last executing test programs: 49.62539552s ago: executing program 2 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x134, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5ba2}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x50}, 0x8000) 49.219403127s ago: executing program 2 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000000010000010000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x4, 0xff, 0xa, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x8001, 0xf}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x3, @val=@netfilter={0x0, 0x0, 0x2}}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x4}, 0x18) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000800) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x12c, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) semop(0x0, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x18, 0xd49}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1}) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0) 48.994933187s ago: executing program 2 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYBLOB, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) 48.738504727s ago: executing program 2 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 48.647914811s ago: executing program 2 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) 44.738481943s ago: executing program 2 (id=179): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000540)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc094}, 0x404c000) 44.451105816s ago: executing program 32 (id=179): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000540)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc094}, 0x404c000) 3.250645495s ago: executing program 4 (id=382): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000040), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) 3.058270153s ago: executing program 3 (id=384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002580)=""/78, 0x98e88740632bc26c) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 3.011317845s ago: executing program 4 (id=385): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x5) 2.808330664s ago: executing program 3 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2.726222437s ago: executing program 4 (id=390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, {[@end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYBLOB="05000000000000000000000056e744e03ad3d831b3365857524ce33459f7403668bc74f33f658e03b137ec1e26e085d3de2dac571bc1a1caccdb8d993adc06be6973e0914aac2c8b9c2fc611a46c6f5aa9a8ab5503db3f1e5f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e700000100", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x20) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.700261408s ago: executing program 5 (id=391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x4, 0xff, 0xa, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x8001, 0xf}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x3, @val=@netfilter={0x0, 0x0, 0x2}}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x4}, 0x18) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000800) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0x100000}, 0x10) syz_clone(0x26801000, 0x0, 0x12c, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) semop(0x0, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x18, 0xd49}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1}) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0) 2.679045239s ago: executing program 1 (id=392): r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x20300, 0x5, 0x0, 0x0}) 2.082415064s ago: executing program 3 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1.829873164s ago: executing program 0 (id=394): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xe6}}, {@oldalloc}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5b3, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) 1.771341497s ago: executing program 5 (id=395): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r1, 0x0, 0x0, 0x0, 0x2, 0x1}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x0, 0x8209, 0xffff, 0xffff, 0x8, 0xc, 0x3}, &(0x7f0000000040)=0x20) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1.550854915s ago: executing program 1 (id=399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4bd, &(0x7f0000000a00)="$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") lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.498253368s ago: executing program 5 (id=400): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x20000001bbc, 0x8801) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$evdev(r0, 0x0, 0x0) 1.4395332s ago: executing program 0 (id=401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) close_range(r1, 0xffffffffffffffff, 0x10000000000000) 1.43924484s ago: executing program 3 (id=402): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x0, 0xc04}}, 0x120) readv(r0, 0x0, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) 1.360069534s ago: executing program 0 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x128, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x78, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5ba2}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x50}, 0x8000) 1.251546018s ago: executing program 0 (id=404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 994.386379ms ago: executing program 1 (id=405): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 797.913317ms ago: executing program 5 (id=406): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1, &(0x7f00000005c0)={[{@grpquota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@quota}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x47, 0xffbf, 0x4, 0x9}) 777.480788ms ago: executing program 4 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 690.195551ms ago: executing program 3 (id=408): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x2}}, &(0x7f0000000400)='syzkaller\x00'}, 0x94) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[], 0x1, 0x33f, &(0x7f0000003800)="$eJzs3cGLG1UcB/BfY+221W32UAQF8aEXvYTd9R8wSAvigrJ2pXoQpu6shkyTJRMqKWJ7E2/+HcWb3gQRPO/Fuzdve/HYQ3Fkk93tJmYPLmRjyecD4f0yL1/yZsKE3yV5+7e/v9veKRs7WT9q76S4EhG1xxErUYsjFw7H2rC+FCc9jLfqt/949aNPPn2/ubFxYzOlm81bb6+nlK699stXX//w+q/9Fz7+6drPS7G38tn+X+t/7r209/L+37e+bJWpVaZOt5+ydKfb7Wd3ijxtt8p2I6UPizwr89TqlHlvbH6n6O7uDlLW2V6+utvLyzJlnUFq54PU76Z+b5CyL7JWJzUajbR8NRbLWc5369HmZtacwWI4R99NHrgy/rTXa2YH9/DSv5Jbj2a6MADgf2my/6/F5eHxOfX/hy3K9fjP/f+FRe//z0L/vwgO+v9Lh/fvOP0/AAAAAAAAAAAAAAA8Cx5XVb2qqvrROPmY9/qYLZ//Yjvxw73LEcW397bubY3G0XxzJ1pRRB6rUY8nEdWxUX3zvY0bq2loJZbvPhjlD8bnxvNrUY+V6fm1lFL1IKXx/PPDf7Q4zq9HPa5Pz6+P3n8ifynefONEvhH1+P3z6EYR23GQfZr/Zi2ldz/YmMgvDV8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGJopGNT9+9vNE6bH+WP99dfjXo8mb4//+rU/fkvxisX53vuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCkHNxvZ0WR986/eBinTFWH5rWwsxQ/VqPrebZ4xMwW9tuLcdp1VihOL+b9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn7+mm3/NeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNUDu63s6LIezMs5n2OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz5J/AgAA//8Agifu") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000200000001"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000), &(0x7f0000000440)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES64=r6, @ANYRESOCT=r5], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 689.827702ms ago: executing program 0 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 429.251972ms ago: executing program 5 (id=410): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000200)={0x6, 0x6, 0x1}) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x24}, &(0x7f00000000c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) 364.477355ms ago: executing program 0 (id=411): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 250.748109ms ago: executing program 1 (id=412): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80000) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1}, 0x6e) 39.497889ms ago: executing program 1 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) 35.492379ms ago: executing program 4 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 5 (id=415): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c"], 0x50) inotify_init() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10, 0x0}, 0x80c1) getsockname$tipc(r2, &(0x7f0000000080)=@id, &(0x7f0000000740)=0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)=ANY=[@ANYBLOB="4000000010001fff0200"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677265001400028005000900c00000ff0700000000000000b6f7566a11228f1560b149837be7ce9d44399b038058f705006545ba417ea70eba084861b02d6ac7031f0a7cf36bc9274af4fe601c35788398e9f99f8a5796a15cac87ed63b81a77eef6b2d48d0163f8af1ae79b37d99d547fde6ba205cfd57821855b2554c2600ff1565926da233eae42878b6bc444e396a86dcb9c076af59e277b560532e2e3df1bbfe62b4874820124046c413792b99028f7e7c7c2479f3ee7b2cfbc34595b1e8fd027657ff3306f5464fdd712cd9dcd4853aa220eea8cf0eb238786890d5081a57c6aab2e17d8970ea4457d8f6a35b14be81f078cccecd1f1afc1ce8457d3256ae6a6a7b5372f627d1a786198afc7b85740e3295379e051a67581c901f41623b1ec448b18cb72b7bce1ffda9338643fffe18aab3816763d84016af14007"], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/223, 0xdf}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1, 0x40002000, 0x0) kernel console output (not intermixed with test programs): ][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.056855][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.057520][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.064478][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.071859][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.078717][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.085926][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.092155][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.099252][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.113211][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.114485][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.122025][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.128954][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.135600][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.142229][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.149359][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.155912][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.162748][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.169925][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.187589][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.194138][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.200776][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.208392][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.221153][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.230553][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.266821][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.283962][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.292110][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.304915][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.637549][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 71.763964][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 71.800019][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 71.893014][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.901071][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.909824][ T4265] device bridge_slave_0 entered promiscuous mode [ 71.928121][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 71.942269][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.949642][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.957574][ T4265] device bridge_slave_1 entered promiscuous mode [ 71.988324][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 72.051630][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.058909][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.067582][ T4264] device bridge_slave_0 entered promiscuous mode [ 72.086028][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.093266][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.101328][ T4263] device bridge_slave_0 entered promiscuous mode [ 72.111492][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.121203][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.128772][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.136956][ T4264] device bridge_slave_1 entered promiscuous mode [ 72.156350][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.163525][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.171822][ T4263] device bridge_slave_1 entered promiscuous mode [ 72.180423][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.245945][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.273059][ T4265] team0: Port device team_slave_0 added [ 72.285494][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.294954][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.302226][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.310802][ T4274] device bridge_slave_0 entered promiscuous mode [ 72.319776][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.332064][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.342351][ T4265] team0: Port device team_slave_1 added [ 72.379126][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.386244][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.394728][ T4274] device bridge_slave_1 entered promiscuous mode [ 72.427906][ T4264] team0: Port device team_slave_0 added [ 72.449507][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.456817][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.482851][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.495393][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.502742][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.510814][ T4267] device bridge_slave_0 entered promiscuous mode [ 72.520208][ T4264] team0: Port device team_slave_1 added [ 72.526150][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.533349][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.541560][ T4267] device bridge_slave_1 entered promiscuous mode [ 72.559816][ T4263] team0: Port device team_slave_0 added [ 72.567914][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.577539][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.584504][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.610974][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.649234][ T4263] team0: Port device team_slave_1 added [ 72.664931][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.700291][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.726615][ T4274] team0: Port device team_slave_0 added [ 72.732977][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.740396][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.766685][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.778307][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.785283][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.812387][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.825685][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.844703][ T4274] team0: Port device team_slave_1 added [ 72.851342][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.859138][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.885140][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.896938][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.903913][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.930324][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.992766][ T4265] device hsr_slave_0 entered promiscuous mode [ 72.999780][ T4265] device hsr_slave_1 entered promiscuous mode [ 73.026993][ T4263] device hsr_slave_0 entered promiscuous mode [ 73.033739][ T4263] device hsr_slave_1 entered promiscuous mode [ 73.040415][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.048648][ T4263] Cannot create hsr debugfs directory [ 73.057136][ T4267] team0: Port device team_slave_0 added [ 73.063894][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.071270][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.097410][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.121045][ T4267] team0: Port device team_slave_1 added [ 73.135724][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.142999][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.169000][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.180385][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 73.237899][ T4264] device hsr_slave_0 entered promiscuous mode [ 73.244857][ T4264] device hsr_slave_1 entered promiscuous mode [ 73.251496][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.259413][ T4264] Cannot create hsr debugfs directory [ 73.266825][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 73.270615][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.280344][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.306825][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.325054][ T4274] device hsr_slave_0 entered promiscuous mode [ 73.333035][ T4274] device hsr_slave_1 entered promiscuous mode [ 73.339602][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 73.339622][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 73.339827][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 73.359086][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.367089][ T4274] Cannot create hsr debugfs directory [ 73.389788][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.396820][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.423127][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.593265][ T4267] device hsr_slave_0 entered promiscuous mode [ 73.600229][ T4267] device hsr_slave_1 entered promiscuous mode [ 73.607065][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.614631][ T4267] Cannot create hsr debugfs directory [ 73.809262][ T4264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.822964][ T4264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.836167][ T4264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.852918][ T4264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.905661][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.918947][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.930556][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.951678][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.026017][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.049434][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.068830][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.088731][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.122798][ T4263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.134781][ T4263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.151058][ T4263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.162864][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.187566][ T4263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.230388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.240032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.251555][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.269937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.278889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.288889][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.296156][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.324206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.363870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.373176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.382808][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.389988][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.399249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.421891][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.435444][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.455776][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.463449][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.474884][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.497626][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.512023][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.522918][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.534265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.543419][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.551517][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.563509][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.572253][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.581832][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.590726][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.600244][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.609151][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.616240][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.654839][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.668109][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.676049][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.686343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.695879][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.706164][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.714823][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.721989][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.730831][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.739715][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.748372][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.761485][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.792034][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.811383][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.822535][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.832343][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.842211][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.852474][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.862309][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.898995][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.916919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.931855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.952288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.961266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.970882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.980187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.989051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.998417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.007020][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.014108][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.025098][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.060140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.069261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.080542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.089417][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.096591][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.106046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.116192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.124535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.142057][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.181284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.195767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.214312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.225494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.240484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.251370][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.258517][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.265976][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 75.314978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.333322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.341137][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 75.342111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.356405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.365020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.374305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.383583][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.390724][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.399141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.408469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.417453][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 75.417653][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 75.423477][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 75.439758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.448574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.457145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.467439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.504520][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.522658][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.535084][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.544838][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.555539][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.565527][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.574431][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.584050][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.599165][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.618071][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.630112][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.638820][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.648203][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.657545][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.665097][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.697709][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.705674][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.735123][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.761930][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.774017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.788030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.807548][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.814699][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.864162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.893563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.931512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.951459][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.958736][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.023586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.037534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.048938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.061616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.073690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.082938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.091787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.110010][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.133085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.157680][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.168220][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.197325][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.206147][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.240780][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.280260][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.361700][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.372151][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.406163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.428316][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.452178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.472908][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.496462][ T4265] device veth0_vlan entered promiscuous mode [ 76.511025][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.522381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.560459][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.578145][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.585843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.619685][ T4265] device veth1_vlan entered promiscuous mode [ 76.659902][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.696942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.705051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.717192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.726106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.752643][ T4265] device veth0_macvtap entered promiscuous mode [ 76.777504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.789409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.800201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.809638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.821086][ T4265] device veth1_macvtap entered promiscuous mode [ 76.849641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.859995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.868559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.877294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.886288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.896134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.907493][ T4274] device veth0_vlan entered promiscuous mode [ 76.951118][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.962290][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.971735][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.980560][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.989435][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.998742][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.008617][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.018577][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.027245][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.039503][ T4263] device veth0_vlan entered promiscuous mode [ 77.058262][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.068518][ T4274] device veth1_vlan entered promiscuous mode [ 77.085432][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.095498][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.105190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.113636][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.124320][ T4263] device veth1_vlan entered promiscuous mode [ 77.140209][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.158535][ T4264] device veth0_vlan entered promiscuous mode [ 77.166047][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.175527][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.184781][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.193704][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.211289][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.220377][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.230029][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.241243][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.250118][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.274028][ T4264] device veth1_vlan entered promiscuous mode [ 77.305926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.314266][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.322995][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.333705][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.342031][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 77.351622][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.360365][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.392776][ T4274] device veth0_macvtap entered promiscuous mode [ 77.417069][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 77.433128][ T4264] device veth0_macvtap entered promiscuous mode [ 77.446022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.459175][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.472495][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.481660][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.490714][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.499102][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 77.502694][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.505119][ T4277] Bluetooth: hci4: command 0x040f tx timeout [ 77.519545][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 77.520541][ T4263] device veth0_macvtap entered promiscuous mode [ 77.539453][ T4263] device veth1_macvtap entered promiscuous mode [ 77.554535][ T4264] device veth1_macvtap entered promiscuous mode [ 77.567643][ T4274] device veth1_macvtap entered promiscuous mode [ 77.575177][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.585245][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.593842][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.602250][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.610716][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.635431][ T4267] device veth0_vlan entered promiscuous mode [ 77.662895][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.672228][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.681246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.691270][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.699433][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.710399][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.722347][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.733895][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.747290][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.758392][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.774209][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.783786][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.791446][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.800926][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.810068][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.819459][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.829046][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.840893][ T4267] device veth1_vlan entered promiscuous mode [ 77.865958][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.877464][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.887621][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.898730][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.912122][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.927420][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.938196][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.952896][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.963768][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.975126][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.988954][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.001106][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.012115][ T4263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.021115][ T4263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.030361][ T4263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.039930][ T4263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.065537][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.073669][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.083554][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.092847][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.102613][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.119849][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.131009][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.141918][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.153913][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.165084][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.179476][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.187977][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.201578][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.213390][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.226845][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.237744][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.248204][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.258805][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.270327][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.278207][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.287548][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.297058][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.304903][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.313729][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.328008][ T4264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.339385][ T4264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.348736][ T4264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.357709][ T4264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.393766][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.403316][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.414020][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.422808][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.476859][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.492508][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.516795][ T4267] device veth0_macvtap entered promiscuous mode [ 78.561413][ T4267] device veth1_macvtap entered promiscuous mode [ 78.606154][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.623740][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.639697][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.659953][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.675424][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.683142][ T4378] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.690821][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.710665][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.718158][ T4378] loop2: detected capacity change from 0 to 1024 [ 78.721437][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.730279][ T4378] ======================================================= [ 78.730279][ T4378] WARNING: The mand mount option has been deprecated and [ 78.730279][ T4378] and is ignored by this kernel. Remove the mand [ 78.730279][ T4378] option from the mount to silence this warning. [ 78.730279][ T4378] ======================================================= [ 78.776260][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.789000][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.802173][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.819461][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.839466][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.848875][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.860238][ T4378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.883868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.899586][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.922060][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.928635][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.940615][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.953704][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.966219][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.976976][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.986860][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.997476][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.008367][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.019704][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.035609][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.050423][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 79.053164][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.075077][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.119556][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.157324][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.171737][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.181504][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.196299][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.233646][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.242208][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.285151][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.338015][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.346009][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.417000][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 79.430127][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.497109][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 79.540988][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.574304][ T4389] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 79.584532][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 79.591431][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 79.598985][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 79.605226][ T4389] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 79.613171][ T4389] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 79.622195][ T4389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 79.631149][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.639914][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.648072][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.775805][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.795984][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.810022][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.870067][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.887372][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.939214][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.957458][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.988014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.061562][ T4393] loop1: detected capacity change from 0 to 512 [ 80.088943][ T4393] ext4: Unknown parameter 'seclabel' [ 80.128965][ T4380] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.180874][ T4399] syz.0.1[4399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.180985][ T4399] syz.0.1[4399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.311824][ T27] audit: type=1326 audit(1764104381.701:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 80.462471][ T27] audit: type=1326 audit(1764104381.701:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 80.462682][ T4407] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 80.570490][ T4410] loop4: detected capacity change from 0 to 128 [ 80.581927][ T27] audit: type=1326 audit(1764104381.711:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 80.587891][ T4413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 80.657251][ T27] audit: type=1326 audit(1764104381.751:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 80.680453][ T4410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.693593][ T27] audit: type=1326 audit(1764104381.801:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 80.698068][ T4410] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.737022][ T27] audit: type=1326 audit(1764104381.801:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 80.769961][ T27] audit: type=1326 audit(1764104381.801:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4402 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 81.028408][ T4410] syz.4.11 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.319221][ T4410] device macvlan1 entered promiscuous mode [ 81.378159][ T4410] device ipvlan0 entered promiscuous mode [ 81.798702][ T4410] device ipvlan0 left promiscuous mode [ 82.123033][ T4410] device macvlan1 left promiscuous mode [ 82.303763][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 82.658672][ T4450] xt_SECMARK: invalid mode: 2 [ 82.725662][ T4450] loop4: detected capacity change from 0 to 1024 [ 82.733828][ T4453] loop0: detected capacity change from 0 to 512 [ 82.757343][ T4451] device syzkaller0 entered promiscuous mode [ 82.830854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 82.840526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 82.850093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 82.880400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 82.892182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 82.900497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #112!!! [ 82.908919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #112!!! [ 82.917820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.969886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 82.983008][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.042058][ T4450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.109865][ T4450] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.129517][ T4453] EXT4-fs (loop0): shut down requested (0) [ 