last executing test programs: 2.828780116s ago: executing program 4 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x27bc, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x66) 2.828341686s ago: executing program 4 (id=869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xb, 0x0, 0x5, 0x0, 0xffffffff, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30100c6, &(0x7f00000004c0)={[], [{@subj_role={'subj_role', 0x3d, ':{&'}}, {@obj_role={'obj_role', 0x3d, '/'}}, {@uid_gt={'uid>', r3}}, {@permit_directio}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}, 0x5, 0x572, &(0x7f0000001600)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000206010800000000006a2699620000000900020073797a31000000000500010007000000050005000200000011000300686173683a6e65742c6e6574000000000500040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.809224826s ago: executing program 0 (id=870): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_io_uring_setup(0x3c0f, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 2.649601229s ago: executing program 0 (id=873): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="33eedd982748fcbb96b66be12ff2458eba27fcaf409aec984c9ca4d5178de9da51b67c43415a98", 0x27}, {&(0x7f0000000140)="e26d914718d515874dbe17581dcf2b76b71141ef76704133450905cae4f123148519843553f164ed478cfe4d6c9ce8b8ee11c69322676eee00", 0x39}, {&(0x7f0000000380)="8cff8450a8294970d6820eb72ad492dc08fe9abe1c33baa2e3bee59eee2c569ca6e33f9433dd0165b9738810881992edecd43ab186d56f116e85fea9bf858cc2dc26ca0b52c7314d3dc7136776e216145fd6adbd3a95aa8d9ba37acd1942db339a4d556a70b100ea7f61f510fccba3636c476a619d19da549392f216fc989cd5d40085e4cfd56399ce4aa33aedd67ae21aae03960fded593f1c4c2c1e98c76b26c28539477548fea180f204c56f7a2135779977b0db91828daa5080be7da1b1b9089252172d8da5f8a95060dac0215e68f8dc710", 0xd4}, {&(0x7f0000000740)="52fdf623d88b43c66f03bd053dea81fdaf540174b3d04f5acfb71d5769d3f9d66c579a732ca9e2754ab85ada69e9cce5a4ec56ee4e9cf72e6df9ff6422325e1daddcc88e24c9a1885bcf62da4c4dd02fd6b79d5524238de59e56e2faa653b57b9ed9ece942cc537cb515bb2d7156645ae9693a531e247bcaf2ec4821647cf244ad64059e8036da3e6b7b5f3e3424f96889fe843a1ef9c58236cde3cd2c5822fc147106bd3eec740a48ca2f31bc0ca03b65e1207f0af3876beaa0ee82d795cdf33bffcc904a0eb996515a7561eb31bed59d619d78656fc4c9ddef57635308c50bd6605da557eafec53f4c4d2128a99302a9a74b4eda4d89", 0xf7}, {&(0x7f0000000480)="36e23fece2db26c81f5ad0a779e87a6af45f6dfb69517d830642e84a89d8754e7274d981c3192d5f1dc8ad2d18a2f41ea4fc3f45c51685ee01bf5ce546a49d6b43570bb66f89a78a63f14fd058bb9a482d6c937c9ce0eab373534dc7a1ffcd74f6cadbc91a7850d29a97ba9ed2c60b70aa7545163df2004561d8437d30de5ccbc50a3accefe511e1a2fb3941eb63471f4c84ab93d9e8dc78e2a2830509147a053f4eebb677b702f7361304230412f67027", 0xb1}], 0x5}, 0x20000004) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a80)=""/241, 0xf1}], 0x1, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) close(r0) 2.56908974s ago: executing program 4 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20008888}, 0x40c0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000804) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x0, 0x61]}}, 0x0, 0x39, 0x0, 0x1, 0x9a23, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r4}, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x6, '\x00', 0x0, r4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) socket$inet6(0xa, 0xa, 0xfff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d6e376c53da90f2ba900001800000000000000000000ac8d56143c9da4fd96fbe50e6d68d5b7d9ddd3c3522fc41b586007360277c4a45a0eb66dee39262fd45cab1263212ba939ffd4bc713aff2930f84067c49a91ba5bece707fc94b4fc9dd718df58e15e38ce30c7e4c0694078780d5530fcddf0c7268c2c239250bcd2c2c370799e93315108a3e78a084ad125dad06726bd"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x400000ffc020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) sync() r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) sendfile(0xffffffffffffffff, r9, &(0x7f00000000c0)=0x1, 0x7fffffffffffffff) epoll_pwait(r9, &(0x7f0000000000)=[{}, {}], 0x2, 0x7, &(0x7f0000000040)={[0x5]}, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8080410}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x18, 0x0, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.566881111s ago: executing program 0 (id=879): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0008000000000000660800000000000018000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x11635f548354cf27, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f00000003c0)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 2.537243821s ago: executing program 4 (id=880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, 0x0, 0xffe) 2.141113939s ago: executing program 3 (id=886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) close(r1) 2.0643786s ago: executing program 3 (id=888): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) io_setup(0xa, &(0x7f0000000000)) 1.03195357s ago: executing program 3 (id=901): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, &(0x7f0000000080)=0x1d000000) 811.821745ms ago: executing program 0 (id=905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x1008489, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646f74732c73686f77659b65632c636f6465706167653d3836352c646f733178666c6f7070792c0012f6a0b367405cd5f7a820af6d497dd35bf4c82fbfec92592d50f4e639474428fb6cc48a5388927b367b18b405a0bab9c3944e3dc85ab1ed"], 0x41, 0x11ed, &(0x7f0000002440)="$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") 416.325892ms ago: executing program 2 (id=906): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) 341.261444ms ago: executing program 2 (id=908): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 341.102224ms ago: executing program 0 (id=909): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000"], 0xd0}}, 0x0) 340.745824ms ago: executing program 1 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 317.341234ms ago: executing program 2 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 303.426504ms ago: executing program 1 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xb, 0x0, 0x5, 0x0, 0xffffffff, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30100c6, &(0x7f00000004c0)={[], [{@subj_role={'subj_role', 0x3d, ':{&'}}, {@obj_role={'obj_role', 0x3d, '/'}}, {@uid_gt={'uid>', r3}}, {@permit_directio}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}, 0x5, 0x572, &(0x7f0000001600)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000206010800000000006a2699620000000900020073797a31000000000500010007000000050005000200000011000300686173683a6e65742c6e6574000000000500040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 245.646815ms ago: executing program 0 (id=913): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, 0x0, &(0x7f00000001c0)) 245.308036ms ago: executing program 3 (id=914): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) 245.106745ms ago: executing program 2 (id=915): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}, {{0x0, 0x0, &(0x7f0000000a00)}}], 0x2, 0x4008804) 230.083546ms ago: executing program 3 (id=916): fsopen(&(0x7f00000000c0)='selinuxfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0xe, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x8, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x488}, 0x1, 0x0, 0x0, 0x1}, 0x800) 206.558316ms ago: executing program 1 (id=917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) capset(&(0x7f0000000400)={0x19980330}, &(0x7f00000003c0)={0xffc, 0x10ffff, 0xffffff88, 0x8000, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 190.540537ms ago: executing program 2 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x0) 129.448528ms ago: executing program 1 (id=919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='svc_alloc_arg_err\x00', r2, 0x0, 0x7}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='afs_volume\x00', r4, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigqueueinfo(0xffffffffffffffff, 0x28, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r5) sendmsg$NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0301040000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "9571582f26656278", "db37acf084c21f00000000656d09ec9d", "a11e2eaf", "7b2ea9890dbaef60"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r1}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r8, r7, 0x4, r9}, 0x10) 97.802218ms ago: executing program 3 (id=920): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nodelalloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x6, 0xffffffffffffffbf, 0x1, 0x0, 0x19}) 92.820899ms ago: executing program 2 (id=930): fsopen(&(0x7f00000000c0)='selinuxfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0xe, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x8, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x488}, 0x1, 0x0, 0x0, 0x1}, 0x800) 92.488689ms ago: executing program 4 (id=921): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 92.121839ms ago: executing program 1 (id=922): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) gettid() r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/176, 0xb0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.44926ms ago: executing program 4 (id=923): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) setpriority(0x1, 0x0, 0xfff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 0s ago: executing program 1 (id=924): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r3, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) kernel console output (not intermixed with test programs): me 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.890288][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.156052][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.164485][ T4326] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 33.165708][ T4326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.167849][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.169315][ T4328] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 33.170342][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 33.171916][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 33.172224][ T4332] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 33.174595][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 33.175197][ T4332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.175760][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 33.177282][ T4332] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 33.178734][ T4328] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.179506][ T4332] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 33.180336][ T4328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 33.181400][ T4332] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 33.182772][ T4328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 33.183443][ T4332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 33.184558][ T4328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.188893][ T4333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 33.190664][ T4333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 33.193605][ T4333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 33.195881][ T4333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 33.202508][ T4333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 33.203870][ T4333] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 33.205093][ T4321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 33.206201][ T4321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 33.206745][ T4333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 33.228756][ T4323] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 33.230452][ T4323] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 33.334819][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 33.336701][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 33.368697][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 33.378992][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 33.391665][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.392855][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.394250][ T4320] device bridge_slave_0 entered promiscuous mode [ 33.396218][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.397295][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.398642][ T4320] device bridge_slave_1 entered promiscuous mode [ 33.418427][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.428184][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.433530][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.434694][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.436135][ T4325] device bridge_slave_0 entered promiscuous mode [ 33.442012][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.443133][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.444510][ T4319] device bridge_slave_0 entered promiscuous mode [ 33.448471][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.449622][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.451395][ T4325] device bridge_slave_1 entered promiscuous mode [ 33.461809][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.462996][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.464491][ T4319] device bridge_slave_1 entered promiscuous mode [ 33.472810][ T4320] team0: Port device team_slave_0 added [ 33.479051][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.480171][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.481894][ T4324] device bridge_slave_0 entered promiscuous mode [ 33.487162][ T4320] team0: Port device team_slave_1 added [ 33.489041][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.491779][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.495519][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.496627][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.498030][ T4324] device bridge_slave_1 entered promiscuous mode [ 33.501213][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.511602][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.515279][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 