last executing test programs: 4.209273984s ago: executing program 0 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x1, 0x6fd, &(0x7f0000000c40)="$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") 3.140063983s ago: executing program 0 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 2.814480955s ago: executing program 0 (id=58): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x41) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) 2.741216954s ago: executing program 3 (id=59): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4044) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r1, &(0x7f00000002c0)="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", 0xfc) 2.673307213s ago: executing program 0 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x0) 2.525059782s ago: executing program 3 (id=62): socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x217a, &(0x7f0000000280)={0x0, 0x334a, 0x100, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 2.46764359s ago: executing program 4 (id=65): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000280)}) io_uring_setup(0xad5, 0x0) mq_open(0x0, 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) 2.380953041s ago: executing program 1 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x4, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe7, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x0, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0xffffffff, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x80000000, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8004, 0xfffffff7, 0x0, 0x0, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x7f, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x8, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x89, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x6, 0x7, 0x7, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x7ff, 0x6, 0xf, 0xffffffff, 0xa, 0x723, 0x7e, 0x9, 0x9, 0x4, 0x8, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x40000000, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x6, 0x64e8, 0x8, 0x8, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 2.317114279s ago: executing program 3 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.096304658s ago: executing program 1 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) 1.367122322s ago: executing program 2 (id=69): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) kexec_load(0x3e00, 0x0, 0x0, 0x0) 1.109235146s ago: executing program 3 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) unshare(0xa000400) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102389, &(0x7f0000000100)=0x41) 1.109104996s ago: executing program 1 (id=71): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x41) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) 1.084313789s ago: executing program 2 (id=72): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=@udp=r1}, 0x20) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 1.027327597s ago: executing program 4 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060086dd"], 0x24}}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x14000000}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/155, 0x9b, 0x1, &(0x7f00000005c0)=""/178, 0xb2}, &(0x7f0000000200)=0x40) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(0x0, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x0, 0xfffc, 0x1000}, {0x4, 0x5, 0x1000}], 0x2) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 977.208633ms ago: executing program 3 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') 897.315823ms ago: executing program 1 (id=75): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bd, &(0x7f0000000000)="$eJzs3V+IHHcdAPDv7u2m5hJNK7Waapur1Tb2z17urgRTC5JHbVNq/zwZiUeyuYTbuz1v97B3tXClCBWMHNUnfVIQVHyICAriQ0Gsj4JvSqlgESVwFGtRNOrKzO6GTW/vX+/PkJvPB+Zu5jez9/vOfvnOzvwyOwkgt4aSH4WIgxHxakQcai9ev8FQ+9fS2OULyVSIVuupNwvpds+PXb7Q3bT7ugPJj2LEh5Jfv444UF7Zb2N+YXK8VqvOdpaHm1Mzw435hQcvTo1PVCeq06NjI8ePjR4fOX5i2/b1h8+9/NnXn3vs6qXlwe+/dvjIP5N4D3bW9e7HdhmKoc57Uo6P9q4oRHx6uzvLyEBElCLiA1kHwqad/t3Xn+nmr5zW/6EYSJciBsdOv3UoLj2SdYzAzmmlVls70AL2skJkHQGQje4nfXL9251269xjcq9cBN/Alk+2LwCf74ztLF3LfymKnW3K23N9//d3Nhz5a8RQNO+7/Jm7vppMsUPjMKxu8YVIB+pW1n8hHRu7ubPd3RFxNCI+FhEfj4h7IuLeLfb99BeS/P/xm71t8r+7Npr/T0REJSLui4j7I+KBiHhwi33fdirJ/4Ev9rbJf37c/rmsIyBLv30p6whIj//HSqV+x//iFv/2Xeusb6X/rrj4Rm+b439+PPlU1hGQpcePZx0BWfrOm1lHwCsn2xdzKz//i3Fbz3bJ/Afbl4pxODl3j4gPR8RHIuKOiLgzIo507yfaoK88mmxfqfa2rfz8L17Zyv6xtuWTEY/03Nu11JP/jpsHOkvvTccDyoXzF2vVYxHxvnRMqHxTsjyyRh9fW/zVo/3af3xHkv9PPd4d/0umpP/uWGAnjiulm65/3bnx5vhW95u25Rcibi/1y3+hcydQ+76+VkQMv8s+Xjz6k9/0a//kk0n+73lg7fyzk1rfbY/j9st/V2Ht+zOH0+PBcPeosNKLceulfu1PXE3y/8Yf5D87Sf0Prp3/9Ph/7X7dxub7KC1d+Ubf9qkk/3/+5bs5/u8rPJ0GuK/T9ux4szk7ErGv8NjK9tHNx7xXdd+P7vuV5P/o3f0//9/feU3yhiaV/d+I+F9E/Csi/h0RVyPiPxHxt4h4a40+f/Hywz/v1z72TJL/v7yq/rOT5P/cOvVfuK7+Nz/z7TtPfLlf3z/4XpL/wcr69f9QGszRTovzv/VtNEFZxwkAAAAAAADA9iimz8ArFCvX5ovFSqX9DL9bY7BYqzea95+vz02fi873QcvF7p1eh3ruBx3pfFe0uzz6juWxiLglIl4a2J8uV87Wa+ey3nnIqYMRr//0S2f3HVil/hOvDWQdJbATkvo//62BxWT+bXUOuZLU/4/enkq/l6X+IV/UP+SX+of8Uv+QXxur//27GhOwO3z+Q36pf8gv9Q/5pf4hv3rrH8inJ06dSqZW97mf0/WJi5MXZk6MHqtMzZ2tnK3PzlQm6vWJ9Bs7U+v/vVq9PjPyUMw9O9ysNprDjfmFM1P1uenmmfS50Weq5V3YJ2B9//jT5392y5FXfl+IiMWH96dT9Dw7W63C3ubSH/KrlHUAQGac4wOFdda/Z7UVp7c/FmB3bPX/+AduXPceNv4PeWX8H/LL+D/kl3N8wPg/5I/xf8iv6mxjfmFyvFZbMZN1ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+dSYX5gcr9Wqs2bMmMndzP8DAAD//8tQSE4=") 829.896272ms ago: executing program 2 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x50}}, 0x0) 681.408171ms ago: executing program 0 (id=77): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}, {&(0x7f0000000580)="5a0b5196720d167ae97859803b2d3c8ca38326bf010b369f844dab5a1bbd67c32bdc9ac31f99afcdc8da28eb6a32f75f5b601ac640620175b0", 0x39}, {0x0}], 0x3}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x4008084) 681.278791ms ago: executing program 4 (id=78): r0 = socket(0x2, 0xa, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) 681.165721ms ago: executing program 2 (id=79): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0) 442.871022ms ago: executing program 4 (id=80): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r3) 424.652435ms ago: executing program 2 (id=81): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 321.149088ms ago: executing program 0 (id=82): sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)={0x80000018}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480d5}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) 320.852608ms ago: executing program 4 (id=83): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x0, 0x0, 0x20001, 0x733f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8000cff, 0x0, 0x0, 0xffffffff, 0x4, 0x8, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x80000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc192dfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad6, 0x0, 0x0, 0x5b3, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb, 0x1000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x4, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x8, 0x0, 0x6, 0x800, 0x1ff}, 0x3, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 250.578827ms ago: executing program 2 (id=84): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xffffffff7ffffce8, 0xa]}}) 239.892789ms ago: executing program 1 (id=85): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x41) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) 165.030058ms ago: executing program 4 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) gettid() sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x2404c044) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x4008080) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) 