing program 1 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 2.874989867s ago: executing program 1 (id=62): unshare(0x2000400) r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0x2, 0x7, 0x11, 0x5, 0xcd17, 0x2, 0x38, 0x8001, 0x9}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x4002) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 2.037760463s ago: executing program 4 (id=77): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80004000, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x1}}, 0x1c}}, 0x20000050) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='children\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x50000563) splice(r0, 0x0, r1, 0x0, 0x39000, 0x3) 1.902959179s ago: executing program 1 (id=78): r0 = socket(0x400000000010, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xf}, {}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xce}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x8, 0x9, 0x5, {0x94, 0x0, 0x3ff, 0x85, 0x2, 0x80000000}, {0xb, 0x2, 0x89e6, 0x9, 0x3, 0x4}, 0x7fffffff, 0x7ff, 0x1000}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x200c4004) 1.841238051s ago: executing program 4 (id=80): r0 = socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'virt_wifi0\x00'}}, 0x1e) 1.713501517s ago: executing program 4 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1008) 1.64694228s ago: executing program 2 (id=82): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) io_setup(0x8f0, &(0x7f0000002400)) 1.64677727s ago: executing program 1 (id=83): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x60, {0x60, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.557409733s ago: executing program 3 (id=84): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_create(0x0, 0x80000) 1.469424807s ago: executing program 3 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x80000}, 0x18) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) 1.350906942s ago: executing program 2 (id=86): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.309843764s ago: executing program 0 (id=87): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x3, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 1.207804119s ago: executing program 2 (id=88): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.034977346s ago: executing program 0 (id=89): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) 826.660965ms ago: executing program 3 (id=90): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x181000, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 748.211058ms ago: executing program 4 (id=91): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 546.911907ms ago: executing program 0 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) memfd_secret(0x80000) 521.532558ms ago: executing program 3 (id=93): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) 488.56248ms ago: executing program 2 (id=94): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="600000001000ff"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x1000, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002020, 0x0) 358.913344ms ago: executing program 0 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r3, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) 358.753575ms ago: executing program 4 (id=96): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1c, 0xa, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 315.016647ms ago: executing program 3 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 222.449911ms ago: executing program 1 (id=98): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 166.694593ms ago: executing program 0 (id=99): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 166.488433ms ago: executing program 4 (id=100): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {}, {@usrquota}, {@data_err_ignore}, {@init_itable}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x559, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x8, 0x4000, 0x4000) 157.764953ms ago: executing program 2 (id=101): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_gettime(r0, 0x0) timer_gettime(r0, &(0x7f0000000280)) 126.577655ms ago: executing program 3 (id=102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000423972d918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) sendmsg$nl_route(r2, 0x0, 0x40840) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x39) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 14.736499ms ago: executing program 1 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") 14.467349ms ago: executing program 0 (id=104): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) r0 = socket$inet6(0xa, 0x5, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) r1 = gettid() sched_getattr(r1, &(0x7f0000000200)={0x38}, 0x38, 0x0) syz_clone3(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22ffee) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) 0s ago: executing program 2 (id=105): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@noblock_validity}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x478, &(0x7f0000000cc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.231' (ED25519) to the list of known hosts. syzkaller login: [ 64.170339][ T4172] cgroup: Unknown subsys name 'net' [ 64.330608][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.791379][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.437309][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.509025][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.549263][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 67.649354][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 67.667038][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.675600][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.683879][ T4183] device bridge_slave_0 entered promiscuous mode [ 67.696394][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.727240][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.734586][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.742568][ T4183] device bridge_slave_1 entered promiscuous mode [ 67.794346][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.801430][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.809763][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.842027][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.849352][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.857420][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.867819][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.885136][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.892465][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.900855][ T4190] device bridge_slave_0 entered promiscuous mode [ 67.928336][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.945597][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.952712][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.960936][ T4190] device bridge_slave_1 entered promiscuous mode [ 67.991418][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.010052][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.017338][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.025942][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.051339][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.069314][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.076642][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.085156][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.092124][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.099382][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.107736][ T4194] device bridge_slave_0 entered promiscuous mode [ 68.117645][ T4183] team0: Port device team_slave_0 added [ 68.140087][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.157308][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.164525][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.172502][ T4194] device bridge_slave_1 entered promiscuous mode [ 68.181785][ T4183] team0: Port device team_slave_1 added [ 68.190199][ T4192] team0: Port device team_slave_0 added [ 68.197998][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.229223][ T4192] team0: Port device team_slave_1 added [ 68.245548][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.284788][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.296232][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.306357][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.313329][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.339766][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.365449][ T4190] team0: Port device team_slave_0 added [ 68.371733][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.379168][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.405469][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.426597][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.444463][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.451438][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.478530][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.491160][ T4190] team0: Port device team_slave_1 added [ 68.505445][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.512428][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.538768][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.581905][ T4187] team0: Port device team_slave_0 added [ 68.590342][ T4187] team0: Port device team_slave_1 added [ 68.598667][ T4194] team0: Port device team_slave_0 added [ 68.606890][ T4194] team0: Port device team_slave_1 added [ 68.632917][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.640038][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.666293][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.710601][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.717853][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.744068][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.765015][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.772085][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.798318][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.828435][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.835652][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.861783][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.873426][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.880399][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.906961][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.921012][ T4183] device hsr_slave_0 entered promiscuous mode [ 68.928234][ T4183] device hsr_slave_1 entered promiscuous mode [ 68.953092][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.960097][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.986054][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.017491][ T4192] device hsr_slave_0 entered promiscuous mode [ 69.024554][ T4192] device hsr_slave_1 entered promiscuous mode [ 69.031071][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.039032][ T4192] Cannot create hsr debugfs directory [ 69.056219][ T4190] device hsr_slave_0 entered promiscuous mode [ 69.063377][ T4190] device hsr_slave_1 entered promiscuous mode [ 69.070330][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.078042][ T4190] Cannot create hsr debugfs directory [ 69.094472][ T4195] Bluetooth: hci1: command 0x0409 tx timeout [ 69.103626][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 69.110161][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 69.168832][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.175271][ T4195] Bluetooth: hci4: command 0x0409 tx timeout [ 69.181334][ T4195] Bluetooth: hci3: command 0x0409 tx timeout [ 69.181749][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.194929][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.202503][ T4187] Cannot create hsr debugfs directory [ 69.218809][ T4194] device hsr_slave_0 entered promiscuous mode [ 69.225948][ T4194] device hsr_slave_1 entered promiscuous mode [ 69.232876][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.240622][ T4194] Cannot create hsr debugfs directory [ 69.535459][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.547477][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.558551][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.568968][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.637815][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.650987][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.671087][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.680778][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.727845][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.739835][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.750588][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.770527][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.859785][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.879590][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.889641][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.903267][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.928151][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.951785][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.990749][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.000470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.011345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.034730][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.052632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.061500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.070650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.081079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.090499][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.097768][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.108338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.117456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.126028][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.133114][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.143949][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.163100][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.172847][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.190844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.199915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.210586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.220899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.229705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.239186][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.249263][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.266625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.278098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.291338][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.316371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.324823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