83.816758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.629888][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'. [ 84.720484][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 85.439380][ T4479] mmap: syz.3.25 (4479) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.620605][ T4477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 85.742700][ T4496] loop3: detected capacity change from 0 to 1024 [ 85.761588][ T4496] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 86.163274][ T4504] loop3: detected capacity change from 0 to 128 [ 86.205324][ T4504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.217864][ T4504] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.249511][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.546234][ T14] cfg80211: failed to load regulatory.db [ 87.056691][ T4483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 87.108456][ T4504] device macvlan1 entered promiscuous mode [ 87.122712][ T4504] device ipvlan0 entered promiscuous mode [ 87.142027][ T4504] device ipvlan0 left promiscuous mode [ 87.188553][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 87.194718][ T4504] device macvlan1 left promiscuous mode [ 87.288215][ T4509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 87.307720][ T4512] syz.1.32[4512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.307812][ T4512] syz.1.32[4512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.374186][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 87.521368][ T4517] loop4: detected capacity change from 0 to 512 [ 87.564955][ T4517] ext4: Unknown parameter 'seclabel' [ 89.381082][ T27] audit: type=1326 audit(1764104390.781:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 89.443871][ T27] audit: type=1326 audit(1764104390.781:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 89.466005][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.528802][ T27] audit: type=1326 audit(1764104390.811:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 89.551166][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.615602][ T4509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.646881][ T27] audit: type=1326 audit(1764104390.811:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 89.652126][ T4548] netlink: 124 bytes leftover after parsing attributes in process `syz.3.46'. [ 89.686593][ T27] audit: type=1326 audit(1764104390.811:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 89.723303][ T27] audit: type=1326 audit(1764104390.811:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 89.789830][ T4549] loop3: detected capacity change from 0 to 1024 [ 89.806488][ T27] audit: type=1326 audit(1764104390.811:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 89.874211][ T27] audit: type=1326 audit(1764104390.811:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4544 comm="syz.4.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 89.951423][ T4549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.958992][ T4509] loop0: detected capacity change from 0 to 1024 [ 90.051846][ T4509] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 90.291057][ T4558] loop1: detected capacity change from 0 to 128 [ 90.337688][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 90.368176][ T4559] xt_SECMARK: invalid mode: 2 [ 90.384093][ T4556] device syzkaller0 entered promiscuous mode [ 90.438860][ T4558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.520732][ T4558] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.552361][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.559605][ T4559] loop2: detected capacity change from 0 to 1024 [ 90.757100][ T4559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.765775][ T4559] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.990234][ T4575] syz.3.49[4575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.990346][ T4575] syz.3.49[4575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.190015][ T4580] device macvlan1 entered promiscuous mode [ 91.241303][ T4580] device ipvlan0 entered promiscuous mode [ 91.248673][ T4580] device ipvlan0 left promiscuous mode [ 91.254480][ T4580] device macvlan1 left promiscuous mode [ 91.501784][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 91.841644][ T4595] netlink: 124 bytes leftover after parsing attributes in process `syz.1.63'. [ 91.892521][ T4595] loop1: detected capacity change from 0 to 1024 [ 91.962744][ T4595] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.208537][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 92.407760][ T4605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.66'. [ 93.793084][ T4605] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.903628][ T4605] loop1: detected capacity change from 0 to 1024 [ 93.916783][ T4605] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 95.155190][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 95.262266][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 95.535256][ T4646] loop3: detected capacity change from 0 to 1024 [ 96.079621][ T4646] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.105501][ T4646] ext4: Unknown parameter 'noacl' [ 96.876202][ T4671] loop3: detected capacity change from 0 to 512 [ 96.904695][ T4671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.996665][ T4671] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.89: iget: bad i_size value: 38620345925642 [ 97.071924][ T4671] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.89: couldn't read orphan inode 15 (err -117) [ 97.101989][ T4679] netlink: 'syz.4.91': attribute type 1 has an invalid length. [ 97.131460][ T4671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.159858][ T27] audit: type=1800 audit(1764104398.561:17): pid=4671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.89" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 97.336454][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 97.757372][ T27] audit: type=1326 audit(1764104399.151:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 97.779615][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.112862][ T27] audit: type=1326 audit(1764104399.201:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 98.422410][ T27] audit: type=1326 audit(1764104399.201:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 98.618625][ T27] audit: type=1326 audit(1764104399.211:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 98.641205][ T27] audit: type=1326 audit(1764104399.221:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.3.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 98.737681][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 98.786664][ T4705] netlink: 312 bytes leftover after parsing attributes in process `syz.2.102'. [ 98.796896][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 99.082049][ T4724] Zero length message leads to an empty skb [ 100.731602][ T4763] loop3: detected capacity change from 0 to 128 [ 101.018430][ T4772] netlink: 'syz.1.129': attribute type 2 has an invalid length. [ 101.064036][ T4772] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 101.107702][ T4772] netlink: 'syz.1.129': attribute type 2 has an invalid length. [ 101.144375][ T27] audit: type=1326 audit(1764104402.541:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 101.173492][ T4772] netlink: 'syz.1.129': attribute type 2 has an invalid length. [ 101.223217][ T4772] netlink: 'syz.1.129': attribute type 2 has an invalid length. [ 101.255090][ T27] audit: type=1326 audit(1764104402.541:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 101.742798][ T27] audit: type=1326 audit(1764104402.541:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.3.130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6e78f749 code=0x7ffc0000 [ 101.765292][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.221279][ T4785] loop4: detected capacity change from 0 to 1024 [ 102.228652][ T4785] ext2: Unknown parameter 'fowner<00000000000000000000' [ 102.594133][ T27] audit: type=1326 audit(1764104403.991:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4795 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 102.699471][ T27] audit: type=1326 audit(1764104403.991:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4795 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 102.794563][ T27] audit: type=1326 audit(1764104403.991:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4795 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 102.816562][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.867035][ T4805] device bridge0 entered promiscuous mode [ 102.893877][ T27] audit: type=1326 audit(1764104403.991:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4795 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 102.894838][ T4805] device bridge0 left promiscuous mode [ 102.915964][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.922999][ T27] audit: type=1326 audit(1764104403.991:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4795 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 102.950490][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.957299][ T27] audit: type=1326 audit(1764104404.091:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 102.979547][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.009916][ T27] audit: type=1326 audit(1764104404.091:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 103.032021][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.080248][ T4811] netlink: 'syz.0.144': attribute type 2 has an invalid length. [ 103.087614][ T27] audit: type=1326 audit(1764104404.091:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 103.093939][ T4807] xt_SECMARK: invalid mode: 2 [ 103.110963][ T27] audit: type=1326 audit(1764104404.091:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 103.146596][ T4811] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 103.154899][ T27] audit: type=1326 audit(1764104404.101:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4799 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 103.189393][ T4811] netlink: 'syz.0.144': attribute type 2 has an invalid length. [ 103.202144][ T4808] loop4: detected capacity change from 0 to 1024 [ 103.228772][ T4811] netlink: 'syz.0.144': attribute type 2 has an invalid length. [ 103.237940][ T4811] netlink: 'syz.0.144': attribute type 2 has an invalid length. [ 103.270968][ T4809] device syzkaller0 entered promiscuous mode [ 103.299363][ T4808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.311368][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 103.336169][ T4808] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.350998][ T4813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.145'. [ 103.360576][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 103.370190][ T4813] netlink: 2 bytes leftover after parsing attributes in process `syz.2.145'. [ 103.382290][ T4813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.145'. [ 107.981814][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 108.041378][ T4850] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 108.059067][ T4848] serio: Serial port ttyS3 [ 108.089227][ T4850] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 108.148421][ T4850] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 108.181745][ T4850] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 108.216440][ T4850] netlink: 'syz.2.158': attribute type 2 has an invalid length. [ 108.343149][ T4860] loop1: detected capacity change from 0 to 512 [ 108.455187][ T4860] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.576639][ T4860] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.697027][ T4860] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.162: corrupted inode contents [ 108.726248][ T4860] EXT4-fs error (device loop1): ext4_dirty_inode:6133: inode #2: comm syz.1.162: mark_inode_dirty error [ 108.773703][ T4860] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #2: comm syz.1.162: corrupted inode contents [ 108.866205][ T4877] device syzkaller0 entered promiscuous mode [ 108.884909][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 108.893193][ T4877] xt_SECMARK: invalid mode: 2 [ 108.947338][ T4877] loop4: detected capacity change from 0 to 1024 [ 109.035255][ T4877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.106317][ T4877] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.125862][ T27] audit: type=1326 audit(1764104411.521:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.1.173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f05b8f749 code=0x0 [ 110.240938][ T4893] capability: warning: `syz.1.173' uses deprecated v2 capabilities in a way that may be insecure [ 112.672692][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 112.700446][ T4908] netlink: 'syz.1.176': attribute type 13 has an invalid length. [ 112.779489][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.827435][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.847200][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.070752][ T4472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.153467][ T27] audit: type=1326 audit(1764104414.551:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 113.235644][ T4472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.272297][ T27] audit: type=1326 audit(1764104414.601:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 113.501437][ T27] audit: type=1326 audit(1764104414.611:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 113.531119][ T27] audit: type=1326 audit(1764104414.611:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 113.553864][ T27] audit: type=1326 audit(1764104414.611:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 113.576885][ T27] audit: type=1326 audit(1764104414.611:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 113.599479][ T27] audit: type=1326 audit(1764104414.611:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x7ffc0000 [ 113.851557][ T4472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.120035][ T4472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.176573][ T4936] sit0: Caught tx_queue_len zero misconfig [ 114.473973][ T4940] syz.4.187[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.474074][ T4940] syz.4.187[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.599181][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.623335][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.632183][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.646601][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.656371][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 114.663929][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.862326][ T4953] xt_SECMARK: invalid mode: 2 [ 114.923873][ T4953] loop1: detected capacity change from 0 to 1024 [ 115.100157][ T4950] device syzkaller0 entered promiscuous mode [ 115.209417][ T4953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.255851][ T4953] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.708429][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 117.394214][ T4979] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 117.403704][ T4981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.196'. [ 117.426841][ T4981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 117.437786][ T4984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.196'. [ 117.466187][ T4984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 117.543757][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 118.060282][ T5003] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.233607][ T4943] chnl_net:caif_netlink_parms(): no params data found [ 118.516114][ T5011] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 118.529370][ T5011] netlink: 'syz.1.206': attribute type 4 has an invalid length. [ 118.557144][ T5011] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.206'. [ 118.581892][ T5013] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 118.592341][ T5013] netlink: 'syz.1.206': attribute type 4 has an invalid length. [ 118.620658][ T5013] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.206'. [ 118.776581][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 119.073488][ T5029] loop3: detected capacity change from 0 to 512 [ 119.189580][ T5035] loop4: detected capacity change from 0 to 128 [ 119.198808][ T5029] EXT4-fs: Ignoring removed i_version option [ 119.226596][ T5029] EXT4-fs: Ignoring removed bh option [ 119.245578][ T4943] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.266089][ T4943] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.297829][ T4943] device bridge_slave_0 entered promiscuous mode [ 119.332731][ T5029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 119.348090][ T27] audit: type=1326 audit(1764104420.751:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.378726][ T5044] syz.4.214: attempt to access beyond end of device [ 119.378726][ T5044] loop4: rw=2049, sector=145, nr_sectors = 336 limit=128 [ 119.403346][ T5029] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.423940][ T27] audit: type=1326 audit(1764104420.751:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.496009][ T4472] device hsr_slave_0 left promiscuous mode [ 119.522822][ T4472] device hsr_slave_1 left promiscuous mode [ 119.557973][ T27] audit: type=1326 audit(1764104420.771:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.606937][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.614488][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.655422][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.655474][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.655572][ T27] audit: type=1326 audit(1764104420.771:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.655610][ T27] audit: type=1326 audit(1764104420.771:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.655646][ T27] audit: type=1326 audit(1764104420.791:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.655681][ T27] audit: type=1326 audit(1764104420.791:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.655724][ T27] audit: type=1326 audit(1764104420.811:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.655759][ T27] audit: type=1326 audit(1764104420.811:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.655792][ T27] audit: type=1326 audit(1764104420.891:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5039 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 119.670094][ T4472] device bridge_slave_1 left promiscuous mode [ 119.670366][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.691084][ T4267] EXT4-fs (loop3): unmounting filesystem. [ 119.717224][ T4472] device bridge_slave_0 left promiscuous mode [ 119.717362][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.732611][ T56] kworker/u4:4: attempt to access beyond end of device [ 119.732611][ T56] loop4: rw=1, sector=481, nr_sectors = 560 limit=128 [ 119.823459][ T4472] device veth1_macvtap left promiscuous mode [ 119.823707][ T4472] device veth0_macvtap left promiscuous mode [ 119.823880][ T4472] device veth1_vlan left promiscuous mode [ 119.824677][ T4472] device veth0_vlan left promiscuous mode [ 120.856637][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 121.065707][ T5048] tty tty2: ldisc open failed (-12), clearing slot 1 [ 121.074521][ T5049] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 121.563597][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 121.607228][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 121.648623][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.684759][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.110463][ T4472] bond0 (unregistering): Released all slaves [ 122.180505][ T4943] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.187781][ T4943] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.195774][ T4943] device bridge_slave_1 entered promiscuous mode [ 122.242673][ T5078] netlink: 14 bytes leftover after parsing attributes in process `syz.3.226'. [ 122.284786][ T5078] device hsr_slave_0 left promiscuous mode [ 122.303514][ T5078] device hsr_slave_1 left promiscuous mode [ 122.480961][ T4943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.506321][ T4943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.566340][ T5082] loop4: detected capacity change from 0 to 2048 [ 122.711356][ T5082] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.718435][ T4943] team0: Port device team_slave_0 added [ 122.754898][ T4943] team0: Port device team_slave_1 added [ 122.797580][ T4943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.814781][ T4943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.875045][ T4943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.911560][ T4943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.936770][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 122.958815][ T4943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.017731][ T4943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.227606][ T4943] device hsr_slave_0 entered promiscuous mode [ 123.266861][ T4943] device hsr_slave_1 entered promiscuous mode [ 123.637655][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 123.896566][ T5090] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 124.491660][ T5114] loop1: detected capacity change from 0 to 4096 [ 124.507144][ T4943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.517345][ T4943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.528020][ T4943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.537760][ T4943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.682895][ T5114] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.756013][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 124.763620][ T4943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.808859][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 124.808875][ T27] audit: type=1326 audit(1764104426.211:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 124.895612][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.955782][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.956622][ T27] audit: type=1326 audit(1764104426.241:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 125.012114][ T4943] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.073329][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.094319][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.114807][ T27] audit: type=1326 audit(1764104426.241:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 125.161003][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 125.164569][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.174024][ T27] audit: type=1326 audit(1764104426.241:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 125.177044][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.227095][ T27] audit: type=1326 audit(1764104426.241:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5130 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 125.310116][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.490360][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 125.542761][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.557161][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.565796][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.573172][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.827061][ T4943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.903237][ T4943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.654826][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.664762][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.675033][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.691676][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.703658][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 126.731843][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 126.836952][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.925197][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.047849][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.076280][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.085086][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.093360][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.500697][ T5170] loop1: detected capacity change from 0 to 1024 [ 127.664949][ T5170] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #3: block 1: comm syz.1.251: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.743746][ T5182] netlink: 14 bytes leftover after parsing attributes in process `syz.0.252'. [ 127.754643][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.765980][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.775590][ T5170] Quota error (device loop1): write_blk: dquota write failed [ 127.783452][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.792810][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.796716][ T5170] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 127.811164][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 127.822274][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.886979][ T5170] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.251: Failed to acquire dquot type 0 [ 127.889054][ T5170] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.251: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.899609][ T5170] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.251: Invalid inode bitmap blk 0 in block_group 0 [ 127.901457][ T5170] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 127.902002][ T5170] EXT4-fs (loop1): 1 orphan inode deleted [ 127.902037][ T5170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.919935][ T4780] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.929886][ T4780] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 127.932375][ T4780] EXT4-fs error (device loop1): ext4_release_dquot:6845: comm kworker/u4:17: Failed to release dquot type 0 [ 128.091307][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 128.438238][ T5182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.487016][ T5182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.538030][ T5182] bond0 (unregistering): Released all slaves [ 128.661076][ T4472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.688282][ T5194] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 128.707530][ T5194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.254'. [ 128.785907][ T5194] team0: Port device geneve0 added [ 128.909973][ T4472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.946513][ T5194] syz.1.254 (5194) used greatest stack depth: 20480 bytes left [ 129.097769][ T5214] loop4: detected capacity change from 0 to 256 [ 129.102234][ T4472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.218815][ T5218] loop0: detected capacity change from 0 to 1024 [ 129.249095][ T5218] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.259: Invalid block bitmap block 0 in block_group 0 [ 129.265028][ T4472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.298416][ T5218] Quota error (device loop0): write_blk: dquota write failed [ 129.305931][ T5218] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 129.337006][ T5218] EXT4-fs error (device loop0): ext4_acquire_dquot:6809: comm syz.0.259: Failed to acquire dquot type 0 [ 129.354521][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.380301][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.409890][ T5221] netlink: 'syz.1.260': attribute type 2 has an invalid length. [ 129.419054][ T5221] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 129.427835][ T5218] EXT4-fs error (device loop0): ext4_free_blocks:6205: comm syz.0.259: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.449050][ T5221] netlink: 'syz.1.260': attribute type 2 has an invalid length. [ 129.458540][ T5221] netlink: 'syz.1.260': attribute type 2 has an invalid length. [ 129.466684][ T5221] netlink: 'syz.1.260': attribute type 1 has an invalid length. [ 129.634075][ T4943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.639044][ T5218] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.259: Invalid inode bitmap blk 0 in block_group 0 [ 129.654883][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6845: comm kworker/u4:4: Failed to release dquot type 0 [ 129.751833][ T5218] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 129.793360][ T5218] EXT4-fs (loop0): 1 orphan inode deleted [ 129.832806][ T5218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 129.896743][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 129.947439][ T5180] chnl_net:caif_netlink_parms(): no params data found [ 130.240058][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 130.504339][ T5249] loop1: detected capacity change from 0 to 2048 [ 130.563401][ T5249] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.610536][ T5249] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.714490][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.743523][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.765809][ T5180] device bridge_slave_0 entered promiscuous mode [ 130.868715][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.875891][ T5180] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.923156][ T5180] device bridge_slave_1 entered promiscuous mode [ 130.990805][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 131.199963][ T5180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.252608][ T5270] netlink: 27 bytes leftover after parsing attributes in process `syz.0.268'. [ 131.332307][ T5180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.478950][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 131.478964][ T27] audit: type=1326 audit(1764104432.881:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 131.484137][ T5180] team0: Port device team_slave_0 added [ 131.494416][ T27] audit: type=1326 audit(1764104432.891:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 131.507517][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.549076][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.568441][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.589970][ T27] audit: type=1326 audit(1764104432.891:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 131.618698][ T27] audit: type=1326 audit(1764104432.891:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 131.666115][ T5180] team0: Port device team_slave_1 added [ 131.676343][ T27] audit: type=1326 audit(1764104432.891:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5275 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 131.727716][ T5280] netlink: 7 bytes leftover after parsing attributes in process `syz.0.270'. [ 131.788301][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.837613][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.860825][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.891362][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.926137][ T4943] device veth0_vlan entered promiscuous mode [ 131.978440][ T4277] Bluetooth: hci3: command 0x041b tx timeout [ 131.980174][ T5283] loop1: detected capacity change from 0 to 1024 [ 132.045185][ T4943] device veth1_vlan entered promiscuous mode [ 132.069404][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.085110][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.111042][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.142157][ T5283] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.152585][ T5283] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.188827][ T5283] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.271: Freeing blocks not in datazone - block = 0, count = 16 [ 132.205786][ T5180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.268371][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 132.360800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.361499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.367485][ T5180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.367500][ T5180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.367525][ T5180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.508462][ T5293] 9pnet_fd: Insufficient options for proto=fd [ 132.535529][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 132.573404][ T5295] device batadv0 entered promiscuous mode [ 132.582689][ T5295] device macvtap1 entered promiscuous mode [ 132.598446][ T5295] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 132.611986][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.623232][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.623311][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.660928][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.720135][ T5180] device hsr_slave_0 entered promiscuous mode [ 132.731632][ T5180] device hsr_slave_1 entered promiscuous mode [ 132.741085][ T5180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.756201][ T5180] Cannot create hsr debugfs directory [ 132.816892][ T5296] device batadv0 left promiscuous mode [ 133.598522][ T4943] device veth0_macvtap entered promiscuous mode [ 133.688912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.780363][ T4943] device veth1_macvtap entered promiscuous mode [ 133.804866][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 133.884306][ T5311] bridge1: port 1(vlan2) entered blocking state [ 133.910860][ T5313] loop4: detected capacity change from 0 to 2048 [ 133.915853][ T5311] bridge1: port 1(vlan2) entered disabled state [ 133.950292][ T5311] device vlan2 entered promiscuous mode [ 133.978564][ T5311] device bridge0 entered promiscuous mode [ 134.056711][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 134.115302][ T5319] loop0: detected capacity change from 0 to 164 [ 134.212102][ T5319] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.254336][ T5321] loop4: detected capacity change from 0 to 512 [ 134.277622][ T5319] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.287333][ T5323] netlink: 'syz.1.285': attribute type 2 has an invalid length. [ 134.295031][ T5323] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 134.321218][ T5319] Symlink component flag not implemented [ 134.336717][ T5319] Symlink component flag not implemented [ 134.343908][ T5323] netlink: 'syz.1.285': attribute type 2 has an invalid length. [ 134.344826][ T5321] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 134.360041][ T5319] Symlink component flag not implemented (7) [ 134.373675][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.386173][ T5323] netlink: 'syz.1.285': attribute type 2 has an invalid length. [ 134.400542][ T5319] Symlink component flag not implemented (116) [ 134.420117][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.430410][ T5323] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 134.456125][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.488805][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.521608][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.582710][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.594606][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.613094][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.616958][ T5328] loop1: detected capacity change from 0 to 512 [ 134.625869][ T4943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.660750][ T5328] EXT4-fs: Ignoring removed i_version option [ 134.673852][ T5328] EXT4-fs: Ignoring removed bh option [ 134.746233][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.751444][ T5328] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.780713][ T5328] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.819150][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.827619][ T4472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.849290][ T4472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.935830][ T5337] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 134.956825][ T4472] device bridge_slave_1 left promiscuous mode [ 134.964484][ T4472] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.067207][ T4472] device bridge_slave_0 left promiscuous mode [ 135.095605][ T4472] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.264324][ T4472] device veth1_macvtap left promiscuous mode [ 135.277864][ T4472] device veth0_macvtap left promiscuous mode [ 135.300752][ T4472] device veth1_vlan left promiscuous mode [ 135.310830][ T4472] device veth0_vlan left promiscuous mode [ 136.136540][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 136.543998][ T4472] team0 (unregistering): Port device team_slave_1 removed [ 136.589238][ T4472] team0 (unregistering): Port device team_slave_0 removed [ 136.630752][ T4472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.673755][ T4472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.111064][ T4472] bond0 (unregistering): Released all slaves [ 137.210696][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.220783][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.237220][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.248639][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.261970][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.273088][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.283290][ T4943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.294215][ T4943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.305959][ T4943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.334974][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.377597][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.442047][ T4943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.466544][ T4943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.475770][ T4943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.484845][ T4943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.566986][ T5328] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.618005][ T5328] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.620713][ T5366] netlink: 204 bytes leftover after parsing attributes in process `syz.4.292'. [ 137.709811][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.726614][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.823307][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.828290][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.849581][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.914266][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.962955][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 138.041937][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 138.334537][ T27] audit: type=1326 audit(1764104439.731:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 138.446517][ T27] audit: type=1326 audit(1764104439.731:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 138.568239][ T27] audit: type=1326 audit(1764104439.731:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 138.677026][ T27] audit: type=1326 audit(1764104439.731:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 138.766579][ T27] audit: type=1326 audit(1764104439.731:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 138.808969][ T5180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.863538][ T5180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 138.901457][ T27] audit: type=1326 audit(1764104439.761:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 138.918303][ T5180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 138.984740][ T27] audit: type=1326 audit(1764104439.761:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 139.021836][ T5180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.074669][ T27] audit: type=1326 audit(1764104439.781:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 139.099749][ T5398] loop5: detected capacity change from 0 to 512 [ 139.190033][ T27] audit: type=1326 audit(1764104439.781:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 139.241777][ T5398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 139.323516][ T5398] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.335144][ T27] audit: type=1326 audit(1764104439.781:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5379 comm="syz.5.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 139.967385][ T5180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.179006][ T4943] EXT4-fs (loop5): unmounting filesystem. [ 140.477949][ T5180] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.523544][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.537587][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.583743][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.617971][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.647686][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.654919][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.696162][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.715997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.724301][ T5423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 140.731314][ T5423] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.749113][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.756370][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.768305][ T5423] vhci_hcd vhci_hcd.0: Device attached [ 140.785041][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.800955][ T5424] vhci_hcd: connection closed [ 140.811505][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.824330][ T33] vhci_hcd: stop threads [ 140.830188][ T33] vhci_hcd: release socket [ 140.848946][ T33] vhci_hcd: disconnect device [ 140.859740][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.873136][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.892825][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.928152][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.937766][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.952127][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.972112][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.981233][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.005459][ T5180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.023946][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.037171][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.059167][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.217706][ T5435] can0: slcan on ptm0. [ 141.767655][ T5438] can0 (unregistered): slcan off ptm0. [ 142.393696][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.411303][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.432285][ T5180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.544749][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.565476][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.830901][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.153869][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.651010][ T5180] device veth0_vlan entered promiscuous mode [ 143.721063][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.772884][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.814843][ T5180] device veth1_vlan entered promiscuous mode [ 143.962031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.004291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.047920][ T5180] device veth0_macvtap entered promiscuous mode [ 144.088585][ T5180] device veth1_macvtap entered promiscuous mode [ 144.195500][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.242125][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.284291][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.326329][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.377618][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.423278][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.474263][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.518250][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.566058][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.603825][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.633247][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.670152][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.717421][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.756687][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.791853][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.822595][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.852322][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.881045][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.915554][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.942896][ T5180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.973908][ T5180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.005681][ T5180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.038805][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.050165][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.074649][ T5180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.139357][ T5180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.148390][ T5180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.157572][ T5180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.458288][ T4472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.458581][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 145.458594][ T27] audit: type=1326 audit(1764104446.861:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 145.490644][ T4472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.558025][ T27] audit: type=1326 audit(1764104446.901:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 145.614850][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.631230][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.646746][ T27] audit: type=1326 audit(1764104446.901:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 145.694596][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.716874][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.735820][ T27] audit: type=1326 audit(1764104446.911:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 145.845770][ T27] audit: type=1326 audit(1764104446.911:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 145.950051][ T27] audit: type=1326 audit(1764104446.911:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5491 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ddb98f749 code=0x7ffc0000 [ 146.038928][ T5504] netlink: 300 bytes leftover after parsing attributes in process `syz.3.247'. [ 146.061380][ T27] audit: type=1326 audit(1764104447.321:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5500 comm="syz.1.