last executing test programs: 1m3.27040048s ago: executing program 1 (id=25): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 1m2.779831901s ago: executing program 1 (id=29): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44040) 1m2.555857601s ago: executing program 1 (id=31): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) 1m2.167464828s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 1m1.827601262s ago: executing program 1 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) 1m1.306702235s ago: executing program 1 (id=42): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1m1.022777937s ago: executing program 32 (id=42): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 8.035907792s ago: executing program 4 (id=467): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x5) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 4.852005679s ago: executing program 4 (id=474): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x6, 0x46bb, 0x7, 0x1, 0x11, "c240507b6545331f21e92228cb9c7ffd205581"}) 4.349608151s ago: executing program 4 (id=479): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) 3.139439754s ago: executing program 5 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000004c0)={[{@nolazytime}, {@auto_da_alloc}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x8000}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@orlov}, {@nouid32}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000007c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.679367193s ago: executing program 2 (id=489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000280)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="ae4e", 0x2}, {&(0x7f0000000640)}, {0x0}], 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x14e0}}], 0x1, 0x4010) 2.463900793s ago: executing program 5 (id=490): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x400, 0x70bd27, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x12, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, 0x0, 0x0) 2.311921649s ago: executing program 2 (id=492): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.231955343s ago: executing program 5 (id=493): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() fsmount(0xffffffffffffffff, 0x0, 0x77) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) 2.080643829s ago: executing program 2 (id=494): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100010e, &(0x7f0000000040), 0x2, 0x457, &(0x7f0000000b40)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.805521892s ago: executing program 3 (id=498): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x20000000000000b) 1.696027306s ago: executing program 4 (id=499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x240480dd}, 0x0) 1.620563409s ago: executing program 2 (id=500): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0xc}]}) 1.553311883s ago: executing program 3 (id=501): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) fadvise64(r1, 0x4, 0x9, 0x5) 1.276028094s ago: executing program 3 (id=502): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8814) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x0, 0x200}, 0x8) 919.74364ms ago: executing program 2 (id=504): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x80941, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2c, 0x100013, 0x0, 0x2, 0x3, 0x1000, 0x5, 0x2, 0x1}) 847.987143ms ago: executing program 0 (id=505): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x7, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 847.819123ms ago: executing program 4 (id=506): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) 831.644424ms ago: executing program 2 (id=507): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) 750.089577ms ago: executing program 4 (id=508): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 611.959173ms ago: executing program 0 (id=509): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1, 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 568.798385ms ago: executing program 0 (id=510): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 549.461816ms ago: executing program 5 (id=511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 443.84457ms ago: executing program 5 (id=512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) fsopen(&(0x7f00000002c0)='nfsd\x00', 0x1) 443.36375ms ago: executing program 0 (id=513): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x1}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 421.048251ms ago: executing program 5 (id=514): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000001040)=ANY=[@ANYRES64=r2], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x204012, &(0x7f0000001540)=ANY=[@ANYRES16=r2, @ANYBLOB="0370b2664b14b34adcf9bcd008e9661008923815ee3443b050484f443faf3f3c84eda2b463d5472d813924e1f27d6508a94cbe1fd03b200c8079a89c085bd05bdc57af0f9a5bfc1e752d33282512b36b7e74535a3c33a3d7ecac1a900c843c3254c04f959b0bf2627f42a7d3e9041e6ee75cba19bfeb7e6eece21be08bcea7960d650aba96a92d"], 0x0, 0x2df, &(0x7f0000001240)="$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") r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={0x0}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001180)='initcall_finish\x00', r5}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r8, &(0x7f0000000200), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x8000f28, 0x0) splice(r11, 0x0, r10, 0x0, 0x7f, 0xe) write(r9, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r13, 0x2004, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYRESOCT=r12, @ANYRES32=r4, @ANYRES64=r3, @ANYRESHEX=r11, @ANYRESDEC=r8], 0x80}, 0x1, 0x0, 0x0, 0x4880}, 0x1) 376.206233ms ago: executing program 0 (id=515): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c464e07139405000000000000000300060013"], 0x58) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 304.039836ms ago: executing program 3 (id=516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={0x0, r0}, 0x18) 275.909978ms ago: executing program 3 (id=517): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) setgid(0x0) 129.905284ms ago: executing program 3 (id=518): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = gettid() syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c61e0000000000000001a13bd5c510069d9d0000e01f00ff0200"/50], 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000580)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fsmount(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) 0s ago: executing program 0 (id=519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES64], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) kernel console output (not intermixed with test programs): [ 72.159914][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.167941][ T4265] device bridge_slave_1 entered promiscuous mode [ 72.189882][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.197173][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.205019][ T4267] device bridge_slave_0 entered promiscuous mode [ 72.217117][ T4277] team0: Port device team_slave_0 added [ 72.223128][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.230554][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.238424][ T4267] device bridge_slave_1 entered promiscuous mode [ 72.261912][ T4280] team0: Port device team_slave_0 added [ 72.278205][ T4277] team0: Port device team_slave_1 added [ 72.284089][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.291400][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.300102][ T4266] device bridge_slave_0 entered promiscuous mode [ 72.324274][ T4280] team0: Port device team_slave_1 added [ 72.338782][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.345889][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.354289][ T4266] device bridge_slave_1 entered promiscuous mode [ 72.363867][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.374854][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.401440][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.408614][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.435019][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.457903][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.469019][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.485072][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.492265][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.518410][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.557669][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.564649][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.591061][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.608420][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.634790][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.641812][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.667848][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.687644][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.707549][ T4267] team0: Port device team_slave_0 added [ 72.715604][ T4265] team0: Port device team_slave_0 added [ 72.725370][ T4265] team0: Port device team_slave_1 added [ 72.747908][ T4267] team0: Port device team_slave_1 added [ 72.756379][ T4280] device hsr_slave_0 entered promiscuous mode [ 72.763494][ T4280] device hsr_slave_1 entered promiscuous mode [ 72.820263][ T4266] team0: Port device team_slave_0 added [ 72.829921][ T4277] device hsr_slave_0 entered promiscuous mode [ 72.836606][ T4277] device hsr_slave_1 entered promiscuous mode [ 72.843622][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.851613][ T4277] Cannot create hsr debugfs directory [ 72.874062][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.881462][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.907705][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.921239][ T4266] team0: Port device team_slave_1 added [ 72.936011][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.943165][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.969189][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.984701][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.992130][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.018169][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.030561][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.038047][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.064554][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.114030][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.121804][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.148504][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.181290][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.189004][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 73.195935][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.198045][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 73.222170][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 73.228822][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.267110][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 73.273434][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 73.313393][ T4267] device hsr_slave_0 entered promiscuous mode [ 73.320202][ T4267] device hsr_slave_1 entered promiscuous mode [ 73.326813][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.334580][ T4267] Cannot create hsr debugfs directory [ 73.346114][ T4265] device hsr_slave_0 entered promiscuous mode [ 73.353481][ T4265] device hsr_slave_1 entered promiscuous mode [ 73.360300][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.368068][ T4265] Cannot create hsr debugfs directory [ 73.466078][ T4266] device hsr_slave_0 entered promiscuous mode [ 73.472973][ T4266] device hsr_slave_1 entered promiscuous mode [ 73.480202][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.487920][ T4266] Cannot create hsr debugfs directory [ 73.720016][ T4280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.738703][ T4280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.761203][ T4280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.781168][ T4280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.825908][ T4277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.836847][ T4277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.861368][ T4277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.884504][ T4277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.933495][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.948953][ T4265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.972411][ T4265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.982603][ T4265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.004010][ T4265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.023237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.034525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.046455][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.074285][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.094265][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.103844][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.113289][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.120592][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.130538][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.139494][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.149149][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.197915][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.215451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.226618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.236023][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.243175][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.252179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.261312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.283964][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.295328][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.319225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.330269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.339465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.351677][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.376170][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.390227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.399903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.419619][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.449700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.459941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.469073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.477862][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.494405][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.507615][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.516364][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.525858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.534730][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.550443][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.559777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.568948][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.576121][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.584962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.645515][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.654991][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.671213][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.682231][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.691286][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.698451][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.712950][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.722378][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.736457][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.747833][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.764095][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.794862][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.808900][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.822270][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.831296][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.838617][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.853131][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.862200][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.872587][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.881988][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.890966][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.898133][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.911090][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.920293][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.943900][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.956272][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.978895][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.988584][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.000878][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.010911][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.019519][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.028824][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.037787][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.046150][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.054280][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.100746][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.112589][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.123957][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.132969][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.141989][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.149763][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.165273][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.176258][ T4265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.195005][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.214968][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.226128][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.236515][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.269492][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 75.277254][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 75.280450][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.283511][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 75.306558][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.316851][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.335785][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.347926][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 75.347936][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 75.388071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.407741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.427665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.447827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.468066][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.475274][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.483922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.520909][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.541140][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.550648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.587919][ T4280] device veth0_vlan entered promiscuous mode [ 75.595631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.610199][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.622868][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.630042][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.644852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.654278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.663144][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.673880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.684297][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.692750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.714625][ T4280] device veth1_vlan entered promiscuous mode [ 75.745561][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.755487][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.767791][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.774892][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.783511][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.792321][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.801131][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.808303][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.816415][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.825941][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.841888][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.851595][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.860463][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.869178][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.880092][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.888230][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.924615][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.932285][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.942001][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.951450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.961215][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.970157][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.978640][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.986305][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.000888][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.013777][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.035544][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.044336][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.058762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.073830][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.082526][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.091756][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.102086][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.111242][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.121225][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.164283][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.193237][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.210245][ T4280] device veth0_macvtap entered promiscuous mode [ 76.223606][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.234009][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.243045][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.252578][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.283505][ T4280] device veth1_macvtap entered promiscuous mode [ 76.305115][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.329346][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.383053][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.399034][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.446710][ T4277] device veth0_vlan entered promiscuous mode [ 76.458105][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.477766][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.497764][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.510244][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.541528][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.593051][ T4277] device veth1_vlan entered promiscuous mode [ 76.601189][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.610571][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.620938][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.648678][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.684009][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.693313][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.715245][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.737256][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.746019][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.777613][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.833777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.858895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.866416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.889063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.914136][ T4277] device veth0_macvtap entered promiscuous mode [ 76.943041][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.968891][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.978061][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.988238][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.000071][ T4277] device veth1_macvtap entered promiscuous mode [ 77.023418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.033667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.042101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.089652][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.103235][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.118409][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.129528][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.141172][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.152747][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.163574][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.175180][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.194727][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.202394][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.211415][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.219869][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.228777][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.237974][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.246514][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.265053][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.274218][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.285904][ T4265] device veth0_vlan entered promiscuous mode [ 77.310802][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.321221][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.330415][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.342210][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.351159][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 77.351199][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 77.357452][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 77.384907][ T4266] device veth0_vlan entered promiscuous mode [ 77.395159][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.412787][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.424837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.427933][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 77.435196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.438167][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 77.454635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.463612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.472626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.482002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.490158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.499063][ T4265] device veth1_vlan entered promiscuous mode [ 77.535872][ T4267] device veth0_vlan entered promiscuous mode [ 77.568270][ T4266] device veth1_vlan entered promiscuous mode [ 77.584193][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.593642][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.602159][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.610682][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.619642][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.628037][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.673540][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.691820][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.703639][ T4267] device veth1_vlan entered promiscuous mode [ 77.720271][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.728643][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.736828][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.745154][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.753779][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.762566][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.797676][ T4265] device veth0_macvtap entered promiscuous mode [ 77.824499][ T4265] device veth1_macvtap entered promiscuous mode [ 77.836783][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.848958][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.861107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.872369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.882236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.892474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.904598][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.916761][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.937683][ T4266] device veth0_macvtap entered promiscuous mode [ 77.952207][ T4267] device veth0_macvtap entered promiscuous mode [ 77.962661][ T4267] device veth1_macvtap entered promiscuous mode [ 77.991402][ T4266] device veth1_macvtap entered promiscuous mode [ 