51.325343ms ago: executing program 1 (id=87): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) 0s ago: executing program 3 (id=88): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x968d, 0x1, [{0xf, 0x1}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 64.580329][ T4171] cgroup: Unknown subsys name 'net' [ 64.718642][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.262881][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.842292][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 67.941380][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 67.956824][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 67.969144][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.057691][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.065609][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.074838][ T4184] device bridge_slave_0 entered promiscuous mode [ 68.091442][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 68.115599][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.123569][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.131955][ T4184] device bridge_slave_1 entered promiscuous mode [ 68.190773][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.198171][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.206970][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.239130][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.246579][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.254926][ T4181] device bridge_slave_0 entered promiscuous mode [ 68.263586][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.270698][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.279379][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.288528][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.309749][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.317763][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.326303][ T4181] device bridge_slave_1 entered promiscuous mode [ 68.335372][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.355579][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.363687][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.372008][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.408724][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.416186][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.424980][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.448533][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.475133][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.487274][ T4184] team0: Port device team_slave_0 added [ 68.495442][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.522137][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.540923][ T4184] team0: Port device team_slave_1 added [ 68.547367][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.554790][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.563307][ T4182] device bridge_slave_0 entered promiscuous mode [ 68.572939][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.606149][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.615482][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.622932][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.630970][ T4182] device bridge_slave_1 entered promiscuous mode [ 68.648520][ T4183] team0: Port device team_slave_0 added [ 68.687148][ T4181] team0: Port device team_slave_0 added [ 68.696004][ T4183] team0: Port device team_slave_1 added [ 68.703860][ T4181] team0: Port device team_slave_1 added [ 68.710488][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.717666][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.744404][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.767885][ T4185] team0: Port device team_slave_0 added [ 68.796643][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.804087][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.831466][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.845078][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.855848][ T4185] team0: Port device team_slave_1 added [ 68.889858][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.900339][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.908571][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.934973][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.947881][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.955208][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.981409][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.993382][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.000547][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.026965][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.039768][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.047277][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.073678][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.117542][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.124991][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.151838][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.193151][ T4184] device hsr_slave_0 entered promiscuous mode [ 69.200318][ T4184] device hsr_slave_1 entered promiscuous mode [ 69.207768][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.215210][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.242167][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.256341][ T4182] team0: Port device team_slave_0 added [ 69.286965][ T4182] team0: Port device team_slave_1 added [ 69.305956][ T4183] device hsr_slave_0 entered promiscuous mode [ 69.312913][ T4183] device hsr_slave_1 entered promiscuous mode [ 69.319498][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.328063][ T4183] Cannot create hsr debugfs directory [ 69.371186][ T4181] device hsr_slave_0 entered promiscuous mode [ 69.378067][ T4181] device hsr_slave_1 entered promiscuous mode [ 69.385145][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.392799][ T4181] Cannot create hsr debugfs directory [ 69.429873][ T4185] device hsr_slave_0 entered promiscuous mode [ 69.437842][ T4185] device hsr_slave_1 entered promiscuous mode [ 69.444861][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.452578][ T4185] Cannot create hsr debugfs directory [ 69.458729][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.466815][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.468111][ T2282] Bluetooth: hci0: command 0x0409 tx timeout [ 69.493563][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.512642][ T2282] Bluetooth: hci4: command 0x0409 tx timeout [ 69.518841][ T2282] Bluetooth: hci3: command 0x0409 tx timeout [ 69.529965][ T2282] Bluetooth: hci1: command 0x0409 tx timeout [ 69.546663][ T2282] Bluetooth: hci2: command 0x0409 tx timeout [ 69.558105][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.565389][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.591659][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.767985][ T4182] device hsr_slave_0 entered promiscuous mode [ 69.775208][ T4182] device hsr_slave_1 entered promiscuous mode [ 69.782567][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.790180][ T4182] Cannot create hsr debugfs directory [ 69.932730][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.961397][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.971361][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.993221][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.029417][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.045434][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.064452][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.079978][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.115430][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.130446][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.155639][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.167198][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.230535][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.253330][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.265789][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.290629][ T4182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.306566][ T4182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.317006][ T4182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.327258][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.355362][ T4182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.389087][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.459633][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.470133][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.490376][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.506845][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.517369][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.550325][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.560649][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.572271][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.579574][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.589960][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.605190][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.620575][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.630064][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.638208][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.647364][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.659540][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.666739][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.675181][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.684068][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.694487][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.701659][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.711049][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.722284][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.730239][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.753444][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.765239][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.774696][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.781937][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.789744][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.800530][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.819120][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.828767][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.863712][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.888711][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.897197][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.906900][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.917998][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.928432][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.937832][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.948657][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.957619][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.967658][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.977422][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.988841][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.999235][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.009397][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.018360][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.027890][ T593] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.035103][ T593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.043870][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.053308][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.061293][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.089356][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.101157][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.114082][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.124715][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.134955][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.144299][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.153694][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.162848][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.171329][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.178548][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.186626][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.196587][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.205521][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.215112][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.223449][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.238882][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.249047][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.265911][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.278659][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.289577][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.299166][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.309989][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.323916][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.331028][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.339075][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.349072][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.358672][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.365823][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.373825][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.386275][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389737][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.393088][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.414267][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.424410][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.436738][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.444179][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.471432][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.495125][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.529759][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.539824][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.548216][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 71.560540][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 71.566780][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 71.579617][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.588390][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 71.627586][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.641770][ T4249] Bluetooth: hci2: command 0x041b tx timeout [ 