.333850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.342770][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.349879][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.358163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.367279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.376042][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.383129][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.391501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.400277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.408907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.441930][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.451713][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.461155][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.468301][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.477169][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.486542][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.495497][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.502565][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.510470][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.520790][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.530160][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.539116][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.560320][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.569472][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.578606][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.590375][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.600035][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.615687][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.626839][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.639913][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.649111][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.666443][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.677109][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.700237][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.709406][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.718590][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.727776][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.737651][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.747089][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.756090][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.765245][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.774854][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.783823][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.810562][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.828974][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.840413][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.850915][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.860473][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.869691][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.878915][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.890888][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.910770][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.947187][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.961609][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.977534][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.984871][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.006327][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.033169][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.055547][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.065381][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.072486][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.100993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.137052][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.166128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.180430][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 71.187197][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 71.200757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.209069][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 71.222431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.231490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.241439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.264087][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 71.272471][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.282182][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 71.288983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.297612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.306735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.315801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.323636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.331218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.339293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.351070][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.360007][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.375806][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.400307][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.415491][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.417746][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.431563][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.434178][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.444140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.451934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.460847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.469795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.481600][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.521965][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.534702][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.553810][ T3031] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.560941][ T3031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.571707][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.581021][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.590232][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.597402][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.641132][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.650205][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.661958][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.673194][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.683340][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.697163][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.709303][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.721058][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.765999][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.776252][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.786432][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.795713][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.804175][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.812579][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.821126][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.829155][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.837259][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.857023][ T4187] device veth0_vlan entered promiscuous mode [ 