78.022124][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.054275][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.065333][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.076415][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.086717][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.104410][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.116250][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.136836][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.163360][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.174355][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.198516][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.210444][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.221807][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.243015][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.252049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.265953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.276471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.290456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.299223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.308628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.323398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.333704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.342968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.353871][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.365334][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.375750][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.391865][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.414355][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.448689][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.468901][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.482071][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.492972][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.503542][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.514224][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.531695][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.546868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.556695][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.569078][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.578649][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.594465][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.606151][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.623780][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.635278][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.650391][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.662400][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.676684][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.692500][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.708675][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.719441][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.729671][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.738815][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.747859][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.761479][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.818118][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.835275][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.848975][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.865416][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.877336][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.892330][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.903183][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.913840][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.924885][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.951589][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.969877][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.987191][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.017073][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.025845][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050177][ T4400] loop1: detected capacity change from 0 to 512 [ 79.067684][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.081287][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.093801][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.103372][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.115550][ T4275] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.121829][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.197148][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.425516][ T4403] x_tables: duplicate underflow at hook 2 [ 79.441163][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 79.449333][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 79.455580][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 79.521340][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 79.527693][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 79.604199][ T4405] netlink: 140 bytes leftover after parsing attributes in process `syz.1.8'. [ 81.046490][ T4410] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 81.170731][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 81.254483][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.263319][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.282717][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.288353][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.297548][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.297593][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.302762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.381446][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.396353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.413276][ T4418] loop1: detected capacity change from 0 to 2048 [ 81.444894][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.453566][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.504662][ T4418] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.551234][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.580196][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.605502][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.615861][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.641027][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.662670][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.691993][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.699939][ T4418] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.806031][ T4418] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 252 with error 28 [ 81.867180][ T4418] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.867180][ T4418] [ 81.904920][ T4418] EXT4-fs (loop1): Total free blocks count 0 [ 81.934453][ T4418] EXT4-fs (loop1): Free/Dirty block details [ 81.947838][ T26] audit: type=1326 audit(1765037391.734:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 81.958613][ T4418] EXT4-fs (loop1): free_blocks=2415919104 [ 82.032249][ T26] audit: type=1326 audit(1765037391.734:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.044705][ T4418] EXT4-fs (loop1): dirty_blocks=256 [ 82.096584][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 82.111325][ T4418] EXT4-fs (loop1): Block reservation details [ 82.137338][ T4418] EXT4-fs (loop1): i_reserved_data_blocks=16 [ 82.168051][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 82.187492][ T26] audit: type=1326 audit(1765037391.734:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.298894][ T26] audit: type=1326 audit(1765037391.734:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.322263][ T26] audit: type=1326 audit(1765037391.734:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.345506][ T26] audit: type=1326 audit(1765037391.734:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.367780][ T26] audit: type=1326 audit(1765037391.734:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.411367][ T4360] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 48 with max blocks 72 with error 28 [ 82.452707][ T26] audit: type=1326 audit(1765037391.734:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.585296][ T26] audit: type=1326 audit(1765037391.734:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.697876][ T26] audit: type=1326 audit(1765037391.734:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4428 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 82.732066][ T4447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18'. [ 82.867625][ T4452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 83.625074][ T4467] syz.1.25[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.625185][ T4467] syz.1.25[4467] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.720011][ T4471] netlink: 100 bytes leftover after parsing attributes in process `syz.0.28'. [ 83.996778][ T4483] loop0: detected capacity change from 0 to 2048 [ 84.066186][ T4483] ======================================================= [ 84.066186][ T4483] WARNING: The mand mount option has been deprecated and [ 84.066186][ T4483] and is ignored by this kernel. Remove the mand [ 84.066186][ T4483] option from the mount to silence this warning. [ 84.066186][ T4483] ======================================================= [ 84.197121][ T4483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.292726][ T4488] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 84.293916][ T4483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.420135][ T4483] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.40: bg 0: block 2: invalid block bitmap [ 84.438820][ T4493] loop2: detected capacity change from 0 to 512 [ 84.459470][ T4483] EXT4-fs (loop0): Remounting filesystem read-only [ 84.477173][ T4493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.488661][ T4494] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #15: comm syz.0.40: inline data xattr refers to an external xattr inode [ 84.547824][ T4498] process 'syz.3.33' launched '/dev/fd/6' with NULL argv: empty string added [ 84.556811][ T4494] EXT4-fs (loop0): Remounting filesystem read-only [ 84.557106][ T4493] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.646873][ T4493] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.699754][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 84.871680][ T4502] loop4: detected capacity change from 0 to 128 [ 84.927019][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 85.062714][ T4502] FAT-fs (loop4): Directory bread(block 414) failed [ 85.098089][ T4502] FAT-fs (loop4): Directory bread(block 415) failed [ 85.145041][ T4502] FAT-fs (loop4): Directory bread(block 416) failed [ 85.153362][ T4510] loop2: detected capacity change from 0 to 512 [ 85.177161][ T4510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.237843][ T4502] FAT-fs (loop4): Directory bread(block 417) failed [ 85.280222][ T4510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.308098][ T4502] FAT-fs (loop4): Directory bread(block 418) failed [ 85.400100][ T4502] FAT-fs (loop4): Directory bread(block 419) failed [ 85.406870][ T4502] FAT-fs (loop4): Directory bread(block 420) failed [ 85.412263][ T4510] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.485022][ T4502] FAT-fs (loop4): Directory bread(block 421) failed [ 85.528243][ T4511] lo speed is unknown, defaulting to 1000 [ 85.621333][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 85.636224][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.719090][ T4511] lo speed is unknown, defaulting to 1000 [ 85.838963][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.921981][ T4511] lo speed is unknown, defaulting to 1000 [ 85.999462][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.169703][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.449916][ T4511] infiniband syz1: set active [ 86.508127][ T4511] infiniband syz1: added lo [ 86.527447][ T4511] rdma_rxe: unable to create cq [ 86.541768][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.551316][ T127] cfg80211: failed to load regulatory.db [ 86.574498][ T4413] lo speed is unknown, defaulting to 1000 [ 86.602833][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.611021][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.618461][ T4511] infiniband syz1: Couldn't create ib_mad CQ [ 86.624859][ T4511] infiniband syz1: Couldn't open port 1 [ 86.633645][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.641994][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.649526][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.831065][ T4511] RDS/IB: syz1: added [ 86.835604][ T4511] smc: adding ib device syz1 with port count 1 [ 86.877536][ T4511] smc: ib device syz1 port 1 has pnetid [ 86.924878][ T4413] lo speed is unknown, defaulting to 1000 [ 86.937969][ T4511] lo speed is unknown, defaulting to 1000 [ 86.968594][ T26] kauditd_printk_skb: 119 callbacks suppressed [ 86.968608][ T26] audit: type=1326 audit(1765037396.734:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 87.094496][ T26] audit: type=1326 audit(1765037396.784:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 87.177267][ T26] audit: type=1326 audit(1765037396.784:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 87.286964][ T26] audit: type=1326 audit(1765037396.794:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 87.348322][ T26] audit: type=1326 audit(1765037396.794:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 87.390602][ T4537] lo speed is unknown, defaulting to 1000 [ 87.399286][ T26] audit: type=1326 audit(1765037396.794:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 87.484395][ T26] audit: type=1326 audit(1765037396.794:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 87.574674][ T26] audit: type=1326 audit(1765037396.794:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 87.655800][ T4511] lo speed is unknown, defaulting to 1000 [ 87.836503][ T26] audit: type=1326 audit(1765037397.614:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 87.895370][ T26] audit: type=1326 audit(1765037397.644:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4559 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 88.461295][ T4511] lo speed is unknown, defaulting to 1000 [ 88.707083][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 88.742513][ T4537] chnl_net:caif_netlink_parms(): no params data found [ 89.014559][ T4591] loop2: detected capacity change from 0 to 512 [ 89.033749][ T4511] lo speed is unknown, defaulting to 1000 [ 89.122264][ T4591] EXT4-fs (loop2): too many log groups per flexible block group [ 89.167266][ T4591] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 89.204831][ T4599] netlink: 332 bytes leftover after parsing attributes in process `syz.4.67'. [ 89.215033][ T4591] EXT4-fs (loop2): mount failed [ 89.259621][ T4599] netlink: 'syz.4.67': attribute type 9 has an invalid length. [ 89.311623][ T4599] netlink: 108 bytes leftover after parsing attributes in process `syz.4.67'. [ 89.337898][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.375458][ T4599] netlink: 32 bytes