71.650026][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.667447][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.677670][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.692735][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.710386][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.720369][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.737815][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.745148][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.760525][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.770352][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.779863][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.797427][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.809391][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.818732][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.845831][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.860220][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.881157][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.897523][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.911208][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.926178][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.936046][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.956560][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.971266][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.983340][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.992950][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.001501][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.011245][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.021976][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.030349][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.040303][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.051262][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.060315][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.069889][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.078948][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.090132][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.116220][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.183944][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.199616][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.216820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.225823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.240644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.249524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.305691][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.323931][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.368690][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.379559][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.398942][ T4184] device veth0_vlan entered promiscuous mode [ 72.430077][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.446088][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.458484][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.470730][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.490812][ T4184] device veth1_vlan entered promiscuous mode [ 72.507972][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.519056][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.527828][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.536130][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.560571][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.575957][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.585237][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.594057][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.601533][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.609383][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.623754][ T4185] device veth0_vlan entered promiscuous mode [ 72.637871][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.665051][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.680664][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.690385][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.706284][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.718349][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.732376][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.754310][ T4185] device veth1_vlan entered promiscuous mode [ 72.780808][ T4184] device veth0_macvtap entered promiscuous mode [ 72.790262][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.805258][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.817291][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.830516][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.840292][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.850288][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.880408][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.890824][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.902827][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.910807][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.937242][ T4183] device veth0_vlan entered promiscuous mode [ 72.945304][ T4181] device veth0_vlan entered promiscuous mode [ 72.954408][ T4184] device veth1_macvtap entered promiscuous mode [ 72.964254][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.975915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.985980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.995790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.016091][ T4183] device veth1_vlan entered promiscuous mode [ 73.056569][ T4181] device veth1_vlan entered promiscuous mode [ 73.104400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.115982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.124611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.138292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.148322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.157612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.169926][ T4185] device veth0_macvtap entered promiscuous mode [ 73.184106][ T4183] device veth0_macvtap entered promiscuous mode [ 73.193685][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.201249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.210122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.219959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.231339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.259776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.269128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.284970][ T4185] device veth1_macvtap entered promiscuous mode [ 73.297814][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.336583][ T4181] device veth0_macvtap entered promiscuous mode [ 73.353478][ T4183] device veth1_macvtap entered promiscuous mode [ 73.361322][ T4181] device veth1_macvtap entered promiscuous mode [ 73.371778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.379896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.389327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.398592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.407868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.418787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.428139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.439752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.451420][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.460843][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.472556][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.481296][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.511113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.520022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.531388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.540243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.553250][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.564302][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.576727][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.598728][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.610116][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.621286][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.632508][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 73.634676][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.639721][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 73.655557][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 73.662190][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 73.669003][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.678453][ T4182] device veth0_vlan entered promiscuous mode [ 