71.868780][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.878676][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.887936][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.897795][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.908142][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.920239][ T4192] device veth0_vlan entered promiscuous mode [ 71.931673][ T4183] device veth0_vlan entered promiscuous mode [ 71.946465][ T4187] device veth1_vlan entered promiscuous mode [ 71.965360][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.975644][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.985044][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.994688][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.003086][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.010706][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.018567][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.027802][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.036537][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.045428][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.055232][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.063190][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.073597][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.099150][ T4192] device veth1_vlan entered promiscuous mode [ 72.128256][ T4183] device veth1_vlan entered promiscuous mode [ 72.147622][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.169115][ T4187] device veth0_macvtap entered promiscuous mode [ 72.181412][ T4187] device veth1_macvtap entered promiscuous mode [ 72.194036][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.203267][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.219878][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.231463][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.242065][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.250960][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.287795][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.297671][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.306425][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.315575][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.332625][ T4192] device veth0_macvtap entered promiscuous mode [ 72.348154][ T4192] device veth1_macvtap entered promiscuous mode [ 72.362101][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.372251][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.382344][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.392664][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.402471][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.411442][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.420670][ T3031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.438185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.446164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.469777][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.481881][ T4183] device veth0_macvtap entered promiscuous mode [ 72.493045][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.504955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.520339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.530749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.543081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.552127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.561292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.578952][ T4194] device veth0_vlan entered promiscuous mode [ 72.591360][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.607062][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.625760][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.637525][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.651018][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.661380][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.670522][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.682360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.692163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.700975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.709725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.718416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.730270][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.740976][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.752454][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.762503][ T4183] device veth1_macvtap entered promiscuous mode [ 72.800994][ T4194] device veth1_vlan entered promiscuous mode [ 72.811806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.821922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.856666][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.886147][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.895640][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.905248][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.917939][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.928777][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.939249][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.950035][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.961809][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.989549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.998973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.008129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.018386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.060456][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.072199][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.082699][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.095013][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.106222][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.147299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.156377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.165523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.177126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.185901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.194448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.207623][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.213909][ T4190] device veth0_vlan entered promiscuous mode [ 73.222236][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.233008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.259400][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.268617][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 73.273356][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.283698][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 73.289788][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 73.291211][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.305289][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.330570][ T4194] device veth0_macvtap entered promiscuous mode [ 73.337794][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 73.344712][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 73.360750][ T4190] device veth1_vlan entered promiscuous mode [ 73.375442][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.385414][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.395312][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.411971][ T4194] device veth1_macvtap entered promiscuous mode [ 