leftover after parsing attributes in process `syz.4.67'. [ 89.385439][ T4537] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.411546][ T4537] device bridge_slave_0 entered promiscuous mode [ 89.475273][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.533305][ T4537] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.554209][ T4537] device bridge_slave_1 entered promiscuous mode [ 89.593628][ T4511] lo speed is unknown, defaulting to 1000 [ 89.637786][ T4610] device team_slave_0 entered promiscuous mode [ 89.644219][ T4610] device team_slave_1 entered promiscuous mode [ 89.680028][ T4617] loop4: detected capacity change from 0 to 128 [ 89.687649][ T4610] device team_slave_0 left promiscuous mode [ 89.693899][ T4610] device team_slave_1 left promiscuous mode [ 89.712933][ T4617] EXT4-fs: Ignoring removed nobh option [ 89.782337][ T4617] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.807365][ T4537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.851967][ T4623] sd 0:0:1:0: device reset [ 89.887302][ T4617] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.919780][ T4537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.037097][ T4626] loop0: detected capacity change from 0 to 512 [ 90.090770][ T4511] lo speed is unknown, defaulting to 1000 [ 90.102888][ T4626] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 90.139359][ T4537] team0: Port device team_slave_0 added [ 90.148167][ T4537] team0: Port device team_slave_1 added [ 90.161733][ T4626] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.209020][ T4537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.216104][ T4537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.242677][ T4537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.278686][ T4537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.286648][ T4626] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 90.317344][ T4537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.377448][ T4537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.471746][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 90.511223][ T4511] lo speed is unknown, defaulting to 1000 [ 90.627297][ T4537] device hsr_slave_0 entered promiscuous mode [ 90.640521][ T4537] device hsr_slave_1 entered promiscuous mode [ 90.673611][ T4537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.698778][ T4537] Cannot create hsr debugfs directory [ 90.700809][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 90.745016][ T4339] kernel write not supported for file /vcs (pid: 4339 comm: kworker/1:5) [ 90.787013][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 90.793833][ T4640] loop0: detected capacity change from 0 to 128 [ 90.882555][ T4640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.910615][ T4640] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.950702][ T4646] loop2: detected capacity change from 0 to 512 [ 90.983317][ T4646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.085086][ T4646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.126619][ T4646] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.458085][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 91.524372][ T75] device hsr_slave_0 left promiscuous mode [ 91.536080][ T75] device hsr_slave_1 left promiscuous mode [ 91.558654][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 91.564691][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.586847][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.636288][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.654730][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.681750][ T75] device bridge_slave_1 left promiscuous mode [ 91.701548][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.723039][ T75] device bridge_slave_0 left promiscuous mode [ 91.737161][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.805644][ T75] device veth1_macvtap left promiscuous mode [ 91.821066][ T75] device veth0_macvtap left promiscuous mode [ 91.832228][ T75] device veth1_vlan left promiscuous mode [ 91.847390][ T75] device veth0_vlan left promiscuous mode [ 91.906010][ T4670] loop2: detected capacity change from 0 to 8192 [ 91.961117][ T4670] loop2: p1 p3 p4 [ 91.965547][ T4670] loop2: partition table partially beyond EOD, truncated [ 91.984244][ T26] kauditd_printk_skb: 214 callbacks suppressed [ 91.984256][ T26] audit: type=1326 audit(1765037401.764:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efca5b865e7 code=0x7ffc0000 [ 92.026028][ T4670] loop2: p3 start 331777 is beyond EOD, truncated [ 92.029583][ T26] audit: type=1326 audit(1765037401.764:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efca5b2b829 code=0x7ffc0000 [ 92.037083][ T4670] loop2: p4 size 262912 extends beyond EOD, [ 92.068818][ T26] audit: type=1326 audit(1765037401.764:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 92.079010][ T4670] truncated [ 92.128898][ T26] audit: type=1326 audit(1765037401.774:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efca5b865e7 code=0x7ffc0000 [ 92.181982][ T26] audit: type=1326 audit(1765037401.774:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efca5b2b829 code=0x7ffc0000 [ 92.240674][ T26] audit: type=1326 audit(1765037401.774:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 92.269392][ T26] audit: type=1326 audit(1765037401.784:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efca5b865e7 code=0x7ffc0000 [ 92.299227][ T26] audit: type=1326 audit(1765037401.784:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efca5b2b829 code=0x7ffc0000 [ 92.358726][ T26] audit: type=1326 audit(1765037401.784:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 92.422634][ T26] audit: type=1326 audit(1765037401.804:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz.4.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efca5b865e7 code=0x7ffc0000 [ 92.616275][ T4683] netlink: 76 bytes leftover after parsing attributes in process `syz.2.86'. [ 92.657468][ T4685] loop4: detected capacity change from 0 to 128 [ 92.877390][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 92.938583][ T4693] 9p: Unknown access argument a: -22 [ 93.030810][ T4695] loop4: detected capacity change from 0 to 512 [ 93.038339][ T4695] EXT4-fs: Ignoring removed nobh option [ 93.175927][ T4695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 93.185403][ T4695] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.202265][ T75] team0 (unregistering): Port device team_slave_1 removed [ 93.283461][ T75] team0 (unregistering): Port device team_slave_0 removed [ 93.363306][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.464513][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.114063][ T75] bond0 (unregistering): Released all slaves [ 94.299848][ T4665] netlink: 'syz.0.83': attribute type 3 has an invalid length. [ 94.326259][ T4665] netlink: 'syz.0.83': attribute type 3 has an invalid length. [ 94.415412][ T4537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.493445][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 94.495131][ T4537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.578337][ T4537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.621119][ T4537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.677997][ T4783] syz.4.96[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.678103][ T4783] syz.4.96[4783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.947097][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 94.980070][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 95.009508][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 95.267935][ T4537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.391873][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.434007][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.485016][ T4537] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.561259][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.608132][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.618467][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.625599][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.702865][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.731213][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.797868][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.839305][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.846488][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.887359][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.983252][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.001917][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.048450][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.093176][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.094463][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.096757][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.124219][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.124814][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.125411][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.125977][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.133575][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.313622][ T4834] loop2: detected capacity change from 0 to 256 [ 96.404223][ T4828] wÞ£ÿ (4828) used greatest stack depth: 18056 bytes left [ 96.755134][ T4843] netlink: 412 bytes leftover after parsing attributes in process `syz.3.115'. [ 96.893015][ T4847] loop2: detected capacity change from 0 to 764 [ 97.003600][ T4847] rock: directory entry would overflow storage [ 97.047268][ T4847] rock: sig=0x4654, size=5, remaining=4 [ 97.168611][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.176124][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.277881][ T4537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.841549][ T4861] loop3: detected capacity change from 0 to 8192 [ 97.912016][ T26] kauditd_printk_skb: 90 callbacks suppressed [ 97.912031][ T26] audit: type=1326 audit(1765037407.694:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 97.945552][ T4861] loop3: p1 p2 < > p3 p4 < p5 > [ 97.993005][ T4861] loop3: partition table partially beyond EOD, truncated [ 98.027752][ T26] audit: type=1326 audit(1765037407.694:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.037562][ T4861] loop3: p1 size 100663296 extends beyond EOD, truncated [ 98.123090][ T4861] loop3: p2 start 591104 is beyond EOD, truncated [ 98.131441][ T4878] loop2: detected capacity change from 0 to 128 [ 98.133248][ T26] audit: type=1326 audit(1765037407.694:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.156973][ T4861] loop3: p3 start 33572980 is beyond EOD, truncated [ 98.194291][ T4878] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 98.221776][ T4861] loop3: p5 size 100663296 extends beyond EOD, truncated [ 98.248768][ T4878] FAT-fs (loop2): Filesystem has been set read-only [ 98.255614][ T4878] syz.2.125: attempt to access beyond end of device [ 98.255614][ T4878] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 98.262353][ T26] audit: type=1326 audit(1765037407.694:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.337962][ T4878] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 98.373321][ T4878] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 98.406544][ T26] audit: type=1326 audit(1765037407.694:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.407330][ T4878] syz.2.125: attempt to access beyond end of device [ 98.407330][ T4878] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.428733][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.540905][ T26] audit: type=1326 audit(1765037407.694:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.616422][ T4268] udevd[4268]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 98.629499][ T4794] udevd[4794]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 98.654723][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 98.676494][ T26] audit: type=1326 audit(1765037407.694:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.754262][ T26] audit: type=1326 audit(1765037407.694:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.873377][ T26] audit: type=1326 audit(1765037407.694:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.909967][ T4897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 98.922435][ T26] audit: type=1326 audit(1765037407.694:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4869 comm="syz.0.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08acf8f749 code=0x7ffc0000 [ 98.999888][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.018066][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.090079][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.132759][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.157533][ T4537] device veth0_vlan entered promiscuous mode [ 99.195369][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.207806][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.237586][ T4537] device veth1_vlan entered promiscuous mode [ 99.323302][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.341803][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.374161][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.400243][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.423107][ T4537] device veth0_macvtap entered promiscuous mode [ 99.458218][ T4537] device veth1_macvtap entered promiscuous mode [ 99.520150][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.538307][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.566926][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.600582][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.620779][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.650243][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.664967][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.681576][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.694080][ T4537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.723426][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.745695][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.768917][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.792106][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.814071][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.835594][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.849448][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.861297][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.879693][ T4537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.894650][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.913594][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.932815][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.963096][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.986362][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.011150][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.027454][ T4920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.035062][ T4920] IPv6: NLM_F_CREATE should be set when creating new route [ 100.058961][ T4537] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.078296][ T4537] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.099297][ T4537] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.140833][ T4537] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.362153][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.393360][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.424045][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.490024][ T4705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.527456][ T4705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.569434][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.810528][ T4947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 100.874156][ T4949] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 100.889530][ T4947] netlink: 32 bytes leftover after parsing attributes in process `syz.4.148'. [ 100.903353][ T4951] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 101.200719][ T4961] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 101.306854][ T4961] device bond1 entered promiscuous mode [ 101.312874][ T4961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.320942][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 101.886732][ T4965] loop5: detected capacity change from 0 to 128 [ 101.902444][ T4969] bond1 (unregistering): Released all slaves [ 101.917938][ T4965] EXT4-fs: Ignoring removed bh option [ 101.923393][ T4965] journal_path: Lookup failure for './file1' [ 101.950078][ T4965] EXT4-fs: error: could not find journal device path [ 103.406567][ T5039] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.109325][ T5062] netlink: 348 bytes leftover after parsing attributes in process `syz.0.184'. [ 104.157139][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 105.424122][ T5088] lo speed is unknown, defaulting to 1000 [ 105.960168][ T5087] lo speed is unknown, defaulting to 1000 [ 105.967286][ T5087] lo speed is unknown, defaulting to 1000 [ 105.974792][ T5087] lo speed is unknown, defaulting to 1000 [ 105.984784][ T5087] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.998307][ T5087] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.020993][ T5087] lo speed is unknown, defaulting to 1000 [ 106.028190][ T5087] lo speed is unknown, defaulting to 1000 [ 106.078375][ T5087] lo speed is unknown, defaulting to 1000 [ 106.087759][ T5087] lo speed is unknown, defaulting to 1000 [ 106.094560][ T5087] lo speed is unknown, defaulting to 1000 [ 106.106816][ T5087] lo speed is unknown, defaulting to 1000 [ 106.224368][ T5094] syz.5.193[5094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.224475][ T5094] syz.5.193[5094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.236488][ T26] kauditd_printk_skb: 155 callbacks suppressed [ 106.236502][ T26] audit: type=1326 audit(1765037416.014:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 106.288407][ T5094] netlink: 'syz.5.193': attribute type 13 has an invalid length. [ 106.369185][ T5100] loop0: detected capacity change from 0 to 128 [ 106.397024][ T5100] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.404297][ T26] audit: type=1326 audit(1765037416.074:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 106.472755][ T5100] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.509980][ T26] audit: type=1326 audit(1765037416.084:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 106.612498][ T26] audit: type=1326 audit(1765037416.084:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 106.721899][ T26] audit: type=1326 audit(1765037416.084:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 106.825325][ T26] audit: type=1326 audit(1765037416.084:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 106.899621][ T26] audit: type=1326 audit(1765037416.094:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 106.921933][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.015349][ T33] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.054250][ T26] audit: type=1326 audit(1765037416.094:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5095 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 107.142395][ T26] audit: type=1800 audit(1765037416.324:628): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.196" name="bus" dev="loop0" ino=1048601 res=0 errno=0 [ 107.268128][ T26] audit: type=1804 audit(1765037416.324:629): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.196" name="/newroot/51/bus/bus" dev="loop0" ino=1048601 res=1 errno=0 [ 107.289482][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.515019][ T5131] Zero length message leads to an empty skb [ 107.586200][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.594993][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.770658][ T5135] loop4: detected capacity change from 0 to 256 [ 107.905170][ T5135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 107.966572][ T5135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 107.999483][ T5135] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 108.530198][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.594381][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.801019][ T5146] loop4: detected capacity change from 0 to 512 [ 108.809608][ T5146] EXT4-fs: Ignoring removed orlov option [ 108.828921][ T5146] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 108.942086][ T5146] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.209: corrupted in-inode xattr [ 109.044641][ T5146] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.209: couldn't read orphan inode 15 (err -117) [ 109.101461][ T5146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.289135][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 109.347463][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 109.354847][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 109.670499][ T5094] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.679555][ T5094] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.688864][ T5094] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.697959][ T5094] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.927802][ T5131] device geneve2 entered promiscuous mode [ 109.968077][ T5152] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.081584][ T5158] syz.5.212[5158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.081688][ T5158] syz.5.212[5158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.768342][ T5186] loop3: detected capacity change from 0 to 512 [ 110.914616][ T5186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.920853][ T5193] loop2: detected capacity change from 0 to 128 [ 110.935657][ T5193] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.948308][ T5186] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.969375][ T5193] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 111.158569][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.220'. [ 111.174324][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 111.544093][ T5202] netlink: 19 bytes leftover after parsing attributes in process `syz.5.227'. [ 111.577378][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 111.654774][ T5203] device vlan2 entered promiscuous mode [ 111.682124][ T5203] device team0 entered promiscuous mode [ 111.712459][ T5203] device team_slave_0 entered promiscuous mode [ 111.720229][ T5203] device team_slave_1 entered promiscuous mode [ 111.867679][ T5216] syz.2.234[5216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.867801][ T5216] syz.2.234[5216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.930003][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 112.035895][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 112.179620][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 112.304741][ T5234] loop5: detected capacity change from 0 to 128 [ 112.322547][ T5236] SET target dimension over the limit! [ 112.336599][ T5230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 112.413695][ T5234] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 112.506546][ T5234] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.585668][ T5242] netlink: 4 bytes leftover after parsing attributes in process `+°ç@'. [ 112.619578][ T5242] device bridge_slave_1 left promiscuous mode [ 112.648738][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.669174][ T5242] device bridge_slave_0 left promiscuous mode [ 112.682953][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.711864][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 112.711885][ T26] audit: type=1326 audit(1765037678.487:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5245 comm="syz.3.244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x0 [ 112.843974][ T4537] EXT4-fs (loop5): unmounting filesystem. [ 113.030089][ T5254] netlink: 'syz.5.246': attribute type 4 has an invalid length. [ 113.072048][ T5254] netlink: 'syz.5.246': attribute type 4 has an invalid length. [ 113.123596][ T26] audit: type=1326 audit(1765037678.907:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 113.124198][ T5258] syz.4.248 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.199158][ T26] audit: type=1326 audit(1765037678.907:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 113.293090][ T26] audit: type=1326 audit(1765037678.907:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 113.380387][ T26] audit: type=1326 audit(1765037678.907:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 113.421646][ T26] audit: type=1326 audit(1765037678.907:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 113.438419][ T5269] dummy0: mtu less than device minimum [ 113.458677][ T26] audit: type=1326 audit(1765037679.017:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efca5bc2005 code=0x7ffc0000 [ 113.489183][ T26] audit: type=1326 audit(1765037679.017:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 113.568176][ T26] audit: type=1326 audit(1765037679.017:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 113.663586][ T26] audit: type=1326 audit(1765037679.017:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5257 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 114.013042][ T5289] loop3: detected capacity change from 0 to 512 [ 114.054689][ T5291] loop5: detected capacity change from 0 to 512 [ 114.061781][ T5289] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.064733][ T5291] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.099126][ T5291] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 114.119748][ T5289] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 114.147212][ T5289] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.260: inode #15: comm syz.3.260: iget: illegal inode # [ 114.170164][ T5294] loop4: detected capacity change from 0 to 512 [ 114.179167][ T5289] EXT4-fs (loop3): Remounting filesystem read-only [ 114.189790][ T5294] EXT4-fs: Ignoring removed nobh option [ 114.193000][ T5291] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.197862][ T5289] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.260: couldn't read orphan inode 15 (err -117) [ 114.231607][ T5291] EXT4-fs (loop5): 1 truncate cleaned up [ 114.243400][ T5291] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 114.262579][ T5294] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.263: invalid indirect mapped block 256 (level 2) [ 114.279521][ T5294] EXT4-fs (loop4): Remounting filesystem read-only [ 114.286650][ T5294] EXT4-fs (loop4): 2 truncates cleaned up [ 114.290903][ T5289] EXT4-fs (loop3): Remounting filesystem read-only [ 114.299685][ T5294] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.339408][ T5289] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.352222][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 114.434734][ T5289] infiniband syz1: set down [ 114.522246][ T4311] lo speed is unknown, defaulting to 1000 [ 114.522658][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 114.528569][ T4311] lo speed is unknown, defaulting to 1000 [ 114.541398][ T5299] device syzkaller0 entered promiscuous mode [ 114.571337][ T5299] tipc: Started in network mode [ 114.576493][ T5299] tipc: Node identity 3e724304d004, cluster identity 4711 [ 114.588221][ T5299] tipc: Enabled bearer , priority 0 [ 114.613139][ T5298] tipc: Resetting bearer [ 114.703443][ T5298] tipc: Disabling bearer [ 114.840332][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 114.882086][ T5307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 114.930437][ T5307] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.939742][ T5307] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.948551][ T5307] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.957830][ T5307] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.983342][ T5308] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.992736][ T5308] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.044369][ T5310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 115.085547][ T5314] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.128700][ T5314] loop2: detected capacity change from 0 to 1024 [ 115.164691][ T5314] EXT4-fs: Ignoring removed orlov option [ 115.204232][ T5314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.238518][ T4537] EXT4-fs (loop5): unmounting filesystem. [ 115.615150][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 115.973954][ T5344] loop4: detected capacity change from 0 to 512 [ 116.010668][ T5347] netlink: 'syz.5.284': attribute type 4 has an invalid length. [ 116.038098][ T5344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.059884][ T5344] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.147197][ T5352] bridge0: port 3(batadv1) entered blocking state [ 116.154561][ T5352] bridge0: port 3(batadv1) entered disabled state [ 116.163479][ T5352] device batadv1 entered promiscuous mode [ 116.283432][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.335989][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.346026][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.398348][ T5344] bond0: (slave bond_slave_0): Releasing backup interface [ 116.469439][ T5344] bond0: (slave bond_slave_1): Releasing backup interface [ 116.523357][ T5344] device team_slave_0 left promiscuous mode [ 116.593958][ T5364] loop2: detected capacity change from 0 to 128 [ 116.603254][ T5344] team0: Port device team_slave_0 removed [ 116.617742][ T5344] device team_slave_1 left promiscuous mode [ 116.650460][ T5344] team0: Port device team_slave_1 removed [ 116.653024][ T4763] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 