33.521585][ T4319] team0: Port device team_slave_0 added [ 33.525759][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.528579][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.529674][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.534140][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.536919][ T4319] team0: Port device team_slave_1 added [ 33.541353][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.549185][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.550337][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.554422][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.559664][ T4325] team0: Port device team_slave_0 added [ 33.561418][ T4325] team0: Port device team_slave_1 added [ 33.567542][ T4324] team0: Port device team_slave_0 added [ 33.576167][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.577323][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.581451][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.585716][ T4324] team0: Port device team_slave_1 added [ 33.586966][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.588056][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.591835][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.596454][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.597564][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.601561][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.608547][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.609676][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.613935][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.628586][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.629704][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.631337][ T4334] device bridge_slave_0 entered promiscuous mode [ 33.633901][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.635013][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.636334][ T4334] device bridge_slave_1 entered promiscuous mode [ 33.671390][ T4320] device hsr_slave_0 entered promiscuous mode [ 33.710473][ T4320] device hsr_slave_1 entered promiscuous mode [ 33.751119][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.752152][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.755798][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.764274][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.770416][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.771589][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.775674][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.779765][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.821218][ T4325] device hsr_slave_0 entered promiscuous mode [ 33.860498][ T4325] device hsr_slave_1 entered promiscuous mode [ 33.910330][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.911647][ T4325] Cannot create hsr debugfs directory [ 33.917661][ T4334] team0: Port device team_slave_0 added [ 33.919412][ T4334] team0: Port device team_slave_1 added [ 33.981241][ T4319] device hsr_slave_0 entered promiscuous mode [ 34.040544][ T4319] device hsr_slave_1 entered promiscuous mode [ 34.080276][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.081393][ T4319] Cannot create hsr debugfs directory [ 34.141347][ T4324] device hsr_slave_0 entered promiscuous mode [ 34.180442][ T4324] device hsr_slave_1 entered promiscuous mode [ 34.220274][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.221408][ T4324] Cannot create hsr debugfs directory [ 34.226755][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.227764][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.232083][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.242737][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.243750][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.247535][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.331527][ T4334] device hsr_slave_0 entered promiscuous mode [ 34.380484][ T4334] device hsr_slave_1 entered promiscuous mode [ 34.420671][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.422059][ T4334] Cannot create hsr debugfs directory [ 34.494224][ T4320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.535946][ T4320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.571472][ T4320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.623373][ T4320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.670898][ T4324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.724882][ T4324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.762869][ T4324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.805662][ T4324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.852962][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.901406][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.947140][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.971769][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.055273][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.096086][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.133029][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.175644][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.210812][ T4323] Bluetooth: hci1: command 0x0409 tx timeout [ 35.211859][ T4323] Bluetooth: hci0: command 0x0409 tx timeout [ 35.212737][ T4323] Bluetooth: hci3: command 0x0409 tx timeout [ 35.223510][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.272997][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.290487][ T4328] Bluetooth: hci4: command 0x0409 tx timeout [ 35.291519][ T4328] Bluetooth: hci2: command 0x0409 tx timeout [ 35.323778][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.361840][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.426282][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.434941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.436698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.444833][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.463564][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.464760][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.466720][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.468202][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.469369][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.471842][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.479075][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.480979][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.482559][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.483629][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.484852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.493805][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.495421][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.496677][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.502311][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.506354][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.512071][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.513857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.515753][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.517081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.518482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.519809][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.521872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.523457][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.524523][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.525875][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.527330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.528810][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.529885][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.531584][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.534669][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.541826][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.543294][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.544680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.546128][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.547576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.549062][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.552996][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.554057][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.555372][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.556935][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.558460][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.559589][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.561352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.569256][ T4320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.571782][ T4320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.573931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.575370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.577348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.578732][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.580152][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.584749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.586108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.587480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.589264][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.594691][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.602420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.604029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.605376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.606788][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.607841][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.609215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.614937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.616524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.618270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.627379][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.629035][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.645414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.647065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.648476][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.649549][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.651855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.653469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.655589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.657257][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.658699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.660194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.665152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.666658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.668093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.669567][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.672532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.674032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.675550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.677185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.678662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.680091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.682588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.684072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.689037][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.691648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.693134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.694523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.696329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.697715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.699140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.701791][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.704007][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.713654][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.718343][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.719826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.724026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.725255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.726430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.728388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.732285][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.734893][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.746258][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.747840][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.749182][ T645] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.750304][ T645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.752459][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.762208][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.763864][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.774962][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.776648][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.778127][ T645] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.779250][ T645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.795840][ T4334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.797491][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.800323][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.801996][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.803507][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.805153][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.806869][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.808389][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.809801][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.816500][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.818101][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.819582][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.822859][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.824364][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.828912][ T4320] device veth0_vlan entered promiscuous mode [ 35.834330][ T4320] device veth1_vlan entered promiscuous mode [ 35.835617][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.837084][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.838783][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.840060][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.842209][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.849009][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.861152][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.862483][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.878718][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.881363][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.882826][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.884047][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.889915][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.895566][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.899147][ T4320] device veth0_macvtap entered promiscuous mode [ 35.902775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.904609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.906184][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.918016][ T4319] device veth0_vlan entered promiscuous mode [ 35.922094][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.923703][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.925243][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.926345][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.929590][ T4320] device veth1_macvtap entered promiscuous mode [ 35.932390][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.933873][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.935280][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.937833][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.940059][ T4319] device veth1_vlan entered promiscuous mode [ 35.943169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.945033][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.946920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.956927][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.958369][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.959584][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.965530][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.967721][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.969275][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.973472][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.985527][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.987145][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.989303][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.991367][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.992861][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.994250][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.995748][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.997085][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.999545][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.004137][ T4319] device veth0_macvtap entered promiscuous mode [ 36.006612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.008016][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.009497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.013355][ T4324] device veth0_vlan entered promiscuous mode [ 36.017129][ T4319] device veth1_macvtap entered promiscuous mode [ 36.019328][ T4320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.021470][ T4320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.022789][ T4320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.024126][ T4320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.028930][ T4324] device veth1_vlan entered promiscuous mode [ 36.044241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.045819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.047221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.048647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.050109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.052734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.054112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.057943][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.059580][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.062323][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.067050][ T4325] device veth0_vlan entered promiscuous mode [ 36.068341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.069925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.087351][ T4325] device veth1_vlan entered promiscuous mode [ 36.095228][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.096903][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.098888][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.102273][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.103887][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.105420][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.106795][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.108320][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.112090][ T4324] device veth0_macvtap entered promiscuous mode [ 36.114464][ T4324] device veth1_macvtap entered promiscuous mode [ 36.117737][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.119141][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.121192][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.122546][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.133552][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.134865][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.136795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.138891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.141800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.143271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.160062][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.161569][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.163956][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.165513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.167409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.171930][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.173557][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.175168][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.176770][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.178966][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.183079][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.184689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.194862][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.196548][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.198079][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.199726][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.202500][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.206768][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.208295][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.212002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.213586][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.215101][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.216453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.219039][ T4334] device veth0_vlan entered promiscuous mode [ 36.221046][ T4325] device veth0_macvtap entered promiscuous mode [ 36.226911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.228523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.231058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.234092][ T4325] device veth1_macvtap entered promiscuous mode [ 36.236115][ T4324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.237475][ T4324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.238867][ T4324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.240795][ T4324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.244782][ T4334] device veth1_vlan entered promiscuous mode [ 36.270196][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.271833][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.273563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 36.275197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.276511][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.277971][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.285379][ T4431] loop3: detected capacity change from 0 to 512 [ 36.290196][ T4431] EXT4-fs: Ignoring removed oldalloc option [ 36.299255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.301420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.309103][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.312151][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.313006][ T4431] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.4: Parent and EA inode have the same ino 15 [ 36.313727][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.316367][ T4431] EXT4-fs (loop3): 1 orphan inode deleted [ 36.317107][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.318096][ T4431] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 36.319740][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.323013][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.329032][ T4431] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.4: unexpected EA_INODE flag [ 36.331532][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.332765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.334296][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.338795][ T4431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.343479][ T4431] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 36.354096][ T4334] device veth0_macvtap entered promiscuous mode [ 36.356433][ T4334] device veth1_macvtap entered promiscuous mode [ 36.361999][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.363916][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.365442][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.366928][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.368427][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.369971][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.371997][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.373582][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.375777][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.378935][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.380909][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.382437][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.383920][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.385984][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.387702][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.390148][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.392641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.394139][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.395620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.397114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.398521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.399964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.406139][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.407428][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.407564][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 36.409216][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.419282][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.419904][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.420896][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.422862][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.424757][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.426285][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.427711][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.429171][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.430947][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.432055][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.432533][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.433679][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.436180][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.451317][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.452828][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.454102][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.455674][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.458916][ T27] audit: type=1326 audit(36.440:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 36.463364][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.464915][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.467807][ T27] audit: type=1326 audit(36.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 36.469277][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.472412][ T27] audit: type=1326 audit(36.460:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 36.474945][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.475733][ T27] audit: type=1326 audit(36.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 36.484293][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.485563][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.487024][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.488439][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.497243][ T27] audit: type=1326 audit(36.