73.689614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.698536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.708867][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 73.716735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.725616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.741301][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.752141][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.764921][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.777542][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.788496][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.799289][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.808556][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.827653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.837554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.850455][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.861408][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.872677][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.883504][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.893640][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.904969][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.916914][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.926411][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.937965][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.949002][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.960462][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.972568][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.985354][ T4182] device veth1_vlan entered promiscuous mode [ 74.005938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.017619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.029039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.038189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.047399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.058287][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.069164][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.079285][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.089875][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.099771][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.111529][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.124110][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.143772][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.153662][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.162768][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.171496][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.202581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.211354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.229600][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.239626][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.248844][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.262622][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.325202][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.356322][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.385141][ T4182] device veth0_macvtap entered promiscuous mode [ 74.396559][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.405937][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.415729][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.428449][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.466202][ T4182] device veth1_macvtap entered promiscuous mode [ 74.500892][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.536760][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.552017][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.560040][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.586484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.596436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.604898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.617950][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.634929][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.645238][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.656158][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.671212][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.683457][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.693850][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.704530][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.716983][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.725563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.734905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.751334][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.765009][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.785147][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.795485][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.810828][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.828733][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.838868][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.849650][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.859954][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.871877][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.884419][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.908038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.917615][ T593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.927541][ T593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.927687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.945118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.954621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.993401][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.017595][ T4182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.032198][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.039957][ T4182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.054025][ T4182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.070045][ T4182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.107040][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.121733][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.142406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.151021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.322507][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.330528][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.030292][ T4249] Bluetooth: hci1: command 0x0419 tx timeout [ 76.036631][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 76.042795][ T4249] Bluetooth: hci4: command 0x0419 tx timeout [ 76.048928][ T4249] Bluetooth: hci0: command 0x0419 tx timeout [ 76.055679][ T1335] Bluetooth: hci2: command 0x0419 tx timeout [ 76.203179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.296318][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.322934][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.332370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.389510][ T26] audit: type=1326 audit(1768348928.690:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 76.434367][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.472498][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.491958][ T26] audit: type=1326 audit(1768348928.720:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 76.529600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.577027][ T26] audit: type=1326 audit(1768348928.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 76.605354][ T4326] device bridge0 entered promiscuous mode [ 76.637933][ T4326] bridge0: port 3(macsec1) entered blocking state [ 76.651075][ T4326] bridge0: port 3(macsec1) entered disabled state [ 76.674336][ T26] audit: type=1326 audit(1768348928.