73.442670][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.457243][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.469524][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.471358][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.478589][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.495203][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.510800][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.523080][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.532977][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.548923][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.558834][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.569366][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.582444][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.628991][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.640000][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.662294][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.682856][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.692962][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.705358][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.715308][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.726087][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.738473][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.760895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.770689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.788674][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.808175][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.819685][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.828883][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.834563][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.847437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.855984][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.865767][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.880883][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.886411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.910677][ T4190] device veth0_macvtap entered promiscuous mode [ 73.934944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.958526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.969975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.014268][ T4190] device veth1_macvtap entered promiscuous mode [ 74.035490][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.044298][ T4268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.090189][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.100891][ T4268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.122227][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.125816][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.136742][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.148073][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.170283][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.181048][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.191829][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.208223][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.219254][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.231485][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.243241][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.255636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.268513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.277367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.290251][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.307335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.327780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.370483][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.387517][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.398357][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.410211][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.427744][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.441355][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.458241][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.471178][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.512808][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.537405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.548404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.584219][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.608109][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.628549][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.644809][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.714141][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.722331][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.801779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.822335][ T4301] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 74.973598][ T4264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.981746][ T4264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.022738][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 75.127083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.180095][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.193610][ T26] audit: type=1326 audit(1764879809.228:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b523d749 code=0x7ffc0000 [ 75.261450][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.269149][ T26] audit: type=1326 audit(1764879809.238:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3b523d749 code=0x7ffc0000 [ 75.291510][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.351055][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 75.365699][ T1324] Bluetooth: hci2: command 0x0419 tx timeout [ 75.391808][ T1324] Bluetooth: hci1: command 0x0419 tx timeout [ 75.432569][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 75.443945][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 75.470945][ T26] audit: type=1326 audit(1764879809.258:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b523d749 code=0x7ffc0000 [ 75.510473][ T4312] device syzkaller0 entered promiscuous mode [ 75.557665][ T26] audit: type=1326 audit(1764879809.258:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3b523d749 code=0x7ffc0000 [ 75.610563][ T26] audit: type=1326 audit(1764879809.278:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b523d749 code=0x7ffc0000 [ 76.033343][ T4325] loop1: detected capacity change from 0 to 512 [ 76.334853][ T4325] ======================================================= [ 76.334853][ T4325] WARNING: The mand mount option has been deprecated and [ 76.334853][ T4325] and is ignored by this kernel. Remove the mand [ 76.334853][ T4325] option from the mount to silence this warning. [ 76.334853][ T4325] ======================================================= [ 76.437651][ T26] audit: type=1326 audit(1764879809.278:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff3b523d749 code=0x7ffc0000 [ 76.506841][ T4325] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.520417][ T4325] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.359319][ T26] audit: type=1326 audit(1764879809.278:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4314 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b523d749 code=0x7ffc0000 [ 77.369804][ T4332] loop4: detected capacity change from 0 to 2048 [ 77.485075][ T4332] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 77.583250][ T4332] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000813,. Quota mode: writeback. [ 77.718659][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 77.783950][ T4338] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 