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 36.506673][ T27] audit: type=1326 audit(36.460:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=176 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 36.510032][ T27] audit: type=1326 audit(36.460:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4434 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 36.529671][ T4437] loop3: detected capacity change from 0 to 512 [ 36.537337][ T4437] journal_path: Lookup failure for './bus' [ 36.545334][ T4437] EXT4-fs: error: could not find journal device path [ 36.696346][ T4451] loop3: detected capacity change from 0 to 1024 [ 36.697677][ T4451] ======================================================= [ 36.697677][ T4451] WARNING: The mand mount option has been deprecated and [ 36.697677][ T4451] and is ignored by this kernel. Remove the mand [ 36.697677][ T4451] option from the mount to silence this warning. [ 36.697677][ T4451] ======================================================= [ 36.711044][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.711049][ T4411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.711073][ T4411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.712354][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.716705][ T4451] ext4: Unknown parameter 'subj_role' [ 36.734548][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.736333][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.746883][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.748250][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.750043][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.756499][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.757733][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.759542][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.765160][ T4311] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.806648][ T4460] loop2: detected capacity change from 0 to 512 [ 36.807932][ T4460] journal_path: Lookup failure for './bus' [ 36.808820][ T4460] EXT4-fs: error: could not find journal device path [ 36.927999][ T27] audit: type=1326 audit(36.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715c068 code=0x7ffc0000 [ 36.931716][ T27] audit: type=1326 audit(36.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa715c068 code=0x7ffc0000 [ 36.934754][ T27] audit: type=1326 audit(36.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4469 comm="syz.2.18" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715c068 code=0x7ffc0000 [ 36.952646][ T4468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 36.954104][ T4468] device bridge_slave_1 left promiscuous mode [ 36.967434][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.013545][ T4468] device bridge_slave_0 left promiscuous mode [ 37.014665][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.163922][ T4480] loop4: detected capacity change from 0 to 4096 [ 37.165340][ T4480] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.310564][ T4323] Bluetooth: hci3: command 0x041b tx timeout [ 37.311726][ T4323] Bluetooth: hci0: command 0x041b tx timeout [ 37.312751][ T4323] Bluetooth: hci1: command 0x041b tx timeout [ 37.380741][ T4323] Bluetooth: hci4: command 0x041b tx timeout [ 37.380818][ T4328] Bluetooth: hci2: command 0x041b tx timeout [ 38.218664][ T4476] loop2: detected capacity change from 0 to 764 [ 38.253729][ T4476] rock: directory entry would overflow storage [ 38.254963][ T4476] rock: sig=0x4f50, size=4, remaining=3 [ 38.263508][ T4476] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 38.306765][ T4480] EXT4-fs (loop4): Test dummy encryption mode enabled [ 38.319114][ T4480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 38.424828][ T4502] netlink: 'syz.0.24': attribute type 21 has an invalid length. [ 38.426348][ T4502] netlink: 128 bytes leftover after parsing attributes in process `syz.0.24'. [ 38.427925][ T4502] netlink: 'syz.0.24': attribute type 5 has an invalid length. [ 38.429220][ T4502] netlink: 'syz.0.24': attribute type 6 has an invalid length. [ 38.435440][ T4502] netlink: 3 bytes leftover after parsing attributes in process `syz.0.24'. [ 38.460975][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 38.545331][ T4509] loop0: detected capacity change from 0 to 128 [ 38.593208][ T4511] netlink: 'syz.2.28': attribute type 3 has an invalid length. [ 38.668881][ T9] kworker/u4:0: attempt to access beyond end of device [ 38.668881][ T9] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 38.758257][ T4400] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 38.759564][ T4400] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 38.768321][ T4400] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 38.774227][ T4400] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 38.820711][ T4528] fido_id[4528]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.836898][ T4532] Zero length message leads to an empty skb [ 38.859556][ T4532] process 'syz.4.38' launched '/dev/fd/3' with NULL argv: empty string added [ 39.011663][ T4553] loop0: detected capacity change from 0 to 128 [ 39.027735][ T4553] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 39.029072][ T4553] System zones: 1-3, 19-19, 35-36 [ 39.030669][ T4553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.044090][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 39.047477][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.048685][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.055197][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.057492][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.073145][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 39.371648][ T4333] Bluetooth: hci1: command 0x040f tx timeout [ 39.371679][ T4323] Bluetooth: hci0: command 0x040f tx timeout [ 39.372687][ T4333] Bluetooth: hci3: command 0x040f tx timeout [ 39.450323][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 39.451388][ T4333] Bluetooth: hci4: command 0x040f tx timeout [ 39.553508][ T4451] Set syz1 is full, maxelem 65536 reached [ 39.749927][ T4583] loop3: detected capacity change from 0 to 512 [ 39.757628][ T4583] EXT4-fs: Ignoring removed i_version option [ 39.766060][ T4583] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 39.773482][ T4583] EXT4-fs (loop3): 1 truncate cleaned up [ 39.774470][ T4583] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.778032][ T4583] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 39.788057][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 39.807958][ T4586] loop3: detected capacity change from 0 to 1024 [ 39.832524][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.852523][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 39.902794][ T4592] loop3: detected capacity change from 0 to 128 [ 39.948284][ T4592] syz.3.64: attempt to access beyond end of device [ 39.948284][ T4592] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 40.074125][ T4599] loop0: detected capacity change from 0 to 1024 [ 40.086398][ T4599] ext4: Unknown parameter 'subj_role' [ 40.086845][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 40.202584][ T4613] loop3: detected capacity change from 0 to 512 [ 40.219404][ T4613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.329954][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 40.342867][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.361629][ T4624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.367771][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 40.374251][ T4624] loop2: detected capacity change from 0 to 256 [ 40.401118][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.402381][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.407769][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.408955][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.412655][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.425674][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.427147][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.428560][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.430076][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.431685][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.433196][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.443255][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.444786][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.772278][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.835231][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.899187][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 40.967292][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 41.034394][ T4400] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 41.292308][ T4400] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 41.296074][ T4629] random: crng reseeded on system resumption [ 41.355000][ T4628] loop3: detected capacity change from 0 to 2048 [ 41.415536][ T4628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.540373][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 41.541410][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 41.542170][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 41.559564][ T4641] fido_id[4641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.596562][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 41.627158][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 41.628231][ T4328] Bluetooth: hci2: command 0x0419 tx timeout [ 41.758647][ T4665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.760197][ T4665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.776377][ T4665] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 41.777629][ T4665] netlink: 216 bytes leftover after parsing attributes in process `syz.2.90'. [ 41.778541][ T4664] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 42.054372][ T4695] loop4: detected capacity change from 0 to 128 [ 42.066548][ T4695] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.069149][ T4695] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.090615][ T4411] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.247617][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'. [ 42.249249][ T4710] loop4: detected capacity change from 0 to 2048 [ 42.255233][ T4712] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 42.290812][ T4710] loop4: p1 < > p4 [ 42.292892][ T4710] loop4: p4 start 42180 is beyond EOD, truncated [ 42.299775][ T3936] loop4: p1 < > p4 [ 42.300951][ T3936] loop4: p4 start 42180 is beyond EOD, truncated [ 42.363000][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 42.369690][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 42.371402][ T4718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.109'. [ 42.372843][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 42.386254][ T4718] netlink: 2 bytes leftover after parsing attributes in process `syz.2.109'. [ 42.388129][ T4718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.109'. [ 42.736414][ T4599] Set syz1 is full, maxelem 65536 reached [ 43.068189][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.109889][ T4746] tipc: Started in network mode [ 43.110810][ T4746] tipc: Node identity aeeed9ce2e83, cluster identity 4711 [ 43.112226][ T4746] tipc: Enabled bearer , priority 0 [ 43.116732][ T4745] tipc: Disabling bearer [ 43.220000][ T4752] netlink: 256 bytes leftover after parsing attributes in process `syz.2.126'. [ 43.265147][ T14] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 43.266603][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.268186][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 43.271776][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 43.273100][ T14] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 43.275125][ T14] usb 1-1: Product: syz [ 43.275782][ T14] usb 1-1: Manufacturer: syz [ 43.287748][ T14] usb 1-1: SerialNumber: syz [ 43.290398][ T14] usb 1-1: config 0 descriptor?? [ 43.301492][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 43.301505][ T27] audit: type=1326 audit(43.055:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.305949][ T27] audit: type=1326 audit(43.055:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.310180][ T27] audit: type=1326 audit(43.055:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.313786][ T27] audit: type=1326 audit(43.055:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.317915][ T27] audit: type=1326 audit(43.055:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.321182][ T27] audit: type=1326 audit(43.055:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.324400][ T27] audit: type=1326 audit(43.055:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.335580][ T27] audit: type=1326 audit(43.055:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.338924][ T27] audit: type=1326 audit(43.055:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.342419][ T27] audit: type=1326 audit(43.055:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 43.377454][ T4765] capability: warning: `syz.2.130' uses deprecated v2 capabilities in a way that may be insecure [ 43.402781][ T4769] IPVS: rr: FWM 3 0x00000003 - no destination available [ 43.475397][ T4778] syz.2.137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.520544][ T4782] loop3: detected capacity change from 0 to 4096 [ 43.540222][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.579825][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 43.605314][ T4790] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 43.667199][ T4794] IPVS: rr: FWM 3 0x00000003 - no destination available [ 43.708740][ T4798] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 43.777387][ T4806] netlink: 'syz.2.149': attribute type 5 has an invalid length. [ 43.781231][ T4806] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.782766][ T4806] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.784249][ T4806] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.785664][ T4806] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.789344][ T4806] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.790777][ T4806] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.792127][ T4806] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.793549][ T4806] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.163927][ T4822] loop2: detected capacity change from 0 to 512 [ 44.169103][ T4822] EXT4-fs: Ignoring removed orlov option [ 44.170077][ T4822] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 44.239337][ T4740] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 44.240562][ T4740] netlink: 216 bytes leftover after parsing attributes in process `syz.0.119'. [ 44.249549][ T14] usb 1-1: USB disconnect, device number 2 [ 44.333753][ T4831] loop1: detected capacity change from 0 to 1024 [ 44.335128][ T4831] ext4: Unknown parameter 'subj_role' [ 44.381668][ T4644] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.480187][ T4853] loop2: detected capacity change from 0 to 1024 [ 44.485911][ T4852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.163'. [ 44.522496][ T4853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 44.587516][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 44.651093][ T4876] binfmt_misc: register: failed to install interpreter file ./file2 [ 44.691852][ T4879] loop4: detected capacity change from 0 to 512 [ 44.699370][ T4879] EXT4-fs: Ignoring removed orlov option [ 44.700336][ T4879] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 44.734249][ T4456] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.738779][ T4879] tipc: Started in network mode [ 44.742122][ T4879] tipc: Node identity 4, cluster identity 4711 [ 44.743023][ T4879] tipc: Node number set to 4 [ 44.750461][ T4886] loop3: detected capacity change from 0 to 1024 [ 44.756023][ T4886] ext4: Unknown parameter 'subj_role' [ 44.822867][ T4892] loop4: detected capacity change from 0 to 512 [ 44.824703][ T4892] EXT4-fs: Ignoring removed oldalloc option [ 44.827265][ T4892] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.830512][ T4892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.839019][ T4892] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 44.841297][ T4892] EXT4-fs (loop4): 1 truncate cleaned up [ 44.842188][ T4892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.879170][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 44.955778][ T4906] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 44.963590][ T4906] tipc: Enabled bearer , priority 10 [ 45.016843][ T4908] loop0: detected capacity change from 0 to 512 [ 45.021754][ T4908] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.032113][ T4908] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.043716][ T4908] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.180: bg 0: block 248: padding at end of block bitmap is not set [ 45.048112][ T4908] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.180: Failed to acquire dquot type 1 [ 45.056006][ T4908] EXT4-fs (loop0): 1 truncate cleaned up [ 45.095494][ T4908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.356581][ T4928] loop3: detected capacity change from 0 to 1024 [ 45.361170][ T4928] ext4: Unknown parameter 'subj_role' [ 45.588047][ T4944] IPv4: Oversized IP packet from 127.202.26.0 [ 45.708762][ T4954] syz.3.203 uses obsolete (PF_INET,SOCK_PACKET) [ 45.926463][ T4976] loop3: detected capacity change from 0 to 128 [ 45.936743][ T4976] EXT4-fs: Ignoring removed nobh option [ 45.941743][ T4976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.959023][ T1964] kernel write not supported for file /61/oom_adj (pid: 1964 comm: kworker/1:2) [ 46.007971][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 46.157095][ T4995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.160950][ T4995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.278873][ T5007] 9pnet: p9_errstr2errno: server reported unknown error [ 46.618354][ T5033] capability: warning: `syz.1.241' uses 32-bit capabilities (legacy support in use) [ 46.637331][ T5036] netlink: 'syz.1.242': attribute type 2 has an invalid length. [ 46.638548][ T5036] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 46.663267][ T5038] loop1: detected capacity change from 0 to 128 [ 46.734418][ T5042] loop1: detected capacity change from 0 to 512 [ 46.762075][ T5042] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 46.848797][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 46.960052][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.961487][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.136066][ T5085] tipc: Started in network mode [ 47.136855][ T5085] tipc: Node identity 3e216121d8e3, cluster identity 4711 [ 47.138341][ T5085] tipc: Enabled bearer , priority 0 [ 47.140102][ T5085] device syzkaller0 entered promiscuous mode [ 47.201087][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 47.233972][ T5093] loop1: detected capacity change from 0 to 1024 [ 47.236562][ T5093] ext4: Unknown parameter 'subj_role' [ 47.286890][ T5095] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 47.297389][ T5095] team0: Port device dummy0 added [ 47.300414][ T5085] tipc: Resetting bearer [ 47.304382][ T5096] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 47.306061][ T5096] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.313034][ T5096] team0: Failed to send options change via netlink (err -105) [ 47.314399][ T5096] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 47.317563][ T5096] team0: Port device dummy0 removed [ 47.321818][ T5096] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.327795][ T5083] tipc: Resetting bearer [ 47.396310][ T5083] tipc: Disabling bearer [ 47.398065][ T5102] loop4: detected capacity change from 0 to 256 [ 47.399904][ T5102] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.407284][ T5102] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.640601][ T5127] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 47.642118][ T5127] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 47.730894][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.738365][ T5137] tipc: Started in network mode [ 47.739218][ T5137] tipc: Node identity 0ecf3444c17a, cluster identity 4711 [ 47.740403][ T5137] tipc: Enabled bearer , priority 0 [ 47.741743][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.744375][ T5137] device syzkaller0 entered promiscuous mode [ 47.848481][ T5137] tipc: Resetting bearer [ 47.858777][ T5135] tipc: Resetting bearer [ 47.946842][ T5135] tipc: Disabling bearer [ 48.123793][ T5163] __nla_validate_parse: 2 callbacks suppressed [ 48.123803][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 48.307249][ T5177] loop3: detected capacity change from 0 to 764 [ 48.327549][ T5177] rock: directory entry would overflow storage [ 48.332316][ T5177] rock: sig=0x5245, size=8, remaining=5 [ 48.486121][ T5180] hub 8-0:1.0: USB hub found [ 48.488597][ T5180] hub 8-0:1.0: 8 ports detected [ 49.426235][ T5093] Set syz1 is full, maxelem 65536 reached [ 49.477378][ T5186] netlink: 'syz.1.310': attribute type 30 has an invalid length. [ 49.485589][ T5186] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.487049][ T5186] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.488496][ T5186] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.489814][ T5186] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.534514][ T5184] loop3: detected capacity change from 0 to 2048 [ 49.540264][ T5186] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.541785][ T5186] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.543133][ T5186] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.544423][ T5186] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.592455][ T5184] loop3: p1 < > p3 p4 < > [ 49.594642][ T5184] loop3: p3 start 4284289 is beyond EOD, truncated [ 49.659112][ T5198] tipc: Enabled bearer , priority 0 [ 49.665120][ T5198] device syzkaller0 entered promiscuous mode [ 49.711294][ T5206] netlink: 256 bytes leftover after parsing attributes in process `syz.3.317'. [ 49.732748][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.736352][ T4644] udevd[4644]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 49.807731][ T5217] loop4: detected capacity change from 0 to 764 [ 49.815958][ T5217] rock: directory entry would overflow storage [ 49.817018][ T5217] rock: sig=0x5245, size=8, remaining=5 [ 49.820067][ T5198] tipc: Resetting bearer [ 49.826142][ T5197] tipc: Resetting bearer [ 50.128142][ T5222] netlink: 256 bytes leftover after parsing attributes in process `syz.0.333'. [ 50.310947][ T5230] hub 8-0:1.0: USB hub found [ 50.313025][ T5230] hub 8-0:1.0: 8 ports detected [ 50.368218][ T5197] tipc: Disabling bearer [ 51.492139][ T5241] loop1: detected capacity change from 0 to 2048 [ 51.500528][ T5246] netlink: 'syz.3.330': attribute type 30 has an invalid length. [ 51.506774][ T5246] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.508325][ T5246] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.509534][ T5246] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.510758][ T5246] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.537484][ T5241] loop1: p1 < > p3 p4 < > [ 51.538965][ T5241] loop1: p3 start 4284289 is beyond EOD, truncated [ 51.540558][ T5246] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.541937][ T5246] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.543418][ T5246] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.544798][ T5246] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.567246][ T5254] loop2: detected capacity change from 0 to 1024 [ 51.571132][ T5254] ext4: Unknown parameter 'subj_role' [ 51.571409][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 51.604778][ T5257] netlink: 256 bytes leftover after parsing attributes in process `syz.0.336'. [ 51.628930][ T4319] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 51.629728][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.634142][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.638427][ T4313] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 51.640658][ T4456] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.653814][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.661681][ T4313] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 51.663446][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.667679][ T4456] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.669258][ T4456] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 51.676845][ T4313] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 51.682298][ T4456] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.693987][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.704110][ T4456] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 51.705944][ T4456] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.715408][ T4313] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 51.717185][ T4313] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.718534][ T4313] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 51.737834][ T4456] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 51.739823][ T4456] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 51.741550][ T4456] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 51.882364][ T5275] hub 8-0:1.0: USB hub found [ 51.883538][ T5275] hub 8-0:1.0: 8 ports detected [ 52.736015][ T4644] udevd[4644]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 52.739914][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 52.785623][ T5277] tipc: Started in network mode [ 52.788363][ T5277] tipc: Node identity 42cd37471f3, cluster identity 4711 [ 52.789558][ T5277] tipc: Enabled bearer , priority 0 [ 52.791626][ T5277] device syzkaller0 entered promiscuous mode [ 53.006704][ T5285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.008150][ T5285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.010593][ T5285] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 53.011763][ T5285] netlink: 216 bytes leftover after parsing attributes in process `syz.3.349'. [ 53.105262][ T5279] tipc: Resetting bearer [ 53.110761][ T5276] tipc: Resetting bearer [ 53.117082][ T5292] loop4: detected capacity change from 0 to 1024 [ 53.118506][ T5292] ext4: Unknown parameter 'subj_role' [ 53.453073][ T5276] tipc: Disabling bearer [ 53.988931][ T5300] netlink: 'syz.2.352': attribute type 4 has an invalid length. [ 53.990311][ T5300] netlink: 17 bytes leftover after parsing attributes in process `syz.2.352'. [ 54.461983][ T5342] netlink: 204 bytes leftover after parsing attributes in process `syz.0.371'. [ 54.463910][ T5340] loop3: detected capacity change from 0 to 1024 [ 54.465454][ T5342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.371'. [ 54.466175][ T5340] ext4: Unknown parameter 'subj_role' [ 54.467079][ T5342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.371'. [ 54.518670][ T5346] netlink: 'syz.3.373': attribute type 12 has an invalid length. [ 54.522989][ T5346] netlink: 'syz.3.373': attribute type 6 has an invalid length. [ 54.525375][ T5346] netlink: 'syz.3.373': attribute type 21 has an invalid length. [ 54.571207][ T5353] loop0: detected capacity change from 0 to 512 [ 54.572637][ T5353] EXT4-fs: Ignoring removed orlov option [ 54.581426][ T5353] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.595582][ T5353] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 54.599318][ T5353] EXT4-fs (loop0): 1 orphan inode deleted [ 54.600260][ T5353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 54.620698][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 54.772027][ T27] kauditd_printk_skb: 110 callbacks suppressed [ 54.772037][ T27] audit: type=1326 audit(53.642:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9815c068 code=0x7ffc0000 [ 54.778111][ T5367] loop3: detected capacity change from 0 to 736 [ 54.782351][ T27] audit: type=1326 audit(53.651:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff9815c068 code=0x7ffc0000 [ 54.790957][ T27] audit: type=1326 audit(53.669:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5368 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9815c068 code=0x7ffc0000 [ 55.403874][ T5397] netlink: 14 bytes leftover after parsing attributes in process `syz.3.393'. [ 55.406168][ T5404] loop4: detected capacity change from 0 to 128 [ 55.427322][ T5404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.443532][ T27] audit: type=1326 