116.665719][ T4763] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 116.667954][ T5344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.688864][ T5344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.703891][ T5344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.715712][ T5344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.892109][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 117.134994][ T5380] loop2: detected capacity change from 0 to 1024 [ 117.168007][ T5380] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.168689][ T5384] netem: incorrect gi model size [ 117.249402][ T5387] __nla_validate_parse: 1 callbacks suppressed [ 117.249418][ T5387] netlink: 660 bytes leftover after parsing attributes in process `syz.3.295'. [ 117.267119][ T5384] netem: change failed [ 117.299296][ T5380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.371343][ T5392] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 117.391430][ T5380] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2749: inode #12: comm syz.2.294: corrupted in-inode xattr [ 117.457028][ T5380] EXT4-fs (loop2): Remounting filesystem read-only [ 117.468187][ T5392] netlink: '+}[@': attribute type 13 has an invalid length. [ 117.524176][ T5392] gretap0: refused to change device tx_queue_len [ 117.547712][ T5392] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.592488][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 117.827826][ T5405] netlink: 36 bytes leftover after parsing attributes in process `syz.4.302'. [ 117.856426][ T5394] infiniband syû: set active [ 117.877264][ T5394] infiniband syû: added bond_slave_0 [ 118.026538][ T26] kauditd_printk_skb: 81 callbacks suppressed [ 118.026554][ T26] audit: type=1326 audit(1765037683.797:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 118.130397][ T5394] RDS/IB: syû: added [ 118.155864][ T5394] smc: adding ib device syû with port count 1 [ 118.162079][ T26] audit: type=1326 audit(1765037683.797:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 118.162122][ T26] audit: type=1326 audit(1765037683.837:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 118.162157][ T26] audit: type=1326 audit(1765037683.837:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 118.229067][ T5394] smc: ib device syû port 1 has pnetid [ 118.481973][ T26] audit: type=1326 audit(1765037683.837:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 118.526064][ T26] audit: type=1326 audit(1765037683.837:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 118.582165][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 118.585651][ T26] audit: type=1326 audit(1765037683.837:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 118.664252][ T26] audit: type=1326 audit(1765037683.837:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 119.045007][ T26] audit: type=1326 audit(1765037683.837:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 119.430591][ T26] audit: type=1326 audit(1765037683.837:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5403 comm="syz.4.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca5b8f749 code=0x7ffc0000 [ 119.680399][ T5486] loop0: detected capacity change from 0 to 1024 [ 119.828539][ T5486] EXT4-fs: Ignoring removed nobh option [ 119.850716][ T5486] EXT4-fs: Ignoring removed bh option [ 119.897767][ T5486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.012282][ T5486] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.166294][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 120.645640][ T5518] loop2: detected capacity change from 0 to 128 [ 120.689360][ T5518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.719763][ T5518] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.820612][ T5514] loop0: detected capacity change from 0 to 512 [ 120.890285][ T5514] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 120.905605][ T5528] loop5: detected capacity change from 0 to 512 [ 120.913258][ T5514] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.923479][ T5514] EXT4-fs warning (device loop0): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.941319][ T5514] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 120.952791][ T5528] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.974895][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 121.018776][ T5514] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.322: bg 0: block 40: padding at end of block bitmap is not set [ 121.043783][ T5528] EXT4-fs (loop5): 1 truncate cleaned up [ 121.053011][ T5514] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 121.063177][ T5528] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 121.079336][ T5514] EXT4-fs (loop0): 1 truncate cleaned up [ 121.112255][ T5514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.205697][ T4537] EXT4-fs (loop5): unmounting filesystem. [ 121.276270][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 121.386662][ T5535] netlink: 'syz.5.328': attribute type 1 has an invalid length. [ 121.487138][ T4311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.739489][ T4311] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.782901][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.801677][ T4311] usb 3-1: Product: syz [ 121.805891][ T4311] usb 3-1: Manufacturer: syz [ 121.835416][ T4311] usb 3-1: SerialNumber: syz [ 121.909187][ T4311] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 121.922176][ T5554] loop4: detected capacity change from 0 to 256 [ 121.990366][ T5554] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.067707][ T14] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 122.169208][ T5559] loop5: detected capacity change from 0 to 164 [ 122.327409][ T5559] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.361771][ T4393] usb 3-1: USB disconnect, device number 2 [ 122.574426][ T5541] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.588360][ T5561] device syzkaller0 entered promiscuous mode [ 122.604715][ T5571] loop3: detected capacity change from 0 to 128 [ 122.625574][ T5541] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.770794][ T5541] Symlink component flag not implemented [ 122.834816][ T5541] Symlink component flag not implemented [ 122.912446][ T5541] Symlink component flag not implemented (7) [ 122.952537][ T5541] Symlink component flag not implemented (116) [ 123.107074][ T14] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 123.115578][ T14] ath9k_htc: Failed to initialize the device [ 123.142991][ T4393] usb 3-1: ath9k_htc: USB layer deinitialized [ 123.173080][ T26] kauditd_printk_skb: 314 callbacks suppressed [ 123.173093][ T26] audit: type=1326 audit(1765037688.947:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd9b678f807 code=0x7ffc0000 [ 123.276180][ T26] audit: type=1326 audit(1765037688.977:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd9b6746bdd code=0x7ffc0000 [ 123.410231][ T26] audit: type=1326 audit(1765037688.977:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd9b67c3e89 code=0x7ffc0000 [ 123.451034][ T5583] loop2: detected capacity change from 0 to 8192 [ 123.505513][ T26] audit: type=1326 audit(1765037688.977:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd9b6746c47 code=0x7ffc0000 [ 123.655351][ T26] audit: type=1326 audit(1765037688.977:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 123.803775][ T26] audit: type=1326 audit(1765037688.977:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 123.903348][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.347'. [ 123.905639][ T26] audit: type=1326 audit(1765037688.977:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 124.037056][ T26] audit: type=1326 audit(1765037688.977:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 124.167732][ T26] audit: type=1326 audit(1765037688.977:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd9b6746357 code=0x7ffc0000 [ 124.246275][ T26] audit: type=1326 audit(1765037688.977:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd9b67463b6 code=0x7ffc0000 [ 126.670506][ T5614] lo speed is unknown, defaulting to 1000 [ 127.069349][ T5630] loop2: detected capacity change from 0 to 512 [ 127.341338][ T5630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.794188][ T5630] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 127.871361][ T5614] lo speed is unknown, defaulting to 1000 [ 127.916728][ T5630] EXT4-fs (loop2): 1 truncate cleaned up [ 127.922523][ T5630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 127.984965][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 128.135755][ T5650] can0: slcan on ttyS3. [ 128.317868][ T5649] can0 (unregistered): slcan off ttyS3. [ 128.354113][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 128.354126][ T26] audit: type=1326 audit(1765037694.127:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 128.495283][ T26] audit: type=1326 audit(1765037694.187:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 128.519033][ T5659] loop4: detected capacity change from 0 to 512 [ 128.589170][ T26] audit: type=1326 audit(1765037694.187:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 128.612161][ T5659] EXT4-fs: Ignoring removed bh option [ 128.685764][ T5659] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.691507][ T26] audit: type=1326 audit(1765037694.187:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 128.735749][ T5659] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 128.781866][ T5659] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 128.813437][ T26] audit: type=1326 audit(1765037694.187:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 128.836226][ T26] audit: type=1326 audit(1765037694.187:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 128.860916][ T5659] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 128.882201][ T5659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.939708][ T26] audit: type=1326 audit(1765037694.187:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 129.015095][ T26] audit: type=1326 audit(1765037694.187:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 129.131059][ T26] audit: type=1326 audit(1765037694.187:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 129.199000][ T26] audit: type=1326 audit(1765037694.187:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39ab18f783 code=0x7ffc0000 [ 129.256840][ T5652] loop2: detected capacity change from 0 to 256 [ 129.389478][ T5652] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 129.411168][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 129.837312][ T5692] loop5: detected capacity change from 0 to 736 [ 129.915093][ T5692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.955389][ T5693] lo speed is unknown, defaulting to 1000 [ 130.573215][ T5716] netlink: 16 bytes leftover after parsing attributes in process `syz.5.387'. [ 130.600806][ T5693] lo speed is unknown, defaulting to 1000 [ 131.506753][ T5749] device bridge_slave_0 left promiscuous mode [ 131.544970][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.611349][ T5749] device bridge_slave_1 left promiscuous mode [ 131.637238][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.724741][ T5749] bond0: (slave bond_slave_0): Releasing backup interface [ 131.791619][ T5749] bond0: (slave bond_slave_1): Releasing backup interface [ 131.844127][ T5749] team0: Port device team_slave_0 removed [ 131.898060][ T5749] team0: Port device team_slave_1 removed [ 131.933371][ T5749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.960520][ T5749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.986786][ T5756] netlink: 'syz.5.399': attribute type 10 has an invalid length. [ 132.035470][ T5770] syz.4.408[5770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.037069][ T5770] syz.4.408[5770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.061096][ T5756] netlink: 40 bytes leftover after parsing attributes in process `syz.5.399'. [ 132.069620][ T5773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 132.103662][ T5756] batman_adv: batadv0: Adding interface: virt_wifi0 [ 132.120750][ T5756] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.127749][ T5766] loop0: detected capacity change from 0 to 8192 [ 132.186805][ T5756] batman_adv: batadv0: Interface activated: virt_wifi0 [ 132.242801][ T5774] netlink: 96 bytes leftover after parsing attributes in process `syz.4.408'. [ 132.256397][ T5776] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 132.319390][ T5776] team0: Port device dummy0 added [ 132.355398][ T5777] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 132.520419][ T5777] team0: Port device dummy0 removed [ 132.562188][ T5777] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.631201][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.637599][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.112797][ T5803] loop4: detected capacity change from 0 to 128 [ 133.137012][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 133.166938][ T5803] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 133.381429][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 133.423460][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.444844][ T27] usb 1-1: Product: syz [ 133.463189][ T27] usb 1-1: Manufacturer: syz [ 133.497199][ T27] usb 1-1: SerialNumber: syz [ 133.534925][ T27] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 133.592799][ T4393] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 133.863278][ T14] usb 1-1: USB disconnect, device number 2 [ 133.925568][ T5828] netlink: 'syz.5.423': attribute type 10 has an invalid length. [ 133.961726][ T5828] team0: Port device macvlan1 added [ 134.215869][ T5832] loop5: detected capacity change from 0 to 1024 [ 134.305372][ T5832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 134.557775][ T4537] EXT4-fs (loop5): unmounting filesystem. [ 134.707158][ T4393] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 134.717524][ T4393] ath9k_htc: Failed to initialize the device [ 134.724091][ T14] usb 1-1: ath9k_htc: USB layer deinitialized [ 134.788360][ T5851] loop5: detected capacity change from 0 to 256 [ 134.885614][ T5855] loop0: detected capacity change from 0 to 512 [ 134.912089][ T5851] FAT-fs (loop5): Directory bread(block 64) failed [ 134.943153][ T5851] FAT-fs (loop5): Directory bread(block 65) failed [ 134.993826][ T5851] FAT-fs (loop5): Directory bread(block 66) failed [ 135.003115][ T5855] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 135.008658][ T5851] FAT-fs (loop5): Directory bread(block 67) failed [ 135.043065][ T5851] FAT-fs (loop5): Directory bread(block 68) failed [ 135.050163][ T5855] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.077447][ T5851] FAT-fs (loop5): Directory bread(block 69) failed [ 135.084183][ T5851] FAT-fs (loop5): Directory bread(block 70) failed [ 135.137229][ T5851] FAT-fs (loop5): Directory bread(block 71) failed [ 135.169620][ T5851] FAT-fs (loop5): Directory bread(block 72) failed [ 135.192750][ T5851] FAT-fs (loop5): Directory bread(block 73) failed [ 135.346399][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 135.774147][ T5879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.439'. [ 135.848453][ T5881] loop3: detected capacity change from 0 to 1764 [ 136.011261][ T5885] netlink: 'syz.4.441': attribute type 29 has an invalid length. [ 136.062348][ T5885] netlink: 'syz.4.441': attribute type 29 has an invalid length. [ 136.074632][ T5887] netlink: 'syz.4.441': attribute type 29 has an invalid length. [ 136.095121][ T5885] loop4: detected capacity change from 0 to 256 [ 136.132604][ T26] kauditd_printk_skb: 77 callbacks suppressed [ 136.132618][ T26] audit: type=1326 audit(1765037701.907:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.217140][ T26] audit: type=1326 audit(1765037701.947:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.287754][ T26] audit: type=1326 audit(1765037701.947:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.352147][ T26] audit: type=1326 audit(1765037701.947:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.408040][ T26] audit: type=1326 audit(1765037701.947:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.518568][ T26] audit: type=1326 audit(1765037701.947:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.643654][ T26] audit: type=1326 audit(1765037701.947:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.665281][ T5898] loop3: detected capacity change from 0 to 1024 [ 136.716497][ T5898] EXT4-fs: inline encryption not supported [ 136.736103][ T26] audit: type=1326 audit(1765037701.947:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.828196][ T5898] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.874477][ T26] audit: type=1326 audit(1765037701.947:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 136.956398][ T5898] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.989827][ T26] audit: type=1326 audit(1765037701.947:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.2.