77.855182][ T4338] EXT4-fs (loop4): Remounting filesystem read-only [ 78.132453][ T4352] loop4: detected capacity change from 0 to 256 [ 78.371182][ T4365] loop3: detected capacity change from 0 to 512 [ 78.461300][ T26] audit: type=1326 audit(1764879812.498:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fa9a0749 code=0x7ffc0000 [ 78.497184][ T4365] EXT4-fs (loop3): Ignoring removed bh option [ 78.626922][ T4365] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 78.678893][ T26] audit: type=1326 audit(1764879812.558:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fa9a0749 code=0x7ffc0000 [ 78.753646][ T4365] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.907018][ T26] audit: type=1326 audit(1764879812.558:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4367 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fa9a0749 code=0x7ffc0000 [ 78.954486][ T4379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26'. [ 79.226023][ T4377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30'. [ 79.246035][ T4377] netlink: 32 bytes leftover after parsing attributes in process `syz.4.30'. [ 79.255256][ T4377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.30'. [ 79.282907][ T4377] netlink: 32 bytes leftover after parsing attributes in process `syz.4.30'. [ 79.614831][ T4383] loop0: detected capacity change from 0 to 2048 [ 79.735142][ T4383] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 79.937346][ T4383] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000813,. Quota mode: writeback. [ 80.501828][ T4398] loop0: detected capacity change from 0 to 2048 [ 80.580358][ T4177] loop0: p1 < > p4 [ 80.593103][ T4177] loop0: p4 size 8388608 extends beyond EOD, truncated [ 80.671846][ T4398] loop0: p1 < > p4 [ 80.673057][ T4404] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.692009][ T4398] loop0: p4 size 8388608 extends beyond EOD, truncated [ 82.383493][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 82.383509][ T26] audit: type=1326 audit(1764879816.418:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 82.513503][ T26] audit: type=1326 audit(1764879816.418:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 83.240236][ T4374] udevd[4374]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.256825][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 83.297006][ T4472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 83.306060][ T26] audit: type=1326 audit(1764879816.418:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 83.460346][ T26] audit: type=1326 audit(1764879816.418:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 83.564394][ T26] audit: type=1326 audit(1764879816.418:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 83.632523][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 83.647475][ T4374] udevd[4374]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.781199][ T26] audit: type=1326 audit(1764879816.418:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 83.839763][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 83.927340][ T26] audit: type=1326 audit(1764879816.478:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 84.063528][ T26] audit: type=1326 audit(1764879816.478:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 84.091483][ T4496] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 84.091483][ T4496] program syz.3.64 not setting count and/or reply_len properly [ 84.145783][ T26] audit: type=1326 audit(1764879816.478:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 84.276723][ T4502] 9pnet: Could not find request transport: r [ 84.320148][ T26] audit: type=1326 audit(1764879816.478:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.4.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff401f55749 code=0x7ffc0000 [ 85.416023][ T4559] loop3: detected capacity change from 0 to 512 [ 85.483668][ T4559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.530542][ T4563] Cannot find add_set index 0 as target [ 85.570580][ T4565] netlink: 'syz.2.88': attribute type 39 has an invalid length. [ 85.583703][ T4559] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.642917][ T4559] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.670585][ T4559] EXT4-fs (loop3): 1 truncate cleaned up [ 85.685133][ T4569] loop0: detected capacity change from 0 to 512 [ 85.705724][ T4559] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000007,journal_dev=0x0000000000000001,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nouid32,. Quota mode: none. [ 85.864039][ T4569] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 86.021747][ T4569] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.402255][ T4584] netlink: 64 bytes leftover after parsing attributes in process `syz.2.94'. [ 86.665533][ T4595] loop4: detected capacity change from 0 to 1024 [ 86.754143][ T4595] EXT4-fs (loop4): Ignoring removed oldalloc option [ 86.760823][ T4595] EXT4-fs (loop4): Ignoring removed bh option [ 86.760969][ T4605] loop2: detected capacity change from 0 to 512 [ 86.777786][ T1107] cfg80211: failed to load regulatory.db [ 86.824855][ T4595] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.882161][ T4600] loop1: detected capacity change from 0 to 2048 [ 86.969560][ T4595] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsddf,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 87.014230][ T4605] ------------[ cut here ]------------ [ 87.019997][ T4605] EA inode 11 i_nlink=0 [ 87.020267][ T4605] WARNING: CPU: 0 PID: 4605 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 87.058153][ T4466] Alternate GPT is invalid, using primary GPT. [ 87.078922][ T4598] loop3: detected capacity change from 0 to 8192 [ 87.085544][ T4605] Modules linked in: [ 87.089695][ T4605] CPU: 1 PID: 4605 Comm: syz.2.105 Not tainted syzkaller #0 [ 87.096355][ T4466] loop1: p2 p3 p7 [ 87.097680][ T4605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.111378][ T4605] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 87.118257][ T4605] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 13 e0 a2 ff 49 8b 37 48 c7 c7 80 8d 1d 8a 89 da e8 c2 53 85 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 87.139240][ T4605] RSP: 0018:ffffc9000341f3a0 EFLAGS: 00010246 [ 87.145878][ T4605] RAX: 77bfc78763224600 RBX: 0000000000000000 RCX: 0000000000080000 [ 87.154885][ T4605] RDX: ffffc90004975000 RSI: 000000000000c848 RDI: 000000000000c849 [ 87.163254][ T4605] RBP: ffffc9000341f490 R08: dffffc0000000000 R09: ffffed1017204f2c [ 87.174970][ T4605] R10: ffffed1017204f2c R11: 1ffff11017204f2b R12: ffffc9000341f400 [ 87.193559][ T4605] R13: ffff88805f525c58 R14: dffffc0000000000 R15: ffff88805f525c98 [ 87.201774][ T4605] FS: 00007f321cdca6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 87.212464][ T4605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.219291][ T4605] CR2: 00007ffb6b783e9c CR3: 000000005dc16000 CR4: 00000000003506e0 [ 87.227745][ T4605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.244896][ T4600] Alternate GPT is invalid, using primary GPT. [ 87.279883][ T4605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.288529][ T4600] loop1: p2 p3 p7 [ 87.308419][ T4605] Call Trace: [ 87.329251][ T4605] [ 87.346852][ T4605] ? ext4_xattr_block_csum+0x500/0x500 [ 87.365445][ T4605] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 87.385472][ T4605] ext4_xattr_inode_dec_ref_all+0x982/0xf30 [ 87.403278][ T4605] ? ext4_xattr_delete_inode+0xbb0/0xbb0 [ 87.426972][ T4605] ? __ext4_journal_ensure_credits+0x450/0x450 [ 87.443561][ T4605] ? ext4_get_inode_loc+0xf6/0x120 [ 87.455656][ T4605] ext4_xattr_delete_inode+0x9f1/0xbb0 [ 87.464993][ T4605] ? ext4_expand_extra_isize_ea+0x19a0/0x19a0 [ 87.471655][ T4605] ext4_evict_inode+0xc47/0x1080 [ 87.504014][ T4600] syz.1.103 (4600) used greatest stack depth: 21184 bytes left [ 87.525523][ T4605] ? _raw_spin_unlock+0x24/0x40 [ 87.531751][ T4605] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 87.547618][ T4605] ? do_raw_spin_unlock+0x11d/0x230 [ 87.552900][ T4605] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 87.559345][ T4605] evict+0x485/0x870 [ 87.570501][ T4605] ? __lock_acquire+0x7c60/0x7c60 [ 87.583531][ T4605] ? proc_nr_inodes+0x320/0x320 [ 87.588555][ T4605] ? do_raw_spin_unlock+0x11d/0x230 [ 87.646827][ T4605] ? _raw_spin_unlock+0x24/0x40 [ 87.655521][ T4605] ? iput+0x706/0x8a0 [ 87.659589][ T4605] ext4_orphan_cleanup+0xaa9/0x12e0 [ 87.666230][ T4605] ? ext4_orphan_del+0xb90/0xb90 [ 87.672815][ T4605] ? errseq_check_and_advance+0x62/0x120 [ 87.697353][ T4605] ext4_fill_super+0x92f0/0x9a60 [ 87.702427][ T4605] ? ext4_mount+0x40/0x40 [ 87.716014][ T4605] ? set_blocksize+0x1f1/0x370 [ 87.720869][ T4605] ? sb_set_blocksize+0xa5/0xe0 [ 87.727108][ T4605] mount_bdev+0x287/0x3c0 [ 87.731511][ T4605] ? ext4_mount+0x40/0x40 [ 87.736434][ T4605] legacy_get_tree+0xe6/0x180 [ 87.741191][ T4605] ? ext4_errno_to_code+0x160/0x160 [ 87.747339][ T4605] vfs_get_tree+0x88/0x270 [ 87.751836][ T4605] do_new_mount+0x24a/0xa40 [ 87.758492][ T4605] __se_sys_mount+0x2d6/0x3c0 [ 87.763987][ T4605] ? __x64_sys_mount+0xc0/0xc0 [ 87.768854][ T4605] ? lockdep_hardirqs_on+0x94/0x140 [ 87.780480][ T4374] udevd[4374]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 87.788394][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 87.796586][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 87.809247][ T4605] ? __x64_sys_mount+0x1c/0xc0 [ 87.815183][ T4605] do_syscall_64+0x4c/0xa0 [ 87.819857][ T4605] ? clear_bhb_loop+0x30/0x80 [ 87.824833][ T4605] ? clear_bhb_loop+0x30/0x80 [ 87.829756][ T4605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.835910][ T4605] RIP: 0033:0x7f321eb64eea [ 87.840556][ T4605] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.846807][ T4374] udevd[4374]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 87.860942][ T4605] RSP: 002b:00007f321cdc9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.889558][ T4605] RAX: ffffffffffffffda RBX: 00007f321cdc9ef0 RCX: 00007f321eb64eea [ 87.889791][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 87.894066][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 87.919118][ T4605] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f321cdc9eb0 [ 87.928300][ T4605] RBP: 0000200000000180 R08: 00007f321cdc9ef0 R09: 0000000000800700 [ 87.937184][ T4605] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 87.953104][ T4605] R13: 00007f321cdc9eb0 R14: 0000000000000478 R15: 000000000000002c [ 87.962375][ T4605] [ 87.965921][ T4605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.973219][ T4605] CPU: 0 PID: 4605 Comm: syz.2.105 Not tainted syzkaller #0 [ 87.980507][ T4605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.990584][ T4605] Call Trace: [ 87.993896][ T4605] [ 87.996842][ T4605] dump_stack_lvl+0x168/0x230 [ 88.001530][ T4605] ? show_regs_print_info+0x20/0x20 [ 88.006914][ T4605] ? load_image+0x3b0/0x3b0 [ 88.011461][ T4605] panic+0x2c9/0x7f0 [ 88.015363][ T4605] ? bpf_jit_dump+0xd0/0xd0 [ 88.019877][ T4605] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 88.025865][ T4605] __warn+0x248/0x2b0 [ 88.029867][ T4605] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 88.035852][ T4605] report_bug+0x1b7/0x2e0 [ 88.040188][ T4605] handle_bug+0x3a/0x70 [ 88.044345][ T4605] exc_invalid_op+0x16/0x40 [ 88.048866][ T4605] asm_exc_invalid_op+0x16/0x20 [ 88.053810][ T4605] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 88.060442][ T4605] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 13 e0 a2 ff 49 8b 37 48 c7 c7 80 8d 1d 8a 89 da e8 c2 53 85 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 88.080077][ T4605] RSP: 0018:ffffc9000341f3a0 EFLAGS: 00010246 [ 88.086166][ T4605] RAX: 77bfc78763224600 RBX: 0000000000000000 RCX: 0000000000080000 [ 88.094180][ T4605] RDX: ffffc90004975000 RSI: 000000000000c848 RDI: 000000000000c849 [ 88.102184][ T4605] RBP: ffffc9000341f490 R08: dffffc0000000000 R09: ffffed1017204f2c [ 88.110166][ T4605] R10: ffffed1017204f2c R11: 1ffff11017204f2b R12: ffffc9000341f400 [ 88.118147][ T4605] R13: ffff88805f525c58 R14: dffffc0000000000 R15: ffff88805f525c98 [ 88.126156][ T4605] ? ext4_xattr_block_csum+0x500/0x500 [ 88.131654][ T4605] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 88.137733][ T4605] ext4_xattr_inode_dec_ref_all+0x982/0xf30 [ 88.143663][ T4605] ? ext4_xattr_delete_inode+0xbb0/0xbb0 [ 88.149326][ T4605] ? __ext4_journal_ensure_credits+0x450/0x450 [ 88.155492][ T4605] ? ext4_get_inode_loc+0xf6/0x120 [ 88.160625][ T4605] ext4_xattr_delete_inode+0x9f1/0xbb0 [ 88.166109][ T4605] ? ext4_expand_extra_isize_ea+0x19a0/0x19a0 [ 88.172206][ T4605] ext4_evict_inode+0xc47/0x1080 [ 88.177146][ T4605] ? _raw_spin_unlock+0x24/0x40 [ 88.182014][ T4605] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 88.187922][ T4605] ? do_raw_spin_unlock+0x11d/0x230 [ 88.193150][ T4605] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 88.199070][ T4605] evict+0x485/0x870 [ 88.202973][ T4605] ? __lock_acquire+0x7c60/0x7c60 [ 88.208014][ T4605] ? proc_nr_inodes+0x320/0x320 [ 88.212885][ T4605] ? do_raw_spin_unlock+0x11d/0x230 [ 88.218095][ T4605] ? _raw_spin_unlock+0x24/0x40 [ 88.222977][ T4605] ? iput+0x706/0x8a0 [ 88.226975][ T4605] ext4_orphan_cleanup+0xaa9/0x12e0 [ 88.232202][ T4605] ? ext4_orphan_del+0xb90/0xb90 [ 88.237145][ T4605] ? errseq_check_and_advance+0x62/0x120 [ 88.242778][ T4605] ext4_fill_super+0x92f0/0x9a60 [ 88.247759][ T4605] ? ext4_mount+0x40/0x40 [ 88.252109][ T4605] ? set_blocksize+0x1f1/0x370 [ 88.256877][ T4605] ? sb_set_blocksize+0xa5/0xe0 [ 88.261738][ T4605] mount_bdev+0x287/0x3c0 [ 88.266075][ T4605] ? ext4_mount+0x40/0x40 [ 88.270434][ T4605] legacy_get_tree+0xe6/0x180 [ 88.275130][ T4605] ? ext4_errno_to_code+0x160/0x160 [ 88.280347][ T4605] vfs_get_tree+0x88/0x270 [ 88.284776][ T4605] do_new_mount+0x24a/0xa40 [ 88.289309][ T4605] __se_sys_mount+0x2d6/0x3c0 [ 88.294004][ T4605] ? __x64_sys_mount+0xc0/0xc0 [ 88.298795][ T4605] ? lockdep_hardirqs_on+0x94/0x140 [ 88.304003][ T4605] ? __x64_sys_mount+0x1c/0xc0 [ 88.308798][ T4605] do_syscall_64+0x4c/0xa0 [ 88.313236][ T4605] ? clear_bhb_loop+0x30/0x80 [ 88.317912][ T4605] ? clear_bhb_loop+0x30/0x80 [ 88.322592][ T4605] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.328485][ T4605] RIP: 0033:0x7f321eb64eea [ 88.332902][ T4605] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.352507][ T4605] RSP: 002b:00007f321cdc9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.360932][ T4605] RAX: ffffffffffffffda RBX: 00007f321cdc9ef0 RCX: 00007f321eb64eea [ 88.368910][ T4605] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f321cdc9eb0 [ 88.376901][ T4605] RBP: 0000200000000180 R08: 00007f321cdc9ef0 R09: 0000000000800700 [ 88.384898][ T4605] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 88.392891][ T4605] R13: 00007f321cdc9eb0 R14: 0000000000000478 R15: 000000000000002c [ 88.401085][ T4605] [ 88.404374][ T4605] Kernel Offset: disabled [ 88.408887][ T4605] Rebooting in 86400 seconds..