audit(54.269:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5396 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 55.452332][ T27] audit: type=1326 audit(54.269:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5396 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 55.466888][ T27] audit: type=1326 audit(54.269:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5396 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 55.471289][ T27] audit: type=1326 audit(54.269:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5396 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 55.478811][ T27] audit: type=1326 audit(54.269:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5396 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 55.482411][ T27] audit: type=1326 audit(54.269:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5396 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 55.486329][ T27] audit: type=1326 audit(54.269:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5396 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 55.490792][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 55.947390][ T5427] device syzkaller1 entered promiscuous mode [ 56.071413][ T5432] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.178459][ T5432] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.195660][ T5444] loop1: detected capacity change from 0 to 512 [ 56.255259][ T5444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.266441][ T5432] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.293110][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 56.407553][ T5432] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.473065][ T5457] device syzkaller1 entered promiscuous mode [ 56.488610][ T5455] loop4: detected capacity change from 0 to 2048 [ 56.518760][ T5455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.582648][ T5462] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 56.586845][ T5462] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 56.601185][ T5462] EXT4-fs (loop4): This should not happen!! Data will be lost [ 56.601185][ T5462] [ 56.606306][ T5462] EXT4-fs (loop4): Total free blocks count 0 [ 56.607171][ T5462] EXT4-fs (loop4): Free/Dirty block details [ 56.610478][ T5462] EXT4-fs (loop4): free_blocks=2415919104 [ 56.616239][ T5462] EXT4-fs (loop4): dirty_blocks=16 [ 56.619497][ T5462] EXT4-fs (loop4): Block reservation details [ 56.620368][ T5462] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 56.648584][ T5432] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.657173][ T5432] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.662652][ T5432] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.669010][ T5432] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.779209][ T5475] loop3: detected capacity change from 0 to 1024 [ 56.783344][ T5475] ext4: Unknown parameter 'subj_role' [ 56.818307][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 56.850885][ T5482] loop0: detected capacity change from 0 to 512 [ 56.866501][ T5482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 56.869829][ T5474] netlink: 14 bytes leftover after parsing attributes in process `syz.1.423'. [ 56.879179][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 56.930124][ T5486] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 57.099802][ T5506] 9pnet_fd: Insufficient options for proto=fd [ 57.138142][ T5510] loop3: detected capacity change from 0 to 2048 [ 57.154424][ T5509] loop1: detected capacity change from 0 to 1024 [ 57.155961][ T5509] ext4: Unknown parameter 'subj_role' [ 57.191134][ T5510] Alternate GPT is invalid, using primary GPT. [ 57.192666][ T5510] loop3: p2 p3 p7 [ 57.739360][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 57.797619][ T4644] udevd[4644]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 57.816181][ T5523] loop3: detected capacity change from 0 to 512 [ 57.820313][ T5528] loop4: detected capacity change from 0 to 512 [ 57.825063][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 57.826841][ T5528] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.828860][ T5528] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.832646][ T5528] EXT4-fs (loop4): 1 truncate cleaned up [ 57.833775][ T5528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 57.839707][ T5526] udevd[5526]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 57.848006][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.286911][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 58.335481][ T5551] vhci_hcd: invalid port number 96 [ 58.336372][ T5551] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 59.148345][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 59.175116][ T5581] infiniband syz!: set active [ 59.176044][ T5581] infiniband syz!: added team_slave_0 [ 59.246491][ T5581] RDS/IB: syz!: added [ 59.246627][ T5581] smc: adding ib device syz! with port count 1 [ 59.246701][ T5581] smc: ib device syz! port 1 has pnetid [ 59.388875][ T5594] netlink: 96 bytes leftover after parsing attributes in process `syz.2.473'. [ 59.503740][ T5605] loop2: detected capacity change from 0 to 1024 [ 59.507036][ T5605] ext4: Unknown parameter 'subj_role' [ 59.680738][ T5628] loop4: detected capacity change from 0 to 1024 [ 59.682083][ T5628] ext4: Unknown parameter 'subj_role' [ 59.771906][ T5526] blk_print_req_error: 5 callbacks suppressed [ 59.771922][ T5526] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.792718][ T5634] loop2: detected capacity change from 0 to 8192 [ 60.124117][ T4456] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.194522][ T5646] loop3: detected capacity change from 0 to 1764 [ 60.263177][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 60.382238][ T27] kauditd_printk_skb: 332 callbacks suppressed [ 60.382252][ T27] audit: type=1326 audit(58.829:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.386970][ T27] audit: type=1326 audit(58.829:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.394250][ T27] audit: type=1326 audit(58.838:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.401774][ T27] audit: type=1326 audit(58.838:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.409881][ T27] audit: type=1326 audit(58.838:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.418900][ T27] audit: type=1326 audit(58.838:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.426002][ T27] audit: type=1326 audit(58.838:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.429738][ T27] audit: type=1326 audit(58.838:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.433472][ T27] audit: type=1326 audit(58.838:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.444205][ T27] audit: type=1326 audit(58.838:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.508" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8775c068 code=0x7ffc0000 [ 60.444935][ T5680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 60.596947][ T5696] loop2: detected capacity change from 0 to 1024 [ 60.607137][ T5696] ext4: Unknown parameter 'subj_role' [ 60.744765][ T5714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.525'. [ 60.813068][ T5725] loop3: detected capacity change from 0 to 1024 [ 60.823441][ T5725] ext4: Unknown parameter 'subj_role' [ 61.156036][ T5755] netlink: 'syz.2.541': attribute type 2 has an invalid length. [ 61.156053][ T5755] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 61.203525][ T5757] loop4: detected capacity change from 0 to 1024 [ 61.209826][ T5757] ext4: Unknown parameter 'subj_role' [ 61.355946][ T5768] loop2: detected capacity change from 0 to 512 [ 61.390920][ T5768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 61.415013][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 61.828493][ T5792] loop3: detected capacity change from 0 to 1024 [ 61.834815][ T5792] ext4: Unknown parameter 'subj_role' [ 61.956461][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'. [ 61.958716][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.560'. [ 62.319072][ T5853] loop1: detected capacity change from 0 to 512 [ 62.356758][ T5853] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.357841][ T5853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.368966][ T5853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.370310][ T5853] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.406181][ T5863] loop4: detected capacity change from 0 to 512 [ 62.411499][ T5863] EXT4-fs: Ignoring removed bh option [ 62.414039][ T5853] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.577: Allocating blocks 41-42 which overlap fs metadata [ 62.417376][ T5863] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 62.419255][ T5853] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.577: Allocating blocks 41-42 which overlap fs metadata [ 62.423058][ T22] cfg80211: failed to load regulatory.db [ 62.423499][ T5853] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.577: Failed to acquire dquot type 1 [ 62.426098][ T5853] EXT4-fs error (device loop1): mb_free_blocks:1810: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 62.434389][ T5853] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #12: comm syz.1.577: corrupted inode contents [ 62.439985][ T5853] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #12: comm syz.1.577: mark_inode_dirty error [ 62.459500][ T5863] EXT4-fs (loop4): 1 truncate cleaned up [ 62.463671][ T5853] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #12: comm syz.1.577: corrupted inode contents [ 62.466625][ T5863] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.474463][ T5853] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.577: mark_inode_dirty error [ 62.476553][ T5853] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #12: comm syz.1.577: corrupted inode contents [ 62.483022][ T5853] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 62.484801][ T5853] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #12: comm syz.1.577: corrupted inode contents [ 62.490523][ T5853] EXT4-fs error (device loop1): ext4_truncate:4312: inode #12: comm syz.1.577: mark_inode_dirty error [ 62.491722][ T5871] loop2: detected capacity change from 0 to 512 [ 62.493368][ T5853] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 62.497609][ T5853] EXT4-fs (loop1): 1 truncate cleaned up [ 62.498507][ T5853] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 62.506025][ T5871] EXT4-fs: Ignoring removed bh option [ 62.507973][ T5871] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.514449][ T5845] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 62.522559][ T5845] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 62.537193][ T5871] EXT4-fs (loop2): 1 truncate cleaned up [ 62.538160][ T5871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 62.629729][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 62.658456][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 62.985569][ T5901] loop1: detected capacity change from 0 to 512 [ 63.027734][ T5901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.101308][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 63.148486][ T5915] loop1: detected capacity change from 0 to 512 [ 63.193970][ T5917] loop2: detected capacity change from 0 to 1024 [ 63.195299][ T5917] ext4: Unknown parameter 'subj_role' [ 63.203035][ T5915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.229424][ T5915] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.599: Failed to acquire dquot type 0 [ 63.274635][ T5925] binfmt_misc: register: failed to install interpreter file ./file2 [ 63.293276][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 63.323759][ T5929] loop0: detected capacity change from 0 to 512 [ 63.331658][ T5927] netlink: 'syz.3.606': attribute type 3 has an invalid length. [ 63.340547][ T5933] netlink: 332 bytes leftover after parsing attributes in process `syz.1.607'. [ 63.343854][ T5933] netlink: 'syz.1.607': attribute type 9 has an invalid length. [ 63.345118][ T5933] netlink: 108 bytes leftover after parsing attributes in process `syz.1.607'. [ 63.346484][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.607'. [ 63.356694][ T5929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.384446][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 63.402223][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 63.409046][ T5938] loop3: detected capacity change from 0 to 1024 [ 63.443667][ T5938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.468708][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 63.522255][ T5953] loop1: detected capacity change from 0 to 1024 [ 63.530095][ T5953] ext4: Unknown parameter 'subj_role' [ 63.599683][ T4645] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 63.674193][ T5968] loop4: detected capacity change from 0 to 1024 [ 63.691417][ T5968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.704204][ T5973] loop1: detected capacity change from 0 to 512 [ 63.734028][ T5969] loop0: detected capacity change from 0 to 512 [ 63.735688][ T5969] EXT4-fs: Ignoring removed nobh option [ 63.748635][ T5973] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.771657][ T5969] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #3: comm syz.0.622: corrupted inode contents [ 63.776623][ T5969] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #3: comm syz.0.622: mark_inode_dirty error [ 63.779376][ T5969] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #3: comm syz.0.622: corrupted inode contents [ 63.781532][ T5969] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.622: mark_inode_dirty error [ 63.786070][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 63.787869][ T5969] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.622: Failed to acquire dquot type 0 [ 63.789703][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 63.791470][ T5969] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.622: corrupted inode contents [ 63.800369][ T5969] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #16: comm