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 76.725873][ T4326] device bridge0 left promiscuous mode [ 76.734270][ T26] audit: type=1326 audit(1768348928.720:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 76.809433][ T26] audit: type=1326 audit(1768348928.720:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 76.886628][ T26] audit: type=1326 audit(1768348928.720:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 76.964256][ T26] audit: type=1326 audit(1768348928.720:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 76.991161][ T4337] loop2: detected capacity change from 0 to 128 [ 77.016042][ T4337] ======================================================= [ 77.016042][ T4337] WARNING: The mand mount option has been deprecated and [ 77.016042][ T4337] and is ignored by this kernel. Remove the mand [ 77.016042][ T4337] option from the mount to silence this warning. [ 77.016042][ T4337] ======================================================= [ 77.069846][ T26] audit: type=1326 audit(1768348928.720:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 77.107284][ T26] audit: type=1326 audit(1768348928.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44323ec749 code=0x7ffc0000 [ 77.178578][ T4341] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 77.197750][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 77.237643][ T4337] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 77.270037][ T4337] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.293046][ T4341] team0: Port device dummy0 added [ 77.490111][ T4344] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 77.550500][ T4344] team0: Port device dummy0 removed [ 77.907856][ T4344] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.222996][ T4341] syz.3.13 (4341) used greatest stack depth: 20584 bytes left [ 78.439810][ T4360] syz.4.19 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.775515][ T4368] loop2: detected capacity change from 0 to 256 [ 78.851072][ T4368] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.206545][ T4386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 79.442079][ T4391] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 80.257394][ T4396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.343711][ T4404] loop4: detected capacity change from 0 to 512 [ 80.449311][ T4396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.469211][ T4404] EXT4-fs (loop4): unsupported inode size: 61867 [ 80.479972][ T4404] EXT4-fs (loop4): blocksize: 1024 [ 80.629049][ T4396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.821716][ T4396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.981172][ T4396] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.003238][ T4396] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.025747][ T4396] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.065499][ T4396] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.497832][ T26] kauditd_printk_skb: 220 callbacks suppressed [ 81.497851][ T26] audit: type=1326 audit(1768348933.800:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 81.601176][ T26] audit: type=1326 audit(1768348933.800:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 81.651204][ T26] audit: type=1326 audit(1768348933.840:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 81.680785][ T26] audit: type=1326 audit(1768348933.840:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 81.718252][ T26] audit: type=1326 audit(1768348933.840:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 81.851672][ T26] audit: type=1326 audit(1768348933.840:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 82.011234][ T26] audit: type=1326 audit(1768348933.840:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 82.742148][ T26] audit: type=1326 audit(1768348933.840:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 82.900556][ T4440] loop3: detected capacity change from 0 to 512 [ 82.917890][ T26] audit: type=1326 audit(1768348933.840:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 82.945044][ T4440] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 82.986377][ T4440] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.992631][ T26] audit: type=1326 audit(1768348933.840:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4425 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0c1843749 code=0x7ffc0000 [ 83.091851][ T4440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.129596][ T4446] loop0: detected capacity change from 0 to 164 [ 83.154310][ T4440] EXT4-fs (loop3): 1 truncate cleaned up [ 83.160131][ T4440] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,dioread_lock,nodiscard,nomblk_io_submit,noblock_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 84.068504][ T4426] ODEBUG: Out of memory. ODEBUG disabled [ 84.121284][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 84.158383][ T4461] syz.3.53[4461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.158485][ T4461] syz.3.53[4461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.232974][ T4464] syz.3.53[4464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.292730][ T4464] syz.3.53[4464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.354430][ T4465] netlink: 'syz.0.55': attribute type 7 has an invalid length. [ 84.631960][ T4473] netlink: 'syz.3.59': attribute type 12 has an invalid length. [ 84.994250][ T4486] loop4: detected capacity change from 0 to 1024 [ 85.172369][ T4486] EXT4-fs (loop4): Ignoring removed nobh option [ 85.193500][ T4486] EXT4-fs (loop4): inline encryption not supported [ 85.208067][ T4486] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.028596][ T4486] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,nolazytime,resgid=0x0000000000000000,grpquota,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 86.469036][ T4515] loop1: detected capacity change from 0 to 512 [ 86.607406][ T4519] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 86.631313][ T4521] syz.4.78 uses obsolete (PF_INET,SOCK_PACKET) [ 86.654827][ T4515] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.75: iget: checksum invalid [ 86.724918][ T4515] EXT4-fs (loop1): get root inode failed [ 86.746380][ T7] cfg80211: failed to load regulatory.db [ 86.807878][ T4515] EXT4-fs (loop1): mount failed [ 86.844387][ T4519] team0: Port device dummy0 added [ 87.173596][ T4538] loop9: detected capacity change from 0 to 7 [ 87.209990][ T4538] Dev loop9: unable to read RDB block 7 [ 87.236537][ T4538] loop9: unable to read partition table [ 87.266199][ T4538] loop9: partition table beyond EOD, truncated [ 87.285986][ T4542] loop4: detected capacity change from 0 to 2048 [ 87.305961][ T4538] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 87.374586][ T4536] [ 87.376980][ T4536] ====================================================== [ 87.384018][ T4536] WARNING: possible circular locking dependency detected [ 87.391082][ T4536] syzkaller #0 Not tainted [ 87.395611][ T4536] ------------------------------------------------------ [ 87.402650][ T4536] syz.2.84/4536 is trying to acquire lock: [ 87.408481][ T4536] ffff88807e62f938 ((wq_completion)loop9){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 87.418277][ T4536] [ 87.418277][ T4536] but task is already holding lock: [ 87.425667][ T4536] ffff888147984468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 87.434498][ T4536] [ 87.434498][ T4536] which lock already depends on the new lock. [ 87.434498][ T4536] [ 87.445014][ T4536] [ 87.445014][ T4536] the existing dependency chain (in reverse order) is: [ 87.454054][ T4536] [ 87.454054][ T4536] -> #8 (&lo->lo_mutex){+.+.