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f05b8f749 code=0x0 [ 146.066538][ T5505] loop0: detected capacity change from 0 to 512 [ 146.134788][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.326'. [ 146.196115][ T5505] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 146.296308][ T5512] loop5: detected capacity change from 0 to 1024 [ 146.352526][ T5512] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 146.405113][ T5512] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 146.466056][ T5512] JBD2: no valid journal superblock found [ 146.495203][ T5512] EXT4-fs (loop5): error loading journal [ 146.703341][ T5521] netlink: 332 bytes leftover after parsing attributes in process `syz.3.329'. [ 146.709031][ T5519] loop0: detected capacity change from 0 to 764 [ 146.827566][ T5519] rock: directory entry would overflow storage [ 146.845186][ T5519] rock: sig=0x4f50, size=4, remaining=3 [ 146.871693][ T5519] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 148.058472][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 148.471024][ T5551] netlink: 'syz.1.337': attribute type 2 has an invalid length. [ 148.491734][ T5551] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 148.504038][ T5551] netlink: 'syz.1.337': attribute type 2 has an invalid length. [ 148.517020][ T5551] netlink: 'syz.1.337': attribute type 2 has an invalid length. [ 148.839083][ T5558] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 149.850646][ T5572] loop4: detected capacity change from 0 to 512 [ 149.909658][ T5572] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.081077][ T5572] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 150.202184][ T5572] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.346: bg 0: block 248: padding at end of block bitmap is not set [ 150.235689][ T5572] Quota error (device loop4): write_blk: dquota write failed [ 150.266593][ T5572] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 150.308223][ T5572] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.346: Failed to acquire dquot type 1 [ 150.380121][ T5572] EXT4-fs (loop4): 1 truncate cleaned up [ 150.401719][ T5572] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.546113][ T4264] EXT4-fs (loop4): unmounting filesystem. [ 150.664968][ T5595] netlink: 'syz.1.353': attribute type 2 has an invalid length. [ 150.707003][ T27] audit: type=1326 audit(1764104452.111:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 150.715029][ T5595] netlink: 'syz.1.353': attribute type 1 has an invalid length. [ 150.797336][ T27] audit: type=1326 audit(1764104452.131:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 150.802336][ T5595] netlink: 'syz.1.353': attribute type 2 has an invalid length. [ 150.914035][ T27] audit: type=1326 audit(1764104452.131:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 150.955170][ T5595] netlink: 'syz.1.353': attribute type 2 has an invalid length. [ 151.027363][ T27] audit: type=1326 audit(1764104452.131:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 151.032644][ T5605] netlink: 'syz.4.357': attribute type 1 has an invalid length. [ 151.070771][ T27] audit: type=1326 audit(1764104452.131:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 151.107247][ T27] audit: type=1326 audit(1764104452.131:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 151.146099][ T5608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.355'. [ 151.165452][ T27] audit: type=1326 audit(1764104452.131:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 151.259714][ T27] audit: type=1326 audit(1764104452.131:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 151.668245][ T27] audit: type=1326 audit(1764104452.131:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 152.081310][ T27] audit: type=1326 audit(1764104452.131:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8e58f749 code=0x7ffc0000 [ 152.390941][ T5629] loop0: detected capacity change from 0 to 512 [ 152.483581][ T5629] EXT4-fs (loop0): orphan cleanup on readonly fs [ 152.534414][ T5629] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.364: bad orphan inode 13 [ 152.582275][ T5629] ext4_test_bit(bit=12, block=18) = 1 [ 152.606185][ T5629] is_bad_inode(inode)=0 [ 152.636556][ T5629] NEXT_ORPHAN(inode)=2130706432 [ 152.641496][ T5629] max_ino=32 [ 152.644729][ T5629] i_nlink=1 [ 152.731930][ T5629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.762010][ T5643] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 152.775548][ T5646] netlink: 'syz.5.371': attribute type 2 has an invalid length. [ 152.785242][ T5629] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 152.917569][ T5629] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 153.003816][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 153.189110][ T5648] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 153.742708][ T5653] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 154.072844][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 154.226040][ T5676] validate_nla: 4 callbacks suppressed [ 154.226058][ T5676] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 154.304210][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 154.419553][ T4308] Process accounting resumed [ 154.430391][ T5685] loop5: detected capacity change from 0 to 2048 [ 154.464378][ T5685] EXT4-fs: Ignoring removed i_version option [ 154.504264][ T5685] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 154.632715][ T5693] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 154.750393][ T5697] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 154.766601][ T5697] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 154.785610][ T5697] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 154.806641][ T5697] netlink: 'syz.1.386': attribute type 2 has an invalid length. [ 155.812031][ T5716] loop0: detected capacity change from 0 to 1024 [ 155.819631][ T5716] EXT4-fs: Ignoring removed oldalloc option [ 155.873949][ T5722] loop5: detected capacity change from 0 to 1024 [ 155.882052][ T5722] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.893552][ T5722] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 155.894489][ T5716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.918746][ T5716] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.929612][ T5722] JBD2: no valid journal superblock found [ 155.935383][ T5722] EXT4-fs (loop5): error loading journal [ 156.084290][ T5731] loop1: detected capacity change from 0 to 512 [ 156.092803][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 156.145882][ T5731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.155477][ T27] kauditd_printk_skb: 67 callbacks suppressed [ 156.155492][ T27] audit: type=1326 audit(1764104457.561:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.213109][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.227723][ T5742] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 156.227746][ T5731] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.248590][ T27] audit: type=1326 audit(1764104457.591:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.255904][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.271047][ T5742] netlink: 'syz.0.403': attribute type 1 has an invalid length. [ 156.271064][ T5742] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 156.271077][ T5742] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 156.308107][ T27] audit: type=1326 audit(1764104457.591:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.333059][ T27] audit: type=1326 audit(1764104457.591:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.336725][ T5731] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 156.356023][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.386127][ T27] audit: type=1326 audit(1764104457.591:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.410190][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.421325][ T27] audit: type=1326 audit(1764104457.591:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.444298][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.452092][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.460083][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.467872][ T27] audit: type=1326 audit(1764104457.591:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.490757][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.498505][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.506208][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.514846][ T27] audit: type=1326 audit(1764104457.601:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.539812][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.554086][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.562334][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.574738][ T27] audit: type=1326 audit(1764104457.601:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.597670][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.605207][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.613348][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.620362][ T27] audit: type=1326 audit(1764104457.601:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.5.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d978f749 code=0x7ffc0000 [ 156.621675][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.659038][ T4308] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 156.700008][ T4308] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 156.701745][ T4263] EXT4-fs (loop1): unmounting filesystem. [ 156.949236][ T5752] loop5: detected capacity change from 0 to 2048 [ 156.982883][ T5764] loop3: detected capacity change from 0 to 512 [ 157.003954][ T5752] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 157.064828][ T5752] EXT4-fs error (device loop5): ext4_ext_precache:627: inode #2: comm syz.5.406: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 157.127807][ T4943] EXT4-fs (loop5): unmounting filesystem. [ 157.473549][ T5776] loop0: detected capacity change from 0 to 512 [ 157.666038][ T5764] device syzkaller1 entered promiscuous mode [ 157.725622][ T5776] [ 157.728449][ T5776] ====================================================== [ 157.735492][ T5776] WARNING: possible circular locking dependency detected [ 157.742717][ T5776] syzkaller #0 Not tainted [ 157.747153][ T5776] ------------------------------------------------------ [ 157.754192][ T5776] syz.0.411/5776 is trying to acquire lock: [ 157.760107][ T5776] ffff888075f6cb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1c0/0x2e50 [ 157.770258][ T5776] [ 157.770258][ T5776] but task is already holding lock: [ 157.777645][ T5776] ffff88802423a650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x436/0x1100 [ 157.786754][ T5776] [ 157.786754][ T5776] which lock already depends on the new lock. [ 157.786754][ T5776] [ 157.797270][ T5776] [ 157.797270][ T5776] the existing dependency chain (in reverse order) is: [ 157.806314][ T5776] [ 157.806314][ T5776] -> #1 (sb_internal){++++}-{0:0}: [ 157.813652][ T5776] percpu_down_read+0x44/0x1a0 [ 157.818972][ T5776] ext4_evict_inode+0x436/0x1100 [ 157.824457][ T5776] evict+0x485/0x870 [ 157.828888][ T5776] ext4_ext_migrate+0xc0a/0xe50 [ 157.834280][ T5776] ext4_ioctl+0x1c1e/0x3dd0 [ 157.839317][ T5776] __se_sys_ioctl+0xfa/0x170 [ 157.844445][ T5776] do_syscall_64+0x4c/0xa0 [ 157.849397][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.855832][ T5776] [ 157.855832][ T5776] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 157.864709][ T5776] __lock_acquire+0x2cf8/0x7c50 [ 157.870108][ T5776] lock_acquire+0x1b4/0x490 [ 157.875149][ T5776] percpu_down_read+0x44/0x1a0 [ 157.880437][ T5776] ext4_writepages+0x1c0/0x2e50 [ 157.885813][ T5776] do_writepages+0x3b7/0x610 [ 157.891020][ T5776] __writeback_single_inode+0x156/0x1160 [ 157.897206][ T5776] writeback_single_inode+0x221/0x8b0 [ 157.903193][ T5776] write_inode_now+0x15d/0x1d0 [ 157.908498][ T5776] iput+0x613/0x980 [ 157.912849][ T5776] ext4_xattr_block_set+0x2736/0x32a0 [ 157.918748][ T5776] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 157.925171][ T5776] __ext4_expand_extra_isize+0x301/0x3e0 [ 157.931330][ T5776] __ext4_mark_inode_dirty+0x47f/0x770 [ 157.937325][ T5776] ext4_evict_inode+0xa73/0x1100 [ 157.942800][ T5776] evict+0x485/0x870 [ 157.947222][ T5776] ext4_orphan_cleanup+0xbd3/0x1400 [ 157.952951][ T5776] ext4_fill_super+0x7bdf/0x8150 [ 157.958416][ T5776] get_tree_bdev+0x3f1/0x610 [ 157.963531][ T5776] vfs_get_tree+0x88/0x270 [ 157.968490][ T5776] do_new_mount+0x24a/0xa40 [ 157.973529][ T5776] __se_sys_mount+0x2d6/0x3c0 [ 157.978740][ T5776] do_syscall_64+0x4c/0xa0 [ 157.983685][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.990106][ T5776] [ 157.990106][ T5776] other info that might help us debug this: [ 157.990106][ T5776] [ 158.000355][ T5776] Possible unsafe locking scenario: [ 158.000355][ T5776] [ 158.007805][ T5776] CPU0 CPU1 [ 158.013169][ T5776] ---- ---- [ 158.018534][ T5776] lock(sb_internal); [ 158.022608][ T5776] lock(&sbi->s_writepages_rwsem); [ 158.030352][ T5776] lock(sb_internal); [ 158.036951][ T5776] lock(&sbi->s_writepages_rwsem); [ 158.042157][ T5776] [ 158.042157][ T5776] *** DEADLOCK *** [ 158.042157][ T5776] [ 158.050389][ T5776] 3 locks held by syz.0.411/5776: [ 158.055412][ T5776] #0: ffff88802423a0e0 (&type->s_umount_key#27/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x930 [ 158.065532][ T5776] #1: ffff88802423a650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x436/0x1100 [ 158.075033][ T5776] #2: ffff888071679ee0 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 158.085357][ T5776] [ 158.085357][ T5776] stack