syz.0.622: mark_inode_dirty error [ 63.802393][ T5969] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.622: corrupted inode contents [ 63.804272][ T5969] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.622: mark_inode_dirty error [ 63.806592][ T5969] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.622: corrupted inode contents [ 63.809270][ T5969] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 63.821484][ T5969] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.622: corrupted inode contents [ 63.823726][ T5969] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.622: mark_inode_dirty error [ 63.825743][ T5969] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 63.828104][ T5969] EXT4-fs (loop0): 1 truncate cleaned up [ 63.829052][ T5969] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.885901][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 63.974573][ T5989] loop4: detected capacity change from 0 to 1024 [ 63.976037][ T5989] ext4: Unknown parameter 'subj_role' [ 64.019421][ T5526] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.128223][ T6003] loop0: detected capacity change from 0 to 512 [ 64.171772][ T6007] bridge0: port 3(gretap0) entered blocking state [ 64.175035][ T6003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.184451][ T6007] bridge0: port 3(gretap0) entered disabled state [ 64.188810][ T6007] device gretap0 entered promiscuous mode [ 64.190980][ T6007] bridge0: port 3(gretap0) entered blocking state [ 64.192111][ T6007] bridge0: port 3(gretap0) entered forwarding state [ 64.210699][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 64.404700][ T6017] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 64.428333][ T6017] team0: Device hsr_slave_0 failed to register rx_handler [ 64.464140][ T6021] loop2: detected capacity change from 0 to 1024 [ 64.472736][ T6021] ext4: Unknown parameter 'subj_role' [ 64.657110][ T6035] loop2: detected capacity change from 0 to 512 [ 64.719721][ T6043] loop3: detected capacity change from 0 to 1024 [ 64.721118][ T6043] EXT4-fs: Ignoring removed orlov option [ 64.746037][ T6043] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2748: inode #15: comm syz.3.652: corrupted in-inode xattr [ 64.750110][ T6043] EXT4-fs (loop3): Remounting filesystem read-only [ 64.783029][ T6049] loop3: detected capacity change from 0 to 1024 [ 64.785737][ T6049] ext4: Unknown parameter 'subj_role' [ 65.080468][ T6061] loop1: detected capacity change from 0 to 512 [ 65.085702][ T6061] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c02c, mo2=0002] [ 65.087157][ T6061] System zones: 0-7 [ 65.154698][ T6068] loop1: detected capacity change from 0 to 512 [ 65.156111][ T6068] EXT4-fs: Ignoring removed oldalloc option [ 65.162575][ T6068] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.165358][ T6070] loop0: detected capacity change from 0 to 1024 [ 65.166697][ T6070] EXT4-fs: Ignoring removed orlov option [ 65.167577][ T6070] journal_path: Lookup failure for './file1' [ 65.168492][ T6070] EXT4-fs: error: could not find journal device path [ 65.177620][ T6068] EXT4-fs (loop1): 1 truncate cleaned up [ 65.219386][ T6075] loop3: detected capacity change from 0 to 512 [ 65.259932][ T6080] loop0: detected capacity change from 0 to 1024 [ 65.277988][ T6080] ext4: Unknown parameter 'subj_role' [ 65.345184][ T6087] device syzkaller1 entered promiscuous mode [ 65.488322][ T6104] loop0: detected capacity change from 0 to 512 [ 65.514460][ T6106] loop4: detected capacity change from 0 to 1024 [ 65.517012][ T6106] ext4: Unknown parameter 'subj_role' [ 65.559016][ T5526] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.586415][ T6112] loop3: detected capacity change from 0 to 1024 [ 65.587838][ T6112] EXT4-fs: Ignoring removed bh option [ 65.617901][ T6116] loop4: detected capacity change from 0 to 512 [ 65.619794][ T6116] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 65.735698][ T6130] device syzkaller1 entered promiscuous mode [ 65.740220][ T6132] loop9: detected capacity change from 0 to 7 [ 65.759509][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.761060][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.762978][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.764566][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.765542][ T6134] loop3: detected capacity change from 0 to 2048 [ 65.767226][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.768702][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.770182][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.771715][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.773049][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.774370][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.775593][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.777028][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.778895][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.780293][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.781830][ T6132] ldm_validate_partition_table(): Disk read failed. [ 65.782826][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.784208][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.785539][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 65.787002][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.788492][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 65.792021][ T6132] Dev loop9: unable to read RDB block 0 [ 65.793722][ T6132] loop9: unable to read partition table [ 65.802424][ T6132] loop9: partition table beyond EOD, truncated [ 65.803637][ T6132] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 65.803637][ T6132] ) failed (rc=-5) [ 65.860366][ T6140] loop2: detected capacity change from 0 to 512 [ 65.910808][ T6143] loop4: detected capacity change from 0 to 1024 [ 65.917074][ T6143] ext4: Unknown parameter 'subj_role' [ 66.009124][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'. [ 66.044685][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 66.177130][ T6167] device syzkaller1 entered promiscuous mode [ 66.207469][ T6169] loop3: detected capacity change from 0 to 512 [ 66.320834][ T6173] loop4: detected capacity change from 0 to 1024 [ 66.323684][ T6173] ext4: Unknown parameter 'subj_role' [ 66.364624][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 66.440795][ T27] kauditd_printk_skb: 148 callbacks suppressed [ 66.440805][ T27] audit: type=1326 audit(64.413:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715c068 code=0x7ffc0000 [ 66.445376][ T27] audit: type=1326 audit(64.413:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8715c068 code=0x7ffc0000 [ 66.452684][ T27] audit: type=1326 audit(64.413:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715c068 code=0x7ffc0000 [ 66.462158][ T27] audit: type=1326 audit(64.413:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=44 compat=0 ip=0xffff8715c068 code=0x7ffc0000 [ 66.471680][ T27] audit: type=1326 audit(64.413:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.4.712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8715c068 code=0x7ffc0000 [ 66.515856][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.517087][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.532251][ T6198] loop4: detected capacity change from 0 to 512 [ 66.679637][ T6211] loop4: detected capacity change from 0 to 1024 [ 66.681000][ T6211] ext4: Unknown parameter 'subj_role' [ 66.851138][ T6219] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.901630][ T6235] loop1: detected capacity change from 0 to 512 [ 66.967697][ T6219] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.018344][ T6244] loop3: detected capacity change from 0 to 1024 [ 67.019949][ T6244] ext4: Unknown parameter 'subj_role' [ 67.067226][ T6219] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.080818][ T6248] netlink: 348 bytes leftover after parsing attributes in process `syz.1.737'. [ 67.083698][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 67.150328][ T6248] netlink: 348 bytes leftover after parsing attributes in process `syz.1.737'. [ 67.151993][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 67.191777][ T6219] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.230080][ T6248] netlink: 348 bytes leftover after parsing attributes in process `syz.1.737'. [ 67.231687][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 67.313347][ T6269] team0: No ports can be present during mode change [ 67.323618][ T6219] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.336424][ T6219] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.340437][ T6219] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.344334][ T6219] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.395869][ T6273] loop2: detected capacity change from 0 to 1024 [ 67.403200][ T6273] ext4: Unknown parameter 'subj_role' [ 67.452781][ T6283] loop1: detected capacity change from 0 to 128 [ 67.472062][ T6283] syz.1.751: attempt to access beyond end of device [ 67.472062][ T6283] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 67.515974][ T6287] hub 6-0:1.0: USB hub found [ 67.518837][ T6287] hub 6-0:1.0: 8 ports detected [ 67.581034][ T4380] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 67.582198][ T4380] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 67.583238][ T4380] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 67.584805][ T4380] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 67.586200][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 67.626473][ T6300] fido_id[6300]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.629565][ T6303] team0: No ports can be present during mode change [ 67.696777][ T6309] loop4: detected capacity change from 0 to 1024 [ 67.698259][ T6309] ext4: Unknown parameter 'subj_role' [ 67.887204][ T6326] team0: No ports can be present during mode change [ 68.012849][ T6336] loop0: detected capacity change from 0 to 1024 [ 68.014293][ T6336] ext4: Unknown parameter 'subj_role' [ 68.136976][ T6330] loop3: detected capacity change from 0 to 256 [ 68.162060][ T6330] FAT-fs (loop3): Directory bread(block 64) failed [ 68.164511][ T6330] FAT-fs (loop3): Directory bread(block 65) failed [ 68.165495][ T6330] FAT-fs (loop3): Directory bread(block 66) failed [ 68.168941][ T6330] FAT-fs (loop3): Directory bread(block 67) failed [ 68.176438][ T6330] FAT-fs (loop3): Directory bread(block 68) failed [ 68.178809][ T6330] FAT-fs (loop3): Directory bread(block 69) failed [ 68.181303][ T6330] FAT-fs (loop3): Directory bread(block 70) failed [ 68.183742][ T6330] FAT-fs (loop3): Directory bread(block 71) failed [ 68.184807][ T6330] FAT-fs (loop3): Directory bread(block 72) failed [ 68.186942][ T6330] FAT-fs (loop3): Directory bread(block 73) failed [ 68.215416][ T6330] syz.3.769: attempt to access beyond end of device [ 68.215416][ T6330] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 68.391636][ T6361] loop4: detected capacity change from 0 to 512 [ 68.500799][ T6369] loop2: detected capacity change from 0 to 1024 [ 68.502708][ T6369] ext4: Unknown parameter 'subj_role' [ 68.608476][ T6379] loop9: detected capacity change from 0 to 7 [ 68.610124][ T6379] ldm_validate_partition_table(): Disk read failed. [ 68.611549][ T6379] Dev loop9: unable to read RDB block 0 [ 68.622282][ T6379] loop9: unable to read partition table [ 68.623303][ T6379] loop9: partition table beyond EOD, truncated [ 68.624258][ T6379] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 68.624258][ T6379] ) failed (rc=-5) [ 68.658684][ T27] audit: type=1326 audit(66.462:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.2.792" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa715c068 code=0x0 [ 68.775149][ T6396] loop0: detected capacity change from 0 to 512 [ 68.815940][ T6396] EXT4-fs mount: 26 callbacks suppressed [ 68.815952][ T6396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.820259][ T6398] loop4: detected capacity change from 0 to 1024 [ 68.826511][ T6398] ext4: Unknown parameter 'subj_role' [ 68.852518][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 68.891680][ T6402] loop3: detected capacity change from 0 to 2048 [ 68.922755][ T6402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 68.930981][ T6408] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 68.943728][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 68.952749][ T6408] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 68.996143][ T27] audit: type=1326 audit(66.767:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9815c068 code=0x7ffc0000 [ 68.999681][ T27] audit: type=1326 audit(66.776:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9815c068 code=0x7ffc0000 [ 69.006680][ T27] audit: type=1326 audit(66.776:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9815c068 code=0x7ffc0000 [ 69.012167][ T27] audit: type=1326 audit(66.776:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6413 comm="syz.0.805" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9815c068 code=0x7ffc0000 [ 69.091981][ T6420] loop0: detected capacity change from 0 to 512 [ 69.102255][ T6420] EXT4-fs: Ignoring removed nobh option [ 69.106684][ T6313] loop1: detected capacity change from 0 to 128 [ 69.137970][ T6420] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #3: comm syz.0.808: corrupted inode contents [ 69.141502][ T6420] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #3: comm syz.0.808: mark_inode_dirty error [ 69.143815][ T6420] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #3: comm syz.0.808: corrupted inode contents [ 69.146498][ T6420] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.808: mark_inode_dirty error [ 69.148827][ T6420] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.808: Failed to acquire dquot type 0 [ 69.151270][ T6420] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.808: corrupted inode contents [ 69.153418][ T6420] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #16: comm syz.0.808: mark_inode_dirty error [ 69.155425][ T6420] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.808: corrupted inode contents [ 69.158738][ T6420] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.808: mark_inode_dirty error [ 69.161505][ T6420] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.808: corrupted inode contents [ 69.163548][ T6420] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 69.165048][ T6420] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #16: comm syz.0.808: corrupted inode contents [ 69.167162][ T6420] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.808: mark_inode_dirty error [ 69.170934][ T6420] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 69.176440][ T6420] EXT4-fs (loop0): 1 truncate cleaned up [ 69.177332][ T6420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.247701][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 69.269384][ T6426] loop0: detected capacity change from 0 to 512 [ 69.271161][ T6426] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.286247][ T6426] EXT4-fs (loop0): 1 truncate cleaned up [ 69.287840][ T6426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.311807][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 69.382195][ T6431] loop0: detected capacity change from 0 to 1024 [ 69.392996][ T6431] ext4: Unknown parameter 'subj_role' [ 69.493991][ T6435] can: request_module (can-proto-0) failed. [ 69.498138][ T6435] loop0: detected capacity change from 0 to 512 [ 69.566163][ T6438] loop2: detected capacity change from 0 to 128 [ 69.793477][ T6450] loop2: detected capacity change from 0 to 512 [ 69.804833][ T6454] atomic_op 0000000034184bbc conn xmit_atomic 0000000000000000 [ 69.805311][ T6453] loop0: detected capacity change from 0 to 1024 [ 69.825702][ T6453] ext4: Unknown parameter 'subj_role' [ 69.837282][ T6450] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.892007][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 70.033177][ T6477] loop2: detected capacity change from 0 to 512 [ 70.039963][ T6477] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.063170][ T6477] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.833: invalid indirect mapped block 4294967295 (level 0) [ 70.073397][ T6477] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.833: invalid indirect mapped block 4294967295 (level 1) [ 70.076204][ T6477] EXT4-fs (loop2): 1 orphan inode deleted [ 70.077091][ T6477] EXT4-fs (loop2): 1 truncate cleaned up [ 70.083314][ T6477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.124122][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 70.495938][ T6492] loop3: detected capacity change from 0 to 512 [ 70.518257][ T6492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 70.551246][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 70.575735][ T6502] loop2: detected capacity change from 0 to 1024 [ 70.588038][ T6502] ext4: Unknown parameter 'subj_role' [ 70.628598][ T6511] device syzkaller1 entered promiscuous mode [ 70.776260][ T6525] loop2: detected capacity change from 0 to 512 [ 70.794415][ T6525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.847012][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 70.877617][ T6537] loop2: detected capacity change from 0 to 1024 [ 70.887261][ T6537] ext4: Unknown parameter 'subj_role' [ 70.944682][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.054389][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.171581][ T6555] device syzkaller1 entered promiscuous mode [ 71.272099][ T6563] loop3: detected capacity change from 0 to 512 [ 71.328351][ T6563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.383220][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 71.418207][ T6569] loop4: detected capacity change from 0 to 1024 [ 71.421642][ T6569] ext4: Unknown parameter 'subj_role' [ 71.470640][ T6577] __nla_validate_parse: 9 callbacks suppressed [ 71.470652][ T6577] netlink: 64 bytes leftover after parsing attributes in process `syz.1.874'. [ 71.607748][ T6592] device syzkaller1 entered promiscuous mode [ 71.629372][ T6593] loop0: detected capacity change from 0 to 1024 [ 71.682408][ T6593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.723843][ T6599] loop3: detected capacity change from 0 to 512 [ 71.795683][ T6599] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.840126][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 71.940894][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 71.940905][ T27] audit: type=1326 audit(69.489:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 71.945289][ T27] audit: type=1326 audit(69.489:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 71.948463][ T27] audit: type=1326 audit(69.489:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=179 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 71.965864][ T27] audit: type=1326 audit(69.489:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 71.969115][ T27] audit: type=1326 audit(69.489:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 71.972405][ T27] audit: type=1326 audit(69.489:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 71.987245][ T27] audit: type=1326 audit(69.489:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 71.991044][ T27] audit: type=1326 audit(69.489:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 71.994302][ T27] audit: type=1326 audit(69.489:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 72.019213][ T27] audit: type=1326 audit(69.489:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm=ACED exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8eb5c068 code=0x7ffc0000 [ 72.031922][ T6613] loop2: detected capacity change from 0 to 1024 [ 72.036335][ T6613] ext4: Unknown parameter 'subj_role' [ 72.179052][ T6620] loop2: detected capacity change from 0 to 512 [ 72.181628][ T6620] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.511908][ T6620] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 72.513383][ T6620] System zones: 0-2, 18-18, 34-34 [ 72.520884][ T6620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.563056][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 72.611271][ T6628] loop1: detected capacity change from 0 to 512 [ 72.663285][ T6628] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.717948][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 72.811582][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.812849][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.813985][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.815199][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.816333][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.817509][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.818631][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.821999][ T6638] netlink: 96 bytes leftover after parsing attributes in process `syz.1.896'. [ 72.830532][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.831850][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.833006][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.834588][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.835645][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.840890][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.842137][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.843466][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.844582][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.845694][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.846792][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.862081][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.863312][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.864600][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.865754][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.866830][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.867933][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.869068][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.870168][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.871220][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.872245][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.884041][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.885184][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.894690][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.895898][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.897000][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.898253][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.899360][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.900425][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.901553][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.902578][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.903656][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.904914][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.916257][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.917394][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.918695][ T1964] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 72.923018][ T1964] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz1 [ 73.009126][ T6641] fido_id[6641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.054715][ T6646] loop1: detected capacity change from 0 to 1024 [ 73.064014][ T6646] ext4: Unknown parameter 'subj_role' [ 73.180310][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.903'. [ 73.215104][ T6656] loop2: detected capacity change from 0 to 512 [ 73.646501][ T6656] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.672935][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 73.693006][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 73.732847][ T6664] loop0: detected capacity change from 0 to 8192 [ 73.781244][ T6675] netlink: 128 bytes leftover after parsing attributes in process `syz.0.909'. [ 73.784996][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 73.836849][ T6678] loop1: detected capacity change from 0 to 1024 [ 73.838774][ T6678] ext4: Unknown parameter 'subj_role' [ 73.885895][ T4456] blk_print_req_error: 34 callbacks suppressed [ 73.885908][ T4456] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 74.027892][ T6702] loop3: detected capacity change from 0 to 512 [ 74.034766][ T6704] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.921' sets config #1 [ 74.048416][ T6702] EXT4-fs: Ignoring removed bh option [ 74.052187][ T6702] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.062479][ T6702] EXT4-fs (loop3): 1 truncate cleaned up [ 74.063423][ T6702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.094397][ T6708] loop4: detected capacity change from 0 to 512 [ 74.158940][ T6708] ------------[ cut here ]------------ [ 74.159968][ T6708] EA inode 11 i_nlink=2 [ 74.160050][ T6708] WARNING: CPU: 1 PID: 6708 at fs/ext4/xattr.c:1021 ext4_xattr_inode_update_ref+0x468/0x4ac [ 74.162217][ T6708] Modules linked in: [ 74.162794][ T6708] CPU: 1 PID: 6708 Comm: syz.4.923 Not tainted syzkaller #0 [ 74.163827][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 74.165335][ T6708] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.166541][ T6708] pc : ext4_xattr_inode_update_ref+0x468/0x4ac [ 74.167536][ T6708] lr : ext4_xattr_inode_update_ref+0x464/0x4ac [ 74.168613][ T6708] sp : ffff800041f76e80 [ 74.169285][ T6708] x29: ffff800041f76f00 x28: 0000000000000000 x27: dfff800000000000 [ 74.170491][ T6708] x26: 1fffe0001c42981b x25: ffff7000083eedd0 x24: 0000000000000000 [ 74.171772][ T6708] x23: ffff800017a8b000 x22: ffff800041f76e80 x21: 0000000000000002 [ 74.173102][ T6708] x20: 0000000000000001 x19: ffff0000e214bee0 x18: ffff800011abbcc0 [ 74.174494][ T6708] x17: 0000000000000000 x16: ffff8000082d22e0 x15: 0000000000000002 [ 74.175850][ T6708] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 74.177145][ T6708] x11: 000000000003c3ec x10: ffff800028fed000 x9 : 2ec6ba4ebe950400 [ 74.178385][ T6708] x8 : 2ec6ba4ebe950400 x7 : 0000000000000001 x6 : 0000000000000001 [ 74.179688][ T6708] x5 : ffff800041f76918 x4 : ffff8000151a4820 x3 : ffff80000852e404 [ 74.180911][ T6708] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 74.182228][ T6708] Call trace: [ 74.182736][ T6708] ext4_xattr_inode_update_ref+0x468/0x4ac [ 74.183667][ T6708] ext4_xattr_set_entry+0x918/0x15ac [ 74.184536][ T6708] ext4_xattr_ibody_set+0x204/0x600 [ 74.185374][ T6708] ext4_expand_extra_isize_ea+0xd00/0x15cc [ 74.186305][ T6708] __ext4_expand_extra_isize+0x298/0x358 [ 74.187211][ T6708] __ext4_mark_inode_dirty+0x3e4/0x790 [ 74.188089][ T6708] ext4_evict_inode+0xb58/0x1270 [ 74.188863][ T6708] evict+0x3c8/0x810 [ 74.189492][ T6708] iput+0x764/0x7f4 [ 74.190122][ T6708] ext4_process_orphan+0x240/0x2b4 [ 74.190885][ T6708] ext4_orphan_cleanup+0x908/0x104c [ 74.191662][ T6708] ext4_fill_super+0x6920/0x6e34 [ 74.192409][ T6708] get_tree_bdev+0x358/0x544 [ 74.193124][ T6708] ext4_get_tree+0x28/0x38 [ 74.193814][ T6708] vfs_get_tree+0x90/0x274 [ 74.194482][ T6708] do_new_mount+0x228/0x810 [ 74.195215][ T6708] path_mount+0x5b4/0xe78 [ 74.195864][ T6708] __arm64_sys_mount+0x49c/0x584 [ 74.196563][ T6708] invoke_syscall+0x98/0x2bc [ 74.197297][ T6708] el0_svc_common+0x138/0x258 [ 74.197976][ T6708] do_el0_svc+0x58/0x13c [ 74.198665][ T6708] el0_svc+0x58/0x138 [ 74.199328][ T6708] el0t_64_sync_handler+0x84/0xf0 [ 74.200134][ T6708] el0t_64_sync+0x18c/0x190 [ 74.200815][ T6708] irq event stamp: 3254 [ 74.201486][ T6708] hardirqs last enabled at (3253): [] __up_console_sem+0xb4/0x100 [ 74.202927][ T6708] hardirqs last disabled at (3254): [] el1_dbg+0x24/0x80 [ 74.204159][ T6708] softirqs last enabled at (1948): [] local_bh_enable+0x10/0x34 [ 74.205438][ T6708] softirqs last disabled at (1946): [] local_bh_disable+0x10/0x34 [ 74.206762][ T6708] ---[ end trace 0000000000000000 ]--- [ 74.212603][ T6708] EXT4-fs (loop4): 1 orphan inode deleted [ 74.212894][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 74.213527][ T6708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.230365][ T4334] EXT4-fs (loop4): unmounting filesystem.