}-{3:3}: [ 87.461554][ T4536] __mutex_lock_common+0x1eb/0x2390 [ 87.467307][ T4536] mutex_lock_killable_nested+0x17/0x20 [ 87.473418][ T4536] lo_open+0x6a/0x100 [ 87.477955][ T4536] blkdev_get_whole+0x90/0x390 [ 87.483269][ T4536] blkdev_get_by_dev+0x2d0/0xa60 [ 87.488758][ T4536] blkdev_open+0x12d/0x2c0 [ 87.493718][ T4536] do_dentry_open+0x7ff/0xf80 [ 87.498956][ T4536] path_openat+0x2682/0x2f30 [ 87.504275][ T4536] do_filp_open+0x1b3/0x3e0 [ 87.509528][ T4536] do_sys_openat2+0x142/0x4a0 [ 87.514761][ T4536] __x64_sys_openat+0x135/0x160 [ 87.520160][ T4536] do_syscall_64+0x4c/0xa0 [ 87.525138][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.531736][ T4536] [ 87.531736][ T4536] -> #7 (&disk->open_mutex){+.+.}-{3:3}: [ 87.539595][ T4536] __mutex_lock_common+0x1eb/0x2390 [ 87.545382][ T4536] mutex_lock_nested+0x17/0x20 [ 87.550699][ T4536] bd_register_pending_holders+0x33/0x310 [ 87.557089][ T4536] device_add_disk+0x5a7/0xd40 [ 87.562417][ T4536] md_alloc+0x809/0xc00 [ 87.567133][ T4536] blk_request_module+0x26e/0x290 [ 87.572712][ T4536] blkdev_get_no_open+0x38/0x1d0 [ 87.578234][ T4536] blkdev_get_by_dev+0x77/0xa60 [ 87.583645][ T4536] swsusp_check+0x9b/0x2a0 [ 87.588612][ T4536] software_resume+0xc6/0x3b0 [ 87.593850][ T4536] resume_store+0xe4/0x130 [ 87.598822][ T4536] kernfs_fop_write_iter+0x379/0x4c0 [ 87.604660][ T4536] vfs_write+0x712/0xd00 [ 87.609489][ T4536] ksys_write+0x14d/0x250 [ 87.614380][ T4536] do_syscall_64+0x4c/0xa0 [ 87.619350][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.625889][ T4536] [ 87.625889][ T4536] -> #6 (disks_mutex){+.+.}-{3:3}: [ 87.633341][ T4536] __mutex_lock_common+0x1eb/0x2390 [ 87.639286][ T4536] mutex_lock_nested+0x17/0x20 [ 87.644718][ T4536] md_alloc+0x48/0xc00 [ 87.649345][ T4536] blk_request_module+0x26e/0x290 [ 87.654955][ T4536] blkdev_get_no_open+0x38/0x1d0 [ 87.660884][ T4536] blkdev_get_by_dev+0x77/0xa60 [ 87.666291][ T4536] swsusp_check+0x9b/0x2a0 [ 87.671301][ T4536] software_resume+0xc6/0x3b0 [ 87.676626][ T4536] resume_store+0xe4/0x130 [ 87.681760][ T4536] kernfs_fop_write_iter+0x379/0x4c0 [ 87.687609][ T4536] vfs_write+0x712/0xd00 [ 87.692564][ T4536] ksys_write+0x14d/0x250 [ 87.697442][ T4536] do_syscall_64+0x4c/0xa0 [ 87.702400][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.708928][ T4536] [ 87.708928][ T4536] -> #5 (major_names_lock){+.+.}-{3:3}: [ 87.716745][ T4536] __mutex_lock_common+0x1eb/0x2390 [ 87.722496][ T4536] mutex_lock_nested+0x17/0x20 [ 87.727806][ T4536] blk_request_module+0x31/0x290 [ 87.733284][ T4536] blkdev_get_no_open+0x38/0x1d0 [ 87.738764][ T4536] blkdev_get_by_dev+0x77/0xa60 [ 87.744164][ T4536] swsusp_check+0x9b/0x2a0 [ 87.749118][ T4536] software_resume+0xc6/0x3b0 [ 87.754331][ T4536] resume_store+0xe4/0x130 [ 87.759287][ T4536] kernfs_fop_write_iter+0x379/0x4c0 [ 87.765109][ T4536] vfs_write+0x712/0xd00 [ 87.769970][ T4536] ksys_write+0x14d/0x250 [ 87.774919][ T4536] do_syscall_64+0x4c/0xa0 [ 87.779873][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.786316][ T4536] [ 87.786316][ T4536] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 87.794935][ T4536] __mutex_lock_common+0x1eb/0x2390 [ 87.800680][ T4536] mutex_lock_nested+0x17/0x20 [ 87.806102][ T4536] software_resume+0x7c/0x3b0 [ 87.811332][ T4536] resume_store+0xe4/0x130 [ 87.816377][ T4536] kernfs_fop_write_iter+0x379/0x4c0 [ 87.822205][ T4536] vfs_write+0x712/0xd00 [ 87.826986][ T4536] ksys_write+0x14d/0x250 [ 87.831935][ T4536] do_syscall_64+0x4c/0xa0 [ 87.836891][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.843321][ T4536] [ 87.843321][ T4536] -> #3 (&of->mutex){+.+.}-{3:3}: [ 87.850546][ T4536] __mutex_lock_common+0x1eb/0x2390 [ 87.856284][ T4536] mutex_lock_nested+0x17/0x20 [ 87.861588][ T4536] kernfs_seq_start+0x51/0x3c0 [ 87.866890][ T4536] seq_read_iter+0x3c4/0xd50 [ 87.872013][ T4536] vfs_read+0x725/0xcf0 [ 87.876712][ T4536] ksys_read+0x14d/0x250 [ 87.881493][ T4536] do_syscall_64+0x4c/0xa0 [ 87.886465][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.892908][ T4536] [ 87.892908][ T4536] -> #2 (&p->lock){+.+.}-{3:3}: [ 87.899964][ T4536] __mutex_lock_common+0x1eb/0x2390 [ 87.905709][ T4536] mutex_lock_nested+0x17/0x20 [ 87.911026][ T4536] seq_read_iter+0xad/0xd50 [ 87.916076][ T4536] do_iter_readv_writev+0x497/0x600 [ 87.921834][ T4536] do_iter_read+0x20b/0x7c0 [ 87.926892][ T4536] loop_process_work+0x18dc/0x2480 [ 87.932544][ T4536] process_one_work+0x863/0x1000 [ 87.938121][ T4536] worker_thread+0xaa8/0x12a0 [ 87.943567][ T4536] kthread+0x436/0x520 [ 87.948190][ T4536] ret_from_fork+0x1f/0x30 [ 87.953155][ T4536] [ 87.953155][ T4536] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 87.962298][ T4536] process_one_work+0x7bf/0x1000 [ 87.967793][ T4536] worker_thread+0xaa8/0x12a0 [ 87.973125][ T4536] kthread+0x436/0x520 [ 87.977735][ T4536] ret_from_fork+0x1f/0x30 [ 87.982704][ T4536] [ 87.982704][ T4536] -> #0 ((wq_completion)loop9){+.+.}-{0:0}: [ 87.990854][ T4536] __lock_acquire+0x2c33/0x7c60 [ 87.996358][ T4536] lock_acquire+0x197/0x3f0 [ 88.001405][ T4536] flush_workqueue+0x142/0x1380 [ 88.006795][ T4536] drain_workqueue+0xcf/0x380 [ 88.012014][ T4536] destroy_workqueue+0x7b/0xb20 [ 88.017411][ T4536] __loop_clr_fd+0x234/0xb90 [ 88.022541][ T4536] blkdev_put+0x53f/0x7d0 [ 88.027498][ T4536] blkdev_close+0x76/0xa0 [ 88.032892][ T4536] __fput+0x234/0x930 [ 88.037410][ T4536] task_work_run+0x125/0x1a0 [ 88.042628][ T4536] exit_to_user_mode_loop+0x10f/0x130 [ 88.048552][ T4536] exit_to_user_mode_prepare+0xee/0x180 [ 88.054768][ T4536] syscall_exit_to_user_mode+0x16/0x40 [ 88.061150][ T4536] do_syscall_64+0x58/0xa0 [ 88.066160][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.072681][ T4536] [ 88.072681][ T4536] other info that might help us debug this: [ 88.072681][ T4536] [ 88.083117][ T4536] Chain exists of: [ 88.083117][ T4536] (wq_completion)loop9 --> &disk->open_mutex --> &lo->lo_mutex [ 88.083117][ T4536] [ 88.096655][ T4536] Possible unsafe locking scenario: [ 88.096655][ T4536] [ 88.104118][ T4536] CPU0 CPU1 [ 88.109494][ T4536] ---- ---- [ 88.114874][ T4536] lock(&lo->lo_mutex); [ 88.119246][ T4536] lock(&disk->open_mutex); [ 88.126385][ T4536] lock(&lo->lo_mutex); [ 88.133172][ T4536] lock((wq_completion)loop9); [ 88.138049][ T4536] [ 88.138049][ T4536] *** DEADLOCK *** [ 88.138049][ T4536] [ 88.146316][ T4536] 2 locks held by syz.2.84/4536: [ 88.151298][ T4536] #0: ffff8880202a3d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 88.160783][ T4536] #1: ffff888147984468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 88.170053][ T4536] [ 88.170053][ T4536] stack backtrace: [ 88.175957][ T4536] CPU: 1 PID: 4536 Comm: syz.2.84 Not tainted syzkaller #0 [ 88.183167][ T4536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.193253][ T4536] Call Trace: [ 88.196552][ T4536] [ 88.199500][ T4536] dump_stack_lvl+0x168/0x230 [ 88.204196][ T4536] ? load_image+0x3b0/0x3b0 [ 88.208717][ T4536] ? show_regs_print_info+0x20/0x20 [ 88.213934][ T4536] ? print_circular_bug+0x12b/0x1a0 [ 88.219157][ T4536] check_noncircular+0x274/0x310 [ 88.224164][ T4536] ? add_chain_block+0x940/0x940 [ 88.229137][ T4536] ? lockdep_lock+0xdc/0x1e0 [ 88.234072][ T4536] ? mark_lock+0x94/0x320 [ 88.238444][ T4536] __lock_acquire+0x2c33/0x7c60 [ 88.243327][ T4536] ? __lock_acquire+0x13ad/0x7c60 [ 88.248504][ T4536] ? verify_lock_unused+0x140/0x140 [ 88.253817][ T4536] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 88.260007][ T4536] ? verify_lock_unused+0x140/0x140 [ 88.265243][ T4536] ? verify_lock_unused+0x140/0x140 [ 88.270619][ T4536] ? memset+0x1e/0x40 [ 88.274635][ T4536] lock_acquire+0x197/0x3f0 [ 88.279177][ T4536] ? flush_workqueue+0x126/0x1380 [ 88.284247][ T4536] ? finish_task_switch+0x1e4/0x640 [ 88.289469][ T4536] ? __mutex_trylock_common+0x14f/0x250 [ 88.295041][ T4536] ? read_lock_is_recursive+0x10/0x10 [ 88.300440][ T4536] ? __init_swait_queue_head+0xa5/0x150 [ 88.306019][ T4536] flush_workqueue+0x142/0x1380 [ 88.310976][ T4536] ? flush_workqueue+0x126/0x1380 [ 88.316107][ T4536] ? __lock_acquire+0x7c60/0x7c60 [ 88.321161][ T4536] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 88.326593][ T4536] ? rcu_work_rcufn+0x110/0x110 [ 88.331609][ T4536] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 88.337270][ T4536] ? finish_wait+0xc0/0x1d0 [ 88.341794][ T4536] drain_workqueue+0xcf/0x380 [ 88.346499][ T4536] destroy_workqueue+0x7b/0xb20 [ 88.351370][ T4536] __loop_clr_fd+0x234/0xb90 [ 88.356026][ T4536] ? lo_release+0x172/0x1f0 [ 88.360552][ T4536] ? lo_open+0x100/0x100 [ 88.364840][ T4536] blkdev_put+0x53f/0x7d0 [ 88.369207][ T4536] blkdev_close+0x76/0xa0 [ 88.373555][ T4536] ? blkdev_open+0x2c0/0x2c0 [ 88.378161][ T4536] __fput+0x234/0x930 [ 88.382354][ T4536] task_work_run+0x125/0x1a0 [ 88.386970][ T4536] exit_to_user_mode_loop+0x10f/0x130 [ 88.392374][ T4536] exit_to_user_mode_prepare+0xee/0x180 [ 88.398014][ T4536] syscall_exit_to_user_mode+0x16/0x40 [ 88.403496][ T4536] do_syscall_64+0x58/0xa0 [ 88.408034][ T4536] ? clear_bhb_loop+0x30/0x80 [ 88.412733][ T4536] ? clear_bhb_loop+0x30/0x80 [ 88.417434][ T4536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.423471][ T4536] RIP: 0033:0x7fc0c1843749 [ 88.427924][ T4536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.447548][ T4536] RSP: 002b:00007ffd35b9d328 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 88.455990][ T4536] RAX: 0000000000000000 RBX: 00007fc0c1a9bda0 RCX: 00007fc0c1843749 [ 88.463990][ T4536] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 88.471984][ T4536] RBP: 00007fc0c1a9bda0 R08: 0000000000000060 R09: 0000000635b9d61f [ 88.480082][ T4536] R10: 00000000003ffd7c R11: 0000000000000246 R12: 000000000001576a [ 88.488075][ T4536] R13: 00007ffd35b9d420 R14: ffffffffffffffff R15: 00007ffd35b9d440 [ 88.496077][ T4536] [ 88.542251][ T4542] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 88.917590][ T4552] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.944993][ T4552] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 986 with error 28 [ 88.960100][ T4552] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.960100][ T4552] [ 88.970381][ T4552] EXT4-fs (loop4): Total free blocks count 0 [ 88.981966][ T4552] EXT4-fs (loop4): Free/Dirty block details [ 88.994612][ T4552] EXT4-fs (loop4): free_blocks=2415919104 [ 89.007531][ T4552] EXT4-fs (loop4): dirty_blocks=992 [ 89.014151][ T4552] EXT4-fs (loop4): Block reservation details [ 89.020486][ T4552] EXT4-fs (loop4): i_reserved_data_blocks=62 [ 89.935100][ T4182] syz-executor invoked oom-killer: gfp_mask=0x1100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 89.951235][ T4182] CPU: 1 PID: 4182 Comm: syz-executor Not tainted syzkaller #0 [ 89.958976][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 89.969080][ T4182] Call Trace: [ 89.972536][ T4182] [ 89.975540][ T4182] dump_stack_lvl+0x168/0x230 [ 89.980265][ T4182] ? show_regs_print_info+0x20/0x20 [ 89.985617][ T4182] ? load_image+0x3b0/0x3b0 [ 89.990167][ T4182] ? local_lock_release+0x170/0x170 [ 89.995395][ T4182] ? __rwlock_init+0x140/0x140 [ 90.000180][ T4182] dump_header+0xd4/0x770 [ 90.004536][ T4182] oom_kill_process+0x20e/0x3d0 [ 90.009410][ T4182] out_of_memory+0xe43/0x11e0 [ 90.014307][ T4182] ? mutex_lock_io_nested+0x60/0x60 [ 90.019669][ T4182] ? unregister_oom_notifier+0x20/0x20 [ 90.025258][ T4182] ? rcu_is_watching+0x11/0xa0 [ 90.030058][ T4182] mem_cgroup_out_of_memory+0x277/0x370 [ 90.035898][ T4182] ? __lock_acquire+0x7c60/0x7c60 [ 90.040945][ T4182] ? mem_cgroup_oom_trylock+0x210/0x210 [ 90.046517][ T4182] ? do_raw_spin_lock+0x11d/0x280 [ 90.051566][ T4182] ? do_raw_spin_unlock+0x11d/0x230 [ 90.056792][ T4182] try_charge_memcg+0xf79/0x14a0 [ 90.061786][ T4182] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 90.067653][ T4182] ? rcu_is_watching+0x11/0xa0 [ 90.072620][ T4182] ? rcu_is_watching+0x11/0xa0 [ 90.077412][ T4182] ? lock_release+0xba/0x870 [ 90.082156][ T4182] ? do_raw_spin_lock+0x11d/0x280 [ 90.087210][ T4182] charge_memcg+0x100/0x2e0 [ 90.091762][ T4182] ? __lock_acquire+0x7c60/0x7c60 [ 90.096846][ T4182] ? __mem_cgroup_charge+0x80/0x80 [ 90.101979][ T4182] ? percpu_ref_put+0x15c/0x200 [ 90.106850][ T4182] mem_cgroup_swapin_charge_page+0x1fe/0x310 [ 90.112856][ T4182] __read_swap_cache_async+0x663/0xa70 [ 90.118342][ T4182] swap_cluster_readahead+0x35c/0x7c0 [ 90.123761][ T4182] ? read_swap_cache_async+0x90/0x90 [ 90.129084][ T4182] ? rcu_is_watching+0x11/0xa0 [ 90.133867][ T4182] ? rcu_is_watching+0x11/0xa0 [ 90.138890][ T4182] swapin_readahead+0xf3/0xaa0 [ 90.143907][ T4182] ? rcu_lock_release+0x5/0x20 [ 90.148707][ T4182] ? page_cache_prev_miss+0x360/0x360 [ 90.154100][ T4182] ? rcu_is_watching+0x11/0xa0 [ 90.158883][ T4182] ? __lock_acquire+0x7c60/0x7c60 [ 90.163936][ T4182] ? exit_swap_address_space+0x280/0x280 [ 90.169591][ T4182] ? put_swap_device+0x15c/0x200 [ 90.174656][ T4182] ? lookup_swap_cache+0x135/0x440 [ 90.179848][ T4182] ? get_swap_device+0x21b/0x360 [ 90.184892][ T4182] do_swap_page+0x4b6/0x1f40 [ 90.189503][ T4182] ? count_memcg_event_mm+0x311/0x360 [ 90.194931][ T4182] ? do_nanosleep+0x614/0x760 [ 90.199720][ T4182] handle_mm_fault+0x1ad7/0x43b0 [ 90.204706][ T4182] ? get_page+0xe0/0xe0 [ 90.208880][ T4182] ? __init_rwsem+0x160/0x160 [ 90.213570][ T4182] ? vmacache_find+0x238/0x590 [ 90.218474][ T4182] ? find_vma+0xd2/0x230 [ 90.222737][ T4182] do_user_addr_fault+0x489/0xc80 [ 90.227789][ T4182] exc_page_fault+0x60/0x100 [ 90.232406][ T4182] ? clear_bhb_loop+0x30/0x80 [ 90.237103][ T4182] asm_exc_page_fault+0x22/0x30 [ 90.241971][ T4182] RIP: 0033:0x7f6d84d62008 [ 90.246402][ T4182] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 90.266028][ T4182] RSP: 002b:00007ffe385f3820 EFLAGS: 00010293 [ 90.272148][ T4182] RAX: 0000000000000000 RBX: 000000000000002c RCX: 00007f6d84d62005 [ 90.280147][ T4182] RDX: 00007ffe385f3860 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.288326][ T4182] RBP: 00007ffe385f38cc R08: 0000000000000000 R09: 0000000000000000 [ 90.296324][ T4182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 90.304409][ T4182] R13: 00000000000927c0 R14: 0000000000015a66 R15: 00007ffe385f3920 [ 90.312408][ T4182] [ 90.349781][ T4182] memory: usage 307152kB, limit 307200kB, failcnt 387 [ 90.521128][ T4182] memory+swap: usage 306952kB, limit 9007199254740988kB, failcnt 0 [ 90.536297][ T4182] kmem: usage 302668kB, limit 9007199254740988kB, failcnt 0 [ 90.545954][ T4182] Memory cgroup stats for /syz4: [ 90.546188][ T4182] anon 0 [ 90.546188][ T4182] file 28672 [ 90.546188][ T4182] kernel_stack 32768 [ 90.546188][ T4182] pagetables 135168 [ 90.546188][ T4182] percpu 0 [ 90.546188][ T4182] sock 0 [ 90.546188][ T4182] shmem 0 [ 90.546188][ T4182] file_mapped 0 [ 90.546188][ T4182] file_dirty 0 [ 90.546188][ T4182] file_writeback 0 [ 90.546188][ T4182] swapcached 1282048 [ 90.546188][ T4182] anon_thp 0 [ 90.546188][ T4182] file_thp 0 [ 90.546188][ T4182] shmem_thp 0 [ 90.546188][ T4182] inactive_anon 0 [ 90.546188][ T4182] active_anon 0 [ 90.546188][ T4182] inactive_file 16384 [ 90.546188][ T4182] active_file 12288 [ 90.546188][ T4182] unevictable 0 [ 90.546188][ T4182] slab_reclaimable 539952 [ 90.546188][ T4182] slab_unreclaimable 1040544 [ 90.546188][ T4182] slab 1580496 [ 90.546188][ T4182] workingset_refault_anon 0 [ 90.546188][ T4182] workingset_refault_file 0 [ 90.546188][ T4182] workingset_activate_anon 0 [ 90.647525][ T4182] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.86,pid=4540,uid=0 [ 90.667500][ T4182] Memory cgroup out of memory: Killed process 4553 (syz.4.86) total-vm:106524kB, anon-rss:1144kB, file-rss:23200kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 91.125505][ T4553] syz.4.86 (4553) used greatest stack depth: 20208 bytes left