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ab18f749 code=0x7ffc0000 [ 137.233829][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 137.748394][ T5936] loop0: detected capacity change from 0 to 1024 [ 137.795415][ T5936] EXT4-fs: Ignoring removed orlov option [ 137.871656][ T5941] smc: removing ib device syz1 [ 137.883353][ T5936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.010196][ T5948] netlink: 'syz.4.464': attribute type 30 has an invalid length. [ 138.044446][ T5948] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.053496][ T5948] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.062504][ T5948] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.071381][ T5948] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.145768][ T5948] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.155239][ T5948] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.164212][ T5948] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.173147][ T5948] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.745739][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 138.970482][ T5965] loop4: detected capacity change from 0 to 8192 [ 141.177222][ T5984] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 141.214170][ T5977] lo speed is unknown, defaulting to 1000 [ 141.230606][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 141.230618][ T26] audit: type=1800 audit(1765037707.007:1194): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.467" name="file2" dev="loop4" ino=1048608 res=0 errno=0 [ 141.274773][ T5965] syz.4.467: attempt to access beyond end of device [ 141.274773][ T5965] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 141.347421][ T5973] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 141.354441][ T5973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 141.388492][ T5965] Buffer I/O error on dev loop4, logical block 57847, async page read [ 141.409696][ T5965] syz.4.467: attempt to access beyond end of device [ 141.409696][ T5965] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 141.411297][ T5983] xt_CT: No such helper "pptp" [ 141.423276][ T5965] Buffer I/O error on dev loop4, logical block 57847, async page read [ 141.437224][ T5976] vhci_hcd: connection closed [ 141.437734][ T5973] vhci_hcd vhci_hcd.0: Device attached [ 141.449359][ T26] audit: type=1800 audit(1765037707.217:1195): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.467" name="bus" dev="loop4" ino=1048609 res=0 errno=0 [ 141.550953][ T4756] vhci_hcd: stop threads [ 141.582742][ T4756] vhci_hcd: release socket [ 141.620513][ T4756] vhci_hcd: disconnect device [ 141.786283][ T4265] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 141.808392][ T4265] FAT-fs (loop4): Filesystem has been set read-only [ 142.330373][ T26] audit: type=1326 audit(1765037708.107:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525938f749 code=0x7ffc0000 [ 142.404697][ T26] audit: type=1326 audit(1765037708.127:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525938f749 code=0x7ffc0000 [ 142.459299][ T6016] Driver unsupported XDP return value 0 on prog (id 232) dev N/A, expect packet loss! [ 142.566969][ T26] audit: type=1326 audit(1765037708.127:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f525938f749 code=0x7ffc0000 [ 142.695308][ T26] audit: type=1326 audit(1765037708.127:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525938f749 code=0x7ffc0000 [ 142.779282][ T26] audit: type=1326 audit(1765037708.127:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.5.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525938f749 code=0x7ffc0000 [ 143.052367][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.483'. [ 143.077787][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.483'. [ 143.165309][ T6030] device syz_tun entered promiscuous mode [ 143.213045][ T6030] device syz_tun left promiscuous mode [ 143.279033][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 143.294166][ T26] audit: type=1326 audit(1765037709.077:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 143.319111][ T6034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 143.335358][ T6036] syz.3.486[6036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.335457][ T6036] syz.3.486[6036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.413931][ T26] audit: type=1326 audit(1765037709.117:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 143.516936][ T26] audit: type=1326 audit(1765037709.137:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.3.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 143.550092][ T6040] siw: device registration error -23 [ 143.606525][ T6038] lo speed is unknown, defaulting to 1000 [ 143.756828][ T6041] loop5: detected capacity change from 0 to 1024 [ 143.803873][ T6041] journal_path: Lookup failure for './file1' [ 143.811378][ T6043] loop3: detected capacity change from 0 to 1024 [ 143.857501][ T6041] EXT4-fs: error: could not find journal device path [ 143.877776][ T6043] EXT4-fs: Ignoring removed orlov option [ 143.977834][ T6043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 144.268918][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 144.358862][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.366504][ T6032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.416217][ T6032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.633044][ T6063] loop2: detected capacity change from 0 to 512 [ 144.654036][ T6063] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 144.706458][ T6063] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.494: bad orphan inode 16 [ 144.747065][ T6063] ext4_test_bit(bit=15, block=4) = 0 [ 144.783750][ T6063] EXT4-fs (loop2): 1 orphan inode deleted [ 144.804027][ T6063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.841239][ T6063] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.494: reserved inode found cleared - inode=9 [ 144.901618][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.931654][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.960452][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.979967][ T6069] device bridge_slave_0 left promiscuous mode [ 144.987184][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 144.996532][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.035627][ T6069] device bridge_slave_1 left promiscuous mode [ 145.044479][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.093896][ T6069] bond0: (slave bond_slave_0): Releasing backup interface [ 145.152131][ T6069] bond0: (slave bond_slave_1): Releasing backup interface [ 145.265457][ T6069] team0: Port device team_slave_0 removed [ 145.322964][ T6069] team0: Port device team_slave_1 removed [ 145.350906][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.369085][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.383168][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.390826][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.413079][ T6074] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 145.422555][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.497'. [ 145.436030][ T6074] batman_adv: batadv0: Adding interface: virt_wifi0 [ 145.443370][ T6074] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.472733][ T6074] batman_adv: batadv0: Interface activated: virt_wifi0 [ 145.529036][ T6058] lo speed is unknown, defaulting to 1000 [ 145.815143][ T6100] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 145.980958][ T6108] xt_policy: too many policy elements [ 145.989096][ T6108] rdma_op ffff8880587a99f0 conn xmit_rdma 0000000000000000 [ 146.075579][ T6111] rdma_rxe: rxe_register_device failed with error -23 [ 146.090422][ T6111] rdma_rxe: failed to add lo [ 146.341708][ T6118] loop5: detected capacity change from 0 to 128 [ 146.361642][ T6118] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 146.380848][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 146.380864][ T26] audit: type=1326 audit(1765037712.157:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 146.437139][ T26] audit: type=1326 audit(1765037712.187:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 146.489883][ T26] audit: type=1326 audit(1765037712.187:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b678f749 code=0x7ffc0000 [ 146.568650][ T6128] loop3: detected capacity change from 0 to 512 [ 146.631850][ T6128] [ 146.634233][ T6128] ====================================================== [ 146.641272][ T6128] WARNING: possible circular locking dependency detected [ 146.648319][ T6128] syzkaller #0 Not tainted [ 146.652937][ T6128] ------------------------------------------------------ [ 146.659975][ T6128] syz.3.518/6128 is trying to acquire lock: [ 146.666239][ T6128] ffff8880772f8b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1c0/0x2e50 [ 146.676746][ T6128] [ 146.676746][ T6128] but task is already holding lock: [ 146.684245][ T6128] ffff888070679ee0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 146.694136][ T6128] [ 146.694136][ T6128] which lock already depends on the new lock. [ 146.694136][ T6128] [ 146.704634][ T6128] [ 146.704634][ T6128] the existing dependency chain (in reverse order) is: [ 146.713650][ T6128] [ 146.713650][ T6128] -> #2 (&ei->xattr_sem){++++}-{3:3}: [ 146.721220][ T6128] down_write+0x36/0x60 [ 146.725917][ T6128] ext4_inline_data_truncate+0x1a2/0xbf0 [ 146.732091][ T6128] ext4_truncate+0x3bb/0x1230 [ 146.737299][ T6128] ext4_evict_inode+0xb35/0x1100 [ 146.742780][ T6128] evict+0x485/0x870 [ 146.747197][ T6128] ext4_orphan_cleanup+0xbd3/0x1400 [ 146.752930][ T6128] ext4_fill_super+0x7bdf/0x8150 [ 146.758384][ T6128] get_tree_bdev+0x3f1/0x610 [ 146.763491][ T6128] vfs_get_tree+0x88/0x270 [ 146.768427][ T6128] do_new_mount+0x24a/0xa40 [ 146.773454][ T6128] __se_sys_mount+0x2d6/0x3c0 [ 146.778653][ T6128] do_syscall_64+0x4c/0xa0 [ 146.783598][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.790017][ T6128] [ 146.790017][ T6128] -> #1 (sb_internal){.+.+}-{0:0}: [ 146.797325][ T6128] percpu_down_read+0x44/0x1a0 [ 146.802707][ T6128] ext4_evict_inode+0x436/0x1100 [ 146.808176][ T6128] evict+0x485/0x870 [ 146.812600][ T6128] ext4_ext_migrate+0xc0a/0xe50 [ 146.817977][ T6128] ext4_ioctl+0x1c1e/0x3dd0 [ 146.823005][ T6128] __se_sys_ioctl+0xfa/0x170 [ 146.828122][ T6128] do_syscall_64+0x4c/0xa0 [ 146.833066][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.839486][ T6128] [ 146.839486][ T6128] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 146.847913][ T6128] __lock_acquire+0x2cf8/0x7c50 [ 146.853322][ T6128] lock_acquire+0x1b4/0x490 [ 146.858360][ T6128] percpu_down_read+0x44/0x1a0 [ 146.863646][ T6128] ext4_writepages+0x1c0/0x2e50 [ 146.869020][ T6128] do_writepages+0x3b7/0x610 [ 146.874133][ T6128] __writeback_single_inode+0x156/0x1160 [ 146.880299][ T6128] writeback_single_inode+0x221/0x8b0 [ 146.886203][ T6128] write_inode_now+0x15d/0x1d0 [ 146.891502][ T6128] iput+0x613/0x980 [ 146.895838][ T6128] ext4_xattr_block_set+0x2736/0x32a0 [ 146.901741][ T6128] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 146.908163][ T6128] __ext4_expand_extra_isize+0x301/0x3e0 [ 146.914318][ T6128] __ext4_mark_inode_dirty+0x47f/0x770 [ 146.920308][ T6128] ext4_evict_inode+0xa73/0x1100 [ 146.925775][ T6128] evict+0x485/0x870 [ 146.930201][ T6128] ext4_orphan_cleanup+0xbd3/0x1400 [ 146.935932][ T6128] ext4_fill_super+0x7bdf/0x8150 [ 146.941389][ T6128] get_tree_bdev+0x3f1/0x610 [ 146.946502][ T6128] vfs_get_tree+0x88/0x270 [ 146.951444][ T6128] do_new_mount+0x24a/0xa40 [ 146.956475][ T6128] __se_sys_mount+0x2d6/0x3c0 [ 146.961669][ T6128] do_syscall_64+0x4c/0xa0 [ 146.966614][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.973035][ T6128] [ 146.973035][ T6128] other info that might help us debug this: [ 146.973035][ T6128] [ 146.983262][ T6128] Chain exists of: [ 146.983262][ T6128] &sbi->s_writepages_rwsem --> sb_internal --> &ei->xattr_sem [ 146.983262][ T6128] [ 146.996651][ T6128] Possible unsafe locking scenario: [ 146.996651][ T6128] [ 147.004092][ T6128] CPU0 CPU1 [ 147.009453][ T6128] ---- ---- [ 147.014941][ T6128] lock(&ei->xattr_sem); [ 147.019277][ T6128] lock(sb_internal); [ 147.025864][ T6128] lock(&ei->xattr_sem); [ 147.032710][ T6128] lock(&sbi->s_writepages_rwsem); [ 147.037911][ T6128] [ 147.037911][ T6128] *** DEADLOCK *** [ 147.037911][ T6128] [ 147.046049][ T6128] 3 locks held by syz.3.518/6128: [ 147.051067][ T6128] #0: ffff8880772fe0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 147.061187][ T6128] #1: ffff8880772fe650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x436/0x1100 [ 147.070780][ T6128] #2: ffff888070679ee0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 147.081067][ T6128] [ 147.081067][ T6128] stack backtrace: [ 147.087058][ T6128] CPU: 1 PID: 6128 Comm: syz.3.518 Not tainted syzkaller #0 [ 147.094426][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.104481][ T6128] Call Trace: [ 147.107762][ T6128] [ 147.110698][ T6128] dump_stack_lvl+0x168/0x22e [ 147.115390][ T6128] ? load_image+0x3b0/0x3b0 [ 147.119939][ T6128] ? show_regs_print_info+0x12/0x12 [ 147.125152][ T6128] ? print_circular_bug+0x12b/0x1a0 [ 147.130369][ T6128] check_noncircular+0x274/0x310 [ 147.135319][ T6128] ? add_chain_block+0x940/0x940 [ 147.140268][ T6128] ? lockdep_lock+0xdc/0x1e0 [ 147.144868][ T6128] ? verify_lock_unused+0x140/0x140 [ 147.150074][ T6128] ? _find_first_zero_bit+0xcf/0x100 [ 147.155372][ T6128] __lock_acquire+0x2cf8/0x7c50 [ 147.160256][ T6128] ? verify_lock_unused+0x140/0x140 [ 147.165463][ T6128] ? mark_lock+0x94/0x320 [ 147.169809][ T6128] ? __lock_acquire+0x13c0/0x7c50 [ 147.174858][ T6128] lock_acquire+0x1b4/0x490 [ 147.179382][ T6128] ? ext4_writepages+0x1c0/0x2e50 [ 147.184407][ T6128] ? __might_sleep+0xd0/0xd0 [ 147.189003][ T6128] ? read_lock_is_recursive+0x10/0x10 [ 147.194376][ T6128] ? __lock_acquire+0x12e5/0x7c50 [ 147.199405][ T6128] ? mark_lock+0x94/0x320 [ 147.203744][ T6128] percpu_down_read+0x44/0x1a0 [ 147.208523][ T6128] ? ext4_writepages+0x1c0/0x2e50 [ 147.213545][ T6128] ext4_writepages+0x1c0/0x2e50 [ 147.218394][ T6128] ? __lock_acquire+0x13c0/0x7c50 [ 147.223426][ T6128] ? verify_lock_unused+0x140/0x140 [ 147.228630][ T6128] ? mark_lock+0x94/0x320 [ 147.232959][ T6128] ? ext4_read_folio+0x370/0x370 [ 147.237894][ T6128] ? __lock_acquire+0x13c0/0x7c50 [ 147.242930][ T6128] ? __lock_acquire+0x7c50/0x7c50 [ 147.247969][ T6128] ? do_raw_spin_lock+0x11d/0x280 [ 147.253024][ T6128] ? do_raw_spin_unlock+0x11d/0x230 [ 147.258240][ T6128] ? ext4_read_folio+0x370/0x370 [ 147.263175][ T6128] do_writepages+0x3b7/0x610 [ 147.267770][ T6128] ? __writepage+0x130/0x130 [ 147.272358][ T6128] ? writeback_single_inode+0x216/0x8b0 [ 147.277911][ T6128] ? __lock_acquire+0x7c50/0x7c50 [ 147.282949][ T6128] ? do_raw_spin_lock+0x11d/0x280 [ 147.287992][ T6128] ? __ext4_expand_extra_isize+0x301/0x3e0 [ 147.293799][ T6128] __writeback_single_inode+0x156/0x1160 [ 147.299440][ T6128] writeback_single_inode+0x221/0x8b0 [ 147.304824][ T6128] ? write_inode_now+0x1d0/0x1d0 [ 147.309770][ T6128] write_inode_now+0x15d/0x1d0 [ 147.314563][ T6128] ? bdi_split_work_to_wbs+0x890/0x890 [ 147.320034][ T6128] ? rcu_is_watching+0x11/0xa0 [ 147.324806][ T6128] ? do_raw_spin_unlock+0x11d/0x230 [ 147.330014][ T6128] iput+0x613/0x980 [ 147.333856][ T6128] ext4_xattr_block_set+0x2736/0x32a0 [ 147.339234][ T6128] ? __might_sleep+0xd0/0xd0 [ 147.343842][ T6128] ? xattr_find_entry+0x12b/0x2f0 [ 147.348870][ T6128] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 147.354333][ T6128] ? ext4_xattr_block_find+0x241/0x2b0 [ 147.359802][ T6128] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 147.365728][ T6128] __ext4_expand_extra_isize+0x301/0x3e0 [ 147.371363][ T6128] __ext4_mark_inode_dirty+0x47f/0x770 [ 147.376835][ T6128] ext4_evict_inode+0xa73/0x1100 [ 147.381778][ T6128] ? _raw_spin_unlock+0x24/0x40 [ 147.386645][ T6128] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 147.392542][ T6128] ? do_raw_spin_unlock+0x11d/0x230 [ 147.397743][ T6128] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 147.403637][ T6128] evict+0x485/0x870 [ 147.407536][ T6128] ? __lock_acquire+0x7c50/0x7c50 [ 147.412566][ T6128] ? proc_nr_inodes+0x2f0/0x2f0 [ 147.417424][ T6128] ? do_raw_spin_unlock+0x11d/0x230 [ 147.422629][ T6128] ? _raw_spin_unlock+0x24/0x40 [ 147.427489][ T6128] ? iput+0x768/0x980 [ 147.431476][ T6128] ext4_orphan_cleanup+0xbd3/0x1400 [ 147.436692][ T6128] ? ext4_orphan_del+0xb90/0xb90 [ 147.441641][ T6128] ? errseq_check_and_advance+0x62/0x120 [ 147.447285][ T6128] ext4_fill_super+0x7bdf/0x8150 [ 147.452237][ T6128] ? bdev_name+0x2c1/0x3f0 [ 147.456688][ T6128] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 147.462939][ T6128] ? snprintf+0xd7/0x120 [ 147.467196][ T6128] ? preempt_count_add+0x8d/0x190 [ 147.472221][ T6128] ? vscnprintf+0x80/0x80 [ 147.476555][ T6128] ? set_blocksize+0x1d3/0x350 [ 147.481324][ T6128] ? sb_set_blocksize+0xa5/0xe0 [ 147.486194][ T6128] get_tree_bdev+0x3f1/0x610 [ 147.490795][ T6128] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 147.497041][ T6128] vfs_get_tree+0x88/0x270 [ 147.501475][ T6128] do_new_mount+0x24a/0xa40 [ 147.505980][ T6128] __se_sys_mount+0x2d6/0x3c0 [ 147.510657][ T6128] ? __x64_sys_mount+0xc0/0xc0 [ 147.515423][ T6128] ? lockdep_hardirqs_on+0x94/0x140 [ 147.520627][ T6128] ? __x64_sys_mount+0x1c/0xc0 [ 147.525394][ T6128] do_syscall_64+0x4c/0xa0 [ 147.529812][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 147.534508][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 147.539198][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.545110][ T6128] RIP: 0033:0x7fd9b6790eea [ 147.549559][ T6128] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.569171][ T6128] RSP: 002b:00007fd9b75cce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.577592][ T6128] RAX: ffffffffffffffda RBX: 00007fd9b75ccef0 RCX: 00007fd9b6790eea [ 147.585567][ T6128] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd9b75cceb0 [ 147.593548][ T6128] RBP: 0000200000000180 R08: 00007fd9b75ccef0 R09: 0000000000800700 [ 147.601522][ T6128] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 147.609498][ T6128] R13: 00007fd9b75cceb0 R14: 000000000000046f R15: 000000000000002c [ 147.617480][ T6128] [ 147.672984][ T6135] device veth2 entered promiscuous mode [ 147.781674][ T6128] ------------[ cut here ]------------ [ 147.787267][ T6128] EA inode 11 i_nlink=2 [ 147.787583][ T6128] WARNING: CPU: 1 PID: 6128 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 147.802214][ T6128] Modules linked in: [ 147.806142][ T6128] CPU: 1 PID: 6128 Comm: syz.3.518 Not tainted syzkaller #0 [ 147.813491][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.823993][ T6128] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 147.830743][ T6128] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 147.850405][ T6128] RSP: 0018:ffffc90005827200 EFLAGS: 00010246 [ 147.856505][ T6128] RAX: dced48574bad4b00 RBX: 0000000000000002 RCX: 0000000000080000 [ 147.856519][ T6128] RDX: ffffc9000ca09000 RSI: 000000000007ffff RDI: 0000000000080000 [ 147.856532][ T6128] RBP: ffffc900058272e8 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 147.856546][ T6128] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: ffffc90005827260 [ 147.856560][ T6128] R13: ffff888073abaad0 R14: dffffc0000000000 R15: ffff888073abab10 [ 147.856575][ T6128] FS: 00007fd9b75cd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 147.856593][ T6128] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.856607][ T6128] CR2: 00007f39ab3b6ad8 CR3: 000000007f755000 CR4: 00000000003506e0 [ 147.856625][ T6128] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.856636][ T6128] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.856648][ T6128] Call Trace: [ 147.856654][ T6128] [ 147.856665][ T6128] ? ext4_xattr_block_csum+0x500/0x500 [ 147.856694][ T6128] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 147.856732][ T6128] ext4_xattr_set_entry+0xb33/0x1e90 [ 147.856766][ T6128] ext4_xattr_ibody_set+0x250/0x690 [ 147.856793][ T6128] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 147.856830][ T6128] __ext4_expand_extra_isize+0x301/0x3e0 [ 147.856878][ T6128] __ext4_mark_inode_dirty+0x47f/0x770 [ 147.856929][ T6128] ext4_evict_inode+0xa73/0x1100 [ 147.856955][ T6128] ? _raw_spin_unlock+0x24/0x40 [ 147.856988][ T6128] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 147.857016][ T6128] ? do_raw_spin_unlock+0x11d/0x230 [ 147.857047][ T6128] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 147.857074][ T6128] evict+0x485/0x870 [ 147.857093][ T6128] ? __lock_acquire+0x7c50/0x7c50 [ 147.857119][ T6128] ? proc_nr_inodes+0x2f0/0x2f0 [ 147.857139][ T6128] ? do_raw_spin_unlock+0x11d/0x230 [ 147.857170][ T6128] ? _raw_spin_unlock+0x24/0x40 [ 147.857197][ T6128] ? iput+0x768/0x980 [ 147.857220][ T6128] ext4_orphan_cleanup+0xbd3/0x1400 [ 147.857272][ T6128] ? ext4_orphan_del+0xb90/0xb90 [ 147.857302][ T6128] ? errseq_check_and_advance+0x62/0x120 [ 147.857329][ T6128] ext4_fill_super+0x7bdf/0x8150 [ 147.857349][ T6128] ? bdev_name+0x2c1/0x3f0 [ 147.857393][ T6128] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 147.857419][ T6128] ? snprintf+0xd7/0x120 [ 147.857447][ T6128] ? preempt_count_add+0x8d/0x190 [ 147.857470][ T6128] ? vscnprintf+0x80/0x80 [ 147.857498][ T6128] ? set_blocksize+0x1d3/0x350 [ 147.857525][ T6128] ? sb_set_blocksize+0xa5/0xe0 [ 147.857551][ T6128] get_tree_bdev+0x3f1/0x610 [ 147.857573][ T6128] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 147.857596][ T6128] vfs_get_tree+0x88/0x270 [ 147.857618][ T6128] do_new_mount+0x24a/0xa40 [ 147.857641][ T6128] __se_sys_mount+0x2d6/0x3c0 [ 147.857664][ T6128] ? __x64_sys_mount+0xc0/0xc0 [ 147.857685][ T6128] ? lockdep_hardirqs_on+0x94/0x140 [ 147.857724][ T6128] ? __x64_sys_mount+0x1c/0xc0 [ 147.857745][ T6128] do_syscall_64+0x4c/0xa0 [ 147.857775][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 147.857798][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 147.857821][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.857842][ T6128] RIP: 0033:0x7fd9b6790eea [ 147.857859][ T6128] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.857876][ T6128] RSP: 002b:00007fd9b75cce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.857906][ T6128] RAX: ffffffffffffffda RBX: 00007fd9b75ccef0 RCX: 00007fd9b6790eea [ 147.857922][ T6128] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd9b75cceb0 [ 147.857937][ T6128] RBP: 0000200000000180 R08: 00007fd9b75ccef0 R09: 0000000000800700 [ 147.857951][ T6128] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 147.857965][ T6128] R13: 00007fd9b75cceb0 R14: 000000000000046f R15: 000000000000002c [ 147.857986][ T6128] [ 147.858005][ T6128] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.858016][ T6128] CPU: 1 PID: 6128 Comm: syz.3.518 Not tainted syzkaller #0 [ 147.858036][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.858046][ T6128] Call Trace: [ 147.858052][ T6128] [ 147.858059][ T6128] dump_stack_lvl+0x168/0x22e [ 147.858082][ T6128] ? memcpy+0x3c/0x60 [ 147.858112][ T6128] ? show_regs_print_info+0x12/0x12 [ 147.858135][ T6128] ? load_image+0x3b0/0x3b0 [ 147.858170][ T6128] panic+0x2c9/0x710 [ 147.858199][ T6128] ? bpf_jit_dump+0xd0/0xd0 [ 147.858233][ T6128] __warn+0x2f8/0x4f0 [ 147.858259][ T6128] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 147.858287][ T6128] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 147.858313][ T6128] report_bug+0x2ba/0x4f0 [ 147.858335][ T6128] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 147.858364][ T6128] handle_bug+0x3a/0x70 [ 147.858386][ T6128] exc_invalid_op+0x16/0x40 [ 147.858410][ T6128] asm_exc_invalid_op+0x16/0x20 [ 147.858430][ T6128] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 147.858469][ T6128] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 147.858484][ T6128] RSP: 0018:ffffc90005827200 EFLAGS: 00010246 [ 147.858500][ T6128] RAX: dced48574bad4b00 RBX: 0000000000000002 RCX: 0000000000080000 [ 147.858512][ T6128] RDX: ffffc9000ca09000 RSI: 000000000007ffff RDI: 0000000000080000 [ 147.858526][ T6128] RBP: ffffc900058272e8 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 147.858540][ T6128] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: ffffc90005827260 [ 147.858553][ T6128] R13: ffff888073abaad0 R14: dffffc0000000000 R15: ffff888073abab10 [ 147.858578][ T6128] ? ext4_xattr_block_csum+0x500/0x500 [ 147.858603][ T6128] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 147.858631][ T6128] ext4_xattr_set_entry+0xb33/0x1e90 [ 147.858663][ T6128] ext4_xattr_ibody_set+0x250/0x690 [ 147.858690][ T6128] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 147.858735][ T6128] __ext4_expand_extra_isize+0x301/0x3e0 [ 147.858758][ T6128] __ext4_mark_inode_dirty+0x47f/0x770 [ 147.858789][ T6128] ext4_evict_inode+0xa73/0x1100 [ 147.858815][ T6128] ? _raw_spin_unlock+0x24/0x40 [ 147.858847][ T6128] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 147.858875][ T6128] ? do_raw_spin_unlock+0x11d/0x230 [ 147.858912][ T6128] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 147.858939][ T6128] evict+0x485/0x870 [ 147.858960][ T6128] ? __lock_acquire+0x7c50/0x7c50 [ 147.858987][ T6128] ? proc_nr_inodes+0x2f0/0x2f0 [ 147.859008][ T6128] ? do_raw_spin_unlock+0x11d/0x230 [ 147.859037][ T6128] ? _raw_spin_unlock+0x24/0x40 [ 147.859072][ T6128] ? iput+0x768/0x980 [ 147.859094][ T6128] ext4_orphan_cleanup+0xbd3/0x1400 [ 147.859127][ T6128] ? ext4_orphan_del+0xb90/0xb90 [ 147.859155][ T6128] ? errseq_check_and_advance+0x62/0x120 [ 147.859179][ T6128] ext4_fill_super+0x7bdf/0x8150 [ 147.859197][ T6128] ? bdev_name+0x2c1/0x3f0 [ 147.859237][ T6128] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 147.859263][ T6128] ? snprintf+0xd7/0x120 [ 147.859288][ T6128] ? preempt_count_add+0x8d/0x190 [ 147.859310][ T6128] ? vscnprintf+0x80/0x80 [ 147.859335][ T6128] ? set_blocksize+0x1d3/0x350 [ 147.859359][ T6128] ? sb_set_blocksize+0xa5/0xe0 [ 147.859383][ T6128] get_tree_bdev+0x3f1/0x610 [ 147.859403][ T6128] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 147.859425][ T6128] vfs_get_tree+0x88/0x270 [ 147.859444][ T6128] do_new_mount+0x24a/0xa40 [ 147.859466][ T6128] __se_sys_mount+0x2d6/0x3c0 [ 147.859486][ T6128] ? __x64_sys_mount+0xc0/0xc0 [ 147.859506][ T6128] ? lockdep_hardirqs_on+0x94/0x140 [ 147.859531][ T6128] ? __x64_sys_mount+0x1c/0xc0 [ 147.859549][ T6128] do_syscall_64+0x4c/0xa0 [ 147.859569][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 147.859589][ T6128] ? clear_bhb_loop+0x60/0xb0 [ 147.859610][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.859629][ T6128] RIP: 0033:0x7fd9b6790eea [ 147.859643][ T6128] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.859659][ T6128] RSP: 002b:00007fd9b75cce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.859676][ T6128] RAX: ffffffffffffffda RBX: 00007fd9b75ccef0 RCX: 00007fd9b6790eea [ 147.859691][ T6128] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fd9b75cceb0 [ 147.859704][ T6128] RBP: 0000200000000180 R08: 00007fd9b75ccef0 R09: 0000000000800700 [ 147.859716][ T6128] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 147.859729][ T6128] R13: 00007fd9b75cceb0 R14: 000000000000046f R15: 000000000000002c [ 147.859748][ T6128] [ 147.860042][ T6128] Kernel Offset: disabled [ 148.681290][ T6128] Rebooting in 86400 seconds..