backtrace: [ 158.091261][ T5776] CPU: 1 PID: 5776 Comm: syz.0.411 Not tainted syzkaller #0 [ 158.098586][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.108654][ T5776] Call Trace: [ 158.111941][ T5776] [ 158.114882][ T5776] dump_stack_lvl+0x168/0x22e [ 158.119589][ T5776] ? load_image+0x3b0/0x3b0 [ 158.124129][ T5776] ? show_regs_print_info+0x12/0x12 [ 158.129342][ T5776] ? print_circular_bug+0x12b/0x1a0 [ 158.134565][ T5776] check_noncircular+0x274/0x310 [ 158.139519][ T5776] ? add_chain_block+0x940/0x940 [ 158.144474][ T5776] ? _find_first_zero_bit+0xcf/0x100 [ 158.149866][ T5776] ? add_lock_to_list+0x191/0x280 [ 158.154903][ T5776] __lock_acquire+0x2cf8/0x7c50 [ 158.159777][ T5776] ? verify_lock_unused+0x140/0x140 [ 158.164989][ T5776] ? __lock_acquire+0x13c0/0x7c50 [ 158.170037][ T5776] lock_acquire+0x1b4/0x490 [ 158.174555][ T5776] ? ext4_writepages+0x1c0/0x2e50 [ 158.179589][ T5776] ? __might_sleep+0xd0/0xd0 [ 158.184206][ T5776] ? read_lock_is_recursive+0x10/0x10 [ 158.189589][ T5776] ? __lock_acquire+0x12e5/0x7c50 [ 158.194638][ T5776] ? mark_lock+0x94/0x320 [ 158.198982][ T5776] percpu_down_read+0x44/0x1a0 [ 158.203754][ T5776] ? ext4_writepages+0x1c0/0x2e50 [ 158.209131][ T5776] ext4_writepages+0x1c0/0x2e50 [ 158.213988][ T5776] ? __lock_acquire+0x13c0/0x7c50 [ 158.219029][ T5776] ? verify_lock_unused+0x140/0x140 [ 158.224242][ T5776] ? mark_lock+0x94/0x320 [ 158.228598][ T5776] ? ext4_read_folio+0x370/0x370 [ 158.233539][ T5776] ? __lock_acquire+0x13c0/0x7c50 [ 158.238584][ T5776] ? __lock_acquire+0x7c50/0x7c50 [ 158.243620][ T5776] ? do_raw_spin_lock+0x11d/0x280 [ 158.248663][ T5776] ? do_raw_spin_unlock+0x11d/0x230 [ 158.253895][ T5776] ? ext4_read_folio+0x370/0x370 [ 158.258838][ T5776] do_writepages+0x3b7/0x610 [ 158.263441][ T5776] ? __writepage+0x130/0x130 [ 158.268042][ T5776] ? writeback_single_inode+0x216/0x8b0 [ 158.273687][ T5776] ? __lock_acquire+0x7c50/0x7c50 [ 158.279414][ T5776] ? do_raw_spin_lock+0x11d/0x280 [ 158.284480][ T5776] ? __ext4_expand_extra_isize+0x301/0x3e0 [ 158.290294][ T5776] __writeback_single_inode+0x156/0x1160 [ 158.295943][ T5776] writeback_single_inode+0x221/0x8b0 [ 158.301330][ T5776] ? write_inode_now+0x1d0/0x1d0 [ 158.306278][ T5776] write_inode_now+0x15d/0x1d0 [ 158.311052][ T5776] ? bdi_split_work_to_wbs+0x890/0x890 [ 158.316538][ T5776] ? rcu_is_watching+0x11/0xa0 [ 158.321318][ T5776] ? do_raw_spin_unlock+0x11d/0x230 [ 158.326531][ T5776] iput+0x613/0x980 [ 158.330348][ T5776] ext4_xattr_block_set+0x2736/0x32a0 [ 158.335728][ T5776] ? __might_sleep+0xd0/0xd0 [ 158.340343][ T5776] ? xattr_find_entry+0x12b/0x2f0 [ 158.345384][ T5776] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 158.350855][ T5776] ? ext4_xattr_block_find+0x241/0x2b0 [ 158.356340][ T5776] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 158.362256][ T5776] __ext4_expand_extra_isize+0x301/0x3e0 [ 158.367894][ T5776] __ext4_mark_inode_dirty+0x47f/0x770 [ 158.373367][ T5776] ext4_evict_inode+0xa73/0x1100 [ 158.378316][ T5776] ? _raw_spin_unlock+0x24/0x40 [ 158.383178][ T5776] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 158.389077][ T5776] ? do_raw_spin_unlock+0x11d/0x230 [ 158.394283][ T5776] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 158.400194][ T5776] evict+0x485/0x870 [ 158.404097][ T5776] ? __lock_acquire+0x7c50/0x7c50 [ 158.409220][ T5776] ? proc_nr_inodes+0x2f0/0x2f0 [ 158.414079][ T5776] ? do_raw_spin_unlock+0x11d/0x230 [ 158.419291][ T5776] ? _raw_spin_unlock+0x24/0x40 [ 158.424154][ T5776] ? iput+0x768/0x980 [ 158.428155][ T5776] ext4_orphan_cleanup+0xbd3/0x1400 [ 158.433363][ T5776] ? ext4_orphan_del+0xb90/0xb90 [ 158.438660][ T5776] ? errseq_check_and_advance+0x62/0x120 [ 158.444391][ T5776] ext4_fill_super+0x7bdf/0x8150 [ 158.449334][ T5776] ? bdev_name+0x2c1/0x3f0 [ 158.453773][ T5776] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 158.460022][ T5776] ? snprintf+0xd7/0x120 [ 158.464279][ T5776] ? preempt_count_add+0x8d/0x190 [ 158.469404][ T5776] ? vscnprintf+0x80/0x80 [ 158.473741][ T5776] ? set_blocksize+0x1d3/0x350 [ 158.478511][ T5776] ? sb_set_blocksize+0xa5/0xe0 [ 158.483398][ T5776] get_tree_bdev+0x3f1/0x610 [ 158.487995][ T5776] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 158.494238][ T5776] vfs_get_tree+0x88/0x270 [ 158.498672][ T5776] do_new_mount+0x24a/0xa40 [ 158.503181][ T5776] __se_sys_mount+0x2d6/0x3c0 [ 158.507865][ T5776] ? __x64_sys_mount+0xc0/0xc0 [ 158.512633][ T5776] ? lockdep_hardirqs_on+0x94/0x140 [ 158.517841][ T5776] ? __x64_sys_mount+0x1c/0xc0 [ 158.522613][ T5776] do_syscall_64+0x4c/0xa0 [ 158.527047][ T5776] ? clear_bhb_loop+0x60/0xb0 [ 158.531730][ T5776] ? clear_bhb_loop+0x60/0xb0 [ 158.536413][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.542324][ T5776] RIP: 0033:0x7f9ddb990eea [ 158.546792][ T5776] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.566413][ T5776] RSP: 002b:00007f9ddc878e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.574939][ T5776] RAX: ffffffffffffffda RBX: 00007f9ddc878ef0 RCX: 00007f9ddb990eea [ 158.582919][ T5776] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9ddc878eb0 [ 158.590896][ T5776] RBP: 0000200000000180 R08: 00007f9ddc878ef0 R09: 0000000000800700 [ 158.598975][ T5776] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 158.606955][ T5776] R13: 00007f9ddc878eb0 R14: 000000000000046f R15: 000000000000002c [ 158.614934][ T5776] [ 158.618015][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.651492][ T5793] loop1: detected capacity change from 0 to 128 [ 158.654737][ T5776] ------------[ cut here ]------------ [ 158.663538][ T5776] EA inode 11 i_nlink=2 [ 158.665740][ T5776] WARNING: CPU: 0 PID: 5776 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 158.680538][ T5776] Modules linked in: [ 158.684476][ T5776] CPU: 0 PID: 5776 Comm: syz.0.411 Not tainted syzkaller #0 [ 158.691913][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.693571][ T5791] syz.1.417: attempt to access beyond end of device [ 158.693571][ T5791] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 158.702023][ T5776] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 158.702059][ T5776] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 158.702075][ T5776] RSP: 0018:ffffc900049bf200 EFLAGS: 00010246 [ 158.702092][ T5776] RAX: 1430d625ec816d00 RBX: 0000000000000002 RCX: 0000000000080000 [ 158.702105][ T5776] RDX: ffffc90005829000 RSI: 000000000007ffff RDI: 0000000000080000 [ 158.702117][ T5776] RBP: ffffc900049bf2e8 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 158.702130][ T5776] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffffc900049bf260 [ 158.702143][ T5776] R13: ffff8880717702b0 R14: dffffc0000000000 R15: ffff8880717702f0 [ 158.702156][ T5776] FS: 00007f9ddc8796c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 158.702172][ T5776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.702185][ T5776] CR2: 0000000000000000 CR3: 0000000031bcd000 CR4: 00000000003506f0 [ 158.702200][ T5776] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.702211][ T5776] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.702223][ T5776] Call Trace: [ 158.702229][ T5776] [ 158.702239][ T5776] ? ext4_xattr_block_csum+0x500/0x500 [ 158.840008][ T5776] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 158.843866][ T5798] xt_SECMARK: invalid mode: 2 [ 158.845496][ T5776] ext4_xattr_set_entry+0xb33/0x1e90 [ 158.855555][ T5776] ext4_xattr_ibody_set+0x250/0x690 [ 158.860837][ T5776] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 158.866820][ T5776] __ext4_expand_extra_isize+0x301/0x3e0 [ 158.872492][ T5776] __ext4_mark_inode_dirty+0x47f/0x770 [ 158.878041][ T5776] ext4_evict_inode+0xa73/0x1100 [ 158.883018][ T5776] ? _raw_spin_unlock+0x24/0x40 [ 158.887962][ T5776] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 158.893918][ T5776] ? do_raw_spin_unlock+0x11d/0x230 [ 158.899208][ T5776] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 158.905144][ T5776] evict+0x485/0x870 [ 158.909119][ T5776] ? __lock_acquire+0x7c50/0x7c50 [ 158.914186][ T5776] ? proc_nr_inodes+0x2f0/0x2f0 [ 158.919227][ T5776] ? do_raw_spin_unlock+0x11d/0x230 [ 158.924484][ T5776] ? _raw_spin_unlock+0x24/0x40 [ 158.929430][ T5776] ? iput+0x768/0x980 [ 158.933452][ T5776] ext4_orphan_cleanup+0xbd3/0x1400 [ 158.938754][ T5776] ? ext4_orphan_del+0xb90/0xb90 [ 158.943752][ T5776] ? errseq_check_and_advance+0x62/0x120 [ 158.949471][ T5776] ext4_fill_super+0x7bdf/0x8150 [ 158.952606][ T5801] loop5: detected capacity change from 0 to 1024 [ 158.954442][ T5776] ? bdev_name+0x2c1/0x3f0 [ 158.954491][ T5776] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 158.971593][ T5776] ? snprintf+0xd7/0x120 [ 158.975879][ T5776] ? preempt_count_add+0x8d/0x190 [ 158.980991][ T5776] ? vscnprintf+0x80/0x80 [ 158.985364][ T5776] ? set_blocksize+0x1d3/0x350 [ 158.990214][ T5776] ? sb_set_blocksize+0xa5/0xe0 [ 158.995105][ T5776] get_tree_bdev+0x3f1/0x610 [ 158.999776][ T5776] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 159.006057][ T5776] vfs_get_tree+0x88/0x270 [ 159.010557][ T5776] do_new_mount+0x24a/0xa40 [ 159.015098][ T5776] __se_sys_mount+0x2d6/0x3c0 [ 159.019850][ T5776] ? __x64_sys_mount+0xc0/0xc0 [ 159.024651][ T5776] ? lockdep_hardirqs_on+0x94/0x140 [ 159.029939][ T5776] ? __x64_sys_mount+0x1c/0xc0 [ 159.034822][ T5776] do_syscall_64+0x4c/0xa0 [ 159.039322][ T5776] ? clear_bhb_loop+0x60/0xb0 [ 159.044044][ T5776] ? clear_bhb_loop+0x60/0xb0 [ 159.048687][ T5801] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 159.048790][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.063100][ T5776] RIP: 0033:0x7f9ddb990eea [ 159.065586][ T5801] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.067562][ T5776] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.067582][ T5776] RSP: 002b:00007f9ddc878e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.067605][ T5776] RAX: ffffffffffffffda RBX: 00007f9ddc878ef0 RCX: 00007f9ddb990eea [ 159.067621][ T5776] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9ddc878eb0 [ 159.122094][ T5776] RBP: 0000200000000180 R08: 00007f9ddc878ef0 R09: 0000000000800700 [ 159.130107][ T5776] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 159.138138][ T5776] R13: 00007f9ddc878eb0 R14: 000000000000046f R15: 000000000000002c [ 159.146137][ T5776] [ 159.149221][ T5776] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.156525][ T5776] CPU: 0 PID: 5776 Comm: syz.0.411 Not tainted syzkaller #0 [ 159.163825][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.173877][ T5776] Call Trace: [ 159.177156][ T5776] [ 159.180097][ T5776] dump_stack_lvl+0x168/0x22e [ 159.184796][ T5776] ? memcpy+0x3c/0x60 [ 159.188816][ T5776] ? show_regs_print_info+0x12/0x12 [ 159.194022][ T5776] ? load_image+0x3b0/0x3b0 [ 159.198541][ T5776] panic+0x2c9/0x710 [ 159.202454][ T5776] ? bpf_jit_dump+0xd0/0xd0 [ 159.206976][ T5776] __warn+0x2f8/0x4f0 [ 159.210986][ T5776] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 159.216986][ T5776] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 159.222973][ T5776] report_bug+0x2ba/0x4f0 [ 159.227308][ T5776] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 159.233298][ T5776] handle_bug+0x3a/0x70 [ 159.237460][ T5776] exc_invalid_op+0x16/0x40 [ 159.241973][ T5776] asm_exc_invalid_op+0x16/0x20 [ 159.246837][ T5776] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 159.253437][ T5776] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 63 ef 9c ff 49 8b 37 48 c7 c7 40 91 a0 8a 89 da e8 32 e5 18 ff <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 159.273046][ T5776] RSP: 0018:ffffc900049bf200 EFLAGS: 00010246 [ 159.279115][ T5776] RAX: 1430d625ec816d00 RBX: 0000000000000002 RCX: 0000000000080000 [ 159.287101][ T5776] RDX: ffffc90005829000 RSI: 000000000007ffff RDI: 0000000000080000 [ 159.295089][ T5776] RBP: ffffc900049bf2e8 R08: dffffc0000000000 R09: ffffed10171c4f34 [ 159.303064][ T5776] R10: ffffed10171c4f34 R11: 1ffff110171c4f33 R12: ffffc900049bf260 [ 159.311042][ T5776] R13: ffff8880717702b0 R14: dffffc0000000000 R15: ffff8880717702f0 [ 159.319028][ T5776] ? ext4_xattr_block_csum+0x500/0x500 [ 159.324504][ T5776] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 159.329986][ T5776] ext4_xattr_set_entry+0xb33/0x1e90 [ 159.335303][ T5776] ext4_xattr_ibody_set+0x250/0x690 [ 159.340510][ T5776] ext4_expand_extra_isize_ea+0x10e5/0x19b0 [ 159.346427][ T5776] __ext4_expand_extra_isize+0x301/0x3e0 [ 159.352065][ T5776] __ext4_mark_inode_dirty+0x47f/0x770 [ 159.357537][ T5776] ext4_evict_inode+0xa73/0x1100 [ 159.362493][ T5776] ? _raw_spin_unlock+0x24/0x40 [ 159.367362][ T5776] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 159.373260][ T5776] ? do_raw_spin_unlock+0x11d/0x230 [ 159.378469][ T5776] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 159.384367][ T5776] evict+0x485/0x870 [ 159.388265][ T5776] ? __lock_acquire+0x7c50/0x7c50 [ 159.393386][ T5776] ? proc_nr_inodes+0x2f0/0x2f0 [ 159.398238][ T5776] ? do_raw_spin_unlock+0x11d/0x230 [ 159.403443][ T5776] ? _raw_spin_unlock+0x24/0x40 [ 159.408304][ T5776] ? iput+0x768/0x980 [ 159.412291][ T5776] ext4_orphan_cleanup+0xbd3/0x1400 [ 159.417503][ T5776] ? ext4_orphan_del+0xb90/0xb90 [ 159.422448][ T5776] ? errseq_check_and_advance+0x62/0x120 [ 159.428093][ T5776] ext4_fill_super+0x7bdf/0x8150 [ 159.433051][ T5776] ? bdev_name+0x2c1/0x3f0 [ 159.437495][ T5776] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 159.443741][ T5776] ? snprintf+0xd7/0x120 [ 159.447995][ T5776] ? preempt_count_add+0x8d/0x190 [ 159.453024][ T5776] ? vscnprintf+0x80/0x80 [ 159.457364][ T5776] ? set_blocksize+0x1d3/0x350 [ 159.462139][ T5776] ? sb_set_blocksize+0xa5/0xe0 [ 159.467032][ T5776] get_tree_bdev+0x3f1/0x610 [ 159.471665][ T5776] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 159.477927][ T5776] vfs_get_tree+0x88/0x270 [ 159.482355][ T5776] do_new_mount+0x24a/0xa40 [ 159.486874][ T5776] __se_sys_mount+0x2d6/0x3c0 [ 159.491572][ T5776] ? __x64_sys_mount+0xc0/0xc0 [ 159.496537][ T5776] ? lockdep_hardirqs_on+0x94/0x140 [ 159.501747][ T5776] ? __x64_sys_mount+0x1c/0xc0 [ 159.506527][ T5776] do_syscall_64+0x4c/0xa0 [ 159.510969][ T5776] ? clear_bhb_loop+0x60/0xb0 [ 159.515695][ T5776] ? clear_bhb_loop+0x60/0xb0 [ 159.520421][ T5776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.526330][ T5776] RIP: 0033:0x7f9ddb990eea [ 159.530846][ T5776] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.550462][ T5776] RSP: 002b:00007f9ddc878e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.558888][ T5776] RAX: ffffffffffffffda RBX: 00007f9ddc878ef0 RCX: 00007f9ddb990eea [ 159.566870][ T5776] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9ddc878eb0 [ 159.575106][ T5776] RBP: 0000200000000180 R08: 00007f9ddc878ef0 R09: 0000000000800700 [ 159.583257][ T5776] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 159.591230][ T5776] R13: 00007f9ddc878eb0 R14: 000000000000046f R15: 000000000000002c [ 159.599214][ T5776] [ 159.602460][ T5776] Kernel Offset: disabled [ 159.606789